last executing test programs: 4.249335113s ago: executing program 3 (id=2625): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.959813571s ago: executing program 4 (id=2628): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 3.678874559s ago: executing program 4 (id=2629): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r0, 0x0}, 0x20) 3.452730736s ago: executing program 4 (id=2632): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x74, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2ce}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1, 0x8, 0x1, 0xc}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) 3.226961386s ago: executing program 3 (id=2634): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) semop(0x0, 0x0, 0x0) 3.05419154s ago: executing program 4 (id=2637): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25030117800c00160006ac0f00000000001400010002"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.916312332s ago: executing program 3 (id=2639): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x650401, 0x40, 0x30}, 0x18) syz_emit_ethernet(0x42, &(0x7f0000001080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x8, 0x5, 0x0, 0x0, [0x0]}, @ssrr={0x89, 0x3, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 2.632773168s ago: executing program 3 (id=2644): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xbc, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @remote, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) 2.615440944s ago: executing program 4 (id=2645): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000100), 0x0}, 0x20) 2.556380308s ago: executing program 5 (id=2647): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x20, 0x68, 0x309, 0x2, 0xfffffffc, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}}, 0x4040) 2.338898954s ago: executing program 3 (id=2650): r0 = syz_open_dev$sg(&(0x7f0000001540), 0xe6a0, 0x80002) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000001580)) 2.303906343s ago: executing program 2 (id=2651): prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) socket$alg(0x26, 0x5, 0x0) 2.282686178s ago: executing program 4 (id=2652): r0 = syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x2218a5d, &(0x7f0000000140), 0x0, 0x965a, &(0x7f0000012c40)="$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") ioctl$FS_IOC_GETFSMAP(r0, 0x4030580a, 0x0) 2.176366926s ago: executing program 5 (id=2654): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.935082156s ago: executing program 3 (id=2655): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f76800090501"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.890589879s ago: executing program 2 (id=2657): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 1.559482839s ago: executing program 1 (id=2659): r0 = socket(0x2b, 0x1, 0x1) accept4$packet(r0, 0x0, 0x0, 0x800) 1.557133325s ago: executing program 0 (id=2660): unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 1.544855077s ago: executing program 2 (id=2661): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000540)='./file0\x00', 0x800440, &(0x7f0000000140)=ANY=[], 0x85, 0x57d, &(0x7f0000001940)="$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") openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) 1.317867714s ago: executing program 1 (id=2662): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x2, 0x0, @raw_data=[0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 1.280199515s ago: executing program 0 (id=2663): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x14, 0x35, 0x107, 0x70bd29, 0xfffffffe, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0xc000) 1.049074411s ago: executing program 5 (id=2664): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x3000000, 'veth0_to_batadv\x00', {0x1}, 0x2a}) 1.019487959s ago: executing program 2 (id=2665): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=@mpls_delroute={0xa0, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{0x3ff, 0x0, 0x1}, {0xe46}, {0x3}, {0x2, 0x0, 0x1}, {0x6}, {0x5d}, {0x1, 0x0, 0x1}, {0x4000, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xb78}, {0x2}, {0x7}, {0x3820}, {0x5, 0x0, 0x1}, {0x800}, {0x8, 0x0, 0x1}, {0xc}, {0xffff, 0x0, 0x1}, {0xffff9}, {0x7fff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x800}, {0x7, 0x0, 0x1}, {0x5, 0x0, 0x1}]}]}, 0xa0}}, 0x0) 1.002283668s ago: executing program 1 (id=2666): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be4248cdc138408ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c590bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x0, 0xe, 0x0, &(0x7f0000000880)="3a173357f297c605804ab3828443", 0x0, 0x8cfd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.001058455s ago: executing program 0 (id=2667): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) 687.007019ms ago: executing program 2 (id=2668): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0xf, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) 682.703099ms ago: executing program 5 (id=2669): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x4003f7, 0x4) 636.449247ms ago: executing program 0 (id=2670): r0 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1}, 0x80, 0x0}}], 0x2, 0x0) 412.337809ms ago: executing program 1 (id=2671): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) 332.048459ms ago: executing program 5 (id=2672): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 330.913762ms ago: executing program 0 (id=2673): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000003800010c2abd7000fcdbdf25080000000c000480050007"], 0x20}, 0x1, 0x0, 0x0, 0x24000081}, 0x80d4) 286.562746ms ago: executing program 1 (id=2674): rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, 0xfe09, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4f, 0x2, 0x0) 188.452174ms ago: executing program 2 (id=2675): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 r'], 0x9) 128.15106ms ago: executing program 1 (id=2676): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'cp775'}}, {@uid}]}, 0xff, 0x5de, &(0x7f0000001340)="$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") listxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x20) 4.637851ms ago: executing program 0 (id=2677): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0xfffffff9, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x3ff}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x40004) 0s ago: executing program 5 (id=2678): madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): of CH#0 failed: -EPROTO [ 203.668225][ T6771] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 203.711376][ T6771] usb 6-1: USB disconnect, device number 8 [ 203.819137][ T8794] loop4: detected capacity change from 0 to 64 [ 204.590976][ T8814] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1290'. [ 204.630792][ T8814] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 204.693779][ T8816] netlink: 'syz.2.1291': attribute type 1 has an invalid length. [ 204.760648][ T8816] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1291'. [ 205.327086][ T8836] loop5: detected capacity change from 0 to 512 [ 205.407209][ T8836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.544843][ T8836] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.658400][ T8836] fscrypt (loop5, inode 15): Error -61 getting encryption context [ 205.771820][ T8851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.809734][ T8855] loop3: detected capacity change from 0 to 64 [ 205.842041][ T5643] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.880292][ T8855] syz.3.1309: attempt to access beyond end of device [ 205.880292][ T8855] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 205.882072][ T8800] loop0: detected capacity change from 0 to 32768 [ 205.934685][ T8855] Buffer I/O error on dev loop3, logical block 512, async page read [ 206.011991][ T8855] syz.3.1309: attempt to access beyond end of device [ 206.011991][ T8855] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 206.097937][ T8859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.112404][ T8855] Buffer I/O error on dev loop3, logical block 56576, async page read [ 206.484021][ T8871] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 206.673456][ T8877] loop4: detected capacity change from 0 to 1024 [ 207.154876][ T8882] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 207.228671][ T8890] netlink: 'syz.4.1325': attribute type 1 has an invalid length. [ 207.603117][ T8909] loop0: detected capacity change from 0 to 256 [ 208.602194][ T8939] xt_hashlimit: invalid interval [ 208.653567][ T8943] trusted_key: encrypted_key: keylen parameter is missing [ 208.882076][ T8951] SET target dimension over the limit! [ 209.125423][ T8956] loop0: detected capacity change from 0 to 64 [ 209.173327][ T8956] syz.0.1358: attempt to access beyond end of device [ 209.173327][ T8956] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 209.212526][ T8956] Buffer I/O error on dev loop0, logical block 512, async page read [ 209.233595][ T8956] syz.0.1358: attempt to access beyond end of device [ 209.233595][ T8956] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 209.260611][ T8956] Buffer I/O error on dev loop0, logical block 56576, async page read [ 209.363713][ T8961] netlink: 'syz.3.1362': attribute type 21 has an invalid length. [ 209.395817][ T8961] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1362'. [ 209.938064][ T8976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.090651][ T6777] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 210.175906][ T8983] loop0: detected capacity change from 0 to 256 [ 210.227308][ T8959] loop1: detected capacity change from 0 to 32768 [ 210.265173][ T8959] ERROR: (device loop1): dtSearch: stack overrun! [ 210.265173][ T8959] [ 210.280915][ T6777] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 210.302012][ T8959] ERROR: (device loop1): remounting filesystem as read-only [ 210.320022][ T6777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.332620][ T8959] btstack dump: [ 210.344511][ T8959] bn = 0, index = 4 [ 210.348477][ T6777] usb 3-1: config 0 descriptor?? [ 210.357165][ T8959] bn = 0, index = 4 [ 210.377046][ T8959] bn = 0, index = 4 [ 210.383196][ T6777] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 210.395682][ T8959] bn = 0, index = 4 [ 210.410752][ T8959] bn = 0, index = 4 [ 210.427686][ T8959] bn = 0, index = 4 [ 210.462728][ T8959] bn = 0, index = 4 [ 210.475527][ T8959] bn = 0, index = 0 [ 210.504179][ T8959] jfs_lookup: dtSearch returned -5 [ 210.796674][ T6777] gspca_stv06xx: I2C: Read error writing address: -71 [ 210.875813][ T6777] usb 3-1: USB disconnect, device number 6 [ 211.014977][ T5650] Bluetooth: hci4: command 0x0406 tx timeout [ 211.015885][ T5649] Bluetooth: hci2: command 0x0406 tx timeout [ 211.021156][ T5641] Bluetooth: hci5: command 0x0406 tx timeout [ 211.027051][ T5649] Bluetooth: hci0: command 0x0406 tx timeout [ 211.033245][ T5650] Bluetooth: hci3: command 0x0406 tx timeout [ 211.045543][ T5641] Bluetooth: hci1: command 0x0406 tx timeout [ 211.237698][ T9010] loop4: detected capacity change from 0 to 128 [ 211.286696][ T9010] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 211.324284][ T9010] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.515716][ T9015] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1388'. [ 212.271655][ T9042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.040680][ T6771] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 213.230648][ T6771] usb 2-1: Using ep0 maxpacket: 32 [ 213.264230][ T6771] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 213.305120][ T6771] usb 2-1: config 0 has no interface number 0 [ 213.334525][ T6771] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 213.383837][ T6771] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 213.422704][ T6771] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 213.455866][ T6771] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.503129][ T6771] usb 2-1: Product: syz [ 213.518805][ T6771] usb 2-1: Manufacturer: syz [ 213.549441][ T6771] usb 2-1: SerialNumber: syz [ 213.571590][ T6771] usb 2-1: config 0 descriptor?? [ 213.870299][ T6771] usb 2-1: USB disconnect, device number 7 [ 213.964418][ T5752] udevd[5752]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.156374][ T9105] loop3: detected capacity change from 0 to 2048 [ 214.236820][ T9105] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.210451][ T9101] loop5: detected capacity change from 0 to 32768 [ 215.282607][ T9101] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 215.369189][ T9101] XFS (loop5): Ending clean mount [ 215.428909][ T9149] loop4: detected capacity change from 0 to 256 [ 215.437524][ T9149] exfat: Deprecated parameter 'namecase' [ 215.452160][ T9149] exfat: Deprecated parameter 'namecase' [ 215.517173][ T9151] netlink: 'syz.0.1452': attribute type 3 has an invalid length. [ 215.539347][ T9149] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 215.566366][ T5643] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 215.882997][ T9157] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 216.190012][ T9167] netlink: 'syz.4.1461': attribute type 1 has an invalid length. [ 216.221006][ T9167] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1461'. [ 216.740951][ T6776] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 216.926065][ T6776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 216.979248][ T6776] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 217.000757][ T6776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 217.023311][ T6776] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 217.062411][ T9200] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 217.088405][ T6776] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 217.109285][ T6776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.135485][ T6776] usb 3-1: Product: syz [ 217.147346][ T6776] usb 3-1: Manufacturer: syz [ 217.162277][ T6776] usb 3-1: SerialNumber: syz [ 217.224810][ T6776] usb 3-1: config 0 descriptor?? [ 217.270700][ T6776] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 217.567933][ T6776] ums-isd200 3-1:0.0: probe with driver ums-isd200 failed with error -22 [ 217.676887][ T9216] loop4: detected capacity change from 0 to 512 [ 217.710268][ T9216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.779155][ T9216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.803836][ T9202] loop0: detected capacity change from 0 to 32768 [ 217.817439][ T6784] usb 3-1: USB disconnect, device number 7 [ 217.818931][ T9216] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.881016][ T9202] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 217.913588][ T9202] JBD2: Ignoring recovery information on journal [ 217.997499][ T9204] loop3: detected capacity change from 0 to 32768 [ 218.016704][ T9204] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1478 (9204) [ 218.064197][ T9204] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.105099][ T9204] BTRFS info (device loop3): using sha256 checksum algorithm [ 218.131809][ T9202] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 218.174742][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.291167][ T9204] BTRFS info (device loop3): enabling ssd optimizations [ 218.313043][ T9204] BTRFS info (device loop3): turning on async discard [ 218.339534][ T9204] BTRFS info (device loop3): enabling free space tree [ 218.427927][ T9206] loop1: detected capacity change from 0 to 32768 [ 218.467470][ T9206] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 65c8c4c2-2900-416f-86aa-79498f694a44 [ 218.515110][ T9206] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1479 (9206) [ 218.560002][ T9204] BTRFS error: failed to open device for path lqZ`[.-p%ס$z2B< with flags 0x1: -2 [ 218.641917][ T9206] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.648753][ T5630] ocfs2: Unmounting device (7,0) on (node local) [ 218.692135][ T9206] BTRFS info (device loop1): using sha256 checksum algorithm [ 218.757665][ T5635] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.935732][ T9206] BTRFS info (device loop1): enabling ssd optimizations [ 219.010656][ T9206] BTRFS info (device loop1): turning on async discard [ 219.029705][ T9206] BTRFS info (device loop1): enabling free space tree [ 219.236141][ T9269] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.340414][ T5633] BTRFS info (device loop1): last unmount of filesystem 65c8c4c2-2900-416f-86aa-79498f694a44 [ 219.829172][ T9287] loop4: detected capacity change from 0 to 1024 [ 219.872443][ T9287] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 219.994014][ T9292] netlink: 'syz.0.1503': attribute type 10 has an invalid length. [ 220.028904][ T9295] netlink: 'syz.5.1505': attribute type 2 has an invalid length. [ 220.041979][ T9292] veth0_vlan: left promiscuous mode [ 220.043011][ T9292] veth0_vlan: entered promiscuous mode [ 220.043285][ T9295] netlink: 'syz.5.1505': attribute type 1 has an invalid length. [ 220.064938][ T9292] team0: Device veth0_vlan failed to register rx_handler [ 220.410669][ T6776] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 220.497663][ T9307] loop2: detected capacity change from 0 to 764 [ 220.561852][ T9307] Symlink component flag not implemented [ 220.595429][ T9307] Symlink component flag not implemented (15) [ 220.606903][ T6776] usb 2-1: Using ep0 maxpacket: 16 [ 220.629311][ T6776] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 220.674310][ T6776] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 220.689915][ T9311] loop5: detected capacity change from 0 to 256 [ 220.715819][ T6776] usb 2-1: config 0 interface 0 has no altsetting 0 [ 220.766024][ T6776] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 220.793891][ T6776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.853082][ T6776] usb 2-1: Product: syz [ 220.871147][ T6776] usb 2-1: Manufacturer: syz [ 220.896598][ T6776] usb 2-1: SerialNumber: syz [ 220.936484][ T6776] usb 2-1: config 0 descriptor?? [ 220.997903][ T9318] usb usb9: usbfs: process 9318 (syz.2.1516) did not claim interface 1 before use [ 221.391276][ T6771] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 221.462597][ T6776] usb 2-1: USB disconnect, device number 8 [ 221.568785][ T6771] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 221.590796][ T6770] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 221.608129][ T6771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.628429][ T6771] usb 5-1: Product: syz [ 221.633388][ T6771] usb 5-1: Manufacturer: syz [ 221.638246][ T6771] usb 5-1: SerialNumber: syz [ 221.662699][ T6771] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 221.666068][ T9338] loop3: detected capacity change from 0 to 1024 [ 221.687338][ T6777] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 221.770982][ T6770] usb 3-1: Using ep0 maxpacket: 8 [ 221.788033][ T6770] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.795576][ T9338] hfsplus: request for non-existent node 33423360 in B*Tree [ 221.815385][ T6770] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 221.840657][ T6770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 221.845493][ T9338] hfsplus: request for non-existent node 33423360 in B*Tree [ 221.905038][ T6770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 221.950610][ T6770] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.003909][ T6770] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 222.021233][ T6770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.023607][ T9340] dlm: no locking on control device [ 222.039584][ T6770] usb 3-1: Product: syz [ 222.052768][ T6770] usb 3-1: Manufacturer: syz [ 222.080135][ T6770] usb 3-1: SerialNumber: syz [ 222.111132][ T6770] usb 3-1: config 0 descriptor?? [ 222.130315][ T9324] loop0: detected capacity change from 0 to 32768 [ 222.180113][ T6770] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 222.242656][ T6784] usb 5-1: USB disconnect, device number 7 [ 222.522687][ T6775] usb 3-1: USB disconnect, device number 8 [ 222.765320][ T6777] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 222.801617][ T6777] ath9k_htc: Failed to initialize the device [ 222.847456][ T6784] usb 5-1: ath9k_htc: USB layer deinitialized [ 223.078055][ T30] audit: type=1326 audit(1780988508.228:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.5.1539" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8015f9ce59 code=0x7ffc0000 [ 223.155341][ T9363] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 223.202069][ T30] audit: type=1326 audit(1780988508.228:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.5.1539" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8015f9ce59 code=0x7ffc0000 [ 223.315563][ T30] audit: type=1326 audit(1780988508.268:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.5.1539" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f8015f9ce59 code=0x7ffc0000 [ 223.446020][ T30] audit: type=1326 audit(1780988508.268:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.5.1539" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8015f9ce59 code=0x7ffc0000 [ 223.479031][ T9372] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 223.559076][ T30] audit: type=1326 audit(1780988508.268:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.5.1539" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8015f9ce59 code=0x7ffc0000 [ 223.983367][ T9384] loop3: detected capacity change from 0 to 4096 [ 224.507580][ T9405] loop0: detected capacity change from 0 to 4096 [ 224.919800][ T9414] loop3: detected capacity change from 0 to 1024 [ 224.955827][ T9414] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 225.284875][ T6771] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 225.456417][ T6771] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 225.484386][ T6771] usb 6-1: config 1 has no interface number 0 [ 225.506914][ T6771] usb 6-1: config 1 interface 105 has no altsetting 0 [ 225.524992][ T6771] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 225.541213][ T6777] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 225.548778][ T6771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.570044][ T6771] usb 6-1: Product: syz [ 225.575186][ T6771] usb 6-1: Manufacturer: syz [ 225.587603][ T6771] usb 6-1: SerialNumber: syz [ 225.641355][ T24] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 225.720688][ T6777] usb 4-1: Using ep0 maxpacket: 16 [ 225.738627][ T6777] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 225.772536][ T6777] usb 4-1: config 0 has no interface number 0 [ 225.796301][ T6777] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 225.835660][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 225.847353][ T6777] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 225.871623][ T6771] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71 [ 225.879573][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.894448][ T6777] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 225.906267][ T9418] loop0: detected capacity change from 0 to 32768 [ 225.919840][ T6771] usb 6-1: USB disconnect, device number 9 [ 225.926717][ T6777] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 225.939693][ T24] usb 2-1: config 0 descriptor?? [ 225.953546][ T6777] usb 4-1: Product: syz [ 225.963383][ T24] cp210x 2-1:0.0: cp210x converter detected [ 225.970748][ T6777] usb 4-1: Manufacturer: syz [ 225.979734][ T6777] usb 4-1: SerialNumber: syz [ 226.002006][ T9442] loop2: detected capacity change from 0 to 512 [ 226.040307][ T6777] usb 4-1: config 0 descriptor?? [ 226.090351][ T6777] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 226.143772][ T9442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.156696][ T9442] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.166817][ T6777] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 226.247743][ T6777] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 226.296596][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.314596][ T6777] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 226.330687][ T9426] syz.3.1570 uses obsolete (PF_INET,SOCK_PACKET) [ 226.386753][ T6777] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 226.403224][ T24] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 226.427154][ T24] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 226.437296][ T6777] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 226.462985][ T9452] loop2: detected capacity change from 0 to 512 [ 226.480294][ T24] usb 2-1: cp210x converter now attached to ttyUSB4 [ 226.499362][ T6777] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 226.524487][ T24] usb 2-1: USB disconnect, device number 9 [ 226.554400][ T6777] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 226.562238][ T9452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.611196][ T24] cp210x ttyUSB4: cp210x converter now disconnected from ttyUSB4 [ 226.669233][ T6777] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 226.695007][ T24] cp210x 2-1:0.0: device disconnected [ 226.746997][ T6777] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 226.815619][ T6777] usb 4-1: USB disconnect, device number 8 [ 226.973299][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.038061][ T6777] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 227.127359][ T6777] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 227.235192][ T6777] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 227.305766][ T6777] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 227.318279][ T9474] netlink: 'syz.4.1590': attribute type 1 has an invalid length. [ 227.359922][ T6777] keyspan 4-1:0.107: device disconnected [ 227.687579][ T9482] loop2: detected capacity change from 0 to 1024 [ 227.752644][ T9482] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 227.823415][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'. [ 227.935570][ T9483] loop3: detected capacity change from 0 to 4096 [ 227.966512][ T9483] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 228.271168][ T9494] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1601'. [ 229.151253][ T9524] loop2: detected capacity change from 0 to 256 [ 229.874251][ T9510] loop0: detected capacity change from 0 to 32768 [ 229.925051][ T9510] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 230.063763][ T9510] XFS (loop0): Ending clean mount [ 230.286891][ T9523] loop5: detected capacity change from 0 to 32768 [ 230.337678][ T5630] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 230.413584][ T9523] JBD2: Ignoring recovery information on journal [ 230.442543][ T9523] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 230.468874][ T9523] JBD2: bad block at offset 32 [ 230.503934][ T9523] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 230.555465][ T9523] ocfs2: Unmounting device (7,5) on (node local) [ 231.176548][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1638'. [ 231.682678][ T9596] openvswitch: netlink: Key type 51 is out of range max 32 [ 231.899291][ T9605] binder: BC_ACQUIRE_RESULT not supported [ 231.913855][ T9604] loop0: detected capacity change from 0 to 512 [ 231.928395][ T9605] binder: 9602:9605 ioctl c0306201 200000000540 returned -22 [ 232.001032][ T9604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.136045][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.246703][ T9616] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 232.297329][ T9620] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1660'. [ 232.306146][ T9616] overlayfs: missing 'lowerdir' [ 232.353848][ T9618] loop2: detected capacity change from 0 to 2048 [ 232.458223][ T9625] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.831036][ T6784] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 232.968898][ T9643] loop3: detected capacity change from 0 to 128 [ 232.998485][ T9645] xt_l2tp: invalid flags combination: c [ 233.009192][ T9637] loop5: detected capacity change from 0 to 4096 [ 233.021236][ T6784] usb 5-1: Using ep0 maxpacket: 16 [ 233.051806][ T6784] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 233.091045][ T6784] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 233.129713][ T6784] usb 5-1: config 0 interface 0 has no altsetting 0 [ 233.158385][ T6784] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 233.172553][ T6777] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 233.186339][ T6784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.226234][ T6784] usb 5-1: Product: syz [ 233.255165][ T6784] usb 5-1: Manufacturer: syz [ 233.268916][ T6784] usb 5-1: SerialNumber: syz [ 233.289476][ T6784] usb 5-1: config 0 descriptor?? [ 233.375452][ T6777] usb 3-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 233.415646][ T6777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.477332][ T6777] usb 3-1: config 0 descriptor?? [ 233.529203][ T6777] gspca_main: spca505-2.14.0 probing 0733:0430 [ 233.636843][ T9657] loop3: detected capacity change from 0 to 16 [ 233.647606][ T9657] erofs (device loop3): mounted with root inode @ nid 36. [ 233.706880][ T5652] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 233.737010][ T6777] gspca_spca505: reg write: error -71 [ 233.754193][ T9657] erofs (device loop3): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 233.766197][ T9657] erofs (device loop3): read error -117 @ 1 of nid 89 [ 233.772437][ T6777] spca505 3-1:0.0: probe with driver spca505 failed with error -5 [ 233.774239][ T30] audit: type=1800 audit(1780988518.928:22): pid=9657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1676" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 233.787843][ T24] usb 5-1: USB disconnect, device number 8 [ 233.816928][ T6774] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 233.844575][ T6777] usb 3-1: USB disconnect, device number 9 [ 233.984198][ T6774] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 233.994877][ T6774] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 234.007238][ T6774] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.017572][ T6774] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 234.026620][ T6774] usb 1-1: config 1 has no interface number 0 [ 234.032955][ T6774] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 234.043475][ T6774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.069563][ T6774] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 234.274015][ T6774] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 234.293565][ T6774] snd_usb_pod 1-1:1.1: invalid control EP [ 234.309590][ T6774] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 234.326853][ T6774] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 234.340116][ T6774] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 234.592110][ T6774] usb 1-1: USB disconnect, device number 10 [ 234.626736][ T9675] Cannot find add_set index 65532 as target [ 234.720341][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'. [ 234.757378][ T9677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1686'. [ 235.019824][ T9661] loop5: detected capacity change from 0 to 32768 [ 235.080212][ T9661] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 235.143440][ T9661] JBD2: Ignoring recovery information on journal [ 235.352987][ T9661] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 235.765911][ T5643] ocfs2: Unmounting device (7,5) on (node local) [ 235.872051][ T6784] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 235.946934][ T9714] bridge1: entered promiscuous mode [ 235.957507][ T9716] loop5: detected capacity change from 0 to 8 [ 235.984152][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1705'. [ 236.026010][ T9716] SQUASHFS error: Unable to read inode 0xe3 [ 236.051916][ T6784] usb 2-1: Using ep0 maxpacket: 32 [ 236.085578][ T6784] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 236.140122][ T6784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 236.190596][ T6784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 236.219701][ T6784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 236.269467][ T6784] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 236.312239][ T6784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.346900][ T6784] usb 2-1: Product: syz [ 236.365756][ T6784] usb 2-1: Manufacturer: syz [ 236.385904][ T6784] usb 2-1: SerialNumber: syz [ 236.431159][ T6784] usb 2-1: config 0 descriptor?? [ 236.821910][ T6784] usb 2-1: USB disconnect, device number 10 [ 237.150456][ T9756] loop3: detected capacity change from 0 to 64 [ 237.174175][ T9756] minix: block size(59136) > page size(4096) not supported by filesystem [ 237.343624][ T9762] loop4: detected capacity change from 0 to 512 [ 237.359454][ T9762] EXT4-fs: Ignoring removed orlov option [ 237.407266][ T9762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.422036][ T9762] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.446030][ T9762] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:337: inode #15: comm syz.4.1727: verity file corrupted; can't find descriptor [ 237.462953][ T9762] EXT4-fs (loop4): Remounting filesystem read-only [ 237.469676][ T9762] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 237.815490][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.852343][ T9775] loop1: detected capacity change from 0 to 4096 [ 237.928594][ T9780] netlink: 'syz.5.1734': attribute type 6 has an invalid length. [ 237.945668][ T9781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1736'. [ 238.955699][ T9811] vivid-002: ================= START STATUS ================= [ 238.994615][ T9811] vivid-002: Radio HW Seek Mode: Bounded [ 239.025309][ T9811] vivid-002: Radio Programmable HW Seek: false [ 239.058503][ T9811] vivid-002: RDS Rx I/O Mode: Block I/O [ 239.084285][ T9811] vivid-002: Generate RBDS Instead of RDS: false [ 239.107656][ T9811] vivid-002: RDS Reception: true [ 239.128826][ T9811] vivid-002: RDS Program Type: 0 inactive [ 239.153524][ T9811] vivid-002: RDS PS Name: inactive [ 239.174897][ T9811] vivid-002: RDS Radio Text: inactive [ 239.197215][ T9811] vivid-002: RDS Traffic Announcement: false inactive [ 239.229526][ T9811] vivid-002: RDS Traffic Program: false inactive [ 239.243422][ T9811] vivid-002: RDS Music: false inactive [ 239.261405][ T9811] vivid-002: ================== END STATUS ================== [ 239.291255][ T9824] sit0: entered promiscuous mode [ 239.309535][ T9824] netlink: 'syz.0.1755': attribute type 1 has an invalid length. [ 239.336697][ T9824] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1755'. [ 239.365606][ T9826] netlink: 'syz.2.1757': attribute type 4 has an invalid length. [ 239.391766][ T9826] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1757'. [ 239.499655][ T9826] .`: renamed from bond0 (while UP) [ 239.662818][ T9837] loop0: detected capacity change from 0 to 1024 [ 239.790981][ T9840] loop1: detected capacity change from 0 to 64 [ 239.835840][ T9840] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 239.875531][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 239.885118][ T9840] hfs: filesystem is marked locked, mounting read-only. [ 240.062008][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 240.116721][ T24] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 240.155619][ T24] usb 5-1: config 0 has no interface number 0 [ 240.179506][ T24] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 240.220607][ T24] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 240.273977][ T24] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 240.326447][ T24] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 240.359765][ T24] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 240.405449][ T24] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 240.447437][ T24] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 240.487926][ T24] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 240.518047][ T24] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.578973][ T24] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 240.613251][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.624589][ T9858] loop0: detected capacity change from 0 to 16 [ 240.646045][ T24] usb 5-1: Product: syz [ 240.647559][ T9858] erofs (device loop0): mounted with root inode @ nid 36. [ 240.667628][ T24] usb 5-1: Manufacturer: syz [ 240.689099][ T24] usb 5-1: SerialNumber: syz [ 240.726691][ T24] usb 5-1: config 0 descriptor?? [ 240.727329][ T5652] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 240.768803][ T9835] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 240.777767][ T9858] erofs (device loop0): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 240.815120][ T24] usb 5-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 240.821137][ T9858] erofs (device loop0): read error -117 @ 1 of nid 89 [ 240.841834][ T30] audit: type=1800 audit(1780988525.988:23): pid=9858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1772" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 240.864036][ T24] usb 5-1: couldn't find an output bulk endpoint. Bailing out. [ 240.957197][ T9838] loop3: detected capacity change from 0 to 32768 [ 241.031653][ T9838] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 241.050020][ T6775] usb 5-1: USB disconnect, device number 9 [ 241.089759][ T9838] JBD2: Ignoring recovery information on journal [ 241.461421][ T9838] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 241.722075][ T6775] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 241.912877][ T6775] usb 1-1: Using ep0 maxpacket: 8 [ 241.940887][ T6775] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 241.959972][ T6775] usb 1-1: config 0 has no interface number 0 [ 241.998721][ T6775] usb 1-1: config 0 interface 101 has no altsetting 0 [ 242.026053][ T6775] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 242.082264][ T6775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.099659][ T5635] ocfs2: Unmounting device (7,3) on (node local) [ 242.131660][ T6775] usb 1-1: config 0 descriptor?? [ 242.150343][ T6775] usb-storage 1-1:0.101: USB Mass Storage device detected [ 242.185928][ T6775] usb-storage 1-1:0.101: device ignored [ 242.442618][ T9861] loop2: detected capacity change from 0 to 32768 [ 242.467816][ T6775] usb 1-1: USB disconnect, device number 11 [ 242.603991][ T9919] loop1: detected capacity change from 0 to 4096 [ 242.702203][ T9919] ntfs3(loop1): ino=19, mi_enum_attr [ 242.727481][ T9919] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 242.791319][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 242.972304][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 242.999474][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 243.047175][ T24] usb 6-1: config 4 interface 0 has no altsetting 0 [ 243.071652][ T24] usb 6-1: string descriptor 0 read error: -22 [ 243.092299][ T24] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 243.138547][ T24] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 243.235118][ T24] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 243.319589][ T9939] netlink: 'syz.0.1794': attribute type 1 has an invalid length. [ 243.339726][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 243.391174][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 243.439182][ T24] usb 6-1: media controller created [ 243.562752][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.653577][ T30] audit: type=1400 audit(1780988528.808:24): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=9948 comm="syz.0.1799" [ 243.817984][ T9953] loop2: detected capacity change from 0 to 512 [ 243.972190][ T6775] usb 6-1: USB disconnect, device number 10 [ 244.388110][ T9964] loop4: detected capacity change from 0 to 4096 [ 244.459794][ T9969] loop0: detected capacity change from 0 to 64 [ 244.534007][ T9964] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 244.607355][ T9971] loop3: detected capacity change from 0 to 1024 [ 244.731496][ T9945] loop1: detected capacity change from 0 to 32768 [ 244.779499][ T9945] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1797 (9945) [ 244.885709][ T9945] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 244.924123][ T9945] BTRFS info (device loop1): using sha256 checksum algorithm [ 245.137084][ T9945] BTRFS info (device loop1): enabling ssd optimizations [ 245.164940][ T9945] BTRFS info (device loop1): turning on async discard [ 245.199665][ T9945] BTRFS info (device loop1): enabling free space tree [ 245.556613][ T5633] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.029023][T10020] loop4: detected capacity change from 0 to 4096 [ 247.389950][T10026] loop1: detected capacity change from 0 to 32768 [ 247.722502][T10028] infiniband syz1: set down [ 247.745282][T10028] infiniband syz1: added bond0 [ 247.851883][T10028] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 247.867881][T10028] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 247.870941][T10044] loop5: detected capacity change from 0 to 32768 [ 247.886660][T10028] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 247.947123][T10044] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1834 (10044) [ 247.973910][T10028] RDS/IB: syz1: added [ 248.007565][T10028] smc: adding ib device syz1 with port count 1 [ 248.040982][T10028] smc: ib device syz1 port 1 has no pnetid [ 248.086685][T10044] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.125512][T10060] loop1: detected capacity change from 0 to 4096 [ 248.138950][T10044] BTRFS info (device loop5): using sha256 checksum algorithm [ 248.207599][T10051] loop3: detected capacity change from 0 to 32768 [ 248.225075][T10060] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 248.332310][T10060] ntfs3(loop1): Failed to load $Extend (-22). [ 248.359665][T10060] ntfs3(loop1): Failed to initialize $Extend. [ 248.399472][T10044] BTRFS info (device loop5): enabling ssd optimizations [ 248.430116][T10054] loop4: detected capacity change from 0 to 32768 [ 248.458258][T10044] BTRFS info (device loop5): turning on async discard [ 248.472974][T10054] BTRFS info: device /dev/loop4 (7:4) using temp-fsid c38f7afb-01ac-4007-a89f-cb24407891a6 [ 248.479424][T10044] BTRFS info (device loop5): enabling free space tree [ 248.535368][T10054] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1839 (10054) [ 248.645544][T10054] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.698707][T10054] BTRFS info (device loop4): using sha256 checksum algorithm [ 248.857979][T10096] loop3: detected capacity change from 0 to 512 [ 248.891582][T10096] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.992845][ T5643] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.032251][T10054] BTRFS info (device loop4): enabling ssd optimizations [ 249.062820][T10054] BTRFS info (device loop4): turning on async discard [ 249.084167][T10096] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1846: invalid block [ 249.084560][T10054] BTRFS info (device loop4): enabling free space tree [ 249.096469][T10096] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 249.108750][T10096] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.1846: invalid indirect mapped block 4294967295 (level 1) [ 249.117980][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 249.118013][ C1] EXT4-fs (loop3): initial error at time 1780988534: ext4_get_branch:178: inode 11: block 4294967295 [ 249.118082][ C1] EXT4-fs (loop3): last error at time 1780988534: ext4_get_branch:178: inode 11: block 4294967295 [ 249.167615][T10096] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 249.168135][T10096] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.1846: invalid indirect mapped block 4294967295 (level 1) [ 249.191842][T10096] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 249.196076][T10096] EXT4-fs (loop3): 2 truncates cleaned up [ 249.371941][T10096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.424094][ T5637] BTRFS info (device loop4): last unmount of filesystem c38f7afb-01ac-4007-a89f-cb24407891a6 [ 249.583417][ T6749] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 249.729592][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.733012][T10063] loop2: detected capacity change from 0 to 32768 [ 249.772389][ T6749] usb 2-1: Using ep0 maxpacket: 16 [ 249.796167][ T6749] usb 2-1: unable to get BOS descriptor or descriptor too short [ 249.828897][ T6749] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 249.885765][ T6749] usb 2-1: config 12 has 0 interfaces, different from the descriptor's value: 1 [ 249.929521][ T6749] usb 2-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice=d4.d0 [ 249.983419][ T6749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.035824][ T30] audit: type=1400 audit(1780988535.178:25): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10112 comm="syz.3.1851" [ 250.056832][ T6749] usb 2-1: Product: syz [ 250.078832][ T6749] usb 2-1: Manufacturer: syz [ 250.099495][ T6749] usb 2-1: SerialNumber: syz [ 250.336166][T10117] loop4: detected capacity change from 0 to 1024 [ 250.374854][T10119] netlink: 'syz.3.1855': attribute type 11 has an invalid length. [ 250.641664][ T6774] apple-mfi-fastcharge 2-1: USB disconnect, device number 11 [ 251.098616][T10129] loop4: detected capacity change from 0 to 256 [ 251.228305][T10115] loop5: detected capacity change from 0 to 32768 [ 251.267039][T10115] xfs: Deprecated parameter 'attr2' [ 251.295668][T10115] XFS: attr2 mount option is deprecated. [ 251.332190][T10115] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 251.454702][T10115] XFS (loop5): Ending clean mount [ 251.556472][T10115] XFS (loop5): Quotacheck needed: Please wait. [ 251.756866][T10115] XFS (loop5): Quotacheck: Done. [ 251.867103][T10157] loop4: detected capacity change from 0 to 64 [ 251.950434][ T5643] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 251.996528][T10162] EXT4-fs: Ignoring removed nobh option [ 252.103177][T10163] ip6tnl1: entered promiscuous mode [ 252.133365][T10162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.222016][T10162] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.527297][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.375986][T10195] set_capacity_and_notify: 1 callbacks suppressed [ 253.376012][T10195] loop3: detected capacity change from 0 to 1024 [ 253.443091][T10195] EXT4-fs: inline encryption not supported [ 253.463364][T10195] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 253.514050][T10195] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.1886: lblock 2 mapped to illegal pblock 2 (length 1) [ 253.535995][T10195] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 253.541299][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 253.556801][ C0] EXT4-fs (loop3): initial error at time 1780988538: ext4_map_blocks:791: inode 3: block 2 [ 253.566874][ C0] EXT4-fs (loop3): last error at time 1780988538: ext4_map_blocks:791: inode 3: block 2 [ 253.570244][T10200] overlayfs: conflicting options: userxattr,metacopy=on [ 253.578778][T10195] EXT4-fs (loop3): Remounting filesystem read-only [ 253.590209][T10195] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 253.605128][T10195] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 253.617103][T10172] loop5: detected capacity change from 0 to 32768 [ 253.679491][T10172] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1873 (10172) [ 253.711023][T10195] EXT4-fs (loop3): 1 orphan inode deleted [ 253.736216][T10202] ip6tnl1: entered promiscuous mode [ 253.743602][T10195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.804538][T10172] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 253.851144][T10172] BTRFS info (device loop5): using crc32c checksum algorithm [ 253.883570][T10195] Quota error (device loop3): find_next_id: Can't read quota tree block 1 [ 254.017116][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.099069][T10172] BTRFS info (device loop5): enabling ssd optimizations [ 254.123016][T10172] BTRFS info (device loop5): turning on flush-on-commit [ 254.133009][T10172] BTRFS info (device loop5): enabling free space tree [ 254.149150][T10172] BTRFS info (device loop5): enabling auto defrag [ 254.161567][T10172] BTRFS info (device loop5): use lzo compression, level 1 [ 254.181310][T10172] BTRFS info (device loop5): max_inline set to 4096 [ 254.405828][T10225] loop3: detected capacity change from 0 to 256 [ 254.439979][T10225] exfat: Deprecated parameter 'utf8' [ 254.473035][T10225] exfat: Deprecated parameter 'namecase' [ 254.543010][T10225] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 254.564098][T10182] loop1: detected capacity change from 0 to 32768 [ 254.720274][ T5643] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 255.003537][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.009942][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.463892][T10248] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1904'. [ 255.571131][T10252] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5633] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[10252] [ 255.959804][T10264] new mount options do not match the existing superblock, will be ignored [ 256.041372][ T6784] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 256.223533][ T6784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 256.268851][ T6784] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 256.310694][ T6784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.334392][ T6784] usb 3-1: Product: syz [ 256.347481][ T6784] usb 3-1: Manufacturer: syz [ 256.360899][ T6784] usb 3-1: SerialNumber: syz [ 256.394614][ T6784] usb 3-1: config 0 descriptor?? [ 256.418460][ T6784] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 256.650753][ T6775] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 256.689256][ T6749] usb 3-1: USB disconnect, device number 10 [ 256.866164][ T6775] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 256.890622][ T6775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.907012][ T6775] usb 5-1: Product: syz [ 256.912635][ T6775] usb 5-1: Manufacturer: syz [ 256.918455][ T6775] usb 5-1: SerialNumber: syz [ 256.963891][ T6775] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 256.986769][ T6749] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 257.073557][T10286] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5643] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[10286] [ 257.174556][T10288] loop3: detected capacity change from 0 to 64 [ 257.283464][T10288] syz.3.1924: attempt to access beyond end of device [ 257.283464][T10288] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 257.345079][T10288] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 257.382189][T10270] loop1: detected capacity change from 0 to 32768 [ 257.425554][T10288] Trying to free block not in datazone [ 257.462586][T10270] XFS (loop1): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 257.527288][ T24] usb 5-1: USB disconnect, device number 10 [ 257.634276][T10302] loop2: detected capacity change from 0 to 256 [ 257.672188][T10304] xt_cgroup: invalid path, errno=-2 [ 257.713913][ T5633] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 258.127171][ T6749] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 258.156720][ T6749] ath9k_htc: Failed to initialize the device [ 258.203135][ T24] usb 5-1: ath9k_htc: USB layer deinitialized [ 258.921383][T10338] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 258.950234][T10340] loop0: detected capacity change from 0 to 64 [ 259.185251][T10348] JFS: charset not found [ 259.495352][T10358] loop4: detected capacity change from 0 to 1024 [ 259.531648][T10358] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 259.567803][T10363] loop1: detected capacity change from 0 to 512 [ 259.607977][T10363] EXT4-fs (loop1): Test dummy encryption mode enabled [ 259.645629][T10363] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 259.709548][T10363] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1956: bad orphan inode 131083 [ 259.734459][T10363] loop1: lost filesystem error report for type 5 error -117 [ 259.748335][T10363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.098894][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.378286][T10391] netlink: 'syz.2.1970': attribute type 21 has an invalid length. [ 260.413263][T10391] netlink: 'syz.2.1970': attribute type 5 has an invalid length. [ 260.432772][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'. [ 260.742839][T10400] loop2: detected capacity change from 0 to 1024 [ 260.777119][T10376] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 260.796483][T10400] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 260.824984][T10404] loop4: detected capacity change from 0 to 1024 [ 260.851635][T10404] EXT4-fs: Ignoring removed bh option [ 260.908981][T10404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.115177][T10404] EXT4-fs error (device loop4): ext4_get_first_dir_block:3548: inode #11: comm syz.4.1975: directory missing '.' [ 261.218296][T10404] EXT4-fs (loop4): Remounting filesystem read-only [ 261.423564][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.529625][T10430] tmpfs: Bad value for 'mpol' [ 262.041185][ T5652] Bluetooth: hci0: command 0x0406 tx timeout [ 262.179634][T10455] loop4: detected capacity change from 0 to 256 [ 262.248052][T10455] FAT-fs (loop4): Directory bread(block 64) failed [ 262.267845][T10455] FAT-fs (loop4): Directory bread(block 65) failed [ 262.289073][T10455] FAT-fs (loop4): Directory bread(block 66) failed [ 262.313040][T10455] FAT-fs (loop4): Directory bread(block 67) failed [ 262.335532][T10455] FAT-fs (loop4): Directory bread(block 68) failed [ 262.359173][T10455] FAT-fs (loop4): Directory bread(block 69) failed [ 262.381111][T10455] FAT-fs (loop4): Directory bread(block 70) failed [ 262.399818][T10455] FAT-fs (loop4): Directory bread(block 71) failed [ 262.426746][T10455] FAT-fs (loop4): Directory bread(block 72) failed [ 262.448706][T10455] FAT-fs (loop4): Directory bread(block 73) failed [ 262.551964][ T6784] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 262.674415][ T30] audit: type=1800 audit(1780988547.828:26): pid=10455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2001" name="bus" dev="loop4" ino=1048635 res=0 errno=0 [ 262.765224][ T6784] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 262.793569][ T6784] usb 2-1: config 0 has no interface number 0 [ 262.817932][ T6784] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 262.860001][ T6784] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 262.890608][ T6784] usb 2-1: config 0 interface 200 has no altsetting 0 [ 262.926760][ T6784] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 262.953689][ T6784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.976945][T10471] loop2: detected capacity change from 0 to 128 [ 262.985994][ T6784] usb 2-1: Product: syz [ 262.994927][ T6784] usb 2-1: Manufacturer: syz [ 263.007370][ T6784] usb 2-1: SerialNumber: syz [ 263.062867][ T6784] usb 2-1: config 0 descriptor?? [ 263.308864][T10450] loop0: detected capacity change from 0 to 32768 [ 263.351440][ T6784] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input13 [ 263.417675][T10450] XFS (loop0): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 263.460229][ T6784] usb 2-1: USB disconnect, device number 12 [ 263.681733][ T5630] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 263.743585][T10497] loop4: detected capacity change from 0 to 512 [ 264.350666][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 264.431732][T10518] netlink: 'syz.3.2026': attribute type 1 has an invalid length. [ 264.460976][T10518] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2026'. [ 264.531098][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 264.559276][T10521] netlink: 'syz.5.2028': attribute type 3 has an invalid length. [ 264.560917][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 264.600219][T10521] netlink: 'syz.5.2028': attribute type 1 has an invalid length. [ 264.610938][T10521] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2028'. [ 264.630963][ T24] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 264.658801][T10523] loop2: detected capacity change from 0 to 16 [ 264.666147][T10521] NCSI netlink: No device for ifindex 0 [ 264.678065][ T24] usb 5-1: config 12 has 0 interfaces, different from the descriptor's value: 1 [ 264.716810][T10523] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 264.729237][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice=d4.d0 [ 264.770295][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.789561][T10523] erofs (device loop2): mounted with root inode @ nid 36. [ 264.801019][ T24] usb 5-1: Product: syz [ 264.812836][T10526] netlink: 'syz.3.2031': attribute type 2 has an invalid length. [ 264.826812][ T24] usb 5-1: Manufacturer: syz [ 264.843795][ T24] usb 5-1: SerialNumber: syz [ 264.875049][T10523] erofs (device loop2): read error -117 @ 0 of nid 36 [ 265.193024][T10533] sctp: [Deprecated]: syz.1.2034 (pid 10533) Use of int in maxseg socket option. [ 265.193024][T10533] Use struct sctp_assoc_value instead [ 265.459362][ T24] apple-mfi-fastcharge 5-1: USB disconnect, device number 11 [ 265.743511][T10515] loop0: detected capacity change from 0 to 32768 [ 265.773224][T10515] xfs: Deprecated parameter 'attr2' [ 265.793741][T10515] XFS: attr2 mount option is deprecated. [ 265.852146][T10515] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 265.978173][T10515] XFS (loop0): Ending clean mount [ 266.115385][T10515] XFS (loop0): Quotacheck needed: Please wait. [ 266.239727][T10565] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2046'. [ 266.285656][T10565] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2046'. [ 266.292853][T10515] XFS (loop0): Quotacheck: Done. [ 266.628385][ T5630] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 266.678013][T10575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.906867][ T30] audit: type=1326 audit(1780988552.058:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10584 comm="syz.0.2056" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad799ce59 code=0x7ffc0000 [ 266.906955][ T30] audit: type=1326 audit(1780988552.058:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10584 comm="syz.0.2056" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad799ce59 code=0x7ffc0000 [ 266.984985][ T30] audit: type=1326 audit(1780988552.118:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10584 comm="syz.0.2056" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad799ce59 code=0x7ffc0000 [ 266.985065][ T30] audit: type=1326 audit(1780988552.138:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10584 comm="syz.0.2056" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad799ce59 code=0x7ffc0000 [ 266.993995][ T30] audit: type=1326 audit(1780988552.148:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10584 comm="syz.0.2056" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fdad799ce59 code=0x7ffc0000 [ 266.994072][ T30] audit: type=1326 audit(1780988552.148:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10584 comm="syz.0.2056" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad799ce59 code=0x7ffc0000 [ 266.996378][ T30] audit: type=1326 audit(1780988552.148:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10584 comm="syz.0.2056" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad799ce59 code=0x7ffc0000 [ 266.996464][ T30] audit: type=1326 audit(1780988552.148:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10584 comm="syz.0.2056" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdad799ce59 code=0x7ffc0000 [ 266.996552][ T30] audit: type=1326 audit(1780988552.148:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10584 comm="syz.0.2056" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdad799ce59 code=0x7ffc0000 [ 267.141980][T10592] netlink: 'syz.5.2060': attribute type 1 has an invalid length. [ 267.331909][T10592] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2060'. [ 267.490196][T10598] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 268.003653][T10619] sctp: [Deprecated]: syz.5.2073 (pid 10619) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.003653][T10619] Use struct sctp_sack_info instead [ 268.076581][T10623] xt_TPROXY: Can be used only with -p tcp or -p udp [ 268.601031][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2085'. [ 268.804771][T10649] netlink: 'syz.0.2088': attribute type 3 has an invalid length. [ 268.849943][T10649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2088'. [ 269.201505][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2097'. [ 269.241485][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2097'. [ 269.580687][ T6775] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 269.770703][ T6775] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 269.820108][ T6775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.848025][ T6775] usb 6-1: Product: syz [ 269.863381][ T6775] usb 6-1: Manufacturer: syz [ 269.879788][ T6775] usb 6-1: SerialNumber: syz [ 269.931127][ T6775] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 269.958710][ T6784] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 270.289046][T10659] loop4: detected capacity change from 0 to 32768 [ 270.318375][T10659] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2092 (10659) [ 270.393825][T10659] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 270.423328][T10659] BTRFS info (device loop4): using crc32c checksum algorithm [ 270.491720][ T6774] usb 6-1: USB disconnect, device number 11 [ 270.624321][T10659] BTRFS info (device loop4): enabling ssd optimizations [ 270.646027][T10659] BTRFS info (device loop4): turning on flush-on-commit [ 270.652741][T10716] 8021q: VLANs not supported on lo [ 270.661452][T10659] BTRFS info (device loop4): enabling free space tree [ 270.671855][T10659] BTRFS info (device loop4): enabling auto defrag [ 270.685507][T10659] BTRFS info (device loop4): use lzo compression, level 1 [ 270.718892][T10659] BTRFS info (device loop4): max_inline set to 4096 [ 270.870955][ T6771] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 271.001415][ T6784] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 271.021169][ T6784] ath9k_htc: Failed to initialize the device [ 271.044233][ T6771] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.062521][ T6774] usb 6-1: ath9k_htc: USB layer deinitialized [ 271.103125][ T5637] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 271.112658][ T6771] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 271.177796][ T6771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.218161][ T6771] usb 1-1: Product: syz [ 271.246580][ T6771] usb 1-1: Manufacturer: syz [ 271.275111][ T6771] usb 1-1: SerialNumber: syz [ 271.316998][ T6771] usb 1-1: config 0 descriptor?? [ 271.365113][ T6771] ums_eneub6250 1-1:0.0: USB Mass Storage device detected [ 271.475308][T10732] loop5: detected capacity change from 0 to 1764 [ 271.492401][T10735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2119'. [ 271.581680][ T6784] usb 1-1: USB disconnect, device number 12 [ 271.609243][T10732] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 271.728876][T10740] loop1: detected capacity change from 0 to 256 [ 271.757065][T10740] exfat: Deprecated parameter 'utf8' [ 271.779122][T10740] exfat: Deprecated parameter 'namecase' [ 271.852538][T10740] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 271.967311][T10745] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.975644][T10745] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.032300][T10745] bridge0: entered allmulticast mode [ 272.108523][T10745] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 272.477530][T10758] netlink: 'syz.3.2133': attribute type 2 has an invalid length. [ 272.513341][T10758] netlink: 'syz.3.2133': attribute type 2 has an invalid length. [ 272.590613][ T6784] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 272.771996][ T6784] usb 2-1: Using ep0 maxpacket: 32 [ 272.799918][ T6784] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 272.850982][ T6784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.872315][T10736] loop2: detected capacity change from 0 to 32768 [ 272.901412][ T6784] usb 2-1: config 0 descriptor?? [ 272.904015][T10736] xfs: Deprecated parameter 'attr2' [ 272.933218][ T6784] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 272.936059][T10736] XFS: attr2 mount option is deprecated. [ 272.948129][T10770] loop5: detected capacity change from 0 to 64 [ 273.012667][T10736] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 273.085573][T10779] loop4: detected capacity change from 0 to 64 [ 273.181417][T10736] XFS (loop2): Ending clean mount [ 273.232680][T10736] XFS (loop2): Quotacheck needed: Please wait. [ 273.252446][T10786] openvswitch: netlink: Flow key attr not present in new flow. [ 273.353838][T10790] netlink: 'syz.3.2144': attribute type 4 has an invalid length. [ 273.365293][ T6784] gspca_nw80x: reg_r err -71 [ 273.382383][ T6784] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 273.403617][T10736] XFS (loop2): Quotacheck: Done. [ 273.414467][ T6784] usb 2-1: USB disconnect, device number 13 [ 273.689672][ T5634] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 273.825562][T10802] loop4: detected capacity change from 0 to 512 [ 273.888403][T10802] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 273.982126][T10810] netlink: 'syz.2.2152': attribute type 16 has an invalid length. [ 273.985564][T10802] EXT4-fs (loop4): failed to open journal device unknown-block(8,3) -6 [ 274.039751][T10810] netlink: 'syz.2.2152': attribute type 17 has an invalid length. [ 274.286594][T10810] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.346823][T10810] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.703950][T10825] loop1: detected capacity change from 0 to 2048 [ 274.780794][T10825] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.051215][T10838] netlink: 'syz.5.2168': attribute type 4 has an invalid length. [ 275.084868][T10838] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2168'. [ 275.149467][T10838] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 275.346924][T10848] bond0: option ad_select: unable to set because the bond device is up [ 275.498359][T10846] loop1: detected capacity change from 0 to 4096 [ 275.531993][T10855] netlink: 'syz.0.2177': attribute type 2 has an invalid length. [ 275.611345][T10857] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.673265][T10859] loop3: detected capacity change from 0 to 256 [ 275.701723][T10859] exfat: Deprecated parameter 'utf8' [ 275.734439][T10859] exfat: Deprecated parameter 'namecase' [ 275.813807][T10859] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 275.837565][T10865] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 276.419048][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'. [ 277.076408][T10903] loop4: detected capacity change from 0 to 16 [ 277.126140][T10903] erofs (device loop4): mounted with root inode @ nid 36. [ 277.138887][T10867] loop0: detected capacity change from 0 to 32768 [ 277.168143][T10867] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2182 (10867) [ 277.197027][T10903] erofs (device loop4): read error -117 @ 0 of nid 36 [ 277.237693][T10867] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 277.282616][T10867] BTRFS info (device loop0): using crc32c checksum algorithm [ 277.495012][T10925] loop2: detected capacity change from 0 to 512 [ 277.524169][T10925] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.547648][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2204'. [ 277.556737][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2204'. [ 277.577713][T10933] netlink: 'syz.3.2205': attribute type 13 has an invalid length. [ 277.577775][T10867] BTRFS info (device loop0): enabling ssd optimizations [ 277.586193][T10925] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 277.620754][T10867] BTRFS info (device loop0): turning on flush-on-commit [ 277.633885][T10867] BTRFS info (device loop0): enabling free space tree [ 277.649155][T10925] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 277.652597][T10867] BTRFS info (device loop0): enabling auto defrag [ 277.701089][T10867] BTRFS info (device loop0): use lzo compression, level 1 [ 277.708340][T10867] BTRFS info (device loop0): max_inline set to 4096 [ 277.797958][T10925] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4221: comm syz.2.2208: Allocating blocks 41-42 which overlap fs metadata [ 277.862712][T10933] gretap0: refused to change device tx_queue_len [ 277.869128][T10925] loop2: lost filesystem error report for type 5 error -117 [ 277.871820][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 277.885593][ C1] EXT4-fs (loop2): initial error at time 1780988563: ext4_mb_mark_diskspace_used:4221 [ 277.895194][ C1] EXT4-fs (loop2): last error at time 1780988563: ext4_mb_mark_diskspace_used:4221 [ 277.912048][T10933] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 277.914382][T10925] Quota error (device loop2): write_blk: dquota write failed [ 278.004870][T10925] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 278.086218][T10925] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 278.134612][T10925] EXT4-fs error (device loop2): ext4_acquire_dquot:7032: comm syz.2.2208: Failed to acquire dquot type 1 [ 278.175878][T10945] bond0: Error: Cannot enslave bond to itself. [ 278.196347][T10925] loop2: lost filesystem error report for type 5 error -117 [ 278.228829][T10925] EXT4-fs error (device loop2): mb_free_blocks:2046: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 278.299695][T10925] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.2208: corrupted inode contents [ 278.323374][ T5630] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 278.345993][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 278.346951][T10925] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 278.379773][T10925] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #12: comm syz.2.2208: mark_inode_dirty error [ 278.420695][T10925] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 278.423292][T10925] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.2208: corrupted inode contents [ 278.480335][T10925] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 278.483434][T10925] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.2208: mark_inode_dirty error [ 278.515240][T10899] loop1: detected capacity change from 0 to 32768 [ 278.557806][T10899] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 278.575080][T10925] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 278.575605][T10925] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.2208: corrupted inode contents [ 278.646378][T10899] JBD2: Ignoring recovery information on journal [ 278.748902][T10925] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 278.753400][T10925] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 278.780893][T10925] loop2: lost filesystem error report for type 5 error -117 [ 278.782170][T10925] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.2208: corrupted inode contents [ 278.876945][T10925] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 278.878363][T10925] EXT4-fs error (device loop2): ext4_truncate:4690: inode #12: comm syz.2.2208: mark_inode_dirty error [ 278.946313][T10899] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 278.955244][T10925] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 278.957520][T10925] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 279.022158][T10958] loop0: detected capacity change from 0 to 2048 [ 279.053602][T10925] loop2: lost filesystem error report for type 5 error -117 [ 279.054365][T10925] EXT4-fs (loop2): 1 truncate cleaned up [ 279.119537][T10961] loop4: detected capacity change from 0 to 2048 [ 279.154662][T10958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 279.163770][T10963] loop5: detected capacity change from 0 to 4096 [ 279.168277][T10925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.202140][T10963] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 279.234188][T10958] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:168: inode #12: comm syz.0.2215: inline data xattr refers to an external xattr inode [ 279.235252][T10961] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.340822][T10963] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 279.378213][T10963] ntfs3(loop5): ino=19, mi_enum_attr [ 279.401483][ T6784] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 279.422648][ T5633] ocfs2: Unmounting device (7,1) on (node local) [ 279.432301][ T30] audit: type=1800 audit(1780988564.578:36): pid=10961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2219" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 279.439575][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 279.538034][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.554187][ T57] Quota error (device loop2): remove_tree: Cycle in quota tree detected: block 4 index 0 [ 279.572234][ T6784] usb 4-1: Using ep0 maxpacket: 32 [ 279.604301][ T57] EXT4-fs error (device loop2): ext4_release_dquot:7068: comm kworker/u8:4: Failed to release dquot type 1 [ 279.606138][ T6784] usb 4-1: config 0 has an invalid interface number: 111 but max is 1 [ 279.677859][ T6784] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.679735][ T57] loop2: lost filesystem error report for type 5 error -5 [ 279.733644][ T6784] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 279.800040][ T6784] usb 4-1: config 0 has no interface number 0 [ 279.883740][ T6784] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 279.899119][ T6784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.947991][ T6784] usb 4-1: Product: syz [ 279.987401][ T6784] usb 4-1: Manufacturer: syz [ 280.021274][ T6784] usb 4-1: SerialNumber: syz [ 280.059190][ T6784] usb 4-1: config 0 descriptor?? [ 280.237510][T10978] loop4: detected capacity change from 0 to 1024 [ 280.318745][ T6784] snd-usb-6fire 4-1:0.111: unknown device firmware state received from device: [ 280.355652][ T6784] 31 db 99 aa dd 09 f1 37 [ 280.388516][ T6784] snd-usb-6fire 4-1:0.111: probe with driver snd-usb-6fire failed with error -5 [ 280.594872][T10989] loop0: detected capacity change from 0 to 512 [ 280.649650][T10989] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 280.666031][ T6774] usb 4-1: USB disconnect, device number 9 [ 280.687159][T10989] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 280.758180][T10989] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 280.775412][T10989] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e02c, mo2=0006] [ 280.809842][T10989] System zones: 0-2, 18-18, 34-35 [ 280.883191][T11003] netlink: 'syz.4.2238': attribute type 6 has an invalid length. [ 280.914890][T10989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.231214][ T6784] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 281.251418][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.425609][ T6784] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 281.452727][ T6784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.473352][ T6784] usb 6-1: Product: syz [ 281.488017][ T6784] usb 6-1: Manufacturer: syz [ 281.499348][ T6784] usb 6-1: SerialNumber: syz [ 281.533535][T11014] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.534300][T11014] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.537968][ T6784] usb 6-1: config 0 descriptor?? [ 281.695302][T11025] loop3: detected capacity change from 0 to 1024 [ 281.732309][T11025] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 281.762700][ T6784] usb 6-1: ignoring: probably an ADSL modem [ 281.892610][T11014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.969970][T11014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.987830][ T6784] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 282.011059][ T6784] usb 6-1: USB disconnect, device number 12 [ 282.455668][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.497967][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.534622][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.567777][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.683277][T11047] loop1: detected capacity change from 0 to 24 [ 282.712087][T11046] loop3: detected capacity change from 0 to 1024 [ 282.761662][T11047] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 282.790039][T11046] hfsplus: extend alloc file! (16384,256,150995124) [ 282.868398][T11047] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 283.039155][T11054] loop2: detected capacity change from 0 to 1024 [ 283.083916][T11054] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 283.125632][T11054] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 283.158502][T11054] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.2263: lblock 2 mapped to illegal pblock 2 (length 1) [ 283.297458][T11054] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 283.300580][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 283.300629][ C1] EXT4-fs (loop2): initial error at time 1780988568: ext4_map_blocks:791: inode 3: block 2 [ 283.300698][ C1] EXT4-fs (loop2): last error at time 1780988568: ext4_map_blocks:791: inode 3: block 2 [ 283.317530][T11054] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 283.317588][T11054] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.2263: lblock 0 mapped to illegal pblock 48 (length 1) [ 283.317645][T11054] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 283.319782][T11054] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 283.319832][T11054] EXT4-fs error (device loop2): ext4_acquire_dquot:7032: comm syz.2.2263: Failed to acquire dquot type 0 [ 283.319873][T11054] loop2: lost filesystem error report for type 5 error -117 [ 283.320970][T11054] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 283.321197][T11054] loop2: lost filesystem error report for type 5 error -117 [ 283.323169][T11054] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.2263: mark_inode_dirty error [ 283.323221][T11054] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 283.323641][T11054] EXT4-fs warning (device loop2): ext4_evict_inode:269: couldn't mark inode dirty (err -117) [ 283.323746][T11054] EXT4-fs (loop2): 1 orphan inode deleted [ 283.350004][ T57] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 283.356938][ T57] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 283.356988][ T57] EXT4-fs error (device loop2): ext4_release_dquot:7068: comm kworker/u8:4: Failed to release dquot type 0 [ 283.357028][ T57] loop2: lost filesystem error report for type 5 error -117 [ 283.362518][T11054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.474427][ T57] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm kworker/u8:4: lblock 2 mapped to illegal pblock 2 (length 1) [ 283.516096][ T57] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 283.516146][ T57] EXT4-fs error (device loop2): ext4_write_dquot:7012: comm kworker/u8:4: Failed to commit dquot type 0 [ 283.524074][ T57] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 283.628191][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.629120][ T5634] EXT4-fs error (device loop2): __ext4_get_inode_loc:4884: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 283.629191][ T5634] loop2: lost filesystem error report for type 5 error -117 [ 283.639585][ T5634] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 283.639621][ T5634] loop2: lost filesystem error report for type 5 error -117 [ 283.644931][ T5634] EXT4-fs error (device loop2): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 283.644975][ T5634] fserror_report: 1 callbacks suppressed [ 283.644994][ T5634] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 283.756927][T11069] loop4: detected capacity change from 0 to 2048 [ 283.787871][T11069] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.255884][T11084] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2277'. [ 284.395286][ T30] audit: type=1326 audit(1780988569.548:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11087 comm="syz.5.2279" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8015f9ce59 code=0x7ffc0000 [ 284.395369][ T30] audit: type=1326 audit(1780988569.548:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11087 comm="syz.5.2279" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8015f9ce59 code=0x7ffc0000 [ 284.417547][ T30] audit: type=1326 audit(1780988569.568:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11087 comm="syz.5.2279" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f8015f9ce59 code=0x7ffc0000 [ 284.425540][ T30] audit: type=1326 audit(1780988569.568:40): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=11087 comm="syz.5.2279" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8015f9ce59 code=0x7ffc0000 [ 284.528200][T11092] autofs4:pid:11092:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 284.715825][T11096] loop5: detected capacity change from 0 to 256 [ 285.025266][T11070] loop1: detected capacity change from 0 to 32768 [ 285.043149][T11070] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2269 (11070) [ 285.067334][T11070] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 285.067412][T11070] BTRFS info (device loop1): using crc32c checksum algorithm [ 285.088365][T11106] loop0: detected capacity change from 0 to 512 [ 285.113516][T11106] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 285.169947][T11106] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4221: comm syz.0.2286: Allocating blocks 41-42 which overlap fs metadata [ 285.170045][T11106] loop0: lost filesystem error report for type 5 error -117 [ 285.170576][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 285.170609][ C1] EXT4-fs (loop0): initial error at time 1780988570: ext4_mb_mark_diskspace_used:4221 [ 285.170652][ C1] EXT4-fs (loop0): last error at time 1780988570: ext4_mb_mark_diskspace_used:4221 [ 285.172864][T11106] EXT4-fs (loop0): Remounting filesystem read-only [ 285.173018][T11106] Quota error (device loop0): write_blk: dquota write failed [ 285.173406][T11106] EXT4-fs (loop0): 1 truncate cleaned up [ 285.177789][T11106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.291529][T11070] BTRFS info (device loop1): enabling ssd optimizations [ 285.306702][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.494114][T11070] BTRFS info (device loop1): turning on flush-on-commit [ 285.502956][T11070] BTRFS info (device loop1): enabling free space tree [ 285.509810][T11070] BTRFS info (device loop1): enabling auto defrag [ 285.517723][T11070] BTRFS info (device loop1): use lzo compression, level 1 [ 285.525225][T11070] BTRFS info (device loop1): max_inline set to 4096 [ 285.808689][ T5633] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 286.354770][T11141] loop3: detected capacity change from 0 to 4096 [ 286.429177][T11151] netlink: 'syz.2.2301': attribute type 3 has an invalid length. [ 286.491385][T11153] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 286.831721][T11155] loop1: detected capacity change from 0 to 4096 [ 286.969343][T11155] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 287.049415][T11155] ntfs3(loop1): ino=1a, mi_enum_attr [ 287.071643][T11155] ntfs3(loop1): ino=1a, mi_enum_attr [ 287.102237][T11155] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 287.198431][T11174] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 287.635022][T11187] loop5: detected capacity change from 0 to 512 [ 288.192645][T11205] loop2: detected capacity change from 0 to 64 [ 288.549314][T11212] comedi comedi3: pcl818: I/O base address or length out of range [ 288.797463][T11221] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2336'. [ 288.936424][T11181] loop0: detected capacity change from 0 to 32768 [ 289.057100][T11181] jfs_strtoUCS: char2uni returned -22. [ 289.114759][T11181] charset = cp857, char = 0xd5 [ 289.123172][T11236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.450121][T11241] loop4: detected capacity change from 0 to 256 [ 289.527867][T11241] FAT-fs (loop4): Directory bread(block 64) failed [ 289.552090][T11241] FAT-fs (loop4): Directory bread(block 65) failed [ 289.580244][T11241] FAT-fs (loop4): Directory bread(block 66) failed [ 289.609033][T11241] FAT-fs (loop4): Directory bread(block 67) failed [ 289.629777][T11241] FAT-fs (loop4): Directory bread(block 68) failed [ 289.654241][T11241] FAT-fs (loop4): Directory bread(block 69) failed [ 289.681565][T11241] FAT-fs (loop4): Directory bread(block 70) failed [ 289.712886][T11241] FAT-fs (loop4): Directory bread(block 71) failed [ 289.749531][T11241] FAT-fs (loop4): Directory bread(block 72) failed [ 289.787387][T11241] FAT-fs (loop4): Directory bread(block 73) failed [ 290.576637][T11262] loop4: detected capacity change from 0 to 4096 [ 290.668264][T11262] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 290.756463][T11262] ntfs3(loop4): ino=1a, mi_enum_attr [ 290.784179][T11262] ntfs3(loop4): ino=1a, mi_enum_attr [ 290.806151][T11262] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 290.976008][T11270] loop0: detected capacity change from 0 to 4096 [ 291.020347][T11270] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 291.690332][T11301] netlink: 'syz.4.2375': attribute type 1 has an invalid length. [ 291.917391][T11313] syz.1.2382: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 291.967518][T11313] CPU: 0 UID: 0 PID: 11313 Comm: syz.1.2382 Not tainted syzkaller #0 PREEMPT(full) [ 291.967564][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 291.967586][T11313] Call Trace: [ 291.967597][T11313] [ 291.967611][T11313] dump_stack_lvl+0x100/0x190 [ 291.967654][T11313] warn_alloc.cold+0x95/0x1c1 [ 291.967695][T11313] ? __pfx_warn_alloc+0x10/0x10 [ 291.967742][T11313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.967788][T11313] ? mark_held_locks+0x40/0x70 [ 291.967832][T11313] ? lockdep_hardirqs_on+0x78/0x100 [ 291.967922][T11313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.967967][T11313] ? stack_depot_save_flags+0x479/0x9d0 [ 291.968036][T11313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.968087][T11313] ? xskq_create+0xfb/0x1d0 [ 291.968134][T11313] __vmalloc_node_range_noprof+0x136c/0x1630 [ 291.968190][T11313] ? xskq_create+0xfb/0x1d0 [ 291.968248][T11313] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 291.968307][T11313] ? xskq_create+0xfb/0x1d0 [ 291.968350][T11313] vmalloc_user_noprof+0x9e/0xe0 [ 291.968387][T11313] ? xskq_create+0xfb/0x1d0 [ 291.968432][T11313] xskq_create+0xfb/0x1d0 [ 291.968480][T11313] xsk_setsockopt+0x743/0xab0 [ 291.968527][T11313] ? __pfx_aa_sk_perm+0x10/0x10 [ 291.968577][T11313] ? __pfx_xsk_setsockopt+0x10/0x10 [ 291.968619][T11313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.968664][T11313] ? find_held_lock+0x2b/0x80 [ 291.968726][T11313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.968772][T11313] ? aa_sock_opt_perm+0xfe/0x1b0 [ 291.968835][T11313] ? __pfx_xsk_setsockopt+0x10/0x10 [ 291.968881][T11313] do_sock_setsockopt+0xf3/0x1d0 [ 291.968934][T11313] __sys_setsockopt+0x195/0x220 [ 291.969005][T11313] __x64_sys_setsockopt+0xbd/0x160 [ 291.969040][T11313] ? do_syscall_64+0x90/0x870 [ 291.969094][T11313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.969139][T11313] ? lockdep_hardirqs_on+0x78/0x100 [ 291.969195][T11313] do_syscall_64+0x115/0x870 [ 291.969256][T11313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.969294][T11313] RIP: 0033:0x7fc65fd9ce59 [ 291.969323][T11313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.969360][T11313] RSP: 002b:00007fc65dff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 291.969395][T11313] RAX: ffffffffffffffda RBX: 00007fc660015fa0 RCX: 00007fc65fd9ce59 [ 291.969420][T11313] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 291.969443][T11313] RBP: 00007fc65fe32d6f R08: 0000000000000004 R09: 0000000000000000 [ 291.969466][T11313] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.969495][T11313] R13: 00007fc660016038 R14: 00007fc660015fa0 R15: 00007ffd8d84f4b8 [ 291.969545][T11313] [ 291.995762][T11320] loop3: detected capacity change from 0 to 64 [ 292.030751][T11313] Mem-Info: [ 292.280868][T11313] active_anon:6911 inactive_anon:0 isolated_anon:0 [ 292.280868][T11313] active_file:3372 inactive_file:41789 isolated_file:0 [ 292.280868][T11313] unevictable:768 dirty:675 writeback:0 [ 292.280868][T11313] slab_reclaimable:9786 slab_unreclaimable:101872 [ 292.280868][T11313] mapped:35649 shmem:1298 pagetables:1333 [ 292.280868][T11313] sec_pagetables:0 bounce:0 [ 292.280868][T11313] kernel_misc_reclaimable:0 [ 292.280868][T11313] free:1302969 free_pcp:12565 free_cma:0 [ 292.364412][T11313] Node 0 active_anon:27744kB inactive_anon:0kB active_file:13488kB inactive_file:166956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142596kB dirty:2700kB writeback:0kB shmem:3656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13524kB pagetables:5312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 292.414678][T11313] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 292.517602][T11313] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.639575][T11313] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 292.667977][T11313] Node 0 DMA32 free:1250188kB boost:0kB min:34060kB low:42572kB high:51084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27644kB inactive_anon:0kB active_file:13488kB inactive_file:166956kB unevictable:1536kB writepending:2700kB zspages:0kB present:3129332kB managed:2537380kB mlocked:0kB bounce:0kB free_pcp:49968kB local_pcp:20912kB free_cma:0kB [ 292.724223][T11313] lowmem_reserve[]: 0 0 1 1 1 [ 292.729942][T11313] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1108kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 292.822240][T11313] lowmem_reserve[]: 0 0 0 0 0 [ 292.827313][T11313] Node 1 Normal free:3947136kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.864147][T11313] lowmem_reserve[]: 0 0 0 0 0 [ 292.868944][T11313] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 292.925850][T11313] Node 0 DMA32: 918*4kB (UME) 1488*8kB (UM) 585*16kB (UME) 66*32kB (UME) 60*64kB (UM) 116*128kB (UM) 52*256kB (UME) 11*512kB (UME) 7*1024kB (UME) 5*2048kB (UM) 285*4096kB (UM) = 1249448kB [ 293.005690][T11313] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 293.018314][ T6749] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 293.056811][T11313] Node 1 Normal: 0*4kB 6*8kB (UM) 13*16kB (UM) 10*32kB (UM) 11*64kB (UM) 7*128kB (UM) 6*256kB (UM) 6*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3947136kB [ 293.121238][T11313] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.158716][T11313] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 293.169540][T11348] ip6t_srh: unknown srh match flags 5F28 [ 293.195180][ T6749] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 293.216681][T11313] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.237563][ T6749] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.269337][T11313] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 293.281929][ T6749] usb 1-1: config 0 has no interface number 0 [ 293.294831][ T6749] usb 1-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 293.308944][T11313] 46401 total pagecache pages [ 293.322256][T11313] 0 pages in swap cache [ 293.330268][T11313] Free swap = 124996kB [ 293.335117][ T6749] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 293.347583][T11313] Total swap = 124996kB [ 293.350710][T11354] loop5: detected capacity change from 0 to 256 [ 293.352171][T11313] 2097051 pages RAM [ 293.362124][ T6749] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 293.372685][T11313] 0 pages HighMem/MovableOnly [ 293.382276][ T6749] usb 1-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 293.402576][T11313] 430814 pages reserved [ 293.419208][T11313] 0 pages cma reserved [ 293.456751][ T6749] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 293.496657][ T6749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.534512][ T6749] usb 1-1: Product: syz [ 293.550059][ T6749] usb 1-1: Manufacturer: syz [ 293.570010][ T6749] usb 1-1: SerialNumber: syz [ 293.612980][ T6749] usb 1-1: config 0 descriptor?? [ 293.646837][ T6749] symbolserial 1-1:0.175: symbol converter detected [ 293.668091][T11362] loop3: detected capacity change from 0 to 16 [ 293.693668][ T6749] usb 1-1: symbol converter now attached to ttyUSB0 [ 293.741441][T11362] erofs (device loop3): mounted with root inode @ nid 36. [ 293.763183][T11368] loop2: detected capacity change from 0 to 1024 [ 293.799288][T11362] syz.3.2406: attempt to access beyond end of device [ 293.799288][T11362] loop3: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 293.817279][T11368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.857776][ T6749] usb 1-1: USB disconnect, device number 13 [ 293.880120][T11362] syz.3.2406: attempt to access beyond end of device [ 293.880120][T11362] loop3: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 293.898127][ T6749] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 293.913980][ T6749] symbolserial 1-1:0.175: device disconnected [ 293.969041][T11368] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.2409: missing EA_INODE flag [ 294.008337][T11368] EXT4-fs (loop2): Remounting filesystem read-only [ 294.035434][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'. [ 294.065715][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'. [ 294.099060][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'. [ 294.122787][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'. [ 294.142270][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.144076][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'. [ 294.181028][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'. [ 294.199282][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'. [ 294.240926][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'. [ 294.254385][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'. [ 294.263901][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'. [ 295.266409][T11409] loop1: detected capacity change from 0 to 512 [ 295.299516][T11409] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.337296][T11409] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 295.383019][T11409] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 295.424112][T11409] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4221: comm syz.1.2427: Allocating blocks 41-42 which overlap fs metadata [ 295.451944][T11409] loop1: lost filesystem error report for type 5 error -117 [ 295.452660][T11409] __quota_error: 4 callbacks suppressed [ 295.452678][T11409] Quota error (device loop1): write_blk: dquota write failed [ 295.466080][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 295.466111][ C1] EXT4-fs (loop1): initial error at time 1780988580: ext4_mb_mark_diskspace_used:4221 [ 295.466155][ C1] EXT4-fs (loop1): last error at time 1780988580: ext4_mb_mark_diskspace_used:4221 [ 295.543282][T11409] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 295.580270][T11409] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4221: comm syz.1.2427: Allocating blocks 41-42 which overlap fs metadata [ 295.626998][T11409] loop1: lost filesystem error report for type 5 error -117 [ 295.629237][T11409] Quota error (device loop1): write_blk: dquota write failed [ 295.686961][T11409] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 295.727999][T11409] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.2427: Failed to acquire dquot type 1 [ 295.776193][T11409] loop1: lost filesystem error report for type 5 error -117 [ 295.816610][T11409] EXT4-fs error (device loop1): mb_free_blocks:2046: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 295.854216][T11409] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.2427: corrupted inode contents [ 295.900660][T11409] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 295.903963][T11409] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #12: comm syz.1.2427: mark_inode_dirty error [ 295.934768][ T5652] Bluetooth: hci5: unexpected event for opcode 0x2006 [ 295.981143][T11409] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 295.981627][T11409] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.2427: corrupted inode contents [ 296.050688][T11409] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 296.051639][T11409] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.2427: mark_inode_dirty error [ 296.131516][T11409] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 296.133634][T11409] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.2427: corrupted inode contents [ 296.200990][T11409] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 296.207747][T11409] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 296.290507][T11409] loop1: lost filesystem error report for type 5 error -117 [ 296.292112][T11437] loop3: detected capacity change from 0 to 512 [ 296.308799][T11409] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.2427: corrupted inode contents [ 296.343488][T11437] EXT4-fs (loop3): 1 truncate cleaned up [ 296.355808][T11437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.379282][T11409] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 296.392932][T11437] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.2439: bg 0: block 465: padding at end of block bitmap is not set [ 296.394077][T11409] EXT4-fs error (device loop1): ext4_truncate:4690: inode #12: comm syz.1.2427: mark_inode_dirty error [ 296.435918][T11437] EXT4-fs error (device loop3) in ext4_setattr:6120: Corrupt filesystem [ 296.470673][ T6771] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 296.511892][T11409] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 296.512316][T11409] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 296.541048][T11409] loop1: lost filesystem error report for type 5 error -117 [ 296.541815][T11409] EXT4-fs (loop1): 1 truncate cleaned up [ 296.596604][T11409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.636373][ T6771] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 296.662181][ T6771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.684382][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.702364][ T6771] usb 6-1: Product: syz [ 296.716282][ T6771] usb 6-1: Manufacturer: syz [ 296.738717][ T6771] usb 6-1: SerialNumber: syz [ 296.757224][T11409] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4221: comm syz.1.2427: Allocating blocks 41-42 which overlap fs metadata [ 296.789424][T11409] Quota error (device loop1): write_blk: dquota write failed [ 296.799704][T11409] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 296.810843][ T6771] usb 6-1: config 0 descriptor?? [ 296.816168][T11409] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.2427: Failed to acquire dquot type 1 [ 296.819974][ T6771] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 296.908048][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.263035][ T6771] sonixb 6-1:0.0: Error writing register 01: -71 [ 297.292890][ T6771] sonixb 6-1:0.0: probe with driver sonixb failed with error -71 [ 297.320442][ T6771] usb 6-1: USB disconnect, device number 13 [ 297.577263][T11472] loop4: detected capacity change from 0 to 128 [ 297.637339][T11472] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.709968][T11472] ext4 filesystem being mounted at /423/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 297.859636][ T5637] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.092187][T11488] loop4: detected capacity change from 0 to 512 [ 298.124230][T11488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.163026][T11492] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 298.163026][T11492] Please contact the netfilter-devel mailing list or update your nftables rules. [ 298.166895][T11488] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 298.303924][T11488] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 298.338662][T11488] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4221: comm syz.4.2462: Allocating blocks 41-42 which overlap fs metadata [ 298.393766][T11488] loop4: lost filesystem error report for type 5 error -117 [ 298.394486][T11488] Quota error (device loop4): write_blk: dquota write failed [ 298.401849][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 298.401880][ C0] EXT4-fs (loop4): initial error at time 1780988583: ext4_mb_mark_diskspace_used:4221 [ 298.401926][ C0] EXT4-fs (loop4): last error at time 1780988583: ext4_mb_mark_diskspace_used:4221 [ 298.451637][T11488] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 298.460941][T11488] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4221: comm syz.4.2462: Allocating blocks 41-42 which overlap fs metadata [ 298.476668][T11488] loop4: lost filesystem error report for type 5 error -117 [ 298.487281][T11488] Quota error (device loop4): write_blk: dquota write failed [ 298.532055][T11488] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 298.560365][T11488] EXT4-fs error (device loop4): ext4_acquire_dquot:7032: comm syz.4.2462: Failed to acquire dquot type 1 [ 298.605007][T11488] loop4: lost filesystem error report for type 5 error -117 [ 298.624246][T11488] EXT4-fs error (device loop4): mb_free_blocks:2046: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 298.663780][T11488] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.2462: corrupted inode contents [ 298.706546][T11488] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 298.715863][T11488] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.2462: mark_inode_dirty error [ 298.773300][T11488] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 298.773763][T11488] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.2462: corrupted inode contents [ 298.816794][T11508] loop0: detected capacity change from 0 to 4096 [ 298.835779][T11488] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 298.836213][T11488] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.2462: mark_inode_dirty error [ 298.862340][T11508] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 298.884461][T11488] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.2462: corrupted inode contents [ 298.927493][T11488] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 298.949672][T11519] netlink: 'syz.3.2477': attribute type 21 has an invalid length. [ 298.960982][T11488] loop4: lost filesystem error report for type 5 error -117 [ 298.963336][T11488] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.2462: corrupted inode contents [ 299.008988][T11488] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.2462: mark_inode_dirty error [ 299.058892][T11488] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 299.091619][T11488] loop4: lost filesystem error report for type 5 error -117 [ 299.092371][T11488] EXT4-fs (loop4): 1 truncate cleaned up [ 299.145663][T11488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.339916][T11488] EXT4-fs error (device loop4): ext4_acquire_dquot:7032: comm syz.4.2462: Failed to acquire dquot type 1 [ 299.603017][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.845001][T11541] loop4: detected capacity change from 0 to 64 [ 299.965866][T11545] loop0: detected capacity change from 0 to 128 [ 300.036830][T11545] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 300.099641][T11545] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 300.387855][ T9883] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 300.428804][T11551] loop2: detected capacity change from 0 to 4096 [ 300.470785][T11551] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 300.536861][T11551] ntfs3(loop2): ino=19, mi_enum_attr [ 300.553911][T11551] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 300.887619][T11568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.311462][T11584] loop4: detected capacity change from 0 to 128 [ 301.329606][T11584] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 301.383540][T11584] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 301.550165][T11592] loop0: detected capacity change from 0 to 64 [ 301.621439][ T57] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 301.800884][ T6771] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 301.970878][ T6771] usb 6-1: Using ep0 maxpacket: 32 [ 301.997383][ T6771] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.043467][ T6771] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 302.084030][ T6771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.107582][T11609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.118163][ T6771] usb 6-1: Product: syz [ 302.127387][ T6771] usb 6-1: Manufacturer: syz [ 302.150440][ T6771] usb 6-1: SerialNumber: syz [ 302.183826][ T6771] usb 6-1: config 0 descriptor?? [ 302.222072][ T6771] cdc_ether 6-1:0.0: Descriptor too short [ 302.258109][ T6771] usb 6-1: unsupported MDLM descriptors [ 302.514220][ T6771] usb 6-1: USB disconnect, device number 14 [ 302.685514][T11632] loop2: detected capacity change from 0 to 256 [ 302.712328][T11630] loop1: detected capacity change from 0 to 512 [ 302.824307][T11632] FAT-fs (loop2): Directory bread(block 64) failed [ 302.852979][T11632] FAT-fs (loop2): Directory bread(block 65) failed [ 302.878580][T11632] FAT-fs (loop2): Directory bread(block 66) failed [ 302.899830][T11632] FAT-fs (loop2): Directory bread(block 67) failed [ 302.925073][T11632] FAT-fs (loop2): Directory bread(block 68) failed [ 302.949697][T11632] FAT-fs (loop2): Directory bread(block 69) failed [ 302.977686][T11632] FAT-fs (loop2): Directory bread(block 70) failed [ 303.017561][T11632] FAT-fs (loop2): Directory bread(block 71) failed [ 303.042196][T11632] FAT-fs (loop2): Directory bread(block 72) failed [ 303.096649][T11632] FAT-fs (loop2): Directory bread(block 73) failed [ 303.506058][T11648] netlink: set zone limit has 4 unknown bytes [ 304.004440][T11636] loop0: detected capacity change from 0 to 32768 [ 304.062338][T11636] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 304.403960][T11636] XFS (loop0): Ending clean mount [ 304.516451][T11636] XFS (loop0): syz.0.2537 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 304.693145][ T5630] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 304.707401][T11686] __nla_validate_parse: 14 callbacks suppressed [ 304.707442][T11686] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2557'. [ 304.868159][T11690] loop4: detected capacity change from 0 to 256 [ 304.891629][T11685] loop5: detected capacity change from 0 to 4096 [ 304.917628][T11685] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 304.938244][T11690] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 305.008646][T11685] ntfs3(loop5): ino=19, mi_enum_attr [ 305.036591][T11685] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 305.053042][T11690] exFAT-fs (loop4): error, data valid size is invalid(-281474976706560) [ 305.745546][T11714] loop4: detected capacity change from 0 to 64 [ 306.584814][T11738] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2583'. [ 306.648489][T11736] netlink: 'syz.5.2581': attribute type 4 has an invalid length. [ 306.952911][T11754] loop4: detected capacity change from 0 to 256 [ 306.960030][T11750] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4π!FVluc'f`ކ;1 [ 306.991291][T11754] FAT-fs (loop4): Directory bread(block 1285) failed [ 307.018099][T11754] FAT-fs (loop4): Directory bread(block 1286) failed [ 307.040702][T11754] FAT-fs (loop4): Directory bread(block 1287) failed [ 307.073799][T11754] FAT-fs (loop4): Directory bread(block 1288) failed [ 307.102005][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 307.102031][ T30] audit: type=1326 audit(1780988592.258:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.1.2593" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65fd9ce59 code=0x7ffc0000 [ 307.134838][T11754] FAT-fs (loop4): Directory bread(block 1285) failed [ 307.172965][T11754] FAT-fs (loop4): Directory bread(block 1286) failed [ 307.199769][ T30] audit: type=1326 audit(1780988592.288:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.1.2593" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65fd9ce59 code=0x7ffc0000 [ 307.216614][T11754] FAT-fs (loop4): Directory bread(block 1287) failed [ 307.258941][T11754] FAT-fs (loop4): Directory bread(block 1288) failed [ 307.329124][T11754] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 307.358449][ T30] audit: type=1326 audit(1780988592.288:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.1.2593" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65fd9ce59 code=0x7ffc0000 [ 307.468839][ T30] audit: type=1326 audit(1780988592.288:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.1.2593" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65fd9ce59 code=0x7ffc0000 [ 307.624980][ T30] audit: type=1326 audit(1780988592.288:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.1.2593" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fc65fd9ce59 code=0x7ffc0000 [ 307.693179][T11762] loop0: detected capacity change from 0 to 4096 [ 307.747566][T11762] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 307.766887][ T30] audit: type=1326 audit(1780988592.288:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.1.2593" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65fd9ce59 code=0x7ffc0000 [ 307.871767][ T30] audit: type=1326 audit(1780988592.298:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.1.2593" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc65fd9ce59 code=0x7ffc0000 [ 307.936257][T11762] ntfs3(loop0): ino=19, mi_enum_attr [ 307.941727][T11762] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 307.987361][ T30] audit: type=1326 audit(1780988592.298:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.1.2593" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc65fd9ce59 code=0x7ffc0000 [ 308.490457][T11786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.513625][T11790] loop3: detected capacity change from 0 to 512 [ 308.580141][T11793] loop4: detected capacity change from 0 to 64 [ 308.644986][T11790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.751556][T11790] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.005433][T11790] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 309.048073][T11764] loop1: detected capacity change from 0 to 32768 [ 309.073396][T11805] netdevsim netdevsim5: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 309.159015][T11764] ea_get: invalid extended attribute [ 309.206489][T11764] ffff8880559f9da0: 04 00 00 00 .... [ 309.261926][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.281901][ T24] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 309.489210][ T24] usb 1-1: config 8 has an invalid interface number: 137 but max is 0 [ 309.523396][ T24] usb 1-1: config 8 has no interface number 0 [ 309.553553][ T24] usb 1-1: string descriptor 0 read error: -22 [ 309.577456][ T24] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 309.620469][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.735434][ T24] ttusb_dec_send_command: command bulk message failed: error -22 [ 309.789026][ T24] ttusb-dec 1-1:8.137: probe with driver ttusb-dec failed with error -22 [ 310.026430][ T24] usb 1-1: USB disconnect, device number 14 [ 310.255196][T11841] loop5: detected capacity change from 0 to 256 [ 310.373512][T11841] FAT-fs (loop5): Directory bread(block 64) failed [ 310.411747][T11841] FAT-fs (loop5): Directory bread(block 65) failed [ 310.451471][T11841] FAT-fs (loop5): Directory bread(block 66) failed [ 310.469688][T11843] loop2: detected capacity change from 0 to 2048 [ 310.483118][T11841] FAT-fs (loop5): Directory bread(block 67) failed [ 310.507900][T11841] FAT-fs (loop5): Directory bread(block 68) failed [ 310.542860][T11843] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.563182][T11841] FAT-fs (loop5): Directory bread(block 69) failed [ 310.600250][T11841] FAT-fs (loop5): Directory bread(block 70) failed [ 310.630065][T11841] FAT-fs (loop5): Directory bread(block 71) failed [ 310.662957][T11841] FAT-fs (loop5): Directory bread(block 72) failed [ 310.696961][T11841] FAT-fs (loop5): Directory bread(block 73) failed [ 311.399816][T11870] netlink: 'syz.4.2637': attribute type 1 has an invalid length. [ 311.446424][T11870] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2637'. [ 312.348132][T11910] netlink: 'syz.5.2654': attribute type 1 has an invalid length. [ 312.410989][T11910] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2654'. [ 312.530224][T11916] sctp: [Deprecated]: syz.0.2656 (pid 11916) Use of int in max_burst socket option deprecated. [ 312.530224][T11916] Use struct sctp_assoc_value instead [ 312.750816][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 312.910232][T11927] loop2: detected capacity change from 0 to 164 [ 312.934702][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 312.955317][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.987655][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.041223][ T24] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.087662][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 313.118221][ T24] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 313.165355][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.202607][ T24] usb 4-1: Product: syz [ 313.227580][ T24] usb 4-1: Manufacturer: syz [ 313.261818][ T24] usb 4-1: SerialNumber: syz [ 313.318950][ T24] usb 4-1: config 0 descriptor?? [ 313.396730][ T24] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 313.606697][ T24] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 313.640464][ T24] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 313.686580][ T24] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 313.832289][T11906] loop4: detected capacity change from 0 to 32768 [ 313.876622][ T24] usb 4-1: USB disconnect, device number 10 [ 313.894838][T11906] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 313.948916][T11958] loop5: detected capacity change from 0 to 64 [ 314.011458][T11958] hfs: unable to locate alternate MDB [ 314.055056][T11958] hfs: continuing without an alternate MDB [ 314.081513][T11906] XFS (loop4): Ending clean mount [ 314.128208][ T30] audit: type=1800 audit(1780988599.278:50): pid=11958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2672" name="file1" dev="loop5" ino=22 res=0 errno=0 [ 314.205859][T11969] loop1: detected capacity change from 0 to 1024 [ 314.220523][T11969] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 314.266807][ T1012] hfs: new node 0 already hashed? [ 314.292572][ T1012] ------------[ cut here ]------------ [ 314.298563][ T1012] 1 [ 314.298579][ T1012] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create.cold+0x41/0x49, CPU#0: kworker/u8:7/1012 [ 314.304222][T11969] hfsplus: size 32, res 24, name_len 12 [ 314.311866][ T1012] Modules linked in: [ 314.321991][ T1012] CPU: 0 UID: 0 PID: 1012 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 314.331538][ T1012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.342082][ T1012] Workqueue: writeback wb_workfn (flush-7:5) [ 314.348459][ T1012] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 314.355052][ T1012] Code: a5 b4 63 0a e9 b7 59 d1 01 e8 7b 23 e1 00 4c 89 f7 e8 93 b4 63 0a e8 6e 23 e1 00 89 ee 48 c7 c7 40 ea d1 8b e8 20 e1 fa ff 90 <0f> 0b 90 e9 b9 5c d1 01 e8 52 23 e1 00 e8 9d 4d 4d 00 e9 15 5f d1 [ 314.374832][ T1012] RSP: 0018:ffffc90005027020 EFLAGS: 00010282 [ 314.380955][ T1012] RAX: 000000000000001f RBX: ffff888056ea1a00 RCX: 0000000000000000 [ 314.388939][ T1012] RDX: 000000000000001f RSI: ffffffff81e72ba9 RDI: fffff52000a04df5 [ 314.396949][ T1012] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 314.405227][ T1012] R10: 0000000080000000 R11: 0000000000000000 R12: dffffc0000000000 [ 314.413385][ T1012] R13: ffff88807cf50000 R14: ffff88807cf500d8 R15: 0000000000000000 [ 314.421413][ T1012] FS: 0000000000000000(0000) GS:ffff888124387000(0000) knlGS:0000000000000000 [ 314.430368][ T1012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.436999][ T1012] CR2: 0000001b34c20ff8 CR3: 000000003497b000 CR4: 0000000000350ef0 [ 314.445585][ T1012] Call Trace: [ 314.449152][ T1012] [ 314.452220][ T1012] ? _raw_spin_unlock+0x28/0x50 [ 314.457105][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.462893][ T1012] ? hfs_bnode_put+0x208/0x480 [ 314.467725][ T1012] hfs_bmap_alloc+0x5a7/0x6b0 [ 314.472480][ T1012] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 314.477736][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.483430][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.489095][ T1012] ? folio_mark_accessed+0xf3/0x1040 [ 314.494485][ T1012] hfs_btree_inc_height.isra.0+0xff/0x820 [ 314.500285][ T1012] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 314.506684][ T1012] ? do_raw_spin_unlock+0x145/0x1e0 [ 314.511971][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.517632][ T1012] ? _raw_spin_unlock+0x28/0x50 [ 314.522635][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.528304][ T1012] ? hfs_bnode_put+0x208/0x480 [ 314.533141][ T1012] hfs_brec_insert+0x8ba/0xc20 [ 314.537961][ T1012] ? __pfx_hfs_brec_insert+0x10/0x10 [ 314.543788][ T1012] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 314.548865][ T1012] __hfs_ext_write_extent+0x3ef/0x510 [ 314.554673][ T1012] ? hfs_find_init+0x273/0x330 [ 314.559484][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.565245][ T1012] hfs_ext_write_extent+0x1b7/0x200 [ 314.570493][ T1012] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 314.576328][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.582047][ T1012] ? __mpage_writepages+0x1a8/0x210 [ 314.587269][ T1012] ? __pfx___mpage_writepages+0x10/0x10 [ 314.592904][ T1012] hfs_write_inode+0xce/0xab0 [ 314.597605][ T1012] ? __pfx_hfs_write_inode+0x10/0x10 [ 314.602978][ T1012] ? __lock_acquire+0x4a5/0x2630 [ 314.607973][ T1012] ? __writeback_single_inode+0x454/0x1350 [ 314.613857][ T1012] ? __writeback_single_inode+0x454/0x1350 [ 314.619709][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.625436][ T1012] __writeback_single_inode+0xcd4/0x1350 [ 314.631172][ T1012] ? __pfx___writeback_single_inode+0x10/0x10 [ 314.637291][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.643437][ T1012] ? do_raw_spin_unlock+0x145/0x1e0 [ 314.648984][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.654701][ T1012] writeback_sb_inodes+0x766/0x1c60 [ 314.659967][ T1012] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 314.665706][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.671482][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.677149][ T1012] ? rcu_is_watching+0x12/0xc0 [ 314.682557][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.688220][ T1012] ? queue_io+0x287/0x540 [ 314.692708][ T1012] wb_writeback+0x1bf/0xb90 [ 314.697271][ T1012] ? __pfx_wb_writeback+0x10/0x10 [ 314.702398][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.708061][ T1012] ? mark_held_locks+0x40/0x70 [ 314.712899][ T1012] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.718160][ T1012] wb_workfn+0x14f/0xc00 [ 314.722479][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.728150][ T1012] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 314.734074][ T1012] ? __pfx_wb_workfn+0x10/0x10 [ 314.738911][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.745014][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.751003][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.756671][ T1012] ? rcu_is_watching+0x12/0xc0 [ 314.761519][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.767202][ T1012] process_one_work+0xa0e/0x1980 [ 314.772228][ T1012] ? __pfx_process_one_work+0x10/0x10 [ 314.777631][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.783337][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.789007][ T1012] worker_thread+0x5ef/0xe50 [ 314.793683][ T1012] ? __pfx_worker_thread+0x10/0x10 [ 314.798830][ T1012] ? kthread+0x13a/0x450 [ 314.803125][ T1012] ? __pfx_worker_thread+0x10/0x10 [ 314.808264][ T1012] kthread+0x370/0x450 [ 314.812396][ T1012] ? __pfx_kthread+0x10/0x10 [ 314.817012][ T1012] ret_from_fork+0x72b/0xd50 [ 314.821690][ T1012] ? __pfx_ret_from_fork+0x10/0x10 [ 314.826832][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.832566][ T1012] ? __switch_to+0x800/0x1100 [ 314.837283][ T1012] ? __switch_to_asm+0x39/0x70 [ 314.842130][ T1012] ? __pfx_kthread+0x10/0x10 [ 314.846749][ T1012] ret_from_fork_asm+0x1a/0x30 [ 314.852039][ T1012] [ 314.855070][ T1012] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 314.862357][ T1012] CPU: 0 UID: 0 PID: 1012 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 314.871837][ T1012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.881901][ T1012] Workqueue: writeback wb_workfn (flush-7:5) [ 314.887949][ T1012] Call Trace: [ 314.891229][ T1012] [ 314.894165][ T1012] dump_stack_lvl+0x100/0x190 [ 314.898865][ T1012] vpanic+0x552/0x970 [ 314.902864][ T1012] ? __pfx_vpanic+0x10/0x10 [ 314.907399][ T1012] panic+0xd1/0xe0 [ 314.911136][ T1012] ? __pfx_panic+0x10/0x10 [ 314.915585][ T1012] ? check_panic_on_warn+0x1f/0x90 [ 314.920726][ T1012] check_panic_on_warn.cold+0x19/0x34 [ 314.926125][ T1012] ? hfs_bnode_create.cold+0x41/0x49 [ 314.931433][ T1012] __warn.cold+0x191/0x328 [ 314.935876][ T1012] __report_bug+0x296/0x3d0 [ 314.940409][ T1012] ? hfs_bnode_create.cold+0x41/0x49 [ 314.945726][ T1012] ? __pfx___report_bug+0x10/0x10 [ 314.950788][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.956450][ T1012] ? irq_work_queue+0xce/0x100 [ 314.961246][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.966911][ T1012] ? __wake_up_klogd+0xe2/0x140 [ 314.971795][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.977453][ T1012] ? vprintk_emit+0x1c9/0x6b0 [ 314.982183][ T1012] ? __pfx_vprintk_emit+0x10/0x10 [ 314.987249][ T1012] ? hfs_bnode_create.cold+0x41/0x49 [ 314.992561][ T1012] report_bug+0xb2/0x220 [ 314.996837][ T1012] ? hfs_bnode_create.cold+0x41/0x49 [ 315.002149][ T1012] handle_bug+0x16a/0x2a0 [ 315.006495][ T1012] exc_invalid_op+0x17/0x50 [ 315.011019][ T1012] asm_exc_invalid_op+0x1a/0x20 [ 315.015889][ T1012] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 315.021810][ T1012] Code: a5 b4 63 0a e9 b7 59 d1 01 e8 7b 23 e1 00 4c 89 f7 e8 93 b4 63 0a e8 6e 23 e1 00 89 ee 48 c7 c7 40 ea d1 8b e8 20 e1 fa ff 90 <0f> 0b 90 e9 b9 5c d1 01 e8 52 23 e1 00 e8 9d 4d 4d 00 e9 15 5f d1 [ 315.041434][ T1012] RSP: 0018:ffffc90005027020 EFLAGS: 00010282 [ 315.047506][ T1012] RAX: 000000000000001f RBX: ffff888056ea1a00 RCX: 0000000000000000 [ 315.055480][ T1012] RDX: 000000000000001f RSI: ffffffff81e72ba9 RDI: fffff52000a04df5 [ 315.063458][ T1012] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 315.071425][ T1012] R10: 0000000080000000 R11: 0000000000000000 R12: dffffc0000000000 [ 315.079395][ T1012] R13: ffff88807cf50000 R14: ffff88807cf500d8 R15: 0000000000000000 [ 315.087379][ T1012] ? vprintk_emit+0x1c9/0x6b0 [ 315.092091][ T1012] ? _raw_spin_unlock+0x28/0x50 [ 315.096960][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.102604][ T1012] ? hfs_bnode_put+0x208/0x480 [ 315.107393][ T1012] hfs_bmap_alloc+0x5a7/0x6b0 [ 315.112099][ T1012] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 315.117319][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.122967][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.128610][ T1012] ? folio_mark_accessed+0xf3/0x1040 [ 315.133920][ T1012] hfs_btree_inc_height.isra.0+0xff/0x820 [ 315.139664][ T1012] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 315.146012][ T1012] ? do_raw_spin_unlock+0x145/0x1e0 [ 315.151229][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.156874][ T1012] ? _raw_spin_unlock+0x28/0x50 [ 315.161742][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.167389][ T1012] ? hfs_bnode_put+0x208/0x480 [ 315.172175][ T1012] hfs_brec_insert+0x8ba/0xc20 [ 315.176974][ T1012] ? __pfx_hfs_brec_insert+0x10/0x10 [ 315.182278][ T1012] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 315.187331][ T1012] __hfs_ext_write_extent+0x3ef/0x510 [ 315.192728][ T1012] ? hfs_find_init+0x273/0x330 [ 315.197501][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.203156][ T1012] hfs_ext_write_extent+0x1b7/0x200 [ 315.208380][ T1012] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 315.214130][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.219777][ T1012] ? __mpage_writepages+0x1a8/0x210 [ 315.224981][ T1012] ? __pfx___mpage_writepages+0x10/0x10 [ 315.230541][ T1012] hfs_write_inode+0xce/0xab0 [ 315.235234][ T1012] ? __pfx_hfs_write_inode+0x10/0x10 [ 315.240520][ T1012] ? __lock_acquire+0x4a5/0x2630 [ 315.245510][ T1012] ? __writeback_single_inode+0x454/0x1350 [ 315.251348][ T1012] ? __writeback_single_inode+0x454/0x1350 [ 315.257184][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.262842][ T1012] __writeback_single_inode+0xcd4/0x1350 [ 315.268510][ T1012] ? __pfx___writeback_single_inode+0x10/0x10 [ 315.274605][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.280248][ T1012] ? do_raw_spin_unlock+0x145/0x1e0 [ 315.285464][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.291120][ T1012] writeback_sb_inodes+0x766/0x1c60 [ 315.296360][ T1012] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 315.302019][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.307716][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.313358][ T1012] ? rcu_is_watching+0x12/0xc0 [ 315.318141][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.323785][ T1012] ? queue_io+0x287/0x540 [ 315.328135][ T1012] wb_writeback+0x1bf/0xb90 [ 315.332675][ T1012] ? __pfx_wb_writeback+0x10/0x10 [ 315.337733][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.343381][ T1012] ? mark_held_locks+0x40/0x70 [ 315.348153][ T1012] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.353372][ T1012] wb_workfn+0x14f/0xc00 [ 315.357647][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.363289][ T1012] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 315.369120][ T1012] ? __pfx_wb_workfn+0x10/0x10 [ 315.373912][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.379560][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.385208][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.390851][ T1012] ? rcu_is_watching+0x12/0xc0 [ 315.395658][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.401334][ T1012] process_one_work+0xa0e/0x1980 [ 315.406307][ T1012] ? __pfx_process_one_work+0x10/0x10 [ 315.411686][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.417344][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.422996][ T1012] worker_thread+0x5ef/0xe50 [ 315.427611][ T1012] ? __pfx_worker_thread+0x10/0x10 [ 315.432736][ T1012] ? kthread+0x13a/0x450 [ 315.436984][ T1012] ? __pfx_worker_thread+0x10/0x10 [ 315.442105][ T1012] kthread+0x370/0x450 [ 315.446179][ T1012] ? __pfx_kthread+0x10/0x10 [ 315.450778][ T1012] ret_from_fork+0x72b/0xd50 [ 315.455381][ T1012] ? __pfx_ret_from_fork+0x10/0x10 [ 315.460503][ T1012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.466160][ T1012] ? __switch_to+0x800/0x1100 [ 315.470883][ T1012] ? __switch_to_asm+0x39/0x70 [ 315.475666][ T1012] ? __pfx_kthread+0x10/0x10 [ 315.480263][ T1012] ret_from_fork_asm+0x1a/0x30 [ 315.485066][ T1012] [ 315.488301][ T1012] Kernel Offset: disabled [ 315.492619][ T1012] Rebooting in 86400 seconds..