Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. executing program [ 430.303480][ T3536] loop0: detected capacity change from 0 to 128 [ 430.396814][ T3536] attempt to access beyond end of device [ 430.396814][ T3536] loop0: rw=0, want=6491538, limit=128 [ 430.408572][ T3536] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 430.417531][ T3536] attempt to access beyond end of device [ 430.417531][ T3536] loop0: rw=0, want=17666808, limit=128 [ 430.428774][ T3536] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 430.437294][ T3536] attempt to access beyond end of device [ 430.437294][ T3536] loop0: rw=0, want=26539620, limit=128 [ 430.448513][ T3536] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 430.457100][ T3536] attempt to access beyond end of device [ 430.457100][ T3536] loop0: rw=0, want=16147214, limit=128 [ 430.468287][ T3536] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 430.477693][ T3536] attempt to access beyond end of device [ 430.477693][ T3536] loop0: rw=0, want=6491544, limit=128 [ 430.488722][ T3536] Buffer I/O error on dev loop0, logical block 3245771, async page read [ 430.497152][ T3536] attempt to access beyond end of device [ 430.497152][ T3536] loop0: rw=0, want=17668344, limit=128 [ 430.508264][ T3536] Buffer I/O error on dev loop0, logical block 8834171, async page read [ 430.516660][ T3536] attempt to access beyond end of device [ 430.516660][ T3536] loop0: rw=0, want=26932836, limit=128 [ 430.527751][ T3536] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 430.536283][ T3536] attempt to access beyond end of device [ 430.536283][ T3536] loop0: rw=0, want=16147214, limit=128 [ 430.547327][ T3536] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 430.555831][ T3536] attempt to access beyond end of device [ 430.555831][ T3536] loop0: rw=0, want=6491550, limit=128 [ 430.566776][ T3536] Buffer I/O error on dev loop0, logical block 3245774, async page read [ 430.575125][ T3536] attempt to access beyond end of device [ 430.575125][ T3536] loop0: rw=0, want=17669880, limit=128 [ 430.586147][ T3536] Buffer I/O error on dev loop0, logical block 8834939, async page read [ 432.332873][ T1068] Bluetooth: hci0: command 0x0409 tx timeout [ 434.412246][ T1068] Bluetooth: hci0: command 0x041b tx timeout [ 436.492269][ T1068] Bluetooth: hci0: command 0x040f tx timeout [ 438.572232][ T1068] Bluetooth: hci0: command 0x0419 tx timeout [ 462.820739][ T3536] unable to read i-node block [ 462.825541][ T3536] attempt to access beyond end of device [ 462.825541][ T3536] loop0: rw=0, want=6491538, limit=128 [ 462.836578][ T3536] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 462.844963][ T3536] attempt to access beyond end of device [ 462.844963][ T3536] loop0: rw=0, want=17666808, limit=128 [ 462.855990][ T3536] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 462.864364][ T3536] attempt to access beyond end of device [ 462.864364][ T3536] loop0: rw=0, want=26539620, limit=128 [ 462.875399][ T3536] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 462.883840][ T3536] attempt to access beyond end of device [ 462.883840][ T3536] loop0: rw=0, want=16147214, limit=128 [ 462.894943][ T3536] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 462.903403][ T3536] sysv_free_inode: unable to read inode block on device loop0 [ 476.915212][ T3529] sysv_free_block: flc_count > flc_size [ 476.920889][ T3529] sysv_free_block: flc_count > flc_size [ 476.926446][ T3529] sysv_free_block: flc_count > flc_size [ 476.931985][ T3529] sysv_free_block: flc_count > flc_size [ 476.937572][ T3529] sysv_free_block: flc_count > flc_size [ 476.943140][ T3529] sysv_free_block: flc_count > flc_size [ 476.948675][ T3529] sysv_free_block: flc_count > flc_size [ 476.954256][ T3529] sysv_free_block: flc_count > flc_size [ 476.959797][ T3529] sysv_free_block: flc_count > flc_size [ 476.965361][ T3529] sysv_free_block: flc_count > flc_size [ 476.970983][ T3529] sysv_free_inode: inode 0,1,2 or nonexistent inode executing program [ 477.356257][ T3545] loop0: detected capacity change from 0 to 128 [ 477.426380][ T3545] attempt to access beyond end of device [ 477.426380][ T3545] loop0: rw=0, want=6491538, limit=128 [ 477.437579][ T3545] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 477.446061][ T3545] attempt to access beyond end of device [ 477.446061][ T3545] loop0: rw=0, want=17666808, limit=128 [ 477.457137][ T3545] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 477.465582][ T3545] attempt to access beyond end of device [ 477.465582][ T3545] loop0: rw=0, want=26539620, limit=128 [ 477.476727][ T3545] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 477.485185][ T3545] attempt to access beyond end of device [ 477.485185][ T3545] loop0: rw=0, want=16147214, limit=128 [ 477.496226][ T3545] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 477.504665][ T3545] attempt to access beyond end of device [ 477.504665][ T3545] loop0: rw=0, want=6491544, limit=128 [ 477.515612][ T3545] Buffer I/O error on dev loop0, logical block 3245771, async page read [ 477.523985][ T3545] attempt to access beyond end of device [ 477.523985][ T3545] loop0: rw=0, want=17668344, limit=128 [ 477.535040][ T3545] Buffer I/O error on dev loop0, logical block 8834171, async page read [ 477.543441][ T3545] attempt to access beyond end of device [ 477.543441][ T3545] loop0: rw=0, want=26932836, limit=128 [ 477.554560][ T3545] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 477.563007][ T3545] attempt to access beyond end of device [ 477.563007][ T3545] loop0: rw=0, want=16147214, limit=128 [ 477.574039][ T3545] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 477.582608][ T3545] attempt to access beyond end of device [ 477.582608][ T3545] loop0: rw=0, want=6491550, limit=128 [ 477.593559][ T3545] Buffer I/O error on dev loop0, logical block 3245774, async page read [ 477.601904][ T3545] attempt to access beyond end of device [ 477.601904][ T3545] loop0: rw=0, want=17669880, limit=128 [ 477.612995][ T3545] Buffer I/O error on dev loop0, logical block 8834939, async page read [ 502.921747][ T254] ODEBUG: Out of memory. ODEBUG disabled [ 510.803078][ T3545] attempt to access beyond end of device [ 510.803078][ T3545] loop0: rw=0, want=6491538, limit=128 [ 510.814097][ T3545] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 510.822508][ T3545] attempt to access beyond end of device [ 510.822508][ T3545] loop0: rw=0, want=17666808, limit=128 [ 510.833551][ T3545] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 510.841875][ T3545] attempt to access beyond end of device [ 510.841875][ T3545] loop0: rw=0, want=26539620, limit=128 [ 510.852911][ T3545] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 510.861337][ T3545] attempt to access beyond end of device [ 510.861337][ T3545] loop0: rw=0, want=16147214, limit=128 [ 510.872380][ T3545] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 521.624036][ T3529] sysv_free_block: flc_count > flc_size [ 521.629602][ T3529] sysv_free_block: flc_count > flc_size [ 521.635345][ T3529] sysv_free_block: flc_count > flc_size [ 521.640890][ T3529] sysv_free_block: flc_count > flc_size [ 521.647256][ T3529] sysv_free_block: flc_count > flc_size [ 521.652825][ T3529] sysv_free_block: flc_count > flc_size [ 521.658364][ T3529] sysv_free_block: flc_count > flc_size [ 521.663953][ T3529] sysv_free_block: flc_count > flc_size [ 521.669495][ T3529] sysv_free_block: flc_count > flc_size [ 521.675061][ T3529] sysv_free_block: flc_count > flc_size [ 521.680659][ T3529] sysv_free_inode: inode 0,1,2 or nonexistent inode executing program [ 522.218307][ T3547] loop0: detected capacity change from 0 to 128 [ 522.228006][ T3547] attempt to access beyond end of device [ 522.228006][ T3547] loop0: rw=0, want=6491538, limit=128 [ 522.239088][ T3547] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 522.247498][ T3547] attempt to access beyond end of device [ 522.247498][ T3547] loop0: rw=0, want=17666808, limit=128 [ 522.258578][ T3547] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 522.266986][ T3547] attempt to access beyond end of device [ 522.266986][ T3547] loop0: rw=0, want=26539620, limit=128 [ 522.278045][ T3547] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 522.286500][ T3547] attempt to access beyond end of device [ 522.286500][ T3547] loop0: rw=0, want=16147214, limit=128 [ 522.297531][ T3547] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 522.305955][ T3547] attempt to access beyond end of device [ 522.305955][ T3547] loop0: rw=0, want=6491544, limit=128 [ 522.316899][ T3547] Buffer I/O error on dev loop0, logical block 3245771, async page read [ 522.325269][ T3547] attempt to access beyond end of device [ 522.325269][ T3547] loop0: rw=0, want=17668344, limit=128 [ 522.336300][ T3547] Buffer I/O error on dev loop0, logical block 8834171, async page read [ 522.344676][ T3547] attempt to access beyond end of device [ 522.344676][ T3547] loop0: rw=0, want=26932836, limit=128 [ 522.355740][ T3547] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 522.364297][ T3547] attempt to access beyond end of device [ 522.364297][ T3547] loop0: rw=0, want=16147214, limit=128 [ 522.375330][ T3547] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 522.383840][ T3547] attempt to access beyond end of device [ 522.383840][ T3547] loop0: rw=0, want=6491550, limit=128 [ 522.394805][ T3547] Buffer I/O error on dev loop0, logical block 3245774, async page read [ 522.403177][ T3547] attempt to access beyond end of device [ 522.403177][ T3547] loop0: rw=0, want=17669880, limit=128 [ 522.414208][ T3547] Buffer I/O error on dev loop0, logical block 8834939, async page read [ 554.502151][ T3544] Bluetooth: hci0: command 0x0406 tx timeout [ 555.157814][ T3547] attempt to access beyond end of device [ 555.157814][ T3547] loop0: rw=0, want=6491538, limit=128 [ 555.168834][ T3547] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 555.177230][ T3547] attempt to access beyond end of device [ 555.177230][ T3547] loop0: rw=0, want=17666808, limit=128 [ 555.188295][ T3547] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 555.196693][ T3547] attempt to access beyond end of device [ 555.196693][ T3547] loop0: rw=0, want=26539620, limit=128 [ 555.207745][ T3547] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 555.216229][ T3547] attempt to access beyond end of device [ 555.216229][ T3547] loop0: rw=0, want=16147214, limit=128 [ 555.227299][ T3547] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 566.071194][ T3529] sysv_free_block: flc_count > flc_size [ 566.076791][ T3529] sysv_free_block: flc_count > flc_size [ 566.082349][ T3529] sysv_free_block: flc_count > flc_size [ 566.087888][ T3529] sysv_free_block: flc_count > flc_size [ 566.093471][ T3529] sysv_free_block: flc_count > flc_size [ 566.099009][ T3529] sysv_free_block: flc_count > flc_size [ 566.104589][ T3529] sysv_free_block: flc_count > flc_size [ 566.110129][ T3529] sysv_free_block: flc_count > flc_size [ 566.115710][ T3529] sysv_free_block: flc_count > flc_size [ 566.121250][ T3529] sysv_free_block: flc_count > flc_size [ 566.126878][ T3529] sysv_free_inode: inode 0,1,2 or nonexistent inode executing program [ 566.676055][ T3549] loop0: detected capacity change from 0 to 128 [ 566.764630][ T3549] attempt to access beyond end of device [ 566.764630][ T3549] loop0: rw=0, want=6491538, limit=128 [ 566.778458][ T3549] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 566.787302][ T3549] attempt to access beyond end of device [ 566.787302][ T3549] loop0: rw=0, want=17666808, limit=128 [ 566.798827][ T3549] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 566.807440][ T3549] attempt to access beyond end of device [ 566.807440][ T3549] loop0: rw=0, want=26539620, limit=128 [ 566.818654][ T3549] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 566.827229][ T3549] attempt to access beyond end of device [ 566.827229][ T3549] loop0: rw=0, want=16147214, limit=128 [ 566.838422][ T3549] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 566.846953][ T3549] attempt to access beyond end of device [ 566.846953][ T3549] loop0: rw=0, want=6491544, limit=128 [ 566.858099][ T3549] Buffer I/O error on dev loop0, logical block 3245771, async page read [ 566.866583][ T3549] attempt to access beyond end of device [ 566.866583][ T3549] loop0: rw=0, want=17668344, limit=128 [ 566.877803][ T3549] Buffer I/O error on dev loop0, logical block 8834171, async page read [ 566.886288][ T3549] attempt to access beyond end of device [ 566.886288][ T3549] loop0: rw=0, want=26932836, limit=128 [ 566.897504][ T3549] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 566.906018][ T3549] attempt to access beyond end of device [ 566.906018][ T3549] loop0: rw=0, want=16147214, limit=128 [ 566.917065][ T3549] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 566.925602][ T3549] attempt to access beyond end of device [ 566.925602][ T3549] loop0: rw=0, want=6491550, limit=128 [ 566.936540][ T3549] Buffer I/O error on dev loop0, logical block 3245774, async page read [ 566.944902][ T3549] attempt to access beyond end of device [ 566.944902][ T3549] loop0: rw=0, want=17669880, limit=128 [ 566.955933][ T3549] Buffer I/O error on dev loop0, logical block 8834939, async page read [ 599.520934][ T3549] attempt to access beyond end of device [ 599.520934][ T3549] loop0: rw=0, want=6491538, limit=128 [ 599.531943][ T3549] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 599.540364][ T3549] attempt to access beyond end of device [ 599.540364][ T3549] loop0: rw=0, want=17666808, limit=128 [ 599.551402][ T3549] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 599.559814][ T3549] attempt to access beyond end of device [ 599.559814][ T3549] loop0: rw=0, want=26539620, limit=128 [ 599.570862][ T3549] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 599.579340][ T3549] attempt to access beyond end of device [ 599.579340][ T3549] loop0: rw=0, want=16147214, limit=128 [ 599.590386][ T3549] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 610.263172][ T3529] sysv_free_block: flc_count > flc_size [ 610.268736][ T3529] sysv_free_block: flc_count > flc_size [ 610.282133][ T3529] sysv_free_block: flc_count > flc_size [ 610.287685][ T3529] sysv_free_block: flc_count > flc_size [ 610.312510][ T3529] sysv_free_block: flc_count > flc_size [ 610.318063][ T3529] sysv_free_block: flc_count > flc_size [ 610.323631][ T3529] sysv_free_block: flc_count > flc_size [ 610.329167][ T3529] sysv_free_block: flc_count > flc_size [ 610.334745][ T3529] sysv_free_block: flc_count > flc_size [ 610.340283][ T3529] sysv_free_block: flc_count > flc_size [ 610.345900][ T3529] sysv_free_inode: inode 0,1,2 or nonexistent inode executing program [ 610.876798][ T3557] loop0: detected capacity change from 0 to 128 [ 610.924972][ T3557] attempt to access beyond end of device [ 610.924972][ T3557] loop0: rw=0, want=6491538, limit=128 [ 610.936057][ T3557] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 610.944953][ T3557] attempt to access beyond end of device [ 610.944953][ T3557] loop0: rw=0, want=17666808, limit=128 [ 610.956414][ T3557] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 610.964977][ T3557] attempt to access beyond end of device [ 610.964977][ T3557] loop0: rw=0, want=26539620, limit=128 [ 610.976194][ T3557] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 610.984729][ T3557] attempt to access beyond end of device [ 610.984729][ T3557] loop0: rw=0, want=16147214, limit=128 [ 610.995926][ T3557] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 611.004369][ T3557] attempt to access beyond end of device [ 611.004369][ T3557] loop0: rw=0, want=6491544, limit=128 [ 611.015332][ T3557] Buffer I/O error on dev loop0, logical block 3245771, async page read [ 611.023700][ T3557] attempt to access beyond end of device [ 611.023700][ T3557] loop0: rw=0, want=17668344, limit=128 [ 611.034732][ T3557] Buffer I/O error on dev loop0, logical block 8834171, async page read [ 611.043107][ T3557] attempt to access beyond end of device [ 611.043107][ T3557] loop0: rw=0, want=26932836, limit=128 [ 611.054210][ T3557] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 611.062658][ T3557] attempt to access beyond end of device [ 611.062658][ T3557] loop0: rw=0, want=16147214, limit=128 [ 611.073698][ T3557] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 611.082257][ T3557] attempt to access beyond end of device [ 611.082257][ T3557] loop0: rw=0, want=6491550, limit=128 [ 611.093214][ T3557] Buffer I/O error on dev loop0, logical block 3245774, async page read [ 611.101538][ T3557] attempt to access beyond end of device [ 611.101538][ T3557] loop0: rw=0, want=17669880, limit=128 [ 611.112575][ T3557] Buffer I/O error on dev loop0, logical block 8834939, async page read [ 643.851074][ T3557] attempt to access beyond end of device [ 643.851074][ T3557] loop0: rw=0, want=6491538, limit=128 [ 643.862077][ T3557] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 643.870407][ T3557] attempt to access beyond end of device [ 643.870407][ T3557] loop0: rw=0, want=17666808, limit=128 [ 643.881434][ T3557] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 643.889819][ T3557] attempt to access beyond end of device [ 643.889819][ T3557] loop0: rw=0, want=26539620, limit=128 [ 643.900849][ T3557] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 643.909298][ T3557] attempt to access beyond end of device [ 643.909298][ T3557] loop0: rw=0, want=16147214, limit=128 [ 643.920333][ T3557] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 654.619967][ T3529] sysv_free_block: flc_count > flc_size [ 654.625561][ T3529] sysv_free_block: flc_count > flc_size [ 654.631084][ T3529] sysv_free_block: flc_count > flc_size [ 654.636752][ T3529] sysv_free_block: flc_count > flc_size [ 654.642332][ T3529] sysv_free_block: flc_count > flc_size [ 654.647872][ T3529] sysv_free_block: flc_count > flc_size [ 654.653546][ T3529] sysv_free_block: flc_count > flc_size [ 654.659088][ T3529] sysv_free_block: flc_count > flc_size [ 654.664656][ T3529] sysv_free_block: flc_count > flc_size [ 654.670197][ T3529] sysv_free_block: flc_count > flc_size [ 654.675833][ T3529] sysv_free_inode: inode 0,1,2 or nonexistent inode executing program [ 655.229321][ T3559] loop0: detected capacity change from 0 to 128 [ 655.242851][ T3559] attempt to access beyond end of device [ 655.242851][ T3559] loop0: rw=0, want=6491538, limit=128 [ 655.254014][ T3559] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 655.262756][ T3559] attempt to access beyond end of device [ 655.262756][ T3559] loop0: rw=0, want=17666808, limit=128 [ 655.273989][ T3559] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 655.282518][ T3559] attempt to access beyond end of device [ 655.282518][ T3559] loop0: rw=0, want=26539620, limit=128 [ 655.293774][ T3559] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 655.302489][ T3559] attempt to access beyond end of device [ 655.302489][ T3559] loop0: rw=0, want=16147214, limit=128 [ 655.313627][ T3559] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 655.322138][ T3559] attempt to access beyond end of device [ 655.322138][ T3559] loop0: rw=0, want=6491544, limit=128 [ 655.333134][ T3559] Buffer I/O error on dev loop0, logical block 3245771, async page read [ 655.341468][ T3559] attempt to access beyond end of device [ 655.341468][ T3559] loop0: rw=0, want=17668344, limit=128 [ 655.352782][ T3559] Buffer I/O error on dev loop0, logical block 8834171, async page read [ 655.361212][ T3559] attempt to access beyond end of device [ 655.361212][ T3559] loop0: rw=0, want=26932836, limit=128 [ 655.372464][ T3559] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 655.380878][ T3559] attempt to access beyond end of device [ 655.380878][ T3559] loop0: rw=0, want=16147214, limit=128 [ 655.392094][ T3559] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 655.400608][ T3559] attempt to access beyond end of device [ 655.400608][ T3559] loop0: rw=0, want=6491550, limit=128 [ 655.411693][ T3559] Buffer I/O error on dev loop0, logical block 3245774, async page read [ 655.420080][ T3559] attempt to access beyond end of device [ 655.420080][ T3559] loop0: rw=0, want=17669880, limit=128 [ 655.431158][ T3559] Buffer I/O error on dev loop0, logical block 8834939, async page read [ 688.260397][ T3559] ================================================================== [ 688.268766][ T3559] BUG: KASAN: slab-out-of-bounds in sysv_new_inode+0x1062/0x11f0 [ 688.276590][ T3559] Read of size 2 at addr ffff88801e72c1ce by task syz-executor810/3559 [ 688.284826][ T3559] [ 688.287144][ T3559] CPU: 0 PID: 3559 Comm: syz-executor810 Not tainted 5.15.158-syzkaller #0 [ 688.295704][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 688.305735][ T3559] Call Trace: [ 688.308994][ T3559] [ 688.311903][ T3559] dump_stack_lvl+0x1e3/0x2d0 [ 688.316603][ T3559] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 688.322213][ T3559] ? _printk+0xd1/0x120 [ 688.326387][ T3559] ? __wake_up_klogd+0xcc/0x100 [ 688.331226][ T3559] ? panic+0x860/0x860 [ 688.335270][ T3559] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 688.340748][ T3559] print_address_description+0x63/0x3b0 [ 688.346296][ T3559] ? sysv_new_inode+0x1062/0x11f0 [ 688.351317][ T3559] kasan_report+0x16b/0x1c0 [ 688.355803][ T3559] ? sysv_new_inode+0x1062/0x11f0 [ 688.360808][ T3559] sysv_new_inode+0x1062/0x11f0 [ 688.365645][ T3559] ? sysv_free_inode+0x840/0x840 [ 688.370574][ T3559] sysv_mknod+0x4a/0xe0 [ 688.374706][ T3559] ? sysv_lookup+0xe0/0xe0 [ 688.379101][ T3559] path_openat+0x130a/0x2f20 [ 688.383742][ T3559] ? do_filp_open+0x460/0x460 [ 688.388427][ T3559] do_filp_open+0x21c/0x460 [ 688.392909][ T3559] ? vfs_tmpfile+0x2e0/0x2e0 [ 688.397488][ T3559] ? _raw_spin_unlock+0x24/0x40 [ 688.402316][ T3559] ? alloc_fd+0x594/0x630 [ 688.406635][ T3559] do_sys_openat2+0x13b/0x500 [ 688.411287][ T3559] ? read_lock_is_recursive+0x10/0x10 [ 688.416655][ T3559] ? do_sys_open+0x220/0x220 [ 688.421231][ T3559] __x64_sys_openat+0x243/0x290 [ 688.426058][ T3559] ? __ia32_sys_open+0x270/0x270 [ 688.430969][ T3559] ? syscall_enter_from_user_mode+0x2e/0x240 [ 688.436928][ T3559] ? lockdep_hardirqs_on+0x94/0x130 [ 688.442104][ T3559] ? syscall_enter_from_user_mode+0x2e/0x240 [ 688.448079][ T3559] do_syscall_64+0x3b/0xb0 [ 688.452488][ T3559] ? clear_bhb_loop+0x15/0x70 [ 688.457164][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 688.463032][ T3559] RIP: 0033:0x7f8696cde1d9 [ 688.467428][ T3559] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 688.487009][ T3559] RSP: 002b:00007ffe6f992b48 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 688.495401][ T3559] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f8696cde1d9 [ 688.503350][ T3559] RDX: 0000000000002c41 RSI: 0000000020000040 RDI: 00000000ffffff9c [ 688.511295][ T3559] RBP: 0000000000000004 R08: 00ffffffffffffff R09: 0000000001208000 [ 688.519240][ T3559] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6f992b90 [ 688.527187][ T3559] R13: 00007ffe6f992bd0 R14: 0000000000010000 R15: 0000000000000003 [ 688.535144][ T3559] [ 688.538142][ T3559] [ 688.540439][ T3559] Allocated by task 1: [ 688.544475][ T3559] __kasan_slab_alloc+0x8e/0xc0 [ 688.549300][ T3559] slab_post_alloc_hook+0x53/0x380 [ 688.554438][ T3559] kmem_cache_alloc+0xf3/0x280 [ 688.559177][ T3559] __kernfs_new_node+0xdb/0x750 [ 688.564009][ T3559] kernfs_new_node+0x136/0x230 [ 688.568744][ T3559] __kernfs_create_file+0x45/0x2e0 [ 688.573866][ T3559] sysfs_add_file_mode_ns+0x308/0x3e0 [ 688.579212][ T3559] internal_create_group+0x573/0xf00 [ 688.584469][ T3559] sysfs_create_groups+0x52/0x110 [ 688.589471][ T3559] device_add_attrs+0x13c/0x470 [ 688.594339][ T3559] device_add+0x63e/0xfd0 [ 688.598643][ T3559] usb_new_device+0xc17/0x18e0 [ 688.603403][ T3559] register_root_hub+0x25f/0x540 [ 688.608311][ T3559] usb_add_hcd+0xc4e/0x1250 [ 688.612790][ T3559] dummy_hcd_probe+0x154/0x2a0 [ 688.617557][ T3559] platform_probe+0x131/0x1b0 [ 688.622224][ T3559] really_probe+0x24e/0xb60 [ 688.626703][ T3559] __driver_probe_device+0x1a2/0x3d0 [ 688.631958][ T3559] driver_probe_device+0x50/0x420 [ 688.636953][ T3559] __device_attach_driver+0x2b9/0x500 [ 688.642297][ T3559] bus_for_each_drv+0x183/0x200 [ 688.647120][ T3559] __device_attach+0x359/0x570 [ 688.651852][ T3559] bus_probe_device+0xba/0x1e0 [ 688.656587][ T3559] device_add+0xb48/0xfd0 [ 688.660891][ T3559] platform_device_add+0x46e/0x7d0 [ 688.665978][ T3559] init+0x83b/0x1070 [ 688.669881][ T3559] do_one_initcall+0x22b/0x7a0 [ 688.674624][ T3559] do_initcall_level+0x157/0x210 [ 688.679541][ T3559] do_initcalls+0x49/0x90 [ 688.683842][ T3559] kernel_init_freeable+0x425/0x5c0 [ 688.689012][ T3559] kernel_init+0x19/0x290 [ 688.693345][ T3559] ret_from_fork+0x1f/0x30 [ 688.697736][ T3559] [ 688.700036][ T3559] The buggy address belongs to the object at ffff88801e72c0e8 [ 688.700036][ T3559] which belongs to the cache kernfs_node_cache of size 168 [ 688.714581][ T3559] The buggy address is located 62 bytes to the right of [ 688.714581][ T3559] 168-byte region [ffff88801e72c0e8, ffff88801e72c190) [ 688.728262][ T3559] The buggy address belongs to the page: [ 688.733864][ T3559] page:ffffea000079cb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e72c [ 688.743984][ T3559] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 688.751504][ T3559] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888011decb40 [ 688.760060][ T3559] raw: 0000000000000000 0000000000110011 00000001ffffffff 0000000000000000 [ 688.768617][ T3559] page dumped because: kasan: bad access detected [ 688.775002][ T3559] page_owner tracks the page as allocated [ 688.780686][ T3559] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 6926308692, free_ts 6809088710 [ 688.796281][ T3559] get_page_from_freelist+0x322a/0x33c0 [ 688.801852][ T3559] __alloc_pages+0x272/0x700 [ 688.806432][ T3559] alloc_page_interleave+0x22/0x1c0 [ 688.811606][ T3559] new_slab+0xbb/0x4b0 [ 688.815662][ T3559] ___slab_alloc+0x6f6/0xe10 [ 688.820228][ T3559] kmem_cache_alloc+0x18e/0x280 [ 688.825051][ T3559] __kernfs_new_node+0xdb/0x750 [ 688.829875][ T3559] kernfs_new_node+0x136/0x230 [ 688.834609][ T3559] __kernfs_create_file+0x45/0x2e0 [ 688.839710][ T3559] sysfs_add_file_mode_ns+0x308/0x3e0 [ 688.845054][ T3559] internal_create_group+0x573/0xf00 [ 688.850312][ T3559] sysfs_create_groups+0x52/0x110 [ 688.855308][ T3559] device_add_attrs+0x13c/0x470 [ 688.860131][ T3559] device_add+0x63e/0xfd0 [ 688.864431][ T3559] usb_new_device+0xc17/0x18e0 [ 688.869167][ T3559] register_root_hub+0x25f/0x540 [ 688.874077][ T3559] page last free stack trace: [ 688.878718][ T3559] free_unref_page_prepare+0xc34/0xcf0 [ 688.884148][ T3559] free_unref_page_list+0x1f7/0x8e0 [ 688.889320][ T3559] release_pages+0x1bb9/0x1f40 [ 688.894097][ T3559] tlb_finish_mmu+0x177/0x320 [ 688.898748][ T3559] exit_mmap+0x3cd/0x670 [ 688.902962][ T3559] __mmput+0x112/0x3b0 [ 688.907028][ T3559] free_bprm+0x135/0x2f0 [ 688.911259][ T3559] kernel_execve+0x3bd/0x9b0 [ 688.915822][ T3559] call_usermodehelper_exec_async+0x22f/0x370 [ 688.921885][ T3559] ret_from_fork+0x1f/0x30 [ 688.926276][ T3559] [ 688.928574][ T3559] Memory state around the buggy address: [ 688.934177][ T3559] ffff88801e72c080: 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 00 [ 688.942212][ T3559] ffff88801e72c100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 688.950262][ T3559] >ffff88801e72c180: 00 00 fc fc fc fc fc fc fc fc 00 00 00 00 00 00 [ 688.958293][ T3559] ^ [ 688.964680][ T3559] ffff88801e72c200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 688.972714][ T3559] ffff88801e72c280: fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 [ 688.980746][ T3559] ================================================================== [ 688.988777][ T3559] Disabling lock debugging due to kernel taint [ 688.995054][ T3559] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 689.002240][ T3559] CPU: 0 PID: 3559 Comm: syz-executor810 Tainted: G B 5.15.158-syzkaller #0 [ 689.012207][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 689.022237][ T3559] Call Trace: [ 689.025492][ T3559] [ 689.028407][ T3559] dump_stack_lvl+0x1e3/0x2d0 [ 689.033070][ T3559] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 689.038674][ T3559] ? panic+0x860/0x860 [ 689.042718][ T3559] ? rcu_is_watching+0x11/0xa0 [ 689.047502][ T3559] ? preempt_schedule_common+0xa6/0xd0 [ 689.052936][ T3559] panic+0x318/0x860 [ 689.056810][ T3559] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 689.062941][ T3559] ? check_panic_on_warn+0x1d/0xa0 [ 689.068025][ T3559] ? fb_is_primary_device+0xd0/0xd0 [ 689.073201][ T3559] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 689.079158][ T3559] ? _raw_spin_unlock+0x40/0x40 [ 689.083982][ T3559] check_panic_on_warn+0x7e/0xa0 [ 689.088893][ T3559] ? sysv_new_inode+0x1062/0x11f0 [ 689.093891][ T3559] end_report+0x6d/0xf0 [ 689.098018][ T3559] kasan_report+0x18e/0x1c0 [ 689.102491][ T3559] ? sysv_new_inode+0x1062/0x11f0 [ 689.107488][ T3559] sysv_new_inode+0x1062/0x11f0 [ 689.112313][ T3559] ? sysv_free_inode+0x840/0x840 [ 689.117229][ T3559] sysv_mknod+0x4a/0xe0 [ 689.121357][ T3559] ? sysv_lookup+0xe0/0xe0 [ 689.125743][ T3559] path_openat+0x130a/0x2f20 [ 689.130311][ T3559] ? do_filp_open+0x460/0x460 [ 689.134964][ T3559] do_filp_open+0x21c/0x460 [ 689.139450][ T3559] ? vfs_tmpfile+0x2e0/0x2e0 [ 689.144030][ T3559] ? _raw_spin_unlock+0x24/0x40 [ 689.148856][ T3559] ? alloc_fd+0x594/0x630 [ 689.153161][ T3559] do_sys_openat2+0x13b/0x500 [ 689.157815][ T3559] ? read_lock_is_recursive+0x10/0x10 [ 689.163160][ T3559] ? do_sys_open+0x220/0x220 [ 689.167726][ T3559] __x64_sys_openat+0x243/0x290 [ 689.172548][ T3559] ? __ia32_sys_open+0x270/0x270 [ 689.177459][ T3559] ? syscall_enter_from_user_mode+0x2e/0x240 [ 689.183414][ T3559] ? lockdep_hardirqs_on+0x94/0x130 [ 689.188587][ T3559] ? syscall_enter_from_user_mode+0x2e/0x240 [ 689.194539][ T3559] do_syscall_64+0x3b/0xb0 [ 689.198927][ T3559] ? clear_bhb_loop+0x15/0x70 [ 689.203577][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 689.209444][ T3559] RIP: 0033:0x7f8696cde1d9 [ 689.213833][ T3559] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 689.233413][ T3559] RSP: 002b:00007ffe6f992b48 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 689.241800][ T3559] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f8696cde1d9 [ 689.249747][ T3559] RDX: 0000000000002c41 RSI: 0000000020000040 RDI: 00000000ffffff9c [ 689.257694][ T3559] RBP: 0000000000000004 R08: 00ffffffffffffff R09: 0000000001208000 [ 689.265641][ T3559] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6f992b90 [ 689.273589][ T3559] R13: 00007ffe6f992bd0 R14: 0000000000010000 R15: 0000000000000003 [ 689.281536][ T3559] [ 689.284759][ T3559] Kernel Offset: disabled [ 689.289064][ T3559] Rebooting in 86400 seconds..