last executing test programs: 4.528476233s ago: executing program 3 (id=3190): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x3}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x9080) 4.453703843s ago: executing program 1 (id=3192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000003540)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 3.670415882s ago: executing program 3 (id=3197): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000036090100fffffff8950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x41, &(0x7f0000000cc0)=""/4096, 0x41100, 0x20}, 0x94) 3.648161101s ago: executing program 0 (id=3199): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff4ba3000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0xe0) 3.645856843s ago: executing program 1 (id=3200): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='auxv\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x12c, 0x0) 3.25680781s ago: executing program 1 (id=3201): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0xe40, 0x0, &(0x7f0000000640)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.239935406s ago: executing program 2 (id=3202): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffffffffffffef, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40, 0x17a00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xff}]}}}]}, 0x44}, 0x1, 0x8100, 0x0, 0x40041}, 0x1800c85c) 3.12540448s ago: executing program 4 (id=3203): setresuid(0xee00, 0xee01, 0xee01) getpriority(0x2, 0x0) 3.017753203s ago: executing program 0 (id=3204): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r0, 0x19c00, 0x0, 0xfd7c, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94) 2.679290176s ago: executing program 2 (id=3205): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000280)=0x9, 0x4) 2.674942116s ago: executing program 3 (id=3215): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000036090100fffffff8950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x41, &(0x7f0000000cc0)=""/4096, 0x41100, 0x20}, 0x94) 2.561536953s ago: executing program 4 (id=3206): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x3}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x9080) 2.396341849s ago: executing program 0 (id=3207): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x3, 0x1, 0x42, 0xfffffffffffffff8}) 2.121575357s ago: executing program 2 (id=3208): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000003540)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 1.864321196s ago: executing program 0 (id=3209): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x0) 1.86420376s ago: executing program 4 (id=3210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd0) 1.477124917s ago: executing program 2 (id=3211): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='auxv\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x12c, 0x0) 1.462531615s ago: executing program 3 (id=3212): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000040)="9882340731b5122a8856700eb6", 0xd) 1.455288891s ago: executing program 1 (id=3213): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.362648332s ago: executing program 4 (id=3214): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x3, 0x4) 1.331857982s ago: executing program 0 (id=3216): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffffffffffffef, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40, 0x17a00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xff}]}}}]}, 0x44}, 0x1, 0x8100, 0x0, 0x40041}, 0x1800c85c) 968.005444ms ago: executing program 3 (id=3217): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40046210, 0x0) 920.646394ms ago: executing program 1 (id=3218): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r0, 0x19c00, 0x0, 0xfd7c, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94) 779.487885ms ago: executing program 2 (id=3219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\a'], 0x24}, 0x1, 0x5502000000000000}, 0x0) 631.342913ms ago: executing program 0 (id=3220): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000100)) 488.425367ms ago: executing program 4 (id=3221): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, &(0x7f0000000700)=[{}], 0x1, 0x2, 0x0, 0x0, 0x0, 0xc}) 286.333391ms ago: executing program 3 (id=3222): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0xe40, 0x0, &(0x7f0000000640)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 280.39291ms ago: executing program 1 (id=3223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000260a01"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 5.040163ms ago: executing program 2 (id=3224): r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'erspan0\x00', 0x0}) 0s ago: executing program 4 (id=3234): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000051401"], 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) kernel console output (not intermixed with test programs): e from 0 to 16 [ 426.511256][ T9045] erofs (device loop4): mounted with root inode @ nid 36. [ 426.541297][ T9045] erofs (device loop4): bogus lookback distance 1 @ lcn 0 of nid 89 [ 426.550952][ T9045] erofs (device loop4): readahead error at folio 0 @ nid 89 [ 426.560336][ T9045] syz.4.1445: attempt to access beyond end of device [ 426.560336][ T9045] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 426.577386][ T9045] erofs (device loop4): bogus lookback distance 1 @ lcn 0 of nid 89 [ 426.607441][ T9045] erofs (device loop4): read error -117 @ 0 of nid 89 [ 427.078131][ T9056] loop4: detected capacity change from 0 to 256 [ 427.175916][ T9056] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 427.393317][ T9062] overlay: Unknown parameter 'obj_role' [ 428.032018][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1458'. [ 428.517712][ T9080] loop0: detected capacity change from 0 to 16 [ 428.557681][ T9080] erofs (device loop0): mounted with root inode @ nid 36. [ 428.623273][ T9080] erofs (device loop0): bogus lookback distance 1 @ lcn 0 of nid 89 [ 428.654455][ T9080] erofs (device loop0): readahead error at folio 0 @ nid 89 [ 428.678191][ T9080] syz.0.1463: attempt to access beyond end of device [ 428.678191][ T9080] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 428.737633][ T9080] erofs (device loop0): bogus lookback distance 1 @ lcn 0 of nid 89 [ 428.781545][ T9080] erofs (device loop0): read error -117 @ 0 of nid 89 [ 429.031280][ T9089] overlay: Unknown parameter 'obj_role' [ 429.309240][ T9094] xt_TCPMSS: Only works on TCP SYN packets [ 430.608405][ T9117] overlay: Unknown parameter 'obj_role' [ 430.718981][ T9120] loop1: detected capacity change from 0 to 16 [ 430.747408][ T9120] erofs (device loop1): mounted with root inode @ nid 36. [ 430.816301][ T9120] erofs (device loop1): bogus lookback distance 1 @ lcn 0 of nid 89 [ 430.849496][ T9120] erofs (device loop1): readahead error at folio 0 @ nid 89 [ 430.898585][ T9120] syz.1.1481: attempt to access beyond end of device [ 430.898585][ T9120] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 430.939307][ T9120] erofs (device loop1): bogus lookback distance 1 @ lcn 0 of nid 89 [ 430.968711][ T9120] erofs (device loop1): read error -117 @ 0 of nid 89 [ 431.140688][ T9123] xt_TCPMSS: Only works on TCP SYN packets [ 432.756686][ T9152] overlay: Unknown parameter 'obj_role' [ 433.061243][ T9155] netlink: 'syz.4.1498': attribute type 21 has an invalid length. [ 433.092220][ T9155] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1498'. [ 433.113980][ T9155] netlink: 'syz.4.1498': attribute type 4 has an invalid length. [ 433.152193][ T9155] netlink: 'syz.4.1498': attribute type 5 has an invalid length. [ 433.169737][ T9155] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1498'. [ 433.203854][ T9159] loop2: detected capacity change from 0 to 16 [ 433.252254][ T9159] erofs (device loop2): mounted with root inode @ nid 36. [ 433.299512][ T9163] overlay: Unknown parameter 'obj_role' [ 433.325653][ T9159] erofs (device loop2): bogus lookback distance 1 @ lcn 0 of nid 89 [ 433.358997][ T9159] erofs (device loop2): readahead error at folio 0 @ nid 89 [ 433.389512][ T9159] syz.2.1497: attempt to access beyond end of device [ 433.389512][ T9159] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 433.417228][ T9159] erofs (device loop2): bogus lookback distance 1 @ lcn 0 of nid 89 [ 433.472924][ T9159] erofs (device loop2): read error -117 @ 0 of nid 89 [ 434.149781][ T9175] loop2: detected capacity change from 0 to 16 [ 434.213194][ T9175] erofs (device loop2): mounted with root inode @ nid 36. [ 434.256448][ T9175] erofs (device loop2): bogus lookback distance 1 @ lcn 0 of nid 89 [ 434.289712][ T9175] erofs (device loop2): readahead error at folio 0 @ nid 89 [ 434.330130][ T9175] syz.2.1517: attempt to access beyond end of device [ 434.330130][ T9175] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 434.408067][ T9175] erofs (device loop2): bogus lookback distance 1 @ lcn 0 of nid 89 [ 434.443732][ T9175] erofs (device loop2): read error -117 @ 0 of nid 89 [ 435.169704][ T9191] netlink: 'syz.0.1515': attribute type 21 has an invalid length. [ 435.189112][ T9191] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1515'. [ 435.210927][ T9191] netlink: 'syz.0.1515': attribute type 4 has an invalid length. [ 435.231586][ T9191] netlink: 'syz.0.1515': attribute type 5 has an invalid length. [ 435.252660][ T9191] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1515'. [ 436.927643][ T9224] netlink: 'syz.1.1532': attribute type 21 has an invalid length. [ 436.953225][ T9224] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1532'. [ 436.981987][ T9224] netlink: 'syz.1.1532': attribute type 4 has an invalid length. [ 437.002564][ T9224] netlink: 'syz.1.1532': attribute type 5 has an invalid length. [ 437.019898][ T9224] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1532'. [ 442.234461][ T9324] loop1: detected capacity change from 0 to 22 [ 442.274834][ T9324] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 443.917223][ T9360] loop2: detected capacity change from 0 to 22 [ 443.980419][ T9360] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 447.916617][ T9432] loop3: detected capacity change from 0 to 256 [ 447.972051][ T9432] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 449.936501][ T9473] loop4: detected capacity change from 0 to 256 [ 449.988581][ T9473] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 450.506546][ T9483] loop0: detected capacity change from 0 to 256 [ 450.593220][ T9483] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 450.613168][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.619769][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.389220][ T9528] loop1: detected capacity change from 0 to 256 [ 453.466173][ T9528] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 454.138953][ T9537] syz.1.1679 uses obsolete (PF_INET,SOCK_PACKET) [ 454.987951][ T9551] loop4: detected capacity change from 0 to 1024 [ 455.356931][ T9557] loop2: detected capacity change from 0 to 256 [ 455.429236][ T9557] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 455.714426][ T9560] loop3: detected capacity change from 0 to 1024 [ 457.217735][ T9590] loop1: detected capacity change from 0 to 256 [ 457.278327][ T9590] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 457.869803][ T9596] loop0: detected capacity change from 0 to 1024 [ 460.249371][ T9638] loop2: detected capacity change from 0 to 1024 [ 460.750240][ T5590] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 460.798893][ T9644] loop0: detected capacity change from 0 to 1024 [ 461.564674][ T5590] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 461.683527][ T9657] loop1: detected capacity change from 0 to 1024 [ 462.233812][ T9666] netlink: 'syz.0.1753': attribute type 29 has an invalid length. [ 462.835078][ T9680] loop4: detected capacity change from 0 to 256 [ 462.971036][ T9680] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 464.254635][ T9702] netlink: 'syz.4.1760': attribute type 29 has an invalid length. [ 464.745359][ T9711] xt_TCPMSS: Only works on TCP SYN packets [ 465.095120][ T9719] loop0: detected capacity change from 0 to 256 [ 465.216402][ T9719] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 465.900365][ T9732] loop0: detected capacity change from 0 to 16 [ 465.983228][ T9732] erofs (device loop0): mounted with root inode @ nid 36. [ 466.618286][ T9744] xt_TCPMSS: Only works on TCP SYN packets [ 466.921315][ T9747] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1782'. [ 467.658255][ T9765] loop3: detected capacity change from 0 to 16 [ 467.733485][ T9765] erofs (device loop3): mounted with root inode @ nid 36. [ 467.991025][ T9770] ipt_ECN: cannot use operation on non-tcp rule [ 468.545782][ T9778] xt_TCPMSS: Only works on TCP SYN packets [ 468.759339][ T9783] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1797'. [ 469.472918][ T9798] loop1: detected capacity change from 0 to 16 [ 469.522938][ T9798] erofs (device loop1): mounted with root inode @ nid 36. [ 469.874752][ T9805] ipt_ECN: cannot use operation on non-tcp rule [ 470.082415][ T9807] loop1: detected capacity change from 0 to 64 [ 470.084714][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 470.163324][ T9807] Trying to free block not in datazone [ 470.185778][ T9807] minix_free_block (loop1:21): bit already cleared [ 470.298754][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 470.334513][ T9] usb 1-1: config 4 has an invalid interface number: 138 but max is 0 [ 470.363317][ T9] usb 1-1: config 4 has no interface number 0 [ 470.383102][ T9] usb 1-1: config 4 interface 138 has no altsetting 0 [ 470.403037][ T9] usb 1-1: string descriptor 0 read error: -22 [ 470.418305][ T9] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 470.453500][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.697442][ T9817] xt_TCPMSS: Only works on TCP SYN packets [ 470.784346][ T9] catc 1-1:4.138: Missing or invalid endpoints [ 470.877184][ T5679] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 471.058870][ T9] usb 1-1: USB disconnect, device number 11 [ 471.081323][ T5679] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.125609][ T5679] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 471.184583][ T5679] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=91.34 [ 471.214420][ T5679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.227809][ T5679] usb 5-1: Product: syz [ 471.238948][ T5679] usb 5-1: Manufacturer: syz [ 471.247983][ T9821] loop3: detected capacity change from 0 to 24 [ 471.250607][ T5679] usb 5-1: SerialNumber: syz [ 471.272033][ T9821] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 471.301474][ T5679] usb 5-1: config 0 descriptor?? [ 471.350942][ T9821] VFS: Lookup of 'file0' in romfs loop3 would have caused loop [ 471.592967][ T5679] usb 5-1: selecting invalid altsetting 1 [ 471.621010][ T5679] flexcop_usb: set interface failed. [ 471.649036][ T5679] b2c2_flexcop_usb 5-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 471.715864][ T5679] usb 5-1: USB disconnect, device number 9 [ 471.861267][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 471.913684][ T9827] netlink: 'syz.1.1819': attribute type 5 has an invalid length. [ 471.952206][ T9827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1819'. [ 472.043685][ T9827] geneve3: entered promiscuous mode [ 472.060476][ T9827] geneve3: entered allmulticast mode [ 472.109865][ T5898] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 472.156049][ T5898] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 472.213683][ T5898] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 472.260733][ T5898] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 472.279677][ T9833] loop2: detected capacity change from 0 to 64 [ 472.396125][ T9833] Trying to free block not in datazone [ 472.418979][ T9833] minix_free_block (loop2:21): bit already cleared [ 473.750084][ T9857] loop1: detected capacity change from 0 to 24 [ 473.838091][ T9857] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 473.902366][ T9857] VFS: Lookup of 'file0' in romfs loop1 would have caused loop [ 474.111343][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1833'. [ 474.138565][ T9862] netlink: 'syz.3.1833': attribute type 5 has an invalid length. [ 474.165104][ T9862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1833'. [ 474.260249][ T9862] geneve3: entered promiscuous mode [ 474.283889][ T9862] geneve3: entered allmulticast mode [ 474.350355][ T1156] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 474.363135][ T5683] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 474.380559][ T1156] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 474.424628][ T1156] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 474.463797][ T1156] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 474.574838][ T5683] usb 3-1: unable to get BOS descriptor or descriptor too short [ 474.625363][ T5683] usb 3-1: config 4 has an invalid interface number: 138 but max is 0 [ 474.646850][ T5683] usb 3-1: config 4 has no interface number 0 [ 474.653966][ T5679] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 474.665413][ T5683] usb 3-1: config 4 interface 138 has no altsetting 0 [ 474.697100][ T5683] usb 3-1: string descriptor 0 read error: -22 [ 474.707768][ T5683] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 474.722513][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.755976][ T9870] netlink: 'syz.4.1835': attribute type 1 has an invalid length. [ 474.775751][ T9870] netlink: 'syz.4.1835': attribute type 2 has an invalid length. [ 474.786772][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1835'. [ 474.862005][ T5679] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.903144][ T5679] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 474.939678][ T5679] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=91.34 [ 474.959323][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.970317][ T5679] usb 2-1: Product: syz [ 474.975380][ T5679] usb 2-1: Manufacturer: syz [ 474.980731][ T5679] usb 2-1: SerialNumber: syz [ 475.000691][ T5683] catc 3-1:4.138: Missing or invalid endpoints [ 475.010875][ T9874] loop0: detected capacity change from 0 to 64 [ 475.022772][ T5679] usb 2-1: config 0 descriptor?? [ 475.087800][ T9874] Trying to free block not in datazone [ 475.114827][ T9874] minix_free_block (loop0:21): bit already cleared [ 475.281003][ T9] usb 3-1: USB disconnect, device number 7 [ 475.288557][ T5679] usb 2-1: selecting invalid altsetting 1 [ 475.318158][ T5679] flexcop_usb: set interface failed. [ 475.337898][ T5679] b2c2_flexcop_usb 2-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 475.400880][ T5679] usb 2-1: USB disconnect, device number 12 [ 476.614817][ T9896] netlink: 'syz.3.1852': attribute type 1 has an invalid length. [ 476.648886][ T9896] netlink: 'syz.3.1852': attribute type 2 has an invalid length. [ 476.699858][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1852'. [ 476.806503][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1851'. [ 476.854539][ T9900] netlink: 'syz.2.1851': attribute type 5 has an invalid length. [ 476.919362][ T9900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1851'. [ 477.069106][ T9900] geneve2: entered promiscuous mode [ 477.106232][ T9900] geneve2: entered allmulticast mode [ 477.133323][ T1156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 477.142482][ T1156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 477.184346][ T9905] loop3: detected capacity change from 0 to 64 [ 477.203718][ T1156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 477.238596][ T1156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 477.293862][ T9905] Trying to free block not in datazone [ 477.328515][ T9905] minix_free_block (loop3:21): bit already cleared [ 477.858745][ T9917] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 477.872278][ T5679] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 477.885297][ T9917] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 477.909282][ T9917] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 477.942724][ T9917] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 478.050948][ T5679] usb 2-1: unable to get BOS descriptor or descriptor too short [ 478.066040][ T5679] usb 2-1: config 4 has an invalid interface number: 138 but max is 0 [ 478.076673][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 478.085521][ T5679] usb 2-1: config 4 has no interface number 0 [ 478.093638][ T5679] usb 2-1: config 4 interface 138 has no altsetting 0 [ 478.118392][ T5679] usb 2-1: string descriptor 0 read error: -22 [ 478.132577][ T5679] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 478.151988][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.257369][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.267898][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 478.284487][ T9] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=91.34 [ 478.294080][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.302396][ T9] usb 1-1: Product: syz [ 478.306798][ T9] usb 1-1: Manufacturer: syz [ 478.311551][ T9] usb 1-1: SerialNumber: syz [ 478.323638][ T9] usb 1-1: config 0 descriptor?? [ 478.389040][ T5679] catc 2-1:4.138: Missing or invalid endpoints [ 478.555062][ T9] usb 1-1: selecting invalid altsetting 1 [ 478.561059][ T9] flexcop_usb: set interface failed. [ 478.566936][ T9] b2c2_flexcop_usb 1-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 478.582281][ T9] usb 1-1: USB disconnect, device number 12 [ 478.611364][ T5679] usb 2-1: USB disconnect, device number 13 [ 479.346278][ T9925] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1864'. [ 479.585486][ T5683] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 479.772403][ T5683] usb 5-1: unable to get BOS descriptor or descriptor too short [ 479.786875][ T9931] netlink: 'syz.0.1865': attribute type 1 has an invalid length. [ 479.808894][ T5683] usb 5-1: config 4 has an invalid interface number: 138 but max is 0 [ 479.817497][ T9931] netlink: 'syz.0.1865': attribute type 2 has an invalid length. [ 479.817619][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1865'. [ 479.846775][ T5683] usb 5-1: config 4 has no interface number 0 [ 479.860946][ T5683] usb 5-1: config 4 interface 138 has no altsetting 0 [ 479.893291][ T5683] usb 5-1: string descriptor 0 read error: -22 [ 479.900789][ T5683] usb 5-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 479.922179][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.242345][ T5683] catc 5-1:4.138: Missing or invalid endpoints [ 480.255911][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1868'. [ 480.275204][ T9940] netlink: 'syz.0.1868': attribute type 5 has an invalid length. [ 480.308319][ T9940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1868'. [ 480.439526][ T9940] geneve3: entered promiscuous mode [ 480.470482][ T9940] geneve3: entered allmulticast mode [ 480.494899][ T9] usb 5-1: USB disconnect, device number 10 [ 480.505498][ T14] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 480.553482][ T14] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 480.585466][ T14] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 480.612220][ T14] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 480.789143][ T9946] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 480.816817][ T9946] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 480.848430][ T9946] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 480.868548][ T5683] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 480.883108][ T9946] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 481.087040][ T5683] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.112255][ T5683] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 481.145698][ T5683] usb 4-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=91.34 [ 481.170874][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.186091][ T9950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1880'. [ 481.203656][ T5683] usb 4-1: Product: syz [ 481.213622][ T5683] usb 4-1: Manufacturer: syz [ 481.231485][ T5683] usb 4-1: SerialNumber: syz [ 481.265733][ T5683] usb 4-1: config 0 descriptor?? [ 481.552879][ T5683] usb 4-1: selecting invalid altsetting 1 [ 481.580165][ T5683] flexcop_usb: set interface failed. [ 481.594069][ T5683] b2c2_flexcop_usb 4-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 481.636033][ T5683] usb 4-1: USB disconnect, device number 12 [ 481.696722][ T9958] sg_write: data in/out 223488/136 bytes for SCSI command 0x0-- guessing data in; [ 481.696722][ T9958] program syz.1.1882 not setting count and/or reply_len properly [ 482.310106][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'. [ 482.392178][ T9966] netlink: 'syz.1.1887': attribute type 5 has an invalid length. [ 482.438601][ T9966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1887'. [ 482.662575][ T9974] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 482.695837][ T9974] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 482.717508][ T9974] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 482.760851][ T9974] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 483.852888][ T9994] sg_write: data in/out 223488/136 bytes for SCSI command 0x0-- guessing data in; [ 483.852888][ T9994] program syz.4.1896 not setting count and/or reply_len properly [ 484.342133][ T5683] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 484.523886][ T5683] usb 4-1: Using ep0 maxpacket: 32 [ 484.541761][ T5683] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 484.592535][ T5683] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 484.613072][T10008] loop0: detected capacity change from 0 to 64 [ 484.620563][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 484.639373][ T5683] usb 4-1: Product: syz [ 484.655261][ T5683] usb 4-1: Manufacturer: syz [ 484.677534][ T5683] usb 4-1: SerialNumber: syz [ 484.708854][ T5683] usb 4-1: config 0 descriptor?? [ 484.718358][T10008] Trying to free block not in datazone [ 484.730266][ T9999] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 484.758590][T10008] Trying to free block not in datazone [ 484.770967][ T5683] hub 4-1:0.0: bad descriptor, ignoring hub [ 484.800266][ T5683] hub 4-1:0.0: probe with driver hub failed with error -5 [ 485.185241][ T5683] usb 4-1: USB disconnect, device number 13 [ 485.393850][T10018] loop1: detected capacity change from 0 to 64 [ 485.442933][T10022] netlink: 'syz.2.1913': attribute type 16 has an invalid length. [ 485.452042][T10022] netlink: 'syz.2.1913': attribute type 17 has an invalid length. [ 485.472916][T10022] netlink: 'syz.2.1913': attribute type 27 has an invalid length. [ 485.483918][T10018] Trying to free block not in datazone [ 485.522789][T10018] Trying to free block not in datazone [ 485.805057][T10025] sg_write: data in/out 223488/136 bytes for SCSI command 0x0-- guessing data in; [ 485.805057][T10025] program syz.0.1915 not setting count and/or reply_len properly [ 486.622244][ T5683] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 486.782350][ T5683] usb 1-1: Using ep0 maxpacket: 32 [ 486.812407][ T5683] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 486.826400][T10044] netlink: 'syz.4.1920': attribute type 3 has an invalid length. [ 486.869978][ T5683] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 486.923413][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 486.955872][ T5683] usb 1-1: Product: syz [ 486.979333][ T5683] usb 1-1: Manufacturer: syz [ 486.999951][ T5683] usb 1-1: SerialNumber: syz [ 487.048675][ T5683] usb 1-1: config 0 descriptor?? [ 487.073390][T10032] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 487.106205][ T5683] hub 1-1:0.0: bad descriptor, ignoring hub [ 487.114721][ T5683] hub 1-1:0.0: probe with driver hub failed with error -5 [ 487.479860][ T5683] usb 1-1: USB disconnect, device number 13 [ 487.610763][T10052] loop4: detected capacity change from 0 to 64 [ 487.658159][T10052] Trying to free block not in datazone [ 487.674679][T10052] Trying to free block not in datazone [ 488.029024][T10061] netlink: 'syz.3.1929': attribute type 16 has an invalid length. [ 488.072498][T10061] netlink: 'syz.3.1929': attribute type 17 has an invalid length. [ 488.114994][T10064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1933'. [ 488.135840][T10061] netlink: 'syz.3.1929': attribute type 27 has an invalid length. [ 489.024619][T10078] netlink: 'syz.2.1938': attribute type 3 has an invalid length. [ 489.195418][T10083] comedi comedi3: board detection failed [ 489.498339][T10087] loop3: detected capacity change from 0 to 64 [ 489.547217][T10087] Trying to free block not in datazone [ 489.580709][T10087] Trying to free block not in datazone [ 489.646216][T10091] comedi comedi3: board detection failed [ 489.832391][ T5683] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 490.032039][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1948'. [ 490.041546][ T5683] usb 2-1: Using ep0 maxpacket: 32 [ 490.070523][ T5683] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 490.106515][ T5683] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 490.136043][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 490.157262][ T5683] usb 2-1: Product: syz [ 490.161941][ T5683] usb 2-1: Manufacturer: syz [ 490.166723][ T5683] usb 2-1: SerialNumber: syz [ 490.178212][ T5683] usb 2-1: config 0 descriptor?? [ 490.186122][T10090] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 490.193861][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 490.207892][ T5683] hub 2-1:0.0: bad descriptor, ignoring hub [ 490.236943][ T5683] hub 2-1:0.0: probe with driver hub failed with error -5 [ 490.348176][T10099] loop2: detected capacity change from 0 to 512 [ 490.363531][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 490.376771][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 490.414288][ T9] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 490.417418][T10099] EXT4-fs (loop2): orphan cleanup on readonly fs [ 490.432259][ T9] usb 5-1: config 114 has no interface number 0 [ 490.450688][ T9] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 490.462882][ T9] usb 5-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 490.476474][ T9] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 490.487335][ T9] usb 5-1: config 114 interface 240 has no altsetting 0 [ 490.509093][ T9] usb 5-1: string descriptor 0 read error: -22 [ 490.516241][T10099] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1951: ea_inode with extended attributes [ 490.518585][ T9] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 490.539693][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.553411][T10099] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 490.561830][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 490.577889][ C0] EXT4-fs (loop2): initial error at time 1784521743: ext4_xattr_inode_iget:441: inode 11 [ 490.588184][ C0] EXT4-fs (loop2): last error at time 1784521743: ext4_xattr_inode_iget:441: inode 11 [ 490.608363][T10095] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 490.630931][T10099] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1951: error while reading EA inode 11 err=-117 [ 490.632903][T10095] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 490.673471][ T5683] usb 2-1: USB disconnect, device number 14 [ 490.689064][T10099] loop2: lost filesystem error report for type 5 error -117 [ 490.694389][T10099] EXT4-fs (loop2): 1 orphan inode deleted [ 490.717247][ T9] ir_usb 5-1:114.240: IR Dongle converter detected [ 490.791153][T10099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 490.998999][ T9] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 491.156413][ T5580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.236493][ T9] usb 5-1: USB disconnect, device number 11 [ 491.294086][ T9] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 491.346909][ T9] ir_usb 5-1:114.240: device disconnected [ 491.433446][T10110] netlink: 'syz.0.1954': attribute type 3 has an invalid length. [ 491.752813][T10119] loop1: detected capacity change from 0 to 64 [ 491.850944][T10119] Trying to free block not in datazone [ 491.894663][T10119] Trying to free block not in datazone [ 492.329147][T10126] comedi comedi3: board detection failed [ 492.355766][T10127] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1973'. [ 492.398048][T10127] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 492.492328][ T5683] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 492.690838][ T5683] usb 1-1: unable to get BOS descriptor or descriptor too short [ 492.738439][ T5683] usb 1-1: config 114 has an invalid interface number: 240 but max is 0 [ 492.768212][ T5683] usb 1-1: config 114 has no interface number 0 [ 492.787441][ T5683] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 492.826716][ T5683] usb 1-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 492.845648][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1965'. [ 492.879348][ T5683] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 492.908576][ T5683] usb 1-1: config 114 interface 240 has no altsetting 0 [ 492.940498][T10133] loop4: detected capacity change from 0 to 512 [ 492.943415][ T5683] usb 1-1: string descriptor 0 read error: -22 [ 492.966202][ T5683] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 492.983118][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 492.996762][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.997293][T10133] EXT4-fs (loop4): orphan cleanup on readonly fs [ 493.032317][T10133] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.1966: ea_inode with extended attributes [ 493.054177][T10123] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 493.106663][T10123] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 493.139123][T10133] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 493.141226][T10133] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1966: error while reading EA inode 11 err=-117 [ 493.151073][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 493.151166][ C1] EXT4-fs (loop4): initial error at time 1784521746: ext4_xattr_inode_iget:441: inode 11 [ 493.151318][ C1] EXT4-fs (loop4): last error at time 1784521746: ext4_xattr_inode_iget:441: inode 11 [ 493.202418][T10133] loop4: lost filesystem error report for type 5 error -117 [ 493.204285][T10133] EXT4-fs (loop4): 1 orphan inode deleted [ 493.215701][ T5683] ir_usb 1-1:114.240: IR Dongle converter detected [ 493.236424][T10133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 493.404327][ T5683] usb 1-1: IR Dongle converter now attached to ttyUSB0 [ 493.448932][ T5582] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.622719][ T9] usb 1-1: USB disconnect, device number 14 [ 493.650504][ T9] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 493.680030][ T9] ir_usb 1-1:114.240: device disconnected [ 494.212287][ T5683] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 494.382069][ T5683] usb 3-1: Using ep0 maxpacket: 32 [ 494.410720][ T5683] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 494.435234][ T5683] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 494.461476][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 494.477411][ T5683] usb 3-1: Product: syz [ 494.483172][T10156] loop0: detected capacity change from 0 to 64 [ 494.489927][ T5683] usb 3-1: Manufacturer: syz [ 494.496740][ T5683] usb 3-1: SerialNumber: syz [ 494.524434][ T5683] usb 3-1: config 0 descriptor?? [ 494.537288][T10156] Trying to free block not in datazone [ 494.541486][T10150] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 494.555578][T10156] Trying to free block not in datazone [ 494.592443][ T5683] hub 3-1:0.0: bad descriptor, ignoring hub [ 494.615074][ T5683] hub 3-1:0.0: probe with driver hub failed with error -5 [ 495.004553][ T5683] usb 3-1: USB disconnect, device number 8 [ 495.248926][T10164] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1979'. [ 495.268801][T10164] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 495.390232][T10160] loop4: detected capacity change from 0 to 4096 [ 495.438166][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1980'. [ 495.597231][T10160] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 495.974161][ T5582] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22. [ 496.091997][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 496.284458][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 496.313506][ T9] usb 4-1: config 114 has an invalid interface number: 240 but max is 0 [ 496.348824][ T9] usb 4-1: config 114 has no interface number 0 [ 496.373237][ T9] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 496.417795][ T9] usb 4-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 496.475737][ T9] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 496.508058][ T9] usb 4-1: config 114 interface 240 has no altsetting 0 [ 496.558343][ T9] usb 4-1: string descriptor 0 read error: -22 [ 496.580332][ T9] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 496.635347][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.683053][T10172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 496.705632][T10172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 496.752820][ T9] ir_usb 4-1:114.240: IR Dongle converter detected [ 496.977134][T10181] loop0: detected capacity change from 0 to 4096 [ 497.000533][ T9] usb 4-1: IR Dongle converter now attached to ttyUSB0 [ 497.128309][T10181] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 497.227374][ T9] usb 4-1: USB disconnect, device number 14 [ 497.291311][ T9] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 497.319400][ T9] ir_usb 4-1:114.240: device disconnected [ 497.419625][ T5576] ntfs3(loop0): ino=9, ntfs_sync_fs failed, -22. [ 497.929420][T10190] loop2: detected capacity change from 0 to 4096 [ 498.185314][T10190] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 498.214064][T10199] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1994'. [ 498.262079][T10199] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 498.564328][ T5580] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 499.140821][T10211] loop2: detected capacity change from 0 to 64 [ 499.303421][T10211] Trying to free block not in datazone [ 499.324677][T10211] Trying to free block not in datazone [ 499.822164][T10221] netlink: 'syz.1.2010': attribute type 3 has an invalid length. [ 500.072773][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 500.290615][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 500.321535][ T9] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 500.349055][ T9] usb 3-1: config 114 has no interface number 0 [ 500.366965][ T9] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 500.406024][ T9] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 500.468733][ T9] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 500.501494][ T9] usb 3-1: config 114 interface 240 has no altsetting 0 [ 500.545791][ T9] usb 3-1: string descriptor 0 read error: -22 [ 500.565552][ T9] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 500.597501][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.614392][T10234] loop3: detected capacity change from 0 to 4096 [ 500.645991][T10222] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 500.663027][T10222] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 500.689641][ T9] ir_usb 3-1:114.240: IR Dongle converter detected [ 500.892624][T10234] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 500.950403][ T9] usb 3-1: IR Dongle converter now attached to ttyUSB0 [ 501.160667][ T5593] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22. [ 501.181367][ T9] usb 3-1: USB disconnect, device number 9 [ 501.260890][ T9] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 501.300125][ T9] ir_usb 3-1:114.240: device disconnected [ 502.122749][T10250] netlink: 'syz.3.2023': attribute type 3 has an invalid length. [ 502.393899][ T11] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 502.589343][ T11] usb 1-1: not running at top speed; connect to a high speed hub [ 502.628665][ T11] usb 1-1: config 11 has an invalid interface number: 95 but max is 0 [ 502.657307][ T11] usb 1-1: config 11 has no interface number 0 [ 502.678115][ T11] usb 1-1: config 11 interface 95 altsetting 64 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 502.742792][ T11] usb 1-1: config 11 interface 95 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 502.779129][ T11] usb 1-1: config 11 interface 95 altsetting 64 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 502.815776][ T11] usb 1-1: config 11 interface 95 has no altsetting 0 [ 502.839917][ T11] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 502.878038][ T11] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 502.897869][ T11] usb 1-1: Manufacturer: syz [ 502.925607][T10252] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 503.017563][T10261] loop3: detected capacity change from 0 to 4096 [ 503.215844][ T11] usbtouchscreen 1-1:11.95: probe with driver usbtouchscreen failed with error -71 [ 503.281181][ T11] usb 1-1: USB disconnect, device number 15 [ 503.379680][T10261] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 503.661920][ T5593] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22. [ 504.392103][ T11] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 504.430712][T10276] loop1: detected capacity change from 0 to 4096 [ 504.594319][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 504.621156][T10276] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 504.634825][ T11] usb 4-1: config 114 has an invalid interface number: 240 but max is 0 [ 504.656843][ T11] usb 4-1: config 114 has no interface number 0 [ 504.677235][ T11] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 504.718491][ T11] usb 4-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 504.757505][ T11] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 504.803887][ T11] usb 4-1: config 114 interface 240 has no altsetting 0 [ 504.844347][ T11] usb 4-1: string descriptor 0 read error: -22 [ 504.866504][T10284] loop2: detected capacity change from 0 to 256 [ 504.874175][ T11] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 504.886139][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.941453][T10278] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 504.968838][T10278] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 505.028803][ T11] ir_usb 4-1:114.240: IR Dongle converter detected [ 505.053481][ T5586] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22. [ 505.299871][ T11] usb 4-1: IR Dongle converter now attached to ttyUSB0 [ 505.514861][ T11] usb 4-1: USB disconnect, device number 15 [ 505.589401][ T11] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 505.636613][ T11] ir_usb 4-1:114.240: device disconnected [ 505.712721][T10293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2042'. [ 506.632319][ T5683] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 506.834424][ T5683] usb 3-1: unable to get BOS descriptor or descriptor too short [ 506.849872][ T5683] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 506.868230][ T5683] usb 3-1: config 114 has no interface number 0 [ 506.881981][ T5683] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 506.903897][ T5751] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 506.911921][ T5683] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 506.956276][ T5683] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 506.999049][ T5683] usb 3-1: config 114 interface 240 has no altsetting 0 [ 507.039500][ T5683] usb 3-1: string descriptor 0 read error: -22 [ 507.046982][ T5683] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 507.071334][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.100249][T10304] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 507.115579][ T5751] usb 2-1: not running at top speed; connect to a high speed hub [ 507.152694][T10304] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 507.174535][ T5751] usb 2-1: config 11 has an invalid interface number: 95 but max is 0 [ 507.196928][ T5751] usb 2-1: config 11 has no interface number 0 [ 507.215335][ T5683] ir_usb 3-1:114.240: IR Dongle converter detected [ 507.224443][ T5751] usb 2-1: config 11 interface 95 altsetting 64 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 507.272473][ T5751] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 507.310735][ T5751] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 507.348098][ T5751] usb 2-1: config 11 interface 95 has no altsetting 0 [ 507.365948][ T5751] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 507.388630][ T5751] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 507.401266][ T5751] usb 2-1: Manufacturer: syz [ 507.476752][ T5683] usb 3-1: IR Dongle converter now attached to ttyUSB0 [ 507.504811][T10309] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 507.561437][T10322] loop0: detected capacity change from 0 to 256 [ 507.580234][T10316] loop4: detected capacity change from 0 to 4096 [ 507.707646][ T11] usb 3-1: USB disconnect, device number 10 [ 507.782626][ T5751] usbtouchscreen 2-1:11.95: probe with driver usbtouchscreen failed with error -71 [ 507.785508][ T11] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 507.836606][ T5751] usb 2-1: USB disconnect, device number 15 [ 507.858300][T10316] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 507.876490][ T11] ir_usb 3-1:114.240: device disconnected [ 508.324347][ T5582] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22. [ 508.664265][T10330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2058'. [ 509.238062][T10340] IPv6: sit1: Disabled Multicast RS [ 509.252361][T10340] sit1: entered allmulticast mode [ 510.262021][ T11] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 510.262021][ T5751] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 510.416611][ T11] usb 2-1: unable to get BOS descriptor or descriptor too short [ 510.426572][ T5751] usb 4-1: not running at top speed; connect to a high speed hub [ 510.429315][ T11] usb 2-1: config 114 has an invalid interface number: 240 but max is 0 [ 510.440818][ T5751] usb 4-1: config 11 has an invalid interface number: 95 but max is 0 [ 510.443793][ T11] usb 2-1: config 114 has no interface number 0 [ 510.452649][ T5751] usb 4-1: config 11 has no interface number 0 [ 510.457966][ T11] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 510.466435][ T5751] usb 4-1: config 11 interface 95 altsetting 64 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 510.474747][ T11] usb 2-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 510.474903][ T11] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 510.488694][ T5751] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 510.499078][ T11] usb 2-1: config 114 interface 240 has no altsetting 0 [ 510.510672][ T11] usb 2-1: string descriptor 0 read error: -22 [ 510.521814][ T5751] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 510.532305][ T11] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 510.535618][ T5751] usb 4-1: config 11 interface 95 has no altsetting 0 [ 510.547082][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.561174][ T5751] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 510.572789][T10354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 510.589617][T10354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 510.600538][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 510.607642][ T11] ir_usb 2-1:114.240: IR Dongle converter detected [ 510.616306][ T5751] usb 4-1: Manufacturer: syz [ 510.629772][T10353] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 510.846705][ T11] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 510.875852][ T5751] usbtouchscreen 4-1:11.95: probe with driver usbtouchscreen failed with error -71 [ 510.907728][ T5751] usb 4-1: USB disconnect, device number 16 [ 511.070454][ T5683] usb 2-1: USB disconnect, device number 16 [ 511.090062][ T5683] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 511.101583][ T5683] ir_usb 2-1:114.240: device disconnected [ 511.761958][T10364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2074'. [ 512.032022][T10370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2078'. [ 512.051419][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.058857][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.099489][T10369] IPv6: sit1: Disabled Multicast RS [ 512.159726][T10369] sit1: entered allmulticast mode [ 513.512231][ T5683] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 513.717113][ T5683] usb 3-1: not running at top speed; connect to a high speed hub [ 513.738310][ T5683] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 513.769883][ T5683] usb 3-1: config 11 has no interface number 0 [ 513.782242][ T5683] usb 3-1: config 11 interface 95 altsetting 64 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 513.809361][ T5683] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 513.844121][ T5683] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 513.902075][ T5683] usb 3-1: config 11 interface 95 has no altsetting 0 [ 513.931336][ T5683] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 513.963374][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 513.977116][T10399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2093'. [ 513.987824][ T5683] usb 3-1: Manufacturer: syz [ 514.023775][T10388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 514.156459][T10404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2092'. [ 514.301196][ T5683] usbtouchscreen 3-1:11.95: probe with driver usbtouchscreen failed with error -71 [ 514.379517][ T5683] usb 3-1: USB disconnect, device number 11 [ 515.870306][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 516.003652][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'. [ 516.054765][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'. [ 517.653217][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2126'. [ 517.911563][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2127'. [ 517.956447][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2127'. [ 519.888270][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2143'. [ 519.914093][T10508] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 519.934585][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2147'. [ 519.997003][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2147'. [ 521.563726][T10536] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 523.387534][T10570] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 525.225138][T10595] loop1: detected capacity change from 0 to 2048 [ 525.340253][T10599] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 526.023417][T10611] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 526.238637][T10612] loop0: detected capacity change from 0 to 2048 [ 526.329058][T10615] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 527.232300][ T11] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 527.435891][ T11] usb 3-1: unable to get BOS descriptor or descriptor too short [ 527.466380][ T11] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.490187][ T11] usb 3-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 527.523387][ T11] usb 3-1: config 1 interface 0 has no altsetting 0 [ 527.555948][ T11] usb 3-1: string descriptor 0 read error: -22 [ 527.575344][ T11] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 527.588421][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.614694][ T11] cdc_ether 3-1:1.0: missing cdc header ether descriptor [ 527.897514][ T5683] usb 3-1: USB disconnect, device number 12 [ 528.534750][T10646] loop1: detected capacity change from 0 to 164 [ 528.615955][T10646] rock: directory entry would overflow storage [ 528.648038][T10646] rock: sig=0x66, size=4, remaining=3 [ 528.720123][T10646] rock: directory entry would overflow storage [ 528.764106][T10646] rock: sig=0x66, size=4, remaining=3 [ 528.836649][T10648] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 529.112637][T10652] loop4: detected capacity change from 0 to 2048 [ 529.207748][T10653] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 529.925290][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2225'. [ 530.793189][ T5683] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 530.806557][T10679] loop0: detected capacity change from 0 to 164 [ 530.860752][T10679] rock: directory entry would overflow storage [ 530.874563][T10679] rock: sig=0x66, size=4, remaining=3 [ 530.889722][T10679] rock: directory entry would overflow storage [ 530.897256][T10679] rock: sig=0x66, size=4, remaining=3 [ 530.983772][ T5683] usb 5-1: unable to get BOS descriptor or descriptor too short [ 531.021551][ T5683] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.039883][ T5683] usb 5-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 531.097192][ T5683] usb 5-1: config 1 interface 0 has no altsetting 0 [ 531.125498][ T5683] usb 5-1: string descriptor 0 read error: -22 [ 531.148403][ T5683] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 531.194098][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.222602][T10684] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 531.252754][ T5683] cdc_ether 5-1:1.0: missing cdc header ether descriptor [ 531.508684][ T11] usb 5-1: USB disconnect, device number 12 [ 531.654401][T10688] loop3: detected capacity change from 0 to 2048 [ 531.709558][T10691] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 532.427864][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2241'. [ 533.185282][T10710] loop4: detected capacity change from 0 to 164 [ 533.268113][T10710] rock: directory entry would overflow storage [ 533.317243][T10710] rock: sig=0x66, size=4, remaining=3 [ 533.394167][T10710] rock: directory entry would overflow storage [ 533.444900][T10710] rock: sig=0x66, size=4, remaining=3 [ 533.788939][T10718] netlink: 'syz.2.2248': attribute type 1 has an invalid length. [ 534.023957][T10719] loop1: detected capacity change from 0 to 2048 [ 534.073375][T10720] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 534.375527][T10724] loop0: detected capacity change from 0 to 2048 [ 534.444248][T10727] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 535.134739][T10736] loop2: detected capacity change from 0 to 2048 [ 535.265241][T10740] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 535.282205][ T5683] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 535.349736][T10733] loop3: detected capacity change from 0 to 4096 [ 535.423236][T10733] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 535.490686][ T5683] usb 1-1: unable to get BOS descriptor or descriptor too short [ 535.535696][ T5683] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.563520][ T5683] usb 1-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 535.579127][ T5683] usb 1-1: config 1 interface 0 has no altsetting 0 [ 535.664168][ T5683] usb 1-1: string descriptor 0 read error: -22 [ 535.690128][ T5683] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 535.720996][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.754217][T10733] ntfs3(loop3): Failed to load $Extend (-22). [ 535.790362][T10733] ntfs3(loop3): Failed to initialize $Extend. [ 535.798416][ T5683] cdc_ether 1-1:1.0: missing cdc header ether descriptor [ 535.916240][T10733] ntfs3(loop3): ino=1b, mi_enum_attr [ 536.025889][T10746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'. [ 536.050579][ T5683] usb 1-1: USB disconnect, device number 16 [ 536.427409][T10750] netlink: 'syz.4.2263': attribute type 1 has an invalid length. [ 537.772022][T10769] loop1: detected capacity change from 0 to 2048 [ 537.868920][T10772] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 538.032632][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2274'. [ 538.058519][T10775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2274'. [ 538.643156][T10778] loop0: detected capacity change from 0 to 4096 [ 538.703946][T10778] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 538.853859][T10778] ntfs3(loop0): Failed to load $Extend (-22). [ 538.863622][T10784] netlink: 'syz.1.2276': attribute type 1 has an invalid length. [ 538.873486][T10778] ntfs3(loop0): Failed to initialize $Extend. [ 538.898806][T10778] ntfs3(loop0): ino=1b, mi_enum_attr [ 540.238751][T10801] loop1: detected capacity change from 0 to 2048 [ 540.367248][T10804] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 540.550735][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 540.592924][T10809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2288'. [ 541.136168][T10811] loop4: detected capacity change from 0 to 4096 [ 541.195296][T10811] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 541.362970][T10811] ntfs3(loop4): Failed to load $Extend (-22). [ 541.376526][T10811] ntfs3(loop4): Failed to initialize $Extend. [ 541.440284][T10811] ntfs3(loop4): ino=1b, mi_enum_attr [ 543.049396][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2305'. [ 543.087516][T10843] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2305'. [ 543.242414][ T5683] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 543.431265][T10845] loop1: detected capacity change from 0 to 4096 [ 543.443071][ T5683] usb 3-1: Using ep0 maxpacket: 32 [ 543.487404][T10845] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 543.493239][ T5683] usb 3-1: unable to get BOS descriptor or descriptor too short [ 543.559535][ T5683] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 543.584474][ T5683] usb 3-1: config 7 has no interface number 0 [ 543.613089][ T5683] usb 3-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 543.644713][T10845] ntfs3(loop1): Failed to load $Extend (-22). [ 543.666416][ T5683] usb 3-1: config 7 interface 187 has no altsetting 0 [ 543.675729][T10845] ntfs3(loop1): Failed to initialize $Extend. [ 543.705762][ T5683] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 543.743379][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.756599][T10845] ntfs3(loop1): ino=1b, mi_enum_attr [ 543.777574][ T5683] usb 3-1: Product: syz [ 543.796774][ T5683] usb 3-1: Manufacturer: syz [ 543.822101][ T5683] usb 3-1: SerialNumber: syz [ 544.130354][ T5683] usb 3-1: Unknown endpoint type found, address 0x07 [ 544.165993][ T5683] usb 3-1: Unknown endpoint type found, address 0x03 [ 544.191480][ T5683] usb 3-1: Not enough endpoints found in device, aborting! [ 544.400865][ T11] usb 3-1: USB disconnect, device number 13 [ 547.144998][T10904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2333'. [ 547.170763][T10904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2333'. [ 547.200194][T10904] netlink: 'syz.1.2333': attribute type 6 has an invalid length. [ 547.373527][ T5683] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 547.552329][ T5683] usb 1-1: Using ep0 maxpacket: 32 [ 547.585695][ T5683] usb 1-1: unable to get BOS descriptor or descriptor too short [ 547.624690][ T5683] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 547.657734][ T5683] usb 1-1: config 7 has no interface number 0 [ 547.673043][ T5683] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 547.695209][ T5683] usb 1-1: config 7 interface 187 has no altsetting 0 [ 547.711036][T10912] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2339'. [ 547.730480][ T5683] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 547.741377][T10912] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2339'. [ 547.752694][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.773390][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2339'. [ 547.785040][ T5683] usb 1-1: Product: syz [ 547.791297][ T5683] usb 1-1: Manufacturer: syz [ 547.804338][ T5683] usb 1-1: SerialNumber: syz [ 548.071507][ T5683] usb 1-1: Unknown endpoint type found, address 0x07 [ 548.100255][ T5683] usb 1-1: Unknown endpoint type found, address 0x03 [ 548.125023][ T5683] usb 1-1: Not enough endpoints found in device, aborting! [ 548.320729][ T11] usb 1-1: USB disconnect, device number 17 [ 548.537305][T10922] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2344'. [ 548.570045][T10922] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2344'. [ 548.654214][T10924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2345'. [ 548.685626][T10924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2345'. [ 549.334913][T10937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2348'. [ 549.379141][T10937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2348'. [ 549.422049][T10937] netlink: 'syz.0.2348': attribute type 6 has an invalid length. [ 549.863426][T10944] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2353'. [ 549.875038][T10947] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2356'. [ 549.896507][T10947] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2356'. [ 549.913277][T10944] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2353'. [ 550.614933][ T5683] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 550.805332][ T5683] usb 4-1: Using ep0 maxpacket: 32 [ 550.836670][ T5683] usb 4-1: unable to get BOS descriptor or descriptor too short [ 550.867009][ T5683] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 550.896743][ T5683] usb 4-1: config 7 has no interface number 0 [ 550.919938][ T5683] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 550.952316][ T5683] usb 4-1: config 7 interface 187 has no altsetting 0 [ 550.978200][ T5683] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 550.992231][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.011588][ T5683] usb 4-1: Product: syz [ 551.034425][ T5683] usb 4-1: Manufacturer: syz [ 551.043511][ T5683] usb 4-1: SerialNumber: syz [ 551.335798][ T5683] usb 4-1: Unknown endpoint type found, address 0x07 [ 551.347018][ T5683] usb 4-1: Unknown endpoint type found, address 0x03 [ 551.367850][ T5683] usb 4-1: Not enough endpoints found in device, aborting! [ 551.562145][ T5751] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 551.584021][ T40] usb 4-1: USB disconnect, device number 17 [ 551.765101][ T5751] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 551.795602][ T5751] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 551.824150][ T5751] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.856404][ T5751] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 551.883419][ T5751] usb 2-1: config 1 has no interface number 0 [ 551.901972][ T5751] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 551.934489][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.007266][ T5751] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 552.212218][ T5751] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 552.242625][ T5751] snd_usb_pod 2-1:1.1: invalid control EP [ 552.248657][ T5751] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 552.257508][ T5751] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 552.287502][ T5751] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 552.422847][ T9] usb 2-1: USB disconnect, device number 17 [ 554.733120][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 554.891957][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 554.909007][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 554.922062][ T9] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 554.933041][ T9] usb 2-1: config 7 has no interface number 0 [ 554.939662][ T9] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 554.952249][ T9] usb 2-1: config 7 interface 187 has no altsetting 0 [ 554.969008][ T9] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 554.979363][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.990117][ T9] usb 2-1: Product: syz [ 554.995744][ T9] usb 2-1: Manufacturer: syz [ 555.001041][ T9] usb 2-1: SerialNumber: syz [ 555.224829][T11006] loop2: detected capacity change from 0 to 32768 [ 555.248411][ T9] usb 2-1: Unknown endpoint type found, address 0x07 [ 555.256158][ T9] usb 2-1: Unknown endpoint type found, address 0x03 [ 555.263238][ T9] usb 2-1: Not enough endpoints found in device, aborting! [ 555.278408][T11006] loop2: p1 p3 < > [ 555.463267][ T5751] usb 2-1: USB disconnect, device number 18 [ 555.775175][ T5782] udevd[5782]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 555.776810][ T6285] udevd[6285]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 556.271379][T11020] __nla_validate_parse: 5 callbacks suppressed [ 556.271459][T11020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2382'. [ 556.302584][T11020] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2382'. [ 556.432099][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 556.612984][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 556.649484][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 556.679139][ T9] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 556.702033][ T9] usb 4-1: config 7 has no interface number 0 [ 556.708439][ T9] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 556.719181][ T9] usb 4-1: config 7 interface 187 has no altsetting 0 [ 556.738226][ T9] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 556.765263][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.783446][ T9] usb 4-1: Product: syz [ 556.796269][ T9] usb 4-1: Manufacturer: syz [ 556.819289][ T9] usb 4-1: SerialNumber: syz [ 556.891167][T11027] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2403'. [ 556.901188][T11027] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2403'. [ 557.073974][ T9] usb 4-1: Unknown endpoint type found, address 0x07 [ 557.088092][ T9] usb 4-1: Unknown endpoint type found, address 0x03 [ 557.103933][ T9] usb 4-1: Not enough endpoints found in device, aborting! [ 557.273649][ T11] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 557.314942][ T5751] usb 4-1: USB disconnect, device number 18 [ 557.456214][ T11] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 557.490904][ T11] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 557.542120][ T11] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.563533][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 557.595628][ T11] usb 5-1: config 1 has no interface number 0 [ 557.610882][ T11] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 557.631092][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.706250][ T11] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 557.916153][ T11] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 557.958180][ T11] snd_usb_pod 5-1:1.1: invalid control EP [ 557.980173][ T11] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 558.004046][ T11] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 558.027841][ T11] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 558.141850][ T11] usb 5-1: USB disconnect, device number 13 [ 559.092706][T11057] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2406'. [ 559.145438][T11057] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2406'. [ 559.162295][T11061] binder: 11059:11061 unknown command 0 [ 559.192388][T11061] binder: 11059:11061 ioctl c0306201 80000040 returned -22 [ 559.667174][T11071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2422'. [ 559.737291][T11071] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2422'. [ 560.963811][ T11] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 561.159638][ T11] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 561.171329][ T11] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 561.193841][T11095] binder: 11093:11095 unknown command 0 [ 561.206160][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.217362][T11095] binder: 11093:11095 ioctl c0306201 80000040 returned -22 [ 561.241178][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 561.284878][ T11] usb 1-1: config 1 has no interface number 0 [ 561.327378][ T11] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 561.352732][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.417190][ T11] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 561.613633][ T11] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 561.652627][ T11] snd_usb_pod 1-1:1.1: invalid control EP [ 561.675100][ T11] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 561.695556][ T11] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 561.736430][ T11] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 561.880339][ T5751] usb 1-1: USB disconnect, device number 18 [ 563.281109][T11127] binder: 11125:11127 unknown command 0 [ 563.303111][T11127] binder: 11125:11127 ioctl c0306201 80000040 returned -22 [ 563.684692][T11133] binder: 11131:11133 unknown command 0 [ 563.714786][T11133] binder: 11131:11133 ioctl c0306201 80000040 returned -22 [ 564.702437][ T5751] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 564.717034][T11150] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2451'. [ 564.891294][ T5751] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 564.925469][ T5751] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 564.959965][ T5751] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.992616][ T5751] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 565.054636][ T5751] usb 4-1: config 1 has no interface number 0 [ 565.077817][ T5751] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 565.104648][ T5751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.165544][ T5751] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 565.352568][ T5751] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 565.379542][ T5751] snd_usb_pod 4-1:1.1: invalid control EP [ 565.386735][ T5751] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 565.395126][ T5751] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 565.406032][ T5751] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 565.585645][ T5751] usb 4-1: USB disconnect, device number 19 [ 566.313305][ T11] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 566.515595][ T11] usb 3-1: config 128 interface 0 has no altsetting 0 [ 566.536461][ T11] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 566.568283][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.815638][T11182] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2465'. [ 566.842358][ T11] comedi comedi5: could not set alternate setting 3 in high speed [ 566.881175][ T11] usbduxsigma 3-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 566.950629][ T11] usbduxsigma 3-1:128.0: probe with driver usbduxsigma failed with error -71 [ 566.996768][ T11] usb 3-1: USB disconnect, device number 14 [ 568.053586][ T5751] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 568.235075][ T5751] usb 2-1: config 128 interface 0 has no altsetting 0 [ 568.253245][ T5751] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 568.292507][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.591308][ T5751] comedi comedi5: could not set alternate setting 3 in high speed [ 568.622005][ T5751] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 568.686630][ T5751] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -71 [ 568.741903][ T5751] usb 2-1: USB disconnect, device number 19 [ 569.348785][T11221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2480'. [ 570.371570][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2486'. [ 571.562571][ T5751] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 571.807796][ T5751] usb 4-1: config 128 interface 0 has no altsetting 0 [ 571.828178][ T5751] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 571.866803][ T5751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.034579][T11267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2504'. [ 572.130855][ T5751] comedi comedi5: could not set alternate setting 3 in high speed [ 572.164058][ T5751] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 572.242375][ T5751] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -71 [ 572.287611][ T5751] usb 4-1: USB disconnect, device number 20 [ 572.354204][T11272] loop4: detected capacity change from 0 to 512 [ 572.441015][T11272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.472421][T11272] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.704219][ T5582] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.491965][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.499053][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.065065][T11317] loop0: detected capacity change from 0 to 512 [ 575.146321][T11317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.228908][T11317] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.437358][ T5576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.620042][T11327] loop1: detected capacity change from 0 to 512 [ 575.726853][T11327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.776638][T11327] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.923917][ T11] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 576.109206][ T11] usb 1-1: config 128 interface 0 has no altsetting 0 [ 576.149834][ T11] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 576.180261][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.189759][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.451156][ T11] comedi comedi5: could not set alternate setting 3 in high speed [ 576.480580][ T11] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 576.525739][ T11] usbduxsigma 1-1:128.0: probe with driver usbduxsigma failed with error -71 [ 576.585251][ T11] usb 1-1: USB disconnect, device number 19 [ 576.744332][T11343] loop4: detected capacity change from 0 to 512 [ 576.761419][T11345] loop3: detected capacity change from 0 to 16 [ 576.790029][T11343] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 576.829978][T11343] EXT4-fs (loop4): invalid journal inode [ 576.850062][T11343] EXT4-fs (loop4): can't get journal size [ 576.891133][T11343] EXT4-fs (loop4): 1 truncate cleaned up [ 576.942623][T11343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.139901][ T5582] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.463898][T11350] loop2: detected capacity change from 0 to 512 [ 577.537287][T11350] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 577.576438][T11350] EXT4-fs (loop2): invalid journal inode [ 577.594747][T11350] EXT4-fs (loop2): can't get journal size [ 577.636158][T11350] EXT4-fs (loop2): 1 truncate cleaned up [ 577.684007][T11350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.087342][ T5580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.419883][T11366] loop1: detected capacity change from 0 to 1024 [ 578.482942][T11366] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 578.519166][T11366] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 578.557410][T11366] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 578.608395][T11366] EXT4-fs error (device loop1): ext4_get_journal_inode:5900: inode #5: comm syz.1.2543: unexpected bad inode w/o EXT4_IGET_BAD [ 578.640132][T11366] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 578.641031][T11366] EXT4-fs (loop1): no journal found [ 578.650504][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 578.650597][ C1] EXT4-fs (loop1): initial error at time 1784521832: ext4_get_journal_inode:5900: inode 5 [ 578.650749][ C1] EXT4-fs (loop1): last error at time 1784521832: ext4_get_journal_inode:5900: inode 5 [ 578.719773][T11366] EXT4-fs (loop1): can't get journal size [ 578.770291][T11366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 578.937324][T11366] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 579.030954][T11375] loop4: detected capacity change from 0 to 16 [ 579.156210][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.759732][T11387] loop4: detected capacity change from 0 to 512 [ 579.883689][T11387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.918640][T11391] loop1: detected capacity change from 0 to 512 [ 579.947222][T11391] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 579.972857][T11387] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.984018][T11391] EXT4-fs (loop1): invalid journal inode [ 579.989981][T11391] EXT4-fs (loop1): can't get journal size [ 580.020328][T11391] EXT4-fs (loop1): 1 truncate cleaned up [ 580.049764][T11391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.157848][ T5582] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.431201][T11398] loop3: detected capacity change from 0 to 512 [ 580.510410][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.563236][T11398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.603542][T11398] ext4 filesystem being mounted at /509/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.060896][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.193587][T11410] loop2: detected capacity change from 0 to 1024 [ 581.275332][T11410] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 581.292590][T11410] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 581.334141][T11410] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 581.356362][T11410] EXT4-fs error (device loop2): ext4_get_journal_inode:5900: inode #5: comm syz.2.2563: unexpected bad inode w/o EXT4_IGET_BAD [ 581.373965][T11410] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 581.374808][T11410] EXT4-fs (loop2): no journal found [ 581.384306][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 581.384395][ C0] EXT4-fs (loop2): initial error at time 1784521834: ext4_get_journal_inode:5900: inode 5 [ 581.384546][ C0] EXT4-fs (loop2): last error at time 1784521834: ext4_get_journal_inode:5900: inode 5 [ 581.447542][T11410] EXT4-fs (loop2): can't get journal size [ 581.460294][T11410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 581.514565][T11410] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 581.833190][ T5580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.843769][T11421] loop0: detected capacity change from 0 to 16 [ 582.013121][T11423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2581'. [ 582.282921][T11428] xt_hashlimit: size too large, truncated to 1048576 [ 582.314021][T11428] xt_hashlimit: max too large, truncated to 1048576 [ 583.413664][T11445] loop2: detected capacity change from 0 to 512 [ 583.573181][T11445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.594487][T11445] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.841272][ T5580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.998333][T11453] loop4: detected capacity change from 0 to 2048 [ 584.069323][T11455] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 584.123060][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 584.123128][ T29] audit: type=1800 audit(1784521837.539:43): pid=11453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2582" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 584.127305][T11453] syz.4.2582: attempt to access beyond end of device [ 584.127305][T11453] loop4: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 584.213300][T11453] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15) [ 584.234179][T11453] NILFS (loop4): error -5 truncating bmap (ino=16) [ 585.714046][T11482] loop1: detected capacity change from 0 to 512 [ 585.802967][T11482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.890769][T11482] ext4 filesystem being mounted at /530/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.318763][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.467103][T11495] xt_hashlimit: size too large, truncated to 1048576 [ 586.495096][T11495] xt_hashlimit: max too large, truncated to 1048576 [ 586.754354][T11497] loop1: detected capacity change from 0 to 512 [ 586.854077][T11497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.937279][T11497] ext4 filesystem being mounted at /531/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.994076][T11499] loop2: detected capacity change from 0 to 2048 [ 587.116727][T11504] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 587.187312][ T29] audit: type=1800 audit(1784521840.599:44): pid=11499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2602" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 587.198642][T11499] syz.2.2602: attempt to access beyond end of device [ 587.198642][T11499] loop2: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 587.262769][T11499] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 587.331505][T11499] NILFS (loop2): error -5 truncating bmap (ino=16) [ 587.543328][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.986427][T11510] loop1: detected capacity change from 0 to 512 [ 588.125134][T11510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.154869][T11510] ext4 filesystem being mounted at /532/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.448877][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.296723][T11532] loop4: detected capacity change from 0 to 512 [ 589.368052][T11532] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 589.393367][T11532] ------------[ cut here ]------------ [ 589.399150][T11532] EA inode 11 i_nlink=2 [ 589.399252][T11532] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x7b5/0x890, CPU#0: syz.4.2619/11532 [ 589.415841][T11532] Modules linked in: [ 589.420008][T11532] CPU: 0 UID: 0 PID: 11532 Comm: syz.4.2619 Not tainted syzkaller #0 PREEMPT(lazy) [ 589.429837][T11532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 589.440275][T11532] RIP: 0010:ext4_xattr_inode_update_ref+0x827/0x890 [ 589.447247][T11532] Code: 06 00 00 44 89 ab 70 09 00 00 48 c7 83 80 0c 00 00 00 00 00 00 4d 85 f6 75 46 45 85 ff 75 55 48 8b 7d c0 48 8b 75 d0 8b 55 b8 <67> 48 0f b9 3a e9 b9 fd ff ff 44 89 e7 e8 97 ad 51 ff 89 c7 e8 b0 [ 589.467384][T11532] RSP: 0018:ffff888013753120 EFLAGS: 00010246 [ 589.473856][T11532] RAX: 0000000000000000 RBX: ffff88805343cf88 RCX: 0000000000ab5f6d [ 589.482328][T11532] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff93372cf0 [ 589.490483][T11532] RBP: ffff8880137531a0 R08: ffffea000000000f R09: 0000000000000000 [ 589.498817][T11532] R10: ffff888238890068 R11: ffffffff83611530 R12: 0000000000000000 [ 589.507151][T11532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 589.515494][T11532] FS: 0000000000000000(0000) GS:ffff8881a4b9a000(0063) knlGS:00000000f54adb40 [ 589.524805][T11532] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 589.531798][T11532] CR2: 00000000ed1b5000 CR3: 000000005400c000 CR4: 00000000003526f0 [ 589.539953][T11532] Call Trace: [ 589.544014][T11532] [ 589.547174][T11532] ext4_xattr_inode_dec_ref_all+0x101f/0x1880 [ 589.553742][T11532] ext4_xattr_delete_inode+0xd2b/0x14e0 [ 589.559569][T11532] ? ext4_truncate+0x1788/0x1c00 [ 589.565010][T11532] ext4_evict_inode+0x1f7d/0x2650 [ 589.570335][T11532] ? __pfx_ext4_evict_inode+0x10/0x10 [ 589.576241][T11532] evict+0x6df/0xcc0 [ 589.580411][T11532] ? kmsan_get_metadata+0xf1/0x160 [ 589.585973][T11532] iput+0x8ef/0xcb0 [ 589.590053][T11532] ext4_process_orphan+0x4a0/0x540 [ 589.595631][T11532] ext4_orphan_cleanup+0x1073/0x1e00 [ 589.601238][T11532] ext4_fill_super+0xa522/0xae20 [ 589.606709][T11532] ? kmsan_get_metadata+0xf1/0x160 [ 589.612230][T11532] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 589.618287][T11532] ? sb_set_blocksize+0x24e/0x390 [ 589.623850][T11532] get_tree_bdev_flags+0x6ef/0x930 [ 589.629237][T11532] ? __pfx_ext4_fill_super+0x10/0x10 [ 589.634915][T11532] ? __pfx_ext4_fill_super+0x10/0x10 [ 589.640423][T11532] ? __pfx_ext4_get_tree+0x10/0x10 [ 589.645952][T11532] get_tree_bdev+0x38/0x50 [ 589.650599][T11532] ext4_get_tree+0x35/0x40 [ 589.655464][T11532] vfs_get_tree+0xae/0x5d0 [ 589.660116][T11532] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 589.666619][T11532] do_new_mount+0x885/0x1dc0 [ 589.671528][T11532] ? apparmor_capable+0x2a2/0x380 [ 589.677002][T11532] ? kmsan_get_metadata+0xf1/0x160 [ 589.682544][T11532] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 589.688626][T11532] path_mount+0x7a2/0x20a0 [ 589.693731][T11532] ? user_path_at+0x1f5/0x330 [ 589.698728][T11532] __se_sys_mount+0x704/0x7f0 [ 589.703921][T11532] __ia32_sys_mount+0xec/0x180 [ 589.708962][T11532] ia32_sys_call+0x27fe/0x4360 [ 589.714303][T11532] __do_fast_syscall_32+0x195/0x470 [ 589.719874][T11532] do_fast_syscall_32+0x37/0x80 [ 589.725327][T11532] do_SYSENTER_32+0x1f/0x30 [ 589.730144][T11532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 589.736980][T11532] RIP: 0023:0xf70bf0ec [ 589.741231][T11532] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 589.761226][T11532] RSP: 002b:00000000f54ad360 EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 589.770128][T11532] RAX: ffffffffffffffda RBX: 00000000f54ad3c0 RCX: 00000000800001c0 [ 589.778437][T11532] RDX: 0000000080000180 RSI: 0000000000800718 RDI: 00000000f54ad400 [ 589.787163][T11532] RBP: 00000000f54ad3c0 R08: 0000000000000000 R09: 0000000000000000 [ 589.795497][T11532] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 589.803864][T11532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 589.812441][T11532] [ 589.815609][T11532] ---[ end trace 0000000000000000 ]--- [ 589.826811][T11531] loop2: detected capacity change from 0 to 4096 [ 589.843063][T11532] EXT4-fs (loop4): 1 orphan inode deleted [ 589.878351][T11532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.881902][T11537] loop0: detected capacity change from 0 to 2048 [ 589.886283][T11531] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 589.957207][T11540] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 590.019815][ T29] audit: type=1800 audit(1784521843.429:45): pid=11537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2621" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 590.053136][T11537] syz.0.2621: attempt to access beyond end of device [ 590.053136][T11537] loop0: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 590.114908][T11531] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 590.151488][T11531] ntfs3(loop2): ino=19, mi_enum_attr [ 590.167573][T11537] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 590.197948][T11542] xt_hashlimit: size too large, truncated to 1048576 [ 590.215813][T11537] NILFS (loop0): error -5 truncating bmap (ino=16) [ 590.239197][T11542] xt_hashlimit: max too large, truncated to 1048576 [ 590.338109][ T5582] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.348985][T11546] loop3: detected capacity change from 0 to 512 [ 591.464531][T11546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.519956][T11551] loop0: detected capacity change from 0 to 2048 [ 591.530685][T11546] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.662202][T11557] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 591.731593][ T29] audit: type=1800 audit(1784521845.139:46): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2635" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 591.753084][T11551] syz.0.2635: attempt to access beyond end of device [ 591.753084][T11551] loop0: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 591.838744][T11551] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 591.871551][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.873488][T11551] NILFS (loop0): error -5 truncating bmap (ino=16) [ 592.910895][T11573] loop1: detected capacity change from 0 to 512 [ 593.138036][T11573] EXT4-fs (loop1): 1 orphan inode deleted [ 593.195999][T11573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.467440][T11575] loop3: detected capacity change from 0 to 4096 [ 593.494258][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.519153][T11575] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 593.720351][T11575] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 593.750957][T11575] ntfs3(loop3): ino=19, mi_enum_attr [ 594.078119][T11590] loop1: detected capacity change from 0 to 512 [ 594.222805][T11590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.320550][T11590] ext4 filesystem being mounted at /539/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.376080][T11591] loop4: detected capacity change from 0 to 2048 [ 594.542657][T11597] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 594.615516][ T29] audit: type=1800 audit(1784521848.029:47): pid=11591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2645" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 594.645451][T11591] syz.4.2645: attempt to access beyond end of device [ 594.645451][T11591] loop4: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 594.706043][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.753644][T11591] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15) [ 594.814960][T11591] NILFS (loop4): error -5 truncating bmap (ino=16) [ 595.303032][T11605] loop1: detected capacity change from 0 to 512 [ 595.486724][T11605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.532493][T11605] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.787124][T11615] loop2: detected capacity change from 0 to 512 [ 596.007555][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.033331][T11615] EXT4-fs (loop2): 1 orphan inode deleted [ 596.074148][T11615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.534929][ T5580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.750278][T11628] loop3: detected capacity change from 0 to 2048 [ 596.845673][T11629] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 596.889949][T11628] syz.3.2661: attempt to access beyond end of device [ 596.889949][T11628] loop3: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 596.893074][ T29] audit: type=1800 audit(1784521850.299:48): pid=11628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2661" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 597.006491][T11628] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 597.038834][T11625] loop0: detected capacity change from 0 to 4096 [ 597.065678][T11628] NILFS (loop3): error -5 truncating bmap (ino=16) [ 597.108166][T11625] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 597.375383][T11625] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 597.431137][T11625] ntfs3(loop0): ino=19, mi_enum_attr [ 597.808008][T11641] loop2: detected capacity change from 0 to 512 [ 597.924197][T11641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.992299][T11641] ext4 filesystem being mounted at /543/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.238718][ T5580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.682504][T11655] loop1: detected capacity change from 0 to 512 [ 598.796490][T11655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.811026][T11659] loop3: detected capacity change from 0 to 512 [ 598.860116][T11655] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.896160][T11659] EXT4-fs (loop3): 1 orphan inode deleted [ 598.912555][T11659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.185584][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.340492][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.691187][T11671] loop1: detected capacity change from 0 to 512 [ 599.738367][T11670] loop0: detected capacity change from 0 to 512 [ 599.833387][T11671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.896155][T11671] ext4 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.952567][T11670] EXT4-fs (loop0): 1 orphan inode deleted [ 599.988763][T11670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.288099][ T5576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.301972][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.475306][T11683] loop3: detected capacity change from 0 to 512 [ 600.643300][T11683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.706094][T11683] ext4 filesystem being mounted at /530/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.004830][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.012523][T11684] loop4: detected capacity change from 0 to 4096 [ 601.081251][T11695] netlink: 'syz.2.2686': attribute type 4 has an invalid length. [ 601.102680][T11684] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 601.371285][T11684] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 601.413314][T11684] ntfs3(loop4): ino=19, mi_enum_attr [ 602.226570][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2695'. [ 602.266287][T11710] loop0: detected capacity change from 0 to 512 [ 602.401494][T11710] EXT4-fs (loop0): 1 orphan inode deleted [ 602.496998][T11710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.589217][T11721] loop1: detected capacity change from 0 to 512 [ 602.689800][T11721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.772345][T11721] ext4 filesystem being mounted at /550/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.876711][ T5576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.159436][T11729] netlink: 'syz.3.2702': attribute type 4 has an invalid length. [ 603.277570][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.730240][T11737] loop4: detected capacity change from 0 to 512 [ 603.804395][T11737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.833476][T11737] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 603.902814][T11742] netlink: 'syz.0.2718': attribute type 4 has an invalid length. [ 604.313108][ T5582] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.498555][T11745] loop1: detected capacity change from 0 to 4096 [ 604.526383][T11745] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 604.790702][T11745] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 604.799294][T11755] loop2: detected capacity change from 0 to 512 [ 604.847045][T11745] ntfs3(loop1): ino=19, mi_enum_attr [ 604.963012][T11755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.052528][T11755] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.427129][ T5580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.485729][T11764] loop3: detected capacity change from 0 to 64 [ 605.496700][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2711'. [ 606.302164][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2733'. [ 606.350463][T11777] netlink: 'syz.4.2721': attribute type 4 has an invalid length. [ 607.273831][T11795] loop4: detected capacity change from 0 to 512 [ 607.364723][T11795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.445941][T11795] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.517506][T11791] loop2: detected capacity change from 0 to 4096 [ 607.591561][T11791] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 607.608275][T11802] loop0: detected capacity change from 0 to 64 [ 607.679637][T11806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2737'. [ 607.858088][ T5582] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.899328][T11791] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 607.965991][T11791] ntfs3(loop2): ino=19, mi_enum_attr [ 608.828149][T11820] loop4: detected capacity change from 0 to 64 [ 609.194939][T11816] loop0: detected capacity change from 0 to 4096 [ 609.248857][T11816] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 609.340611][T11826] sctp: [Deprecated]: syz.1.2746 (pid 11826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 609.340611][T11826] Use struct sctp_sack_info instead [ 609.501944][T11816] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 609.547564][T11816] ntfs3(loop0): ino=19, mi_enum_attr [ 609.977048][T11831] loop3: detected capacity change from 0 to 512 [ 610.121224][T11831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.138494][T11831] ext4 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.295095][T11841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2752'. [ 610.365664][T11842] sctp: [Deprecated]: syz.0.2762 (pid 11842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 610.365664][T11842] Use struct sctp_sack_info instead [ 610.559183][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.753298][T11838] loop1: detected capacity change from 0 to 4096 [ 610.817985][T11838] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 610.979123][T11838] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 610.994791][T11847] sctp: [Deprecated]: syz.2.2768 (pid 11847) Use of struct sctp_assoc_value in delayed_ack socket option. [ 610.994791][T11847] Use struct sctp_sack_info instead [ 611.052698][T11838] ntfs3(loop1): ino=19, mi_enum_attr [ 611.581266][T11854] loop2: detected capacity change from 0 to 64 [ 612.710400][T11876] sctp: [Deprecated]: syz.3.2772 (pid 11876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 612.710400][T11876] Use struct sctp_sack_info instead [ 612.801515][T11880] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2774'. [ 612.834426][T11880] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2774'. [ 614.629146][T11911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2788'. [ 614.988408][T11912] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2787'. [ 615.030400][T11912] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2787'. [ 615.063617][T11919] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 616.418736][T11942] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2805'. [ 616.443373][T11945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2807'. [ 616.465493][T11942] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2805'. [ 616.728210][T11950] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 616.736873][T11950] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 618.094849][T11977] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2819'. [ 618.144993][T11977] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2819'. [ 618.379061][T11983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2822'. [ 618.429201][T11985] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 619.380180][T12004] netlink: 'syz.1.2834': attribute type 9 has an invalid length. [ 619.414947][T12004] netlink: 'syz.1.2834': attribute type 7 has an invalid length. [ 619.447020][T12004] netlink: 'syz.1.2834': attribute type 8 has an invalid length. [ 620.136384][T12015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2840'. [ 620.369311][T12013] loop0: detected capacity change from 0 to 4096 [ 620.411534][T12013] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 620.447831][T12019] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 620.472980][T12019] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 620.679921][T12013] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 620.719260][T12013] ntfs3(loop0): Failed to load $Extend (-22). [ 620.744846][T12013] ntfs3(loop0): Failed to initialize $Extend. [ 621.870253][T12044] netlink: 'syz.0.2851': attribute type 9 has an invalid length. [ 621.906356][T12044] netlink: 'syz.0.2851': attribute type 7 has an invalid length. [ 621.933811][T12044] netlink: 'syz.0.2851': attribute type 8 has an invalid length. [ 623.079641][T12058] loop2: detected capacity change from 0 to 4096 [ 623.123291][T12058] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 623.401203][T12058] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 623.441780][T12058] ntfs3(loop2): Failed to load $Extend (-22). [ 623.464257][T12058] ntfs3(loop2): Failed to initialize $Extend. [ 624.057495][T12080] netlink: 'syz.4.2869': attribute type 9 has an invalid length. [ 624.120843][T12080] netlink: 'syz.4.2869': attribute type 7 has an invalid length. [ 624.157386][T12080] netlink: 'syz.4.2869': attribute type 8 has an invalid length. [ 625.740366][T12098] loop3: detected capacity change from 0 to 4096 [ 625.779776][T12098] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 625.877901][T12113] netlink: 'syz.2.2885': attribute type 9 has an invalid length. [ 625.902301][T12113] netlink: 'syz.2.2885': attribute type 7 has an invalid length. [ 625.945849][T12113] netlink: 'syz.2.2885': attribute type 8 has an invalid length. [ 626.049535][T12098] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 626.084864][T12098] ntfs3(loop3): Failed to load $Extend (-22). [ 626.106118][T12098] ntfs3(loop3): Failed to initialize $Extend. [ 627.230694][T12132] netlink: 279 bytes leftover after parsing attributes in process `syz.1.2895'. [ 628.529297][T12148] loop4: detected capacity change from 0 to 4096 [ 628.570932][T12148] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 628.856913][T12148] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 628.894065][T12148] ntfs3(loop4): Failed to load $Extend (-22). [ 628.931420][T12148] ntfs3(loop4): Failed to initialize $Extend. [ 629.161359][T12164] netlink: 279 bytes leftover after parsing attributes in process `syz.3.2911'. [ 630.132315][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2917'. [ 631.380107][T12204] netlink: 279 bytes leftover after parsing attributes in process `syz.2.2930'. [ 631.752287][T12206] loop1: detected capacity change from 0 to 4096 [ 631.805027][T12206] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 632.028929][T12206] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 632.064164][T12206] ntfs3(loop1): Failed to load $Extend (-22). [ 632.082805][T12206] ntfs3(loop1): Failed to initialize $Extend. [ 632.386221][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2937'. [ 633.323978][T12225] loop1: detected capacity change from 0 to 4096 [ 633.350592][T12230] loop2: detected capacity change from 0 to 512 [ 633.373919][T12225] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 633.398352][T12232] loop3: detected capacity change from 0 to 256 [ 633.503142][T12232] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 633.518564][T12230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.545163][T12232] FAT-fs (loop3): Filesystem has been set read-only [ 633.568421][T12230] ext4 filesystem being mounted at /600/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.692902][T12225] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 633.744427][T12225] ntfs3(loop1): Failed to load $Extend (-22). [ 633.780565][T12225] ntfs3(loop1): Failed to initialize $Extend. [ 634.050866][ T5580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.580583][T12246] loop3: detected capacity change from 0 to 512 [ 634.596862][T12250] netlink: 279 bytes leftover after parsing attributes in process `syz.4.2947'. [ 634.694240][T12246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.790461][T12249] loop1: detected capacity change from 0 to 4096 [ 634.836529][T12246] ext4 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.867775][T12249] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 634.930428][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.937273][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.113707][T12249] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 635.141405][T12249] ntfs3(loop1): Failed to load $Extend (-22). [ 635.174363][T12249] ntfs3(loop1): Failed to initialize $Extend. [ 635.283626][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.550904][T12260] loop4: detected capacity change from 0 to 512 [ 635.747861][T12260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.813693][T12260] ext4 filesystem being mounted at /580/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.116213][T12270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 636.330445][ T5582] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.847804][T12278] loop4: detected capacity change from 0 to 256 [ 636.938775][T12278] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 636.974116][T12278] FAT-fs (loop4): Filesystem has been set read-only [ 637.145509][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2965'. [ 638.106629][T12301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2972'. [ 638.238810][T12303] loop0: detected capacity change from 0 to 512 [ 638.379648][T12303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.400785][T12303] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.403371][T12308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2974'. [ 638.644423][ T5576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.844275][T12314] loop2: detected capacity change from 0 to 256 [ 638.979976][T12314] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 639.024856][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2979'. [ 639.042797][T12314] FAT-fs (loop2): Filesystem has been set read-only [ 639.685306][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2983'. [ 640.167269][T12333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2987'. [ 640.496635][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2990'. [ 640.689709][T12343] loop1: detected capacity change from 0 to 512 [ 640.794329][T12343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.801151][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2992'. [ 640.825661][T12343] ext4 filesystem being mounted at /605/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.172518][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2993'. [ 641.267504][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.375793][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3005'. [ 641.479146][T12357] loop0: detected capacity change from 0 to 256 [ 641.574116][T12357] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 641.625798][T12357] FAT-fs (loop0): Filesystem has been set read-only [ 641.641458][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3008'. [ 643.376114][T12388] __nla_validate_parse: 3 callbacks suppressed [ 643.376194][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3012'. [ 643.447725][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3013'. [ 643.460980][T12389] loop1: detected capacity change from 0 to 256 [ 643.555966][T12389] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 643.602484][T12389] FAT-fs (loop1): Filesystem has been set read-only [ 644.246736][T12399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3016'. [ 644.283010][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 644.304450][T12397] loop4: detected capacity change from 0 to 256 [ 644.417167][T12397] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 644.500787][T12397] FAT-fs (loop4): Filesystem has been set read-only [ 644.937882][T12405] loop0: detected capacity change from 0 to 256 [ 645.046118][T12410] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3018'. [ 645.046611][T12405] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 645.102128][T12405] FAT-fs (loop0): Filesystem has been set read-only [ 645.546568][T12416] loop1: detected capacity change from 0 to 16 [ 645.597797][T12416] erofs (device loop1): mounted with root inode @ nid 36. [ 645.735930][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3027'. [ 646.299716][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3031'. [ 646.707227][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3034'. [ 647.415632][T12445] loop1: detected capacity change from 0 to 256 [ 647.492574][T12449] loop0: detected capacity change from 0 to 16 [ 647.505925][T12445] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 647.517132][T12449] erofs (device loop0): mounted with root inode @ nid 36. [ 647.549542][T12445] FAT-fs (loop1): Filesystem has been set read-only [ 648.868893][T12471] xt_limit: Overflow, try lower: 4294967288/39251 [ 648.901883][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3052'. [ 649.555157][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3065'. [ 649.653910][T12482] loop2: detected capacity change from 0 to 16 [ 649.726634][T12482] erofs (device loop2): mounted with root inode @ nid 36. [ 650.552242][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3071'. [ 651.413670][T12515] xt_limit: Overflow, try lower: 4294967288/39251 [ 651.425172][T12512] loop4: detected capacity change from 0 to 764 [ 651.500378][T12512] Symlink component flag not implemented [ 651.532580][T12512] Symlink component flag not implemented [ 651.553969][T12512] Symlink component flag not implemented (129) [ 651.575829][T12512] Symlink component flag not implemented (6) [ 652.460537][T12534] loop3: detected capacity change from 0 to 16 [ 652.508695][T12534] erofs (device loop3): mounted with root inode @ nid 36. [ 653.092603][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3077'. [ 653.610301][T12549] xt_limit: Overflow, try lower: 4294967288/39251 [ 653.781401][T12551] loop3: detected capacity change from 0 to 764 [ 653.918005][T12551] Symlink component flag not implemented [ 653.949112][T12551] Symlink component flag not implemented [ 653.974879][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3095'. [ 653.988095][T12551] Symlink component flag not implemented (129) [ 654.032218][T12551] Symlink component flag not implemented (6) [ 654.728837][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3099'. [ 654.895868][T12572] loop3: detected capacity change from 0 to 256 [ 654.951021][T12572] exfat: Deprecated parameter 'utf8' [ 654.978510][T12572] exfat: Deprecated parameter 'utf8' [ 655.003561][T12572] exfat: Deprecated parameter 'utf8' [ 655.126834][T12572] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 656.315111][T12595] xt_limit: Overflow, try lower: 4294967288/39251 [ 657.042567][T12605] loop0: detected capacity change from 0 to 764 [ 657.151398][T12605] Symlink component flag not implemented [ 657.183021][T12605] Symlink component flag not implemented [ 657.210771][T12605] Symlink component flag not implemented (129) [ 657.247535][T12605] Symlink component flag not implemented (6) [ 657.619436][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3107'. [ 657.735641][T12616] loop2: detected capacity change from 0 to 256 [ 657.790781][T12616] exfat: Deprecated parameter 'utf8' [ 657.851533][T12616] exfat: Deprecated parameter 'utf8' [ 657.890197][T12616] exfat: Deprecated parameter 'utf8' [ 658.034172][T12616] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 659.432920][T12630] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 659.641005][T12644] loop1: detected capacity change from 0 to 764 [ 659.774333][T12644] Symlink component flag not implemented [ 659.803260][T12644] Symlink component flag not implemented [ 659.821118][T12644] Symlink component flag not implemented (129) [ 659.847008][T12644] Symlink component flag not implemented (6) [ 660.257068][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3126'. [ 660.520696][T12657] loop1: detected capacity change from 0 to 256 [ 660.548637][T12657] exfat: Deprecated parameter 'utf8' [ 660.567834][T12657] exfat: Deprecated parameter 'utf8' [ 660.600492][T12657] exfat: Deprecated parameter 'utf8' [ 660.681969][ T5590] Bluetooth: hci0: command 0x0406 tx timeout [ 660.713405][T12657] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 662.045652][T12667] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 662.259377][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3143'. [ 662.803931][T12693] loop4: detected capacity change from 0 to 256 [ 662.841524][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3156'. [ 662.849268][T12693] exfat: Deprecated parameter 'utf8' [ 662.878976][T12693] exfat: Deprecated parameter 'utf8' [ 662.904994][T12693] exfat: Deprecated parameter 'utf8' [ 662.974722][T12693] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 663.314127][T12699] ieee802154 phy0 wpan0: encryption failed: -22 [ 663.323499][ T5590] Bluetooth: hci0: command 0x0406 tx timeout [ 663.655601][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3160'. [ 664.467048][T12717] ip6erspan0: entered allmulticast mode [ 665.338440][T12734] ieee802154 phy0 wpan0: encryption failed: -22 [ 665.406226][T12723] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 665.717290][T12738] ieee802154 phy0 wpan0: encryption failed: -22 [ 665.766566][T12742] binder: 12740:12742 ioctl c018620c 0 returned -14 [ 666.303004][T12750] ip6erspan0: entered allmulticast mode [ 666.588412][T12756] binder: 12752:12756 ioctl c018620c 0 returned -14 [ 666.681953][ T5590] Bluetooth: hci0: command 0x0406 tx timeout [ 667.251455][T12768] ieee802154 phy0 wpan0: encryption failed: -22 [ 668.139732][T12770] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 668.239135][T12782] ip6erspan0: entered allmulticast mode [ 668.356960][T12786] binder: 12784:12786 ioctl c018620c 0 returned -14 [ 669.047659][T12800] ieee802154 phy0 wpan0: encryption failed: -22 [ 669.065994][ T29] audit: type=1326 audit(1784521922.479:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.4.3198" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 669.180477][ T29] audit: type=1326 audit(1784521922.479:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.4.3198" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 669.275163][ T29] audit: type=1326 audit(1784521922.509:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.4.3198" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 669.352560][ T29] audit: type=1326 audit(1784521922.509:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.4.3198" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 669.412577][ T5590] Bluetooth: hci0: command 0x0406 tx timeout [ 670.364389][T12823] ip6erspan0: entered allmulticast mode [ 670.768282][T12828] binder: 12826:12828 ioctl c018620c 0 returned -14 [ 671.259435][T12838] ieee802154 phy0 wpan0: encryption failed: -22 [ 671.260070][ T29] audit: type=1326 audit(1784521924.669:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.1.3213" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb70ec code=0x7ffc0000 [ 671.401296][ T29] audit: type=1326 audit(1784521924.709:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.1.3213" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb70ec code=0x7ffc0000 [ 671.481036][ T29] audit: type=1326 audit(1784521924.729:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.1.3213" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb70ec code=0x7ffc0000 [ 671.585246][ T29] audit: type=1326 audit(1784521924.729:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.1.3213" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=231 compat=1 ip=0xf7fb70ec code=0x7ffc0000 [ 671.762500][ T29] audit: type=1326 audit(1784521924.729:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.1.3213" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb70ec code=0x7ffc0000 [ 671.891821][ T29] audit: type=1326 audit(1784521924.729:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.1.3213" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb70ec code=0x7ffc0000 [ 671.958532][T12850] binder: 12847:12850 ioctl 40046210 0 returned -14 [ 672.193631][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3219'. [ 672.676437][T12863] ===================================================== [ 672.683730][T12863] BUG: KMSAN: kernel-infoleak in irqentry_exit+0x34f/0xa40 [ 672.691123][T12863] irqentry_exit+0x34f/0xa40 [ 672.695873][T12863] exc_page_fault+0x7e/0xb0 [ 672.700532][T12863] asm_exc_page_fault+0x2b/0x30 [ 672.705494][T12863] [ 672.707869][T12863] Local variable end_time.i.i created at: [ 672.713642][T12863] __x64_sys_poll+0x87/0x540 [ 672.718380][T12863] x64_sys_call+0x3130/0x3ea0 [ 672.723189][T12863] [ 672.725557][T12863] Bytes 0-3 of 4 are uninitialized [ 672.730734][T12863] Memory access of size 4 starts at ffff8880649afe8c [ 672.737489][T12863] Data copied to user address 00007f1bee8a1adc [ 672.743714][T12863] [ 672.746126][T12863] CPU: 0 UID: 0 PID: 12863 Comm: dhcpcd-run-hook Tainted: G W syzkaller #0 PREEMPT(lazy) [ 672.757653][T12863] Tainted: [W]=WARN [ 672.761517][T12863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 672.771676][T12863] ===================================================== [ 672.778695][T12863] Disabling lock debugging due to kernel taint [ 672.784947][T12863] Kernel panic - not syncing: kmsan.panic set ... [ 672.791478][T12863] CPU: 0 UID: 0 PID: 12863 Comm: dhcpcd-run-hook Tainted: G B W syzkaller #0 PREEMPT(lazy) [ 672.803023][T12863] Tainted: [B]=BAD_PAGE, [W]=WARN [ 672.808114][T12863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 672.818264][T12863] Call Trace: [ 672.821612][T12863] [ 672.824622][T12863] __dump_stack+0x26/0x30 [ 672.829104][T12863] dump_stack_lvl+0x50/0x1c0 [ 672.833824][T12863] ? dump_stack+0x12/0x25 [ 672.838289][T12863] dump_stack+0x1e/0x25 [ 672.842654][T12863] vpanic+0x7b8/0x1430 [ 672.846905][T12863] panic+0x15d/0x160 [ 672.850984][T12863] kmsan_report+0x31a/0x320 [ 672.855625][T12863] ? kmsan_internal_check_memory+0x1e4/0x240 [ 672.861798][T12863] ? kmsan_copy_to_user+0xef/0x190 [ 672.867036][T12863] ? irqentry_exit+0x34f/0xa40 [ 672.871965][T12863] ? exc_page_fault+0x7e/0xb0 [ 672.876802][T12863] ? asm_exc_page_fault+0x2b/0x30 [ 672.881953][T12863] ? finish_task_switch+0x5c7/0xc70 [ 672.887338][T12863] ? __switch_to+0x5ba/0x7f0 [ 672.892135][T12863] ? __schedule+0x298a/0x8660 [ 672.897027][T12863] ? kmsan_get_shadow_origin_ptr+0x20/0xb0 [ 672.903017][T12863] ? kmsan_get_metadata+0xf1/0x160 [ 672.908291][T12863] kmsan_internal_check_memory+0x1e4/0x240 [ 672.914309][T12863] kmsan_copy_to_user+0xef/0x190 [ 672.919383][T12863] irqentry_exit+0x34f/0xa40 [ 672.924165][T12863] ? kmsan_save_stack_with_flags+0x1/0x60 [ 672.930102][T12863] exc_page_fault+0x7e/0xb0 [ 672.934781][T12863] asm_exc_page_fault+0x2b/0x30 [ 672.939753][T12863] RIP: 0033:0x7f1beea759d0 [ 672.944267][T12863] Code: 88 fe ff 48 85 c0 74 0a 48 83 c4 08 c3 0f 1f 44 00 00 48 8b 15 19 54 0c 00 64 83 3a 22 75 e9 e8 f6 f3 ff ff 66 0f 1f 44 00 00 <55> 48 89 fd 53 89 f3 48 83 ec 08 e8 90 35 f3 ff 8b 45 40 85 c0 75 [ 672.964015][T12863] RSP: 002b:00007ffe97a8d848 EFLAGS: 00010202 [ 672.970210][T12863] RAX: 0000560ee221c910 RBX: 0000560ee2231e80 RCX: 0000560b82ccef00 [ 672.978298][T12863] RDX: 00007f1beec0b460 RSI: 0000000000000001 RDI: 00007ffe97a8e140 [ 672.986372][T12863] RBP: 0000000000000000 R08: 0000000000000020 R09: 0000000000000000 [ 672.994436][T12863] R10: 00007f1beeae1fe0 R11: 00007f1beeae28e0 R12: 0000560ee221c910 [ 673.002528][T12863] R13: 0000560ee221cc30 R14: 0000000000000002 R15: 0000000000000000 [ 673.010633][T12863] [ 673.014016][T12863] Kernel Offset: disabled [ 673.018424][T12863] Rebooting in 86400 seconds..