last executing test programs: 3.628701208s ago: executing program 4 (id=8797): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff0300610d6991ff9e14ff0200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 3.232677913s ago: executing program 4 (id=8800): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002200)={0x24, &(0x7f00000020c0)={0x0, 0xb, 0xb, {0xb, 0x23, "1fd9c82066453110d8"}}, 0x0, 0x0, 0x0}, 0x0) 1.554848452s ago: executing program 0 (id=8824): r0 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0xd, @sliced={0x0, [0x8, 0x1, 0x1, 0x5, 0x20, 0x5, 0x6, 0x1cf, 0x4, 0xa488, 0x200, 0x1, 0x8000, 0x8, 0xa1ed, 0xc0e, 0x8, 0xbf, 0x7d, 0x26d, 0x1, 0x401, 0xf8, 0x0, 0x40, 0x3ff, 0x3, 0xddde, 0x81, 0x3ff, 0x1, 0xfccf, 0x4, 0x5, 0x5, 0x7fff, 0x80, 0xfbff, 0x7, 0xff, 0x8, 0x7, 0x6, 0xfff, 0x4, 0x4, 0x16, 0x10], 0x401}}) 1.441701463s ago: executing program 1 (id=8827): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@empty, @in=@remote, 0x4e24, 0x80, 0x4e20, 0x7, 0x2}, {0x0, 0x5, 0x5, 0x401, 0x0, 0x0, 0x1, 0x8}, {0x7, 0x3, 0x5, 0x10001}, 0xffffbbd9, 0x6e6bba, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, 0x2, @in6=@empty, 0x3506, 0x2, 0x2, 0x6, 0xfffffff8, 0x0, 0x88a0}}, 0xe8) 1.318021115s ago: executing program 4 (id=8828): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.282180245s ago: executing program 0 (id=8829): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) 1.236379096s ago: executing program 2 (id=8830): unshare(0x2040400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) 1.190874336s ago: executing program 3 (id=8831): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) 1.190425106s ago: executing program 1 (id=8832): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@allocspi={0x100, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@empty, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@migrate={0x4, 0x1b}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}]}, 0x100}}, 0x4808) 982.783349ms ago: executing program 0 (id=8833): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x79, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x2, 0x55595659, 0x0, 0x5, [{}, {}, {}, {0x5}, {}, {}, {0x4000000}, {0x40000000}], 0x0, 0x5}}) 982.444219ms ago: executing program 2 (id=8834): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280), &(0x7f0000000380)=0x8) 981.780159ms ago: executing program 3 (id=8835): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) rt_sigpending(0x0, 0x0) 890.94751ms ago: executing program 1 (id=8836): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x46, 0x86, 0x1}) 840.27976ms ago: executing program 4 (id=8837): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000001a000100000000000000000002001000fe86ff030032000006001c004e240000080006000000000008000b000700000005001b000100000005001b000100000008001900", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x48005}, 0x0) 770.820201ms ago: executing program 0 (id=8838): r0 = socket$alg(0x26, 0x5, 0x0) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x12002) 740.764361ms ago: executing program 2 (id=8839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x2}) 740.227131ms ago: executing program 3 (id=8840): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 626.077873ms ago: executing program 1 (id=8841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000037c0)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 559.500684ms ago: executing program 0 (id=8842): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000001040)={[{@dmask}, {@dmask={'dmask', 0x3d, 0x6}}, {}, {@utf8}, {@fmask={'fmask', 0x3d, 0xd}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") chmod(&(0x7f0000000040)='./file0\x00', 0x167) 546.200694ms ago: executing program 3 (id=8843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000c40)={0x14, 0x2, 0x8, 0x29565da4a63f20f, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40e0840}, 0x4000840) 535.669054ms ago: executing program 4 (id=8844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030069087a300000000060000000060a010400000000000000000500400008000b400000000038000480340001800b00010074756e6e656c0000240002800800034000000000080001400000000908000340000000f5080002400000000c0900010073797a30"], 0xd4}}, 0x0) 499.641624ms ago: executing program 2 (id=8845): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f906, 0x0, '\x00', @p_u32=0x0}}) 328.969076ms ago: executing program 4 (id=8846): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5f", 0x18}], 0x1}}], 0x1, 0x20000044) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c0030904000003020200000b410600004ed9d401246005240004000d240f01f006aac09d0c000000090581032000037fff09058202000000010009050302"], 0x0) 328.415456ms ago: executing program 1 (id=8847): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000000080)) 260.951787ms ago: executing program 2 (id=8848): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x109440, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) 260.354717ms ago: executing program 3 (id=8849): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@setneightbl={0x24, 0x43, 0x401, 0x70bd26, 0x25dfdbfe, {0xa}, [@NDTA_NAME={0xf, 0x1, 'time_offset'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2c0480c4}, 0x0) 77.046079ms ago: executing program 1 (id=8850): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2004000, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYBLOB="76e6299582673a17dc165b52126d9b5ebefaffce7591b3e858ec5ed1c0bcfbb28bb8b0771b9d7bafda74268d068808dfeb2186c0cb22ce6d409cafb470c8dbeee8adbd992946fcbac0d8526cacf256ba422844b1f83d45e058a5c282098be693631c1a9abe0347be4d78f840ad5fe1b5b66ec21a3649b537497775cba62faf8223fa64df6cc1c3ff32e60c28cc9db40351dbc9460f90ff5c82bfc19be3daf82609d615a9d272f9693791b73c9265ccca96d673ec071275dfc825d56bb3ae3b200390", @ANYRES32=0x0, @ANYRESHEX], 0x9, 0x226, &(0x7f0000000140)="$eJzs20tu00Acx/GfU8epy/u1YQMSSLAhKWmk0B09ABdgV6VuVeFSRNm0QqorJO7BHRASO24CSxYUwQmM/EriEjuOTR7A9yOl+Wfk38wo6riTKiMA/63L4U9Dhuph5fv+8W1JT59IMnOj1kwmCGBqfCNa9Fms6On7h3Tzcn4KwN9h6cfo9kbmAv+YFLX+XcCawsQATNnpxlK4D/hkSJ9/vu59ix/1gvuH042atKQvphe9TvKWtFwof2KEzzfNQTZ4NJTuwPAy9i/vovw9pfN20fnH46+cya+MCwYfmSRbJ7Xw5f076fw5SeclXZB0UdKl+LPWFUlXkx7k9cffOjP+jYLzB6oIfvuaqZZCyzadb+Zc0MjPB6tne9d1VicadaAe5x9OkLk7VFtxvl1y/CS/VjLfiPPN3r67lXnV45K9A/lqUseokC+d3e/2yyrr3yyx/gFEDg6Pnm26brLdd52Xccv4opZ/jV20n2qFPdGcM4pkz2NoJnMeVRzPY9DRhe9Lf6Cf5E0NWkzf0/jU24mGCG79QXErHmcR3rrihb0Y08guBveI92+S1QHgX9J6tfeidXB49GB3b3PH2XGetzvrjzpr7U53vbXddZ3VVpXdOYBFNvijLxX5n3n+V4IAAAAAAAAAAAAAAMA8XJN0fd6TAAAAADAT5U4IGfFRoKTla0+/nZzzhr5ZPIRDRAAAAAAAAAAAAAAAAAAAAEBpvwIAAP//cZUsSg==") rename(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') 34.170099ms ago: executing program 0 (id=8851): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, 0x20) 23.25072ms ago: executing program 3 (id=8852): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 0s ago: executing program 2 (id=8853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000180)}, 0x20) kernel console output (not intermixed with test programs): 1029.000357][T22247] loop2: p38 start 4294966396 is beyond EOD, truncated [ 1029.007770][T22247] loop2: p39 start 4294966396 is beyond EOD, truncated [ 1029.019557][T22247] loop2: p40 start 4294966396 is beyond EOD, truncated [ 1029.026934][T22247] loop2: p41 start 4294966396 is beyond EOD, truncated [ 1029.034312][T22247] loop2: p42 start 4294966396 is beyond EOD, truncated [ 1029.041372][T22247] loop2: p43 start 4294966396 is beyond EOD, truncated [ 1029.042552][ T4448] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1029.048772][T22247] loop2: p44 start 4294966396 is beyond EOD, truncated [ 1029.062591][T22247] loop2: p45 start 4294966396 is beyond EOD, truncated [ 1029.063857][ T4448] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1029.070589][T22247] loop2: p46 start 4294966396 is beyond EOD, truncated [ 1029.070618][T22247] loop2: p47 start 4294966396 is beyond EOD, truncated [ 1029.070638][T22247] loop2: p48 start 4294966396 is beyond EOD, truncated [ 1029.070658][T22247] loop2: p49 start 4294966396 is beyond EOD, truncated [ 1029.070678][T22247] loop2: p50 start 4294966396 is beyond EOD, truncated [ 1029.070696][T22247] loop2: p51 start 4294966396 is beyond EOD, [ 1029.078264][ T4448] usb 5-1: unit 2 not found! [ 1029.090367][T22247] truncated [ 1029.127216][T22247] loop2: p52 start 4294966396 is beyond EOD, truncated [ 1029.134852][T22247] loop2: p53 start 4294966396 is beyond EOD, truncated [ 1029.142517][T22247] loop2: p54 start 4294966396 is beyond EOD, truncated [ 1029.151941][T22247] loop2: p55 start 4294966396 is beyond EOD, truncated [ 1029.161109][T22247] loop2: p56 start 4294966396 is beyond EOD, truncated [ 1029.161346][ T4448] usb 5-1: USB disconnect, device number 122 [ 1029.168585][T22247] loop2: p57 start 4294966396 is beyond EOD, truncated [ 1029.200303][T22247] loop2: p58 start 4294966396 is beyond EOD, truncated [ 1029.207694][T22247] loop2: p59 start 4294966396 is beyond EOD, truncated [ 1029.214600][T22247] loop2: p60 start 4294966396 is beyond EOD, truncated [ 1029.222083][T22247] loop2: p61 start 4294966396 is beyond EOD, truncated [ 1029.229194][T22247] loop2: p62 start 4294966396 is beyond EOD, truncated [ 1029.236305][T22247] loop2: p63 start 4294966396 is beyond EOD, truncated [ 1029.245721][T22247] loop2: p64 start 4294966396 is beyond EOD, truncated [ 1029.256861][T22247] loop2: p65 start 4294966396 is beyond EOD, truncated [ 1029.267351][T22247] loop2: p66 start 4294966396 is beyond EOD, truncated [ 1029.289061][T22247] loop2: p67 start 4294966396 is beyond EOD, truncated [ 1029.308275][T22247] loop2: p68 start 4294966396 is beyond EOD, truncated [ 1029.322898][T22247] loop2: p69 start 4294966396 is beyond EOD, truncated [ 1029.337877][T22247] loop2: p70 start 4294966396 is beyond EOD, truncated [ 1029.339326][T22252] set_capacity_and_notify: 1 callbacks suppressed [ 1029.339340][T22252] loop1: detected capacity change from 0 to 1024 [ 1029.345308][ T6659] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1029.366113][T22247] loop2: p71 start 4294966396 is beyond EOD, truncated [ 1029.373594][T22247] loop2: p72 start 4294966396 is beyond EOD, truncated [ 1029.385625][T22252] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 1029.385640][T22247] loop2: p73 start 4294966396 is beyond EOD, truncated [ 1029.403239][T22247] loop2: p74 start 4294966396 is beyond EOD, truncated [ 1029.423433][T22247] loop2: p75 start 4294966396 is beyond EOD, truncated [ 1029.451925][T22247] loop2: p76 start 4294966396 is beyond EOD, truncated [ 1029.458875][T22247] loop2: p77 start 4294966396 is beyond EOD, truncated [ 1029.493503][T22247] loop2: p78 start 4294966396 is beyond EOD, truncated [ 1029.500958][T22247] loop2: p79 start 4294966396 is beyond EOD, truncated [ 1029.515713][T22247] loop2: p80 start 4294966396 is beyond EOD, truncated [ 1029.522735][T22247] loop2: p81 start 4294966396 is beyond EOD, truncated [ 1029.535842][T22247] loop2: p82 start 4294966396 is beyond EOD, truncated [ 1029.542950][T22247] loop2: p83 start 4294966396 is beyond EOD, truncated [ 1029.575396][T22247] loop2: p84 start 4294966396 is beyond EOD, truncated [ 1029.586148][T22247] loop2: p85 start 4294966396 is beyond EOD, truncated [ 1029.607824][T22247] loop2: p86 start 4294966396 is beyond EOD, truncated [ 1029.619165][ T6659] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1029.635152][T22247] loop2: p87 start 4294966396 is beyond EOD, truncated [ 1029.642394][ T6659] usb 4-1: not running at top speed; connect to a high speed hub [ 1029.656830][T22247] loop2: p88 start 4294966396 is beyond EOD, truncated [ 1029.664355][ T6659] usb 4-1: config 4 has an invalid interface number: 228 but max is 0 [ 1029.688245][T22247] loop2: p89 start 4294966396 is beyond EOD, truncated [ 1029.695221][T22247] loop2: p90 start 4294966396 is beyond EOD, truncated [ 1029.702221][ T6659] usb 4-1: config 4 has no interface number 0 [ 1029.708381][ T6659] usb 4-1: config 4 interface 228 has no altsetting 0 [ 1029.716186][T22247] loop2: p91 start 4294966396 is beyond EOD, truncated [ 1029.732988][ T6659] usb 4-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=5b.c4 [ 1029.745105][T22256] loop0: detected capacity change from 0 to 8192 [ 1029.751947][T22247] loop2: p92 start 4294966396 is beyond EOD, truncated [ 1029.754601][T22258] loop1: detected capacity change from 0 to 128 [ 1029.759109][ T6659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.773905][T22247] loop2: p93 start 4294966396 is beyond EOD, truncated [ 1029.781076][ T6659] usb 4-1: Product: syz [ 1029.785342][ T6659] usb 4-1: Manufacturer: syz [ 1029.790005][T22247] loop2: p94 start 4294966396 is beyond EOD, truncated [ 1029.806471][ T6659] usb 4-1: SerialNumber: syz [ 1029.808557][T22247] loop2: p95 start 4294966396 is beyond EOD, truncated [ 1029.824230][T22256] Dev loop0: RDB in block 1 has bad checksum [ 1029.845799][T22247] loop2: p96 start 4294966396 is beyond EOD, truncated [ 1029.865946][T22247] loop2: p97 start 4294966396 is beyond EOD, truncated [ 1029.916531][T22247] loop2: p98 start 4294966396 is beyond EOD, truncated [ 1029.923486][T22247] loop2: p99 start 4294966396 is beyond EOD, truncated [ 1029.984864][T22247] loop2: p100 start 4294966396 is beyond EOD, truncated [ 1030.023313][T22247] loop2: p101 start 4294966396 is beyond EOD, truncated [ 1030.030364][T22247] loop2: p102 start 4294966396 is beyond EOD, truncated [ 1030.045931][ T6659] quatech2 4-1:4.228: Quatech 2nd gen USB to Serial Driver converter detected [ 1030.066424][ T6659] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1030.079638][T22247] loop2: p103 start 4294966396 is beyond EOD, truncated [ 1030.099603][ T6659] quatech2: probe of 4-1:4.228 failed with error -71 [ 1030.121544][T22247] loop2: p104 start 4294966396 is beyond EOD, truncated [ 1030.145158][T22247] loop2: p105 start 4294966396 is beyond EOD, truncated [ 1030.157286][ T6659] usb 4-1: USB disconnect, device number 14 [ 1030.166831][T22247] loop2: p106 start 4294966396 is beyond EOD, truncated [ 1030.204150][T22247] loop2: p107 start 4294966396 is beyond EOD, truncated [ 1030.242026][T22247] loop2: p108 start 4294966396 is beyond EOD, truncated [ 1030.243602][T22266] loop4: detected capacity change from 0 to 1024 [ 1030.263840][T22247] loop2: p109 start 4294966396 is beyond EOD, truncated [ 1030.296182][T22266] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1030.300807][T22247] loop2: p110 start 4294966396 is beyond EOD, truncated [ 1030.339112][T22266] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 1030.360163][T22266] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: comm syz.4.8032: inode #1: comm syz.4.8032: iget: illegal inode # [ 1030.370401][T22247] loop2: p111 start 4294966396 is beyond EOD, truncated [ 1030.384816][T22266] EXT4-fs (loop4): no journal found [ 1030.413786][T22247] loop2: p112 start 4294966396 is beyond EOD, truncated [ 1030.428954][T22266] EXT4-fs (loop4): can't get journal size [ 1030.435041][T22247] loop2: p113 start 4294966396 is beyond EOD, truncated [ 1030.445125][T22247] loop2: p114 start 4294966396 is beyond EOD, truncated [ 1030.453647][T22266] EXT4-fs (loop4): failed to initialize system zone (-22) [ 1030.460896][T22266] EXT4-fs (loop4): mount failed [ 1030.468885][T22247] loop2: p115 start 4294966396 is beyond EOD, truncated [ 1030.477093][T22247] loop2: p116 start 4294966396 is beyond EOD, truncated [ 1030.504940][T22247] loop2: p117 start 4294966396 is beyond EOD, truncated [ 1030.515902][T22247] loop2: p118 start 4294966396 is beyond EOD, truncated [ 1030.523171][T22247] loop2: p119 start 4294966396 is beyond EOD, truncated [ 1030.530859][T22247] loop2: p120 start 4294966396 is beyond EOD, truncated [ 1030.540002][T22247] loop2: p121 start 4294966396 is beyond EOD, truncated [ 1030.547104][T22247] loop2: p122 start 4294966396 is beyond EOD, truncated [ 1030.569481][T22247] loop2: p123 start 4294966396 is beyond EOD, truncated [ 1030.612495][ T4448] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1030.631012][T22247] loop2: p124 start 4294966396 is beyond EOD, truncated [ 1030.640075][T22247] loop2: p125 start 4294966396 is beyond EOD, truncated [ 1030.669496][T22247] loop2: p126 start 4294966396 is beyond EOD, truncated [ 1030.689335][T22247] loop2: p127 start 4294966396 is beyond EOD, truncated [ 1030.697000][T22247] loop2: p128 start 4294966396 is beyond EOD, truncated [ 1030.707186][T22247] loop2: p129 start 4294966396 is beyond EOD, truncated [ 1030.715176][T22247] loop2: p130 start 4294966396 is beyond EOD, truncated [ 1030.724155][T22247] loop2: p131 start 4294966396 is beyond EOD, truncated [ 1030.742703][T22247] loop2: p132 start 4294966396 is beyond EOD, truncated [ 1030.749814][T22247] loop2: p133 start 4294966396 is beyond EOD, truncated [ 1030.784490][T22247] loop2: p134 start 4294966396 is beyond EOD, truncated [ 1030.802758][T22247] loop2: p135 start 4294966396 is beyond EOD, truncated [ 1030.819934][T22247] loop2: p136 start 4294966396 is beyond EOD, truncated [ 1030.833089][ T4448] usb 1-1: Using ep0 maxpacket: 16 [ 1030.840352][ T4448] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 1030.847878][T22264] loop1: detected capacity change from 0 to 32768 [ 1030.848471][ T4448] usb 1-1: config 0 has no interface number 0 [ 1030.865161][T22247] loop2: p137 start 4294966396 is beyond EOD, truncated [ 1030.891630][T22247] loop2: p138 start 4294966396 is beyond EOD, truncated [ 1030.898995][T22247] loop2: p139 start 4294966396 is beyond EOD, truncated [ 1030.911357][T22247] loop2: p140 start 4294966396 is beyond EOD, truncated [ 1030.921168][T22247] loop2: p141 start 4294966396 is beyond EOD, truncated [ 1030.922384][ T4448] usb 1-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.953367][T22247] loop2: p142 start 4294966396 is beyond EOD, truncated [ 1030.965387][ T4448] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1030.966181][T22264] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 1030.982275][ T4448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.993485][ T4448] usb 1-1: Product: syz [ 1030.998017][ T4448] usb 1-1: Manufacturer: syz [ 1031.003511][ T4448] usb 1-1: SerialNumber: syz [ 1031.010576][ T4448] usb 1-1: config 0 descriptor?? [ 1031.016623][T22247] loop2: p143 start 4294966396 is beyond EOD, truncated [ 1031.025858][T22247] loop2: p144 start 4294966396 is beyond EOD, truncated [ 1031.035659][T22247] loop2: p145 start 4294966396 is beyond EOD, truncated [ 1031.043186][T22247] loop2: p146 start 4294966396 is beyond EOD, truncated [ 1031.051135][T22247] loop2: p147 start 4294966396 is beyond EOD, truncated [ 1031.059067][ T4448] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1031.074528][T22247] loop2: p148 start 4294966396 is beyond EOD, truncated [ 1031.081815][T22247] loop2: p149 start 4294966396 is beyond EOD, truncated [ 1031.117724][T22247] loop2: p150 start 4294966396 is beyond EOD, truncated [ 1031.142055][T22247] loop2: p151 start 4294966396 is beyond EOD, truncated [ 1031.200372][T22247] loop2: p152 start 4294966396 is beyond EOD, truncated [ 1031.246694][T22247] loop2: p153 start 4294966396 is beyond EOD, truncated [ 1031.253768][T22247] loop2: p154 start 4294966396 is beyond EOD, truncated [ 1031.309893][ T4440] XFS (loop1): Unmounting Filesystem [ 1031.325829][ T9855] usb 1-1: Failed to submit usb control message: -71 [ 1031.325983][ T6659] usb 1-1: USB disconnect, device number 7 [ 1031.343032][ T9855] usb 1-1: unable to send the bmi data to the device: -71 [ 1031.343460][T22247] loop2: p155 start 4294966396 is beyond EOD, [ 1031.350186][ T9855] usb 1-1: unable to get target info from device [ 1031.350234][ T9855] usb 1-1: could not get target info (-71) [ 1031.385826][T22247] truncated [ 1031.395836][T22247] loop2: p156 start 4294966396 is beyond EOD, truncated [ 1031.417213][T22247] loop2: p157 start 4294966396 is beyond EOD, truncated [ 1031.424819][ T9855] usb 1-1: could not probe fw (-71) [ 1031.437931][T22247] loop2: p158 start 4294966396 is beyond EOD, truncated [ 1031.445772][T22247] loop2: p159 start 4294966396 is beyond EOD, truncated [ 1031.453501][T22247] loop2: p160 start 4294966396 is beyond EOD, truncated [ 1031.468732][T22247] loop2: p161 start 4294966396 is beyond EOD, truncated [ 1031.476403][ T4448] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1031.520272][T22247] loop2: p162 start 4294966396 is beyond EOD, truncated [ 1031.541868][T22247] loop2: p163 start 4294966396 is beyond EOD, truncated [ 1031.550722][T22247] loop2: p164 start 4294966396 is beyond EOD, truncated [ 1031.558131][T22247] loop2: p165 start 4294966396 is beyond EOD, truncated [ 1031.565191][T22247] loop2: p166 start 4294966396 is beyond EOD, truncated [ 1031.573402][T22247] loop2: p167 start 4294966396 is beyond EOD, truncated [ 1031.581254][T22247] loop2: p168 start 4294966396 is beyond EOD, truncated [ 1031.588454][T22247] loop2: p169 start 4294966396 is beyond EOD, truncated [ 1031.595891][T22247] loop2: p170 start 4294966396 is beyond EOD, truncated [ 1031.604838][T22247] loop2: p171 start 4294966396 is beyond EOD, truncated [ 1031.623906][T22247] loop2: p172 start 4294966396 is beyond EOD, truncated [ 1031.631204][T22247] loop2: p173 start 4294966396 is beyond EOD, truncated [ 1031.632803][T22280] loop4: detected capacity change from 0 to 32768 [ 1031.653442][T22280] (syz.4.8036,22280,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1031.687198][T22247] loop2: p174 start 4294966396 is beyond EOD, truncated [ 1031.702884][T22280] (syz.4.8036,22280,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1031.716061][T22247] loop2: p175 start 4294966396 is beyond EOD, truncated [ 1031.725606][ T4448] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.738720][T22247] loop2: p176 start 4294966396 is beyond EOD, truncated [ 1031.751561][ T4448] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1031.756853][T22247] loop2: p177 start 4294966396 is beyond EOD, truncated [ 1031.775850][T22280] JBD2: Ignoring recovery information on journal [ 1031.782311][ T4448] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1031.801845][T22247] loop2: p178 start 4294966396 is beyond EOD, truncated [ 1031.807376][ T4448] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1031.819258][ T4448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.827383][ T4448] usb 4-1: Product: syz [ 1031.831721][ T4448] usb 4-1: Manufacturer: syz [ 1031.836404][ T4448] usb 4-1: SerialNumber: syz [ 1031.851916][ T4448] usb 4-1: config 0 descriptor?? [ 1031.857476][T22247] loop2: p179 start 4294966396 is beyond EOD, truncated [ 1031.865719][T22247] loop2: p180 start 4294966396 is beyond EOD, truncated [ 1031.874773][ T4448] uvcvideo 4-1:0.0: Found Unit with invalid ID 0 [ 1031.881824][ T4448] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 1031.888435][ T4448] usb 4-1: No valid video chain found. [ 1031.896014][T22247] loop2: p181 start 4294966396 is beyond EOD, truncated [ 1031.904953][T22247] loop2: p182 start 4294966396 is beyond EOD, truncated [ 1031.911972][T22247] loop2: p183 start 4294966396 is beyond EOD, truncated [ 1031.919444][T22247] loop2: p184 start 4294966396 is beyond EOD, truncated [ 1031.928506][T22247] loop2: p185 start 4294966396 is beyond EOD, truncated [ 1031.943541][T22247] loop2: p186 start 4294966396 is beyond EOD, truncated [ 1031.952329][T22280] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 1031.964666][T22280] (syz.4.8036,22280,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb728926a, computed 0xd422ce46. Applying ECC. [ 1031.978763][T22247] loop2: p187 start 4294966396 is beyond EOD, truncated [ 1031.985755][T22247] loop2: p188 start 4294966396 is beyond EOD, truncated [ 1031.993009][T22280] (syz.4.8036,22280,0):ocfs2_local_check_quota_file:192 ERROR: quota file version does not match (16777216 != 0), type=0 [ 1032.009252][T22247] loop2: p189 start 4294966396 is beyond EOD, truncated [ 1032.016253][T22247] loop2: p190 start 4294966396 is beyond EOD, truncated [ 1032.034446][T22280] (syz.4.8036,22280,0):ocfs2_enable_quotas:939 ERROR: status = -22 [ 1032.062950][T22247] loop2: p191 start 4294966396 is beyond EOD, truncated [ 1032.070126][T22280] (syz.4.8036,22280,0):ocfs2_fill_super:1143 ERROR: status = -22 [ 1032.100466][T22247] loop2: p192 start 4294966396 is beyond EOD, truncated [ 1032.116236][ T4448] usb 4-1: USB disconnect, device number 15 [ 1032.123196][T22247] loop2: p193 start 4294966396 is beyond EOD, truncated [ 1032.136763][T22280] ocfs2: Unmounting device (7,4) on (node local) [ 1032.147818][T22247] loop2: p194 start 4294966396 is beyond EOD, truncated [ 1032.178860][T22247] loop2: p195 start 4294966396 is beyond EOD, truncated [ 1032.187468][T22247] loop2: p196 start 4294966396 is beyond EOD, truncated [ 1032.194652][T22247] loop2: p197 start 4294966396 is beyond EOD, truncated [ 1032.201746][T22247] loop2: p198 start 4294966396 is beyond EOD, truncated [ 1032.208848][T22247] loop2: p199 start 4294966396 is beyond EOD, truncated [ 1032.227011][T22247] loop2: p200 start 4294966396 is beyond EOD, truncated [ 1032.245085][T22247] loop2: p201 start 4294966396 is beyond EOD, truncated [ 1032.265537][T22247] loop2: p202 start 4294966396 is beyond EOD, truncated [ 1032.283673][T22247] loop2: p203 start 4294966396 is beyond EOD, truncated [ 1032.299355][T22247] loop2: p204 start 4294966396 is beyond EOD, truncated [ 1032.317283][T22247] loop2: p205 start 4294966396 is beyond EOD, truncated [ 1032.325146][T22247] loop2: p206 start 4294966396 is beyond EOD, truncated [ 1032.369374][T22247] loop2: p207 start 4294966396 is beyond EOD, truncated [ 1032.377392][T22247] loop2: p208 start 4294966396 is beyond EOD, truncated [ 1032.385090][T22247] loop2: p209 start 4294966396 is beyond EOD, truncated [ 1032.393151][T22247] loop2: p210 start 4294966396 is beyond EOD, truncated [ 1032.400313][T22247] loop2: p211 start 4294966396 is beyond EOD, truncated [ 1032.407567][T22247] loop2: p212 start 4294966396 is beyond EOD, truncated [ 1032.414605][T22247] loop2: p213 start 4294966396 is beyond EOD, truncated [ 1032.421779][T22247] loop2: p214 start 4294966396 is beyond EOD, truncated [ 1032.429009][T22247] loop2: p215 start 4294966396 is beyond EOD, truncated [ 1032.436084][T22247] loop2: p216 start 4294966396 is beyond EOD, truncated [ 1032.460599][T22247] loop2: p217 start 4294966396 is beyond EOD, truncated [ 1032.477775][T22247] loop2: p218 start 4294966396 is beyond EOD, truncated [ 1032.496135][T22247] loop2: p219 start 4294966396 is beyond EOD, truncated [ 1032.503171][T22247] loop2: p220 start 4294966396 is beyond EOD, truncated [ 1032.539920][T22247] loop2: p221 start 4294966396 is beyond EOD, truncated [ 1032.547145][T22247] loop2: p222 start 4294966396 is beyond EOD, truncated [ 1032.554399][T22247] loop2: p223 start 4294966396 is beyond EOD, truncated [ 1032.594358][T22247] loop2: p224 start 4294966396 is beyond EOD, truncated [ 1032.623910][T22247] loop2: p225 start 4294966396 is beyond EOD, truncated [ 1032.641846][T22247] loop2: p226 start 4294966396 is beyond EOD, truncated [ 1032.652693][T22247] loop2: p227 start 4294966396 is beyond EOD, truncated [ 1032.685179][T22247] loop2: p228 start 4294966396 is beyond EOD, truncated [ 1032.718588][T22247] loop2: p229 start 4294966396 is beyond EOD, truncated [ 1032.725624][T22247] loop2: p230 start 4294966396 is beyond EOD, truncated [ 1032.793100][T22247] loop2: p231 start 4294966396 is beyond EOD, truncated [ 1032.815180][T22247] loop2: p232 start 4294966396 is beyond EOD, truncated [ 1032.836639][T22247] loop2: p233 start 4294966396 is beyond EOD, truncated [ 1032.848552][T22247] loop2: p234 start 4294966396 is beyond EOD, truncated [ 1032.855738][T22247] loop2: p235 start 4294966396 is beyond EOD, truncated [ 1032.895938][T22247] loop2: p236 start 4294966396 is beyond EOD, truncated [ 1032.918139][T22247] loop2: p237 start 4294966396 is beyond EOD, truncated [ 1032.944049][T22247] loop2: p238 start 4294966396 is beyond EOD, truncated [ 1032.951111][T22247] loop2: p239 start 4294966396 is beyond EOD, truncated [ 1032.976175][T22247] loop2: p240 start 4294966396 is beyond EOD, truncated [ 1032.983250][T22247] loop2: p241 start 4294966396 is beyond EOD, truncated [ 1033.008344][T22247] loop2: p242 start 4294966396 is beyond EOD, truncated [ 1033.015681][T22247] loop2: p243 start 4294966396 is beyond EOD, truncated [ 1033.062188][T22247] loop2: p244 start 4294966396 is beyond EOD, truncated [ 1033.069233][T22247] loop2: p245 start 4294966396 is beyond EOD, truncated [ 1033.099030][T22314] loop0: detected capacity change from 0 to 128 [ 1033.105054][T22247] loop2: p246 start 4294966396 is beyond EOD, truncated [ 1033.121796][T22247] loop2: p247 start 4294966396 is beyond EOD, truncated [ 1033.130920][T22247] loop2: p248 start 4294966396 is beyond EOD, truncated [ 1033.149470][T22314] hpfs: hpfs_map_sector(): read error [ 1033.164616][T22247] loop2: p249 start 4294966396 is beyond EOD, truncated [ 1033.182803][T22247] loop2: p250 start 4294966396 is beyond EOD, [ 1033.182807][T22314] hpfs: filesystem error: can't load hotfix map [ 1033.182830][T22247] truncated [ 1033.182840][T22247] loop2: p251 start 4294966396 is beyond EOD, [ 1033.189038][T22314] ; already mounted read-only [ 1033.206502][T22314] hpfs: hpfs_map_sector(): read error [ 1033.234200][ T8290] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1033.250779][T22247] truncated [ 1033.253984][T22247] loop2: p252 start 4294966396 is beyond EOD, truncated [ 1033.282570][T22247] loop2: p253 start 4294966396 is beyond EOD, truncated [ 1033.298477][T22247] loop2: p254 start 4294966396 is beyond EOD, truncated [ 1033.305530][T22247] loop2: p255 start 4294966396 is beyond EOD, truncated [ 1033.400600][T22296] loop1: detected capacity change from 0 to 40427 [ 1033.438413][ T8290] usb 5-1: Using ep0 maxpacket: 16 [ 1033.464659][ T8290] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.481528][T22296] F2FS-fs (loop1): build fault injection attr: rate: 2, type: 0x3ffff [ 1033.489866][T22296] F2FS-fs (loop1): build fault injection attr: rate: 6, type: 0x3ffff [ 1033.523472][ T8290] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1033.556460][T22296] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2 [ 1033.582063][ T8290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.611268][T22296] F2FS-fs (loop1): invalid crc value [ 1033.627581][ T8290] usb 5-1: Product: syz [ 1033.634731][T22324] loop0: detected capacity change from 0 to 128 [ 1033.645673][ T8290] usb 5-1: Manufacturer: syz [ 1033.662334][ T8290] usb 5-1: SerialNumber: syz [ 1033.668540][T22296] F2FS-fs (loop1) : inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4175/0x6b40 [ 1033.684667][ T8290] usb 5-1: config 0 descriptor?? [ 1033.692030][T22296] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12) [ 1033.844621][T22328] ecryptfs_parse_options: eCryptfs: unrecognized option [(] [ 1033.863255][T22328] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 1033.888016][T22328] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1033.910015][ T6659] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1033.942613][T22328] Error parsing options; rc = [-22] [ 1033.954211][ T8290] usb 5-1: USB disconnect, device number 123 [ 1034.007178][ T4816] udevd[4816]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1034.044252][ T4523] udevd[4523]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1034.145529][ T6659] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1034.166501][ T6659] usb 4-1: config 8 has no interface number 0 [ 1034.182833][ T6659] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1034.233182][ T6659] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1034.253012][ T6659] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1034.270470][ T6659] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1034.290970][ T6659] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.326730][T22322] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1034.403566][T22336] loop2: detected capacity change from 0 to 4096 [ 1034.429577][T22336] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1034.469675][T22336] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1034.501733][ T4448] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1034.559523][ T6659] usb 4-1: string descriptor 0 read error: -71 [ 1034.585127][ T6659] ir_toy 4-1:8.177: required endpoints not found [ 1034.613857][ T6659] usb 4-1: USB disconnect, device number 16 [ 1034.716598][ T4448] usb 2-1: Using ep0 maxpacket: 32 [ 1034.732052][T22330] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.8056 (22330) [ 1034.754726][ T4448] usb 2-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1034.775044][ T4448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.796375][T22330] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1034.808538][ T4448] usb 2-1: Product: syz [ 1034.813701][ T4448] usb 2-1: Manufacturer: syz [ 1034.818825][T22330] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1034.835345][ T4448] usb 2-1: SerialNumber: syz [ 1034.855047][T22330] BTRFS info (device loop0): using free space tree [ 1035.060441][T22330] BTRFS info (device loop0): enabling ssd optimizations [ 1035.086081][ T4448] usb 2-1: MIDIStreaming interface descriptor not found [ 1035.244784][ T4448] usb 2-1: USB disconnect, device number 10 [ 1035.455594][ T4434] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1035.544236][T22351] set_capacity_and_notify: 1 callbacks suppressed [ 1035.544255][T22351] loop4: detected capacity change from 0 to 32768 [ 1035.588163][T22351] BTRFS: device fsid 59b5568a-a427-4554-b73a-27dcd238cc5a devid 1 transid 8 /dev/loop4 scanned by syz.4.8062 (22351) [ 1035.621629][T22340] loop2: detected capacity change from 0 to 32768 [ 1035.973992][T22340] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop2 scanned by syz.2.8061 (22340) [ 1035.989597][T22351] BTRFS info (device loop4): first mount of filesystem 59b5568a-a427-4554-b73a-27dcd238cc5a [ 1036.000981][T22351] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1036.009809][T22351] BTRFS info (device loop4): using free space tree [ 1036.046751][T22340] BTRFS info (device loop2): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 1036.081000][T22340] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1036.123809][T22340] BTRFS info (device loop2): using free space tree [ 1036.252763][ T8291] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1036.304775][T22351] BTRFS info (device loop4): enabling ssd optimizations [ 1036.343648][T22362] loop3: detected capacity change from 0 to 32768 [ 1036.451792][T22362] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1036.467597][ T8291] usb 2-1: Using ep0 maxpacket: 8 [ 1036.480375][ T8291] usb 2-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=11.58 [ 1036.492619][ T8291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.501400][ T8291] usb 2-1: Product: syz [ 1036.505612][ T8291] usb 2-1: Manufacturer: syz [ 1036.510252][ T8291] usb 2-1: SerialNumber: syz [ 1036.535459][ T8291] usb 2-1: config 0 descriptor?? [ 1036.541527][T22362] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1036.552188][T22340] BTRFS info (device loop2): enabling ssd optimizations [ 1036.556074][ T8291] pwc: Logitech QuickCam Pro 3000 USB webcam detected. [ 1036.566255][T22362] BTRFS info (device loop3): using free space tree [ 1036.573153][ T4446] BTRFS info (device loop4): last unmount of filesystem 59b5568a-a427-4554-b73a-27dcd238cc5a [ 1036.776687][ T8291] pwc: Failed to set LED on/off time (-71) [ 1036.783988][ T8291] pwc: send_video_command error -71 [ 1036.789257][ T8291] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1036.828951][ T8291] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 1036.905566][ T8291] usb 2-1: USB disconnect, device number 11 [ 1037.042295][T22362] BTRFS info (device loop3): enabling ssd optimizations [ 1037.083443][T22370] loop0: detected capacity change from 0 to 32768 [ 1037.090931][ T4437] BTRFS info (device loop2): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 1037.106995][T22370] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop0 scanned by syz.0.8064 (22370) [ 1037.163349][T22370] BTRFS info (device loop0): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 1037.164849][ T4689] BTRFS: device fsid 59b5568a-a427-4554-b73a-27dcd238cc5a devid 1 transid 9 /dev/loop4 scanned by udevd (4689) [ 1037.220083][T22370] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1037.268470][T22370] BTRFS info (device loop0): using free space tree [ 1037.611716][ T4523] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 9 /dev/loop2 scanned by udevd (4523) [ 1037.624432][ T4436] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1037.745144][T22370] BTRFS info (device loop0): enabling ssd optimizations [ 1038.294505][ T4434] BTRFS info (device loop0): last unmount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 1038.540119][T22436] loop1: detected capacity change from 0 to 32768 [ 1038.617084][T22436] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop1 scanned by syz.1.8069 (22436) [ 1038.783438][T22422] loop4: detected capacity change from 0 to 32768 [ 1038.841243][ T6656] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1038.864866][T22422] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.8066 (22422) [ 1038.874445][T22436] BTRFS info (device loop1): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1038.921168][T22436] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1038.954245][T22422] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1038.963213][T22436] BTRFS info (device loop1): using free space tree [ 1039.024169][T22422] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1039.050580][T22422] BTRFS info (device loop4): using free space tree [ 1039.077403][ T6656] usb 3-1: Using ep0 maxpacket: 32 [ 1039.092178][ T6656] usb 3-1: config 5 has an invalid interface number: 75 but max is 0 [ 1039.157957][ T6656] usb 3-1: config 5 has no interface number 0 [ 1039.180101][ T6656] usb 3-1: config 5 interface 75 has no altsetting 0 [ 1039.203760][ T6656] usb 3-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=29.cc [ 1039.227691][ T6656] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.236712][ T6656] usb 3-1: Product: syz [ 1039.247902][ T6656] usb 3-1: Manufacturer: syz [ 1039.252903][ T6656] usb 3-1: SerialNumber: syz [ 1039.288421][T22422] BTRFS info (device loop4): enabling ssd optimizations [ 1039.390570][T22450] loop3: detected capacity change from 0 to 32768 [ 1039.403623][T22436] BTRFS info (device loop1): enabling ssd optimizations [ 1039.496299][ T4816] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1039.497618][ T6656] ums-cypress 3-1:5.75: USB Mass Storage device detected [ 1039.569264][ T4446] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1039.622391][ T4440] BTRFS info (device loop1): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1039.663697][ T6656] usb 3-1: USB disconnect, device number 112 [ 1039.870895][T17226] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1040.127804][T17226] usb 1-1: Using ep0 maxpacket: 16 [ 1040.142795][T17226] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1040.195936][T17226] usb 1-1: config 7 has an invalid interface number: 48 but max is 0 [ 1040.243087][T17226] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.257628][T17226] usb 1-1: config 7 has no interface number 0 [ 1040.280242][T17226] usb 1-1: config 7 interface 48 has no altsetting 0 [ 1040.329766][T17226] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 1040.376832][T17226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.384887][T17226] usb 1-1: Product: syz [ 1040.419408][T17226] usb 1-1: Manufacturer: syz [ 1040.430478][T17226] usb 1-1: SerialNumber: syz [ 1040.454652][T22503] loop2: detected capacity change from 0 to 16 [ 1040.515116][T22503] erofs: (device loop2): mounted with root inode @ nid 36. [ 1040.607032][T22506] loop3: detected capacity change from 0 to 16 [ 1040.633103][T22506] erofs: (device loop3): mounted with root inode @ nid 36. [ 1040.688475][ T8289] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1040.729129][T17226] cdc_phonet: probe of 1-1:7.48 failed with error -22 [ 1040.739511][T22510] loop2: detected capacity change from 0 to 512 [ 1040.745717][T17226] usb 1-1: USB disconnect, device number 8 [ 1040.842094][T22510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1040.892326][ T8289] usb 2-1: Using ep0 maxpacket: 16 [ 1040.899507][ T8289] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1040.913802][ T8291] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1040.921795][ T8289] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.933169][ T8289] usb 2-1: config 0 has no interface number 0 [ 1040.941831][ T8289] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1040.962337][ T8289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.978196][ T8289] usb 2-1: Product: syz [ 1040.982667][ T8289] usb 2-1: Manufacturer: syz [ 1040.989358][ T8289] usb 2-1: SerialNumber: syz [ 1040.996534][ T8289] usb 2-1: config 0 descriptor?? [ 1041.004366][ T4437] EXT4-fs (loop2): unmounting filesystem. [ 1041.119330][ T8291] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1041.123657][T22517] loop2: detected capacity change from 0 to 512 [ 1041.172072][ T8291] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1041.181444][ T8291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1041.192839][ T8291] usb 5-1: SerialNumber: syz [ 1041.216721][T22517] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1041.240377][ T8291] usb 5-1: bad CDC descriptors [ 1041.274482][T22515] loop3: detected capacity change from 0 to 32768 [ 1041.287734][ T8291] usb 2-1: USB disconnect, device number 12 [ 1041.295476][T22515] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.8081 (22515) [ 1041.356679][T22515] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1041.367190][T22515] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1041.375957][T22515] BTRFS info (device loop3): using free space tree [ 1041.400569][ T4437] EXT4-fs (loop2): unmounting filesystem. [ 1041.422112][T22523] loop0: detected capacity change from 0 to 1024 [ 1041.458785][T17226] usb 5-1: USB disconnect, device number 124 [ 1041.469743][T22523] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1041.618039][T22515] BTRFS info (device loop3): enabling ssd optimizations [ 1041.622173][T22539] loop2: detected capacity change from 0 to 1024 [ 1041.635703][T22539] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 1041.666315][ T4434] EXT4-fs (loop0): unmounting filesystem. [ 1041.803834][ T4436] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1041.912674][T22544] loop0: detected capacity change from 0 to 1024 [ 1041.949890][T22544] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 1041.998951][ T4523] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop3 scanned by udevd (4523) [ 1042.596844][T22553] loop0: detected capacity change from 0 to 1024 [ 1042.637113][T22553] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 1042.912506][T22557] loop0: detected capacity change from 0 to 512 [ 1042.978777][T22557] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1043.074819][T22543] loop2: detected capacity change from 0 to 32768 [ 1043.128839][T22543] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by syz.2.8086 (22543) [ 1043.160768][ T4434] EXT4-fs (loop0): unmounting filesystem. [ 1043.187910][T22546] loop1: detected capacity change from 0 to 32768 [ 1043.238907][T22543] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 1043.297562][T22543] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1043.306336][T22543] BTRFS info (device loop2): using free space tree [ 1043.332974][T22564] loop0: detected capacity change from 0 to 512 [ 1043.383556][T22549] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.8089 (22549) [ 1043.413761][T22564] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1043.446894][T22546] XFS (loop1): Mounting V5 Filesystem [ 1043.500525][T22549] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1043.565279][T22549] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1043.617923][T22546] XFS (loop1): Ending clean mount [ 1043.636470][T22549] BTRFS info (device loop4): using free space tree [ 1043.661477][T22543] BTRFS info (device loop2): enabling ssd optimizations [ 1043.720370][ T4434] EXT4-fs (loop0): unmounting filesystem. [ 1043.781664][T22555] o2cb: This node has not been configured. [ 1043.787755][T22555] o2cb: Cluster check failed. Fix errors before retrying. [ 1043.833269][ T4440] XFS (loop1): Unmounting Filesystem [ 1043.848162][T22555] (syz.3.8091,22555,0):ocfs2_dlm_init:3356 ERROR: status = -22 [ 1043.860259][T22555] (syz.3.8091,22555,0):ocfs2_mount_volume:1792 ERROR: status = -22 [ 1043.890034][T22555] (syz.3.8091,22555,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1043.934559][ T4437] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 1044.059996][T22549] BTRFS info (device loop4): enabling ssd optimizations [ 1044.268217][T22605] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1044.407852][T22611] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1044.435801][ T4446] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1044.458526][ T4434] EXT4-fs (loop0): unmounting filesystem. [ 1044.819294][T22618] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 1044.984460][ T4436] EXT4-fs (loop3): unmounting filesystem. [ 1045.341578][T22623] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1045.361014][T22625] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 1045.441788][T22623] ext4 filesystem being mounted at /1560/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.509487][T22628] FAT-fs (loop4): bogus logical sector size 0 [ 1045.515656][T22628] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1045.569251][T22628] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1045.708869][ T4436] EXT4-fs (loop3): unmounting filesystem. [ 1045.724065][ T8297] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1045.961948][ T8297] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 1045.970237][ T8297] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.008148][T22616] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop2 scanned by syz.2.8096 (22616) [ 1046.020801][ T8297] usb 1-1: config 0 has no interface number 0 [ 1046.042642][ T8297] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1046.082812][ T8297] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1046.099786][ T8297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.129834][ T8297] usb 1-1: config 0 descriptor?? [ 1046.149271][T22616] BTRFS info (device loop2): first mount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 1046.170668][T22616] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1046.195457][T22616] BTRFS info (device loop2): using free space tree [ 1046.218432][ T8297] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1046.431063][ T9] usb 1-1: Failed to submit usb control message: -71 [ 1046.431304][T17226] usb 1-1: USB disconnect, device number 9 [ 1046.440960][ T9] usb 1-1: unable to send the bmi data to the device: -71 [ 1046.463475][ T9] usb 1-1: unable to get target info from device [ 1046.474349][ T9] usb 1-1: could not get target info (-71) [ 1046.499465][ T9] usb 1-1: could not probe fw (-71) [ 1046.594491][T22616] BTRFS info (device loop2): enabling ssd optimizations [ 1046.608298][T22632] set_capacity_and_notify: 9 callbacks suppressed [ 1046.608316][T22632] loop1: detected capacity change from 0 to 32768 [ 1046.680143][T22632] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.8095 (22632) [ 1046.738016][T22632] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1046.767177][T22632] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1046.795423][T22632] BTRFS info (device loop1): using free space tree [ 1046.866927][ T4437] BTRFS info (device loop2): last unmount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 1047.111402][T22632] BTRFS info (device loop1): enabling ssd optimizations [ 1047.379114][T22636] loop4: detected capacity change from 0 to 32768 [ 1047.420198][T22636] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop4 scanned by syz.4.8105 (22636) [ 1047.494945][ T4440] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1047.505675][T22636] BTRFS info (device loop4): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 1047.528303][T22634] loop3: detected capacity change from 0 to 32768 [ 1047.537756][T22636] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1047.587353][T22634] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1047.615327][T22636] BTRFS info (device loop4): using free space tree [ 1047.654384][T22634] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1047.819522][T22634] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1048.012454][ T6658] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1048.019290][ T6658] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1048.063422][T22636] BTRFS info (device loop4): enabling ssd optimizations [ 1048.336255][ T6658] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 295ms [ 1048.366668][ T6658] gfs2: fsid=syz:syz.0: jid=0: Done [ 1048.371974][T22634] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1048.573658][ T4446] BTRFS info (device loop4): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 1048.639643][T22678] loop0: detected capacity change from 0 to 32768 [ 1048.899706][T22680] loop2: detected capacity change from 0 to 32768 [ 1048.959462][T22678] XFS (loop0): Mounting V5 Filesystem [ 1049.033570][T22680] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 1049.073561][T22680] CPU: 1 PID: 22680 Comm: syz.2.8107 Not tainted syzkaller #0 [ 1049.081359][T22680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1049.091463][T22680] Call Trace: [ 1049.094917][T22680] [ 1049.097976][T22680] dump_stack_lvl+0x188/0x24e [ 1049.102705][T22680] ? show_regs_print_info+0x12/0x12 [ 1049.107963][T22680] ? load_image+0x400/0x400 [ 1049.112531][T22680] sysfs_create_dir_ns+0x26a/0x290 [ 1049.117689][T22680] ? sysfs_warn_dup+0xa0/0xa0 [ 1049.122423][T22680] ? do_raw_spin_unlock+0x11d/0x230 [ 1049.127679][T22680] kobject_add_internal+0x61c/0xcc0 [ 1049.133025][T22680] kobject_init_and_add+0x128/0x190 [ 1049.138319][T22680] ? lockdep_softirqs_off+0x430/0x430 [ 1049.143841][T22680] ? kobject_add+0x230/0x230 [ 1049.148477][T22680] ? __init_swait_queue_head+0xa5/0x150 [ 1049.154039][T22680] gfs2_sys_fs_add+0x24f/0x4b0 [ 1049.158834][T22680] ? gfs2_recover_set+0x240/0x240 [ 1049.163886][T22680] ? snprintf+0xe5/0x140 [ 1049.168161][T22680] ? vscnprintf+0x80/0x80 [ 1049.172604][T22680] gfs2_fill_super+0x128c/0x1fb0 [ 1049.177560][T22680] ? gfs2_reconfigure+0xd30/0xd30 [ 1049.182608][T22680] ? sb_set_blocksize+0xa5/0xe0 [ 1049.187483][T22680] get_tree_bdev+0x3f1/0x610 [ 1049.192097][T22680] ? gfs2_reconfigure+0xd30/0xd30 [ 1049.197336][T22680] gfs2_get_tree+0x4d/0x1e0 [ 1049.201901][T22680] vfs_get_tree+0x88/0x270 [ 1049.206340][T22680] do_new_mount+0x24a/0xa40 [ 1049.210878][T22680] __se_sys_mount+0x2e3/0x3d0 [ 1049.215596][T22680] ? __x64_sys_mount+0xc0/0xc0 [ 1049.220410][T22680] ? lockdep_hardirqs_on+0x94/0x140 [ 1049.225627][T22680] ? __x64_sys_mount+0x1c/0xc0 [ 1049.230425][T22680] do_syscall_64+0x4c/0xa0 [ 1049.234947][T22680] ? clear_bhb_loop+0x60/0xb0 [ 1049.239643][T22680] ? clear_bhb_loop+0x60/0xb0 [ 1049.244336][T22680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1049.250294][T22680] RIP: 0033:0x7f6c5879e04a [ 1049.254983][T22680] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.274692][T22680] RSP: 002b:00007f6c59647e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1049.283125][T22680] RAX: ffffffffffffffda RBX: 00007f6c59647ee0 RCX: 00007f6c5879e04a [ 1049.291115][T22680] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f6c59647ea0 [ 1049.299185][T22680] RBP: 00002000000124c0 R08: 00007f6c59647ee0 R09: 0000000000000000 [ 1049.307257][T22680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 1049.315317][T22680] R13: 00007f6c59647ea0 R14: 00000000000124a6 R15: 0000200000012540 [ 1049.323323][T22680] [ 1049.406044][ T8291] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1049.470240][T22678] XFS (loop0): Starting recovery (logdev: internal) [ 1049.481919][T22680] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 1049.497291][T22680] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 1049.529215][T22678] XFS (loop0): Ending recovery (logdev: internal) [ 1049.620744][ T8291] usb 5-1: Using ep0 maxpacket: 32 [ 1049.628845][ T8291] usb 5-1: config 5 has an invalid interface number: 75 but max is 0 [ 1049.679913][ T8291] usb 5-1: config 5 has no interface number 0 [ 1049.706548][ T8291] usb 5-1: config 5 interface 75 has no altsetting 0 [ 1049.738414][ T8291] usb 5-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=29.cc [ 1049.776960][ T8291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.800522][ T8291] usb 5-1: Product: syz [ 1049.806233][ T8291] usb 5-1: Manufacturer: syz [ 1049.842847][T22700] loop1: detected capacity change from 0 to 32768 [ 1049.853518][ T8291] usb 5-1: SerialNumber: syz [ 1049.913906][T22700] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1049.938948][ T4434] XFS (loop0): Unmounting Filesystem [ 1049.976449][T22700] dlm: no local IP address has been set [ 1049.982071][T22700] dlm: cannot start dlm midcomms -107 [ 1050.056743][T22700] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1050.110425][ T8291] ums-cypress 5-1:5.75: USB Mass Storage device detected [ 1050.190754][T22700] Process accounting paused [ 1050.238672][ T8291] usb 5-1: USB disconnect, device number 125 [ 1050.541164][T22722] loop1: detected capacity change from 0 to 1024 [ 1051.127000][T22730] loop1: detected capacity change from 0 to 512 [ 1051.211104][T22730] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1051.435306][ T4440] EXT4-fs (loop1): unmounting filesystem. [ 1051.571415][T22728] loop4: detected capacity change from 0 to 32768 [ 1051.631680][T22728] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop4 scanned by syz.4.8116 (22728) [ 1051.705412][T22728] BTRFS info (device loop4): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 1051.740281][T22728] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1051.786904][T22728] BTRFS info (device loop4): using free space tree [ 1051.930147][T22725] loop0: detected capacity change from 0 to 32768 [ 1051.980040][T22725] (syz.0.8112,22725,0):ocfs2_journal_addressable:1992 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2 [ 1051.980084][T22725] (syz.0.8112,22725,0):ocfs2_check_volume:2489 ERROR: status = -27 [ 1052.065763][T22728] BTRFS info (device loop4): enabling ssd optimizations [ 1052.142030][T22725] (syz.0.8112,22725,0):ocfs2_mount_volume:1821 ERROR: status = -27 [ 1052.183902][T22725] (syz.0.8112,22725,0):ocfs2_fill_super:1176 ERROR: status = -27 [ 1052.243700][ T4446] BTRFS info (device loop4): last unmount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 1052.579898][T22755] loop0: detected capacity change from 0 to 1164 [ 1052.697794][T22734] loop1: detected capacity change from 0 to 32768 [ 1052.798966][T22734] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.8118 (22734) [ 1052.875278][T22734] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1052.924787][T22734] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1052.981328][T22734] BTRFS info (device loop1): using free space tree [ 1053.006070][T22760] loop0: detected capacity change from 0 to 132 [ 1053.322274][T22734] BTRFS info (device loop1): enabling ssd optimizations [ 1053.570989][ T4440] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1053.699206][T22781] loop2: detected capacity change from 0 to 1768 [ 1054.255236][T22784] loop3: detected capacity change from 0 to 1764 [ 1054.271514][T22787] loop1: detected capacity change from 0 to 736 [ 1054.592038][T22791] loop1: detected capacity change from 0 to 512 [ 1054.598851][T22758] loop4: detected capacity change from 0 to 32768 [ 1054.671798][T22758] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1054.691631][T22791] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1054.718855][T22791] ext4 filesystem being mounted at /1570/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1054.729952][T22758] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1054.784013][T22776] loop0: detected capacity change from 0 to 32768 [ 1054.811568][T22776] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 1054.844055][T22776] CPU: 1 PID: 22776 Comm: syz.0.8122 Not tainted syzkaller #0 [ 1054.851614][T22776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1054.861720][T22776] Call Trace: [ 1054.865035][T22776] [ 1054.867996][T22776] dump_stack_lvl+0x188/0x24e [ 1054.872724][T22776] ? show_regs_print_info+0x12/0x12 [ 1054.877966][T22776] ? load_image+0x400/0x400 [ 1054.882607][T22776] sysfs_create_dir_ns+0x26a/0x290 [ 1054.887773][T22776] ? sysfs_warn_dup+0xa0/0xa0 [ 1054.892505][T22776] ? do_raw_spin_unlock+0x11d/0x230 [ 1054.897742][T22776] kobject_add_internal+0x61c/0xcc0 [ 1054.902986][T22776] kobject_init_and_add+0x128/0x190 [ 1054.908239][T22776] ? lockdep_softirqs_off+0x430/0x430 [ 1054.913761][T22776] ? kobject_add+0x230/0x230 [ 1054.918404][T22776] ? __init_swait_queue_head+0xa5/0x150 [ 1054.924038][T22776] gfs2_sys_fs_add+0x24f/0x4b0 [ 1054.928891][T22776] ? gfs2_recover_set+0x240/0x240 [ 1054.933968][T22776] ? snprintf+0xe5/0x140 [ 1054.938261][T22776] ? vscnprintf+0x80/0x80 [ 1054.942668][T22776] gfs2_fill_super+0x128c/0x1fb0 [ 1054.947661][T22776] ? gfs2_reconfigure+0xd30/0xd30 [ 1054.952739][T22776] ? sb_set_blocksize+0xa5/0xe0 [ 1054.957641][T22776] get_tree_bdev+0x3f1/0x610 [ 1054.962283][T22776] ? gfs2_reconfigure+0xd30/0xd30 [ 1054.967349][T22776] gfs2_get_tree+0x4d/0x1e0 [ 1054.971902][T22776] vfs_get_tree+0x88/0x270 [ 1054.976364][T22776] do_new_mount+0x24a/0xa40 [ 1054.980912][T22776] __se_sys_mount+0x2e3/0x3d0 [ 1054.985647][T22776] ? __x64_sys_mount+0xc0/0xc0 [ 1054.990468][T22776] ? lockdep_hardirqs_on+0x94/0x140 [ 1054.995724][T22776] ? __x64_sys_mount+0x1c/0xc0 [ 1055.000536][T22776] do_syscall_64+0x4c/0xa0 [ 1055.005002][T22776] ? clear_bhb_loop+0x60/0xb0 [ 1055.009906][T22776] ? clear_bhb_loop+0x60/0xb0 [ 1055.014638][T22776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1055.020673][T22776] RIP: 0033:0x7f9131b9e04a [ 1055.025125][T22776] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.044868][T22776] RSP: 002b:00007f912fdf5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1055.053339][T22776] RAX: ffffffffffffffda RBX: 00007f912fdf5ee0 RCX: 00007f9131b9e04a [ 1055.061371][T22776] RDX: 000020000003b2c0 RSI: 000020000003b300 RDI: 00007f912fdf5ea0 [ 1055.069389][T22776] RBP: 000020000003b2c0 R08: 00007f912fdf5ee0 R09: 0000000000000000 [ 1055.077402][T22776] R10: 0000000000000000 R11: 0000000000000246 R12: 000020000003b300 [ 1055.085413][T22776] R13: 00007f912fdf5ea0 R14: 000000000003b281 R15: 000020000003b340 [ 1055.093445][T22776] [ 1055.106293][ T4440] EXT4-fs (loop1): unmounting filesystem. [ 1055.121383][T22758] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1055.135059][ T8289] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1055.144487][ T8289] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1055.349474][T22795] loop1: detected capacity change from 0 to 2 [ 1055.409747][ T8289] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 247ms [ 1055.411935][T22795] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1055.425652][ T8289] gfs2: fsid=syz:syz.0: jid=0: Done [ 1055.431323][T22758] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1055.441534][T22776] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 1055.464550][T22776] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 1055.542159][T22785] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 1055.561244][T22785] CPU: 1 PID: 22785 Comm: syz.2.8125 Not tainted syzkaller #0 [ 1055.568873][T22785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1055.579072][T22785] Call Trace: [ 1055.582396][T22785] [ 1055.585631][T22785] dump_stack_lvl+0x188/0x24e [ 1055.590377][T22785] ? show_regs_print_info+0x12/0x12 [ 1055.595727][T22785] ? load_image+0x400/0x400 [ 1055.600306][T22785] sysfs_create_dir_ns+0x26a/0x290 [ 1055.605492][T22785] ? sysfs_warn_dup+0xa0/0xa0 [ 1055.610277][T22785] ? do_raw_spin_unlock+0x11d/0x230 [ 1055.615548][T22785] kobject_add_internal+0x61c/0xcc0 [ 1055.620823][T22785] kobject_init_and_add+0x128/0x190 [ 1055.626084][T22785] ? lockdep_softirqs_off+0x430/0x430 [ 1055.631525][T22785] ? kobject_add+0x230/0x230 [ 1055.636172][T22785] ? __init_swait_queue_head+0xa5/0x150 [ 1055.641782][T22785] gfs2_sys_fs_add+0x24f/0x4b0 [ 1055.646610][T22785] ? gfs2_recover_set+0x240/0x240 [ 1055.651699][T22785] ? snprintf+0xe5/0x140 [ 1055.656079][T22785] ? vscnprintf+0x80/0x80 [ 1055.660468][T22785] gfs2_fill_super+0x128c/0x1fb0 [ 1055.665580][T22785] ? gfs2_reconfigure+0xd30/0xd30 [ 1055.670661][T22785] ? sb_set_blocksize+0xa5/0xe0 [ 1055.675581][T22785] get_tree_bdev+0x3f1/0x610 [ 1055.680300][T22785] ? gfs2_reconfigure+0xd30/0xd30 [ 1055.685389][T22785] gfs2_get_tree+0x4d/0x1e0 [ 1055.689951][T22785] vfs_get_tree+0x88/0x270 [ 1055.694419][T22785] do_new_mount+0x24a/0xa40 [ 1055.698972][T22785] __se_sys_mount+0x2e3/0x3d0 [ 1055.703697][T22785] ? __x64_sys_mount+0xc0/0xc0 [ 1055.708938][T22785] ? lockdep_hardirqs_on+0x94/0x140 [ 1055.714186][T22785] ? __x64_sys_mount+0x1c/0xc0 [ 1055.719019][T22785] do_syscall_64+0x4c/0xa0 [ 1055.723579][T22785] ? clear_bhb_loop+0x60/0xb0 [ 1055.728400][T22785] ? clear_bhb_loop+0x60/0xb0 [ 1055.733230][T22785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1055.739176][T22785] RIP: 0033:0x7f6c5879e04a [ 1055.743643][T22785] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.763475][T22785] RSP: 002b:00007f6c59647e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1055.771947][T22785] RAX: ffffffffffffffda RBX: 00007f6c59647ee0 RCX: 00007f6c5879e04a [ 1055.779967][T22785] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f6c59647ea0 [ 1055.787982][T22785] RBP: 00002000000124c0 R08: 00007f6c59647ee0 R09: 0000000000000000 [ 1055.796003][T22785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 1055.804018][T22785] R13: 00007f6c59647ea0 R14: 00000000000124ab R15: 0000200000012540 [ 1055.812071][T22785] [ 1055.931852][T22799] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1056.207169][T22785] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 1056.253572][T22789] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 1056.259004][T22785] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 1056.261024][T22789] CPU: 0 PID: 22789 Comm: syz.3.8127 Not tainted syzkaller #0 [ 1056.261053][T22789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1056.261066][T22789] Call Trace: [ 1056.261077][T22789] [ 1056.261088][T22789] dump_stack_lvl+0x188/0x24e [ 1056.296345][T22789] ? show_regs_print_info+0x12/0x12 [ 1056.301608][T22789] ? load_image+0x400/0x400 [ 1056.306274][T22789] sysfs_create_dir_ns+0x26a/0x290 [ 1056.311440][T22789] ? sysfs_warn_dup+0xa0/0xa0 [ 1056.316172][T22789] ? do_raw_spin_unlock+0x11d/0x230 [ 1056.321422][T22789] kobject_add_internal+0x61c/0xcc0 [ 1056.326682][T22789] kobject_init_and_add+0x128/0x190 [ 1056.331937][T22789] ? lockdep_softirqs_off+0x430/0x430 [ 1056.337392][T22789] ? kobject_add+0x230/0x230 [ 1056.342043][T22789] ? __init_swait_queue_head+0xa5/0x150 [ 1056.347645][T22789] gfs2_sys_fs_add+0x24f/0x4b0 [ 1056.352469][T22789] ? gfs2_recover_set+0x240/0x240 [ 1056.357557][T22789] ? snprintf+0xe5/0x140 [ 1056.361859][T22789] ? vscnprintf+0x80/0x80 [ 1056.366384][T22789] gfs2_fill_super+0x128c/0x1fb0 [ 1056.371379][T22789] ? gfs2_reconfigure+0xd30/0xd30 [ 1056.376460][T22789] ? sb_set_blocksize+0xa5/0xe0 [ 1056.381364][T22789] get_tree_bdev+0x3f1/0x610 [ 1056.386094][T22789] ? gfs2_reconfigure+0xd30/0xd30 [ 1056.391169][T22789] gfs2_get_tree+0x4d/0x1e0 [ 1056.395724][T22789] vfs_get_tree+0x88/0x270 [ 1056.400193][T22789] do_new_mount+0x24a/0xa40 [ 1056.404755][T22789] __se_sys_mount+0x2e3/0x3d0 [ 1056.409582][T22789] ? __x64_sys_mount+0xc0/0xc0 [ 1056.414587][T22789] ? lockdep_hardirqs_on+0x94/0x140 [ 1056.419925][T22789] ? __x64_sys_mount+0x1c/0xc0 [ 1056.424780][T22789] do_syscall_64+0x4c/0xa0 [ 1056.429360][T22789] ? clear_bhb_loop+0x60/0xb0 [ 1056.434089][T22789] ? clear_bhb_loop+0x60/0xb0 [ 1056.438820][T22789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1056.444764][T22789] RIP: 0033:0x7f3a49b9e04a [ 1056.449227][T22789] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.468971][T22789] RSP: 002b:00007f3a4ab13e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1056.477440][T22789] RAX: ffffffffffffffda RBX: 00007f3a4ab13ee0 RCX: 00007f3a49b9e04a [ 1056.485466][T22789] RDX: 0000200000013400 RSI: 0000200000013440 RDI: 00007f3a4ab13ea0 [ 1056.493575][T22789] RBP: 0000200000013400 R08: 00007f3a4ab13ee0 R09: 0000000000000000 [ 1056.501592][T22789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000013440 [ 1056.509701][T22789] R13: 00007f3a4ab13ea0 R14: 00000000000133f0 R15: 0000200000013480 [ 1056.517742][T22789] [ 1056.978335][T22789] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 1057.075408][T22789] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 1057.972644][T22826] set_capacity_and_notify: 13 callbacks suppressed [ 1057.975917][T22827] loop2: detected capacity change from 0 to 128 [ 1057.992979][T22826] loop1: detected capacity change from 0 to 732 [ 1058.172612][T22829] loop4: detected capacity change from 0 to 2048 [ 1058.399093][T22833] loop1: detected capacity change from 0 to 128 [ 1058.410840][T22832] loop2: detected capacity change from 0 to 512 [ 1058.465993][T22809] loop0: detected capacity change from 0 to 32768 [ 1058.507162][T22809] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop0 scanned by syz.0.8135 (22809) [ 1058.586212][T22835] loop4: detected capacity change from 0 to 128 [ 1058.660332][T22809] BTRFS info (device loop0): first mount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 1058.687366][T22809] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1058.716446][T22809] BTRFS info (device loop0): using free space tree [ 1059.053513][T22809] BTRFS info (device loop0): enabling ssd optimizations [ 1059.056841][T22853] loop4: detected capacity change from 0 to 2048 [ 1059.282638][T22845] loop1: detected capacity change from 0 to 8192 [ 1059.377833][ T4434] BTRFS info (device loop0): last unmount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 1059.600214][T22823] loop3: detected capacity change from 0 to 32768 [ 1059.894945][T22823] XFS (loop3): Mounting V5 Filesystem [ 1060.261486][T22823] XFS (loop3): Starting recovery (logdev: internal) [ 1060.322106][T22823] XFS (loop3): Ending recovery (logdev: internal) [ 1060.525679][T22842] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1060.555577][T22842] dlm: no local IP address has been set [ 1060.561292][T22842] dlm: cannot start dlm midcomms -107 [ 1060.597242][ T4436] XFS (loop3): Unmounting Filesystem [ 1060.607840][T22842] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1061.136773][T22880] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1061.731275][T22889] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1062.314467][T22894] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1063.819275][T22898] set_capacity_and_notify: 9 callbacks suppressed [ 1063.819294][T22898] loop1: detected capacity change from 0 to 32768 [ 1063.866567][T22898] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.8165 (22898) [ 1063.908112][T22898] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1063.939623][T22898] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1063.973638][T22898] BTRFS info (device loop1): using free space tree [ 1064.145839][T22898] BTRFS info (device loop1): enabling ssd optimizations [ 1064.245052][ T4440] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1064.394848][ T4523] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop1 scanned by udevd (4523) [ 1064.555880][T22902] loop4: detected capacity change from 0 to 32768 [ 1064.642649][T22902] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.8167 (22902) [ 1064.757193][T22902] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1064.826698][T22902] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1064.857137][T22902] BTRFS info (device loop4): using free space tree [ 1065.072823][T22902] BTRFS info (device loop4): enabling ssd optimizations [ 1065.298090][ T4446] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1066.067791][T22946] loop4: detected capacity change from 0 to 4096 [ 1066.151917][T22946] ntfs: volume version 3.1. [ 1066.553507][T22948] loop3: detected capacity change from 0 to 4096 [ 1066.628337][T22948] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1067.168696][T22952] loop3: detected capacity change from 0 to 4096 [ 1067.267497][T22952] ntfs: volume version 3.1. [ 1067.823712][T22950] loop4: detected capacity change from 0 to 32768 [ 1067.889105][T22950] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1067.904906][T22950] dlm: no local IP address has been set [ 1067.932388][T22950] dlm: cannot start dlm midcomms -107 [ 1067.943232][T22950] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1068.452657][T22958] loop4: detected capacity change from 0 to 4096 [ 1068.540267][T22958] ntfs: volume version 3.1. [ 1068.589909][T22956] loop3: detected capacity change from 0 to 32768 [ 1068.851043][T22960] loop1: detected capacity change from 0 to 8192 [ 1069.098067][T22962] loop4: detected capacity change from 0 to 4096 [ 1069.187419][T22962] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 1069.219637][T22964] loop3: detected capacity change from 0 to 4096 [ 1069.286249][T22964] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1069.551869][T22954] loop0: detected capacity change from 0 to 65536 [ 1070.150821][T22972] loop3: detected capacity change from 0 to 4096 [ 1070.271198][T22972] ntfs: volume version 3.1. [ 1071.442066][T22966] loop1: detected capacity change from 0 to 65536 [ 1071.679834][T22977] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1071.860546][T22970] loop4: detected capacity change from 0 to 65536 [ 1071.896049][T22970] (syz.4.8183,22970,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 1071.956204][T22970] (syz.4.8183,22970,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1072.880330][T22976] loop3: detected capacity change from 0 to 65536 [ 1072.909693][T22976] (syz.3.8186,22976,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 1072.945820][T22976] (syz.3.8186,22976,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1073.094086][T22979] loop1: detected capacity change from 0 to 32768 [ 1073.123929][T22979] (syz.1.8187,22979,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 1073.189997][T22979] (syz.1.8187,22979,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1073.370545][T22981] loop4: detected capacity change from 0 to 32768 [ 1073.416197][T22981] (syz.4.8188,22981,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 1073.462977][T22981] (syz.4.8188,22981,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1073.814173][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1073.820587][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1074.016355][T22985] loop1: detected capacity change from 0 to 8192 [ 1074.069400][T22985] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1075.045460][T22993] loop0: detected capacity change from 0 to 16384 [ 1075.099635][T22993] REISERFS warning (device loop0): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop0, block 16, size 4096) [ 1075.135188][T22993] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 1075.913562][T22998] loop0: detected capacity change from 0 to 4096 [ 1075.979909][T22998] ntfs: volume version 3.1. [ 1076.440230][T23002] loop0: detected capacity change from 0 to 8 [ 1076.809711][T23004] Can't find a SQUASHFS superblock on loop0 [ 1076.975837][T23006] loop3: detected capacity change from 0 to 1 [ 1077.010970][T23006] syz.3.8200: attempt to access beyond end of device [ 1077.010970][T23006] loop3: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1077.060624][T23006] SQUASHFS error: Failed to read block 0x0: -5 [ 1077.069146][T23006] unable to read squashfs_super_block [ 1077.178054][T23008] loop0: detected capacity change from 0 to 128 [ 1077.243570][T23008] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1077.261458][T23008] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1077.614834][T23012] loop0: detected capacity change from 0 to 2048 [ 1077.666607][T23012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1077.980051][T23014] loop0: detected capacity change from 0 to 128 [ 1078.030163][T23014] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1078.031383][T23016] loop2: detected capacity change from 0 to 256 [ 1078.059865][T23014] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1078.117738][T23016] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1078.169099][T23016] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1078.187815][T23018] loop4: detected capacity change from 0 to 128 [ 1078.202053][T23016] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1078.221195][T23016] UDF-fs: Scanning with blocksize 512 failed [ 1078.230012][T23018] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1078.284967][T23018] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1078.301456][T23016] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1078.351978][T23018] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1078.362562][T23016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1078.389332][T23018] UDF-fs: Scanning with blocksize 512 failed [ 1078.428822][T23018] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1078.473016][T23018] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1078.522359][T23018] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1078.563866][T23018] UDF-fs: Scanning with blocksize 1024 failed [ 1078.614699][T23018] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1078.648558][T23020] loop0: detected capacity change from 0 to 4096 [ 1078.685597][T23020] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 1078.695338][T23022] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1078.705400][T23018] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1078.734214][T23018] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1078.753232][T23018] UDF-fs: Scanning with blocksize 2048 failed [ 1078.772230][T23022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1078.783440][T23018] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1078.836006][T23018] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1078.862806][T23018] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1078.885744][T23018] UDF-fs: Scanning with blocksize 4096 failed [ 1078.920210][T23018] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 1079.286561][T23028] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1079.324563][T23028] UDF-fs: Scanning with blocksize 512 failed [ 1079.363239][T23030] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1079.383992][T23027] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1079.406955][T23027] UDF-fs: Scanning with blocksize 512 failed [ 1079.413613][T23030] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1079.423540][T23028] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1079.447345][T23030] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1079.456954][T23027] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1079.482869][T23030] UDF-fs: Scanning with blocksize 512 failed [ 1079.504158][T23030] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1079.536251][T23030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1080.038757][T23036] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1080.082767][T23036] UDF-fs: Scanning with blocksize 512 failed [ 1080.111082][T23034] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 1080.140532][T23036] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1080.181760][T23036] UDF-fs: Scanning with blocksize 1024 failed [ 1080.234224][T23036] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1080.243100][T23036] UDF-fs: Scanning with blocksize 2048 failed [ 1080.272944][T23038] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1080.292195][T23036] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1080.308458][T23038] UDF-fs: Scanning with blocksize 512 failed [ 1080.361335][T23036] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1080.362516][T23038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1080.734381][T23042] set_capacity_and_notify: 7 callbacks suppressed [ 1080.734402][T23042] loop4: detected capacity change from 0 to 128 [ 1080.786924][T23042] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1080.846795][T23042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1082.506308][T23025] Process accounting resumed [ 1082.683980][T23050] loop1: detected capacity change from 0 to 512 [ 1083.007254][T23052] loop1: detected capacity change from 0 to 512 [ 1083.297224][T23054] loop1: detected capacity change from 0 to 512 [ 1084.418154][T23058] loop2: detected capacity change from 0 to 128 [ 1084.672466][T23060] loop2: detected capacity change from 0 to 128 [ 1085.041812][T23062] loop0: detected capacity change from 0 to 8192 [ 1085.130026][T23062] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1085.197644][T23062] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1085.206956][T23062] REISERFS (device loop0): using ordered data mode [ 1085.218268][T23067] loop4: detected capacity change from 0 to 128 [ 1085.313459][T23062] reiserfs: using flush barriers [ 1085.334391][T23069] loop3: detected capacity change from 0 to 128 [ 1085.347919][T23062] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1085.421358][T23062] REISERFS (device loop0): checking transaction log (loop0) [ 1085.766537][T23062] REISERFS (device loop0): Using tea hash to sort names [ 1085.806408][T23062] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1086.648670][T23073] loop3: detected capacity change from 0 to 32768 [ 1086.756424][T23073] XFS (loop3): Mounting V5 Filesystem [ 1086.839982][T23073] XFS (loop3): Ending clean mount [ 1086.992205][ T4436] XFS (loop3): Unmounting Filesystem [ 1087.768317][T23090] loop3: detected capacity change from 0 to 256 [ 1087.775907][T23087] loop1: detected capacity change from 0 to 8192 [ 1087.842003][T23087] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1087.842119][T23090] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1087.877114][T23087] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1087.911358][T23087] REISERFS (device loop1): using ordered data mode [ 1087.951450][T23087] reiserfs: using flush barriers [ 1087.998722][T23087] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1088.022938][T23090] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1088.048619][T23090] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1088.067649][T23090] UDF-fs: Scanning with blocksize 512 failed [ 1088.092677][T23090] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1088.102526][T23087] REISERFS (device loop1): checking transaction log (loop1) [ 1088.130319][T23090] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1088.411223][T23087] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 1088.479839][T23087] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 1088.488725][T23075] loop0: detected capacity change from 0 to 65536 [ 1088.546148][T23087] REISERFS (device loop1): Remounting filesystem read-only [ 1088.563218][T23087] REISERFS error (device loop1): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 1088.647035][T23087] REISERFS warning (device loop1): reiserfs_fill_super: corrupt root inode, run fsck [ 1088.777448][T23075] XFS (loop0): Mounting V5 Filesystem [ 1089.040608][T23075] XFS (loop0): Ending clean mount [ 1089.204649][ T4434] XFS (loop0): Unmounting Filesystem [ 1089.438131][T23094] loop3: detected capacity change from 0 to 32768 [ 1090.294488][T23104] loop2: detected capacity change from 0 to 32768 [ 1090.533029][T23104] XFS (loop2): Mounting V5 Filesystem [ 1090.645859][T23104] XFS (loop2): Ending clean mount [ 1090.861495][ T4437] XFS (loop2): Unmounting Filesystem [ 1091.779176][T23107] loop1: detected capacity change from 0 to 65536 [ 1091.859158][T23107] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 1092.065041][T23109] loop3: detected capacity change from 0 to 65536 [ 1092.223854][T23109] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 1093.343496][T23124] loop2: detected capacity change from 0 to 65536 [ 1093.460072][T23124] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 1095.649432][T23148] loop0: detected capacity change from 0 to 65536 [ 1095.804492][T23148] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 1097.979222][T23166] netlink: 'syz.2.8254': attribute type 1 has an invalid length. [ 1098.599884][T23172] Cannot find add_set index 0 as target [ 1098.870577][T23174] loop2: detected capacity change from 0 to 2048 [ 1098.961804][T23174] loop2: p1 p2 p3 [ 1099.343099][ T4525] udevd[4525]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1099.363781][ T4689] udevd[4689]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1099.377407][ T4523] udevd[4523]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1099.501952][T23176] loop4: detected capacity change from 0 to 8192 [ 1099.575296][T23176] loop4: p1 p2 p3 [ 1100.146206][ T4525] udevd[4525]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1100.159383][ T4689] udevd[4689]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1100.160739][ T4523] udevd[4523]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1100.776817][T23184] loop2: detected capacity change from 0 to 32768 [ 1101.125172][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1101.125191][ T26] audit: type=1400 audit(1778046832.357:35): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=23198 comm="syz.1.8273" [ 1101.506045][T23212] netlink: 193 bytes leftover after parsing attributes in process `syz.3.8277'. [ 1101.619573][T23214] netlink: 'syz.2.8278': attribute type 1 has an invalid length. [ 1103.928448][T23294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8316'. [ 1103.959032][T23293] loop3: detected capacity change from 0 to 1024 [ 1104.031356][T23293] syz.3.8315: attempt to access beyond end of device [ 1104.031356][T23293] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1104.122631][T23293] Buffer I/O error on dev loop3, logical block 458752, async page read [ 1104.158982][T23293] syz.3.8315: attempt to access beyond end of device [ 1104.158982][T23293] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1104.208606][T23293] Buffer I/O error on dev loop3, logical block 458752, async page read [ 1104.626157][T23313] loop4: detected capacity change from 0 to 2048 [ 1104.683155][T23313] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=66359, location=66359 [ 1104.731115][T23313] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1104.823059][T23319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8328'. [ 1104.875178][T23319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8328'. [ 1105.605182][T23342] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8338'. [ 1105.851736][T23349] xt_hashlimit: max too large, truncated to 1048576 [ 1105.899434][T23349] No such timeout policy "syz1" [ 1106.346255][T23364] kAFS: unable to lookup cell '' [ 1106.360543][T23366] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1106.383199][T23302] loop0: detected capacity change from 0 to 65536 [ 1106.547679][T23302] XFS (loop0): Mounting V5 Filesystem [ 1106.604720][T23384] loop4: detected capacity change from 0 to 512 [ 1106.670264][T23302] XFS (loop0): Ending clean mount [ 1106.724178][T23384] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1106.734112][T23384] ext4 filesystem being mounted at /1705/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.843599][ T4434] XFS (loop0): Unmounting Filesystem [ 1106.856390][ T4446] EXT4-fs (loop4): unmounting filesystem. [ 1107.370214][T23402] loop4: detected capacity change from 0 to 2048 [ 1107.417861][T23405] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8365'. [ 1107.463699][T23402] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1107.487220][T23402] ext4 filesystem being mounted at /1708/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1107.541041][T23402] fscrypt (loop4, inode 14): Error -61 getting encryption context [ 1107.711154][ T8291] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1107.765911][ T4446] EXT4-fs (loop4): unmounting filesystem. [ 1107.927712][ T8291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1107.950359][ T8291] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1107.978866][ T8291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.999229][ T8291] usb 2-1: config 0 descriptor?? [ 1108.074865][T23428] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.8374'. [ 1108.224809][ T8291] ath6kl: Failed to submit usb control message: -71 [ 1108.248560][ T8291] ath6kl: unable to send the bmi data to the device: -71 [ 1108.255667][ T8291] ath6kl: Unable to send get target info: -71 [ 1108.300629][ T8291] ath6kl: Failed to init ath6kl core: -71 [ 1108.394702][ T8291] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1108.441725][ T8291] usb 2-1: USB disconnect, device number 13 [ 1108.628524][T23444] [U] .h0FwZ,iqgҏV2sO [ 1108.675233][T23444] [U] ` w*BBOLhU [ 1108.679828][T23444] [U] w$n|#%o.z\̧mРw [ 1108.691300][T23444] [U] R{ꫢ S [ 1108.882862][T23456] netlink: 'syz.3.8386': attribute type 2 has an invalid length. [ 1108.921576][T23456] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8386'. [ 1109.042007][T23462] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8390'. [ 1109.275949][T23466] loop3: detected capacity change from 0 to 512 [ 1109.341836][T23466] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.8393: inode has both inline data and extents flags [ 1109.364745][T23474] loop1: detected capacity change from 0 to 512 [ 1109.400574][T23466] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.8393: couldn't read orphan inode 15 (err -117) [ 1109.434188][T23466] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1109.506779][T23474] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1109.627971][T23474] UDF-fs: error (device loop1): udf_read_inode: (ino 19) failed ident=264 [ 1109.674190][ T4436] EXT4-fs (loop3): unmounting filesystem. [ 1110.233702][ T4448] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1110.453424][ T4448] usb 5-1: Using ep0 maxpacket: 32 [ 1110.463457][ T4448] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1110.477568][ T4448] usb 5-1: config 0 has no interface number 0 [ 1110.500879][ T4448] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1110.547189][ T4448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.584770][ T4448] usb 5-1: Product: syz [ 1110.589113][ T4448] usb 5-1: Manufacturer: syz [ 1110.618087][ T4448] usb 5-1: SerialNumber: syz [ 1110.652299][ T4448] usb 5-1: config 0 descriptor?? [ 1110.654808][T23518] loop2: detected capacity change from 0 to 256 [ 1110.662551][ T4448] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1110.690251][T23518] exfat: Deprecated parameter 'utf8' [ 1110.719527][ T4448] usb 5-1: selecting invalid altsetting 1 [ 1110.736364][T23518] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1110.740831][ T4448] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1110.809081][ T4448] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1110.850902][ T4448] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1110.859259][ T4448] usb 5-1: media controller created [ 1110.911799][ T4448] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1110.991800][ T4448] usb 5-1: DVB: registering adapter 2 frontend 0 (Zarlink ZL10353 DVB-T)... [ 1111.020277][ T4448] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 1111.142457][T23532] netlink: 'syz.3.8423': attribute type 21 has an invalid length. [ 1111.149657][ T4448] DVB: Unable to find symbol mxl5005s_attach() [ 1111.161387][ T8291] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1111.171781][T23532] netlink: 'syz.3.8423': attribute type 1 has an invalid length. [ 1111.209083][ T4448] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1111.276930][ T4448] usb 5-1: USB disconnect, device number 126 [ 1111.365363][ T8291] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 1111.396842][ T8291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.404952][ T8291] usb 2-1: Product: syz [ 1111.431337][ T8291] usb 2-1: Manufacturer: syz [ 1111.436033][ T8291] usb 2-1: SerialNumber: syz [ 1111.473548][T23541] netlink: 'syz.2.8428': attribute type 13 has an invalid length. [ 1111.476302][ T8291] usb 2-1: config 0 descriptor?? [ 1111.488592][T23541] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8428'. [ 1111.552956][T23541] syz_tun: refused to change device tx_queue_len [ 1111.573831][T23541] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1111.727005][T23549] program syz.3.8431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1111.742876][ T8291] int51x1: probe of 2-1:0.0 failed with error -22 [ 1111.961596][ T4448] usb 2-1: USB disconnect, device number 14 [ 1112.362999][T23573] overlayfs: conflicting options: userxattr,metacopy=on [ 1112.594164][T23581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8446'. [ 1113.262643][T23609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8459'. [ 1113.312702][T23611] cgroup: name respecified [ 1113.396311][T23604] loop0: detected capacity change from 0 to 4096 [ 1113.444279][T23604] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1113.694964][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8466'. [ 1114.253992][T23631] loop3: detected capacity change from 0 to 8192 [ 1114.799888][T23651] loop1: detected capacity change from 0 to 4096 [ 1114.852054][T23651] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1114.981127][ T26] audit: type=1800 audit(1778046845.286:36): pid=23637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.8474" name="/" dev="sockfs" ino=87497 res=0 errno=0 [ 1115.056808][T23651] ntfs3: loop1: failed to convert "c46c" to cp737 [ 1115.118241][T23651] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1115.174552][T23664] loop4: detected capacity change from 0 to 512 [ 1115.220203][ T6658] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1115.231389][T23664] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1115.299438][T23648] Process accounting paused [ 1115.342088][T23664] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1115.362252][T23664] Quota error (device loop4): write_blk: dquota write failed [ 1115.369800][T23664] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1115.379152][T23664] Quota error (device loop4): write_blk: dquota write failed [ 1115.386738][T23664] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1115.398210][T23664] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.8486: Failed to acquire dquot type 1 [ 1115.411288][T23664] EXT4-fs (loop4): 1 truncate cleaned up [ 1115.417490][T23664] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1115.441353][T23664] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 1115.459898][ T6658] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1115.515895][ T6658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.546029][ T6658] usb 4-1: Product: syz [ 1115.550277][ T6658] usb 4-1: Manufacturer: syz [ 1115.575790][ T6658] usb 4-1: SerialNumber: syz [ 1115.584031][ T4446] EXT4-fs (loop4): unmounting filesystem. [ 1115.631984][ T6658] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1115.723082][ T6658] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1116.470913][T23706] loop0: detected capacity change from 0 to 256 [ 1116.510097][T23706] exfat: Deprecated parameter 'utf8' [ 1116.568009][T23706] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1116.668705][T23709] overlayfs: unrecognized mount option "smackfstransmute=@\]\" or missing value [ 1116.680687][T23710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8507'. [ 1116.853748][ T6658] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1116.871054][ T6658] ath9k_htc: Failed to initialize the device [ 1116.934915][ T6658] usb 4-1: ath9k_htc: USB layer deinitialized [ 1116.969962][ T26] audit: type=1326 audit(1778046847.144:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.2.8512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5879cdd9 code=0x7ffc0000 [ 1117.030467][ T8291] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1117.035814][ T26] audit: type=1326 audit(1778046847.162:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.2.8512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f6c5879cdd9 code=0x7ffc0000 [ 1117.066829][T23721] netlink: 'syz.1.8511': attribute type 13 has an invalid length. [ 1117.079751][T23721] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8511'. [ 1117.119899][T23721] syz_tun: refused to change device tx_queue_len [ 1117.127127][ T26] audit: type=1326 audit(1778046847.162:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.2.8512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5879cdd9 code=0x7ffc0000 [ 1117.133593][T23721] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1117.180501][ T4259] usb 4-1: USB disconnect, device number 17 [ 1117.233850][ T8291] usb 5-1: Using ep0 maxpacket: 32 [ 1117.259471][ T8291] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1117.277405][ T8291] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.289421][ T8291] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1117.299539][ T8291] usb 5-1: config 1 has no interface number 0 [ 1117.305815][ T8291] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1117.330377][ T8291] usb 5-1: string descriptor 0 read error: -22 [ 1117.336797][ T8291] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1117.399836][ T8291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.583390][T23736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8521'. [ 1117.698065][ T8291] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 1117.766808][ T4523] udevd[4523]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1117.907381][ T6659] usb 5-1: USB disconnect, device number 127 [ 1118.013848][T23750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8527'. [ 1118.555337][T23772] loop2: detected capacity change from 0 to 256 [ 1118.650467][T23772] FAT-fs (loop2): Directory bread(block 64) failed [ 1118.657162][T23772] FAT-fs (loop2): Directory bread(block 65) failed [ 1118.709345][T23772] FAT-fs (loop2): Directory bread(block 66) failed [ 1118.750422][T23772] FAT-fs (loop2): Directory bread(block 67) failed [ 1118.791236][T23772] FAT-fs (loop2): Directory bread(block 68) failed [ 1118.808577][ T6659] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1118.825120][T23772] FAT-fs (loop2): Directory bread(block 69) failed [ 1118.843279][T23772] FAT-fs (loop2): Directory bread(block 70) failed [ 1118.848195][T23779] loop1: detected capacity change from 0 to 512 [ 1118.849855][T23772] FAT-fs (loop2): Directory bread(block 71) failed [ 1118.849948][T23772] FAT-fs (loop2): Directory bread(block 72) failed [ 1118.903551][T23772] FAT-fs (loop2): Directory bread(block 73) failed [ 1119.018021][T23779] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1119.046400][ T6659] usb 4-1: Using ep0 maxpacket: 16 [ 1119.060752][ T6659] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1119.083428][T23779] ext4 filesystem being mounted at /1646/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.087562][ T6659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.131209][ T6659] usb 4-1: Product: syz [ 1119.140943][T23790] loop0: detected capacity change from 0 to 512 [ 1119.147541][ T6659] usb 4-1: Manufacturer: syz [ 1119.163995][ T6659] usb 4-1: SerialNumber: syz [ 1119.199382][ T6659] usb 4-1: config 0 descriptor?? [ 1119.231633][T23790] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.8543: bad orphan inode 14 [ 1119.263634][T23793] loop4: detected capacity change from 0 to 256 [ 1119.299085][T23790] ext4_test_bit(bit=13, block=18) = 1 [ 1119.305294][T23790] is_bad_inode(inode)=0 [ 1119.309549][T23790] NEXT_ORPHAN(inode)=0 [ 1119.315194][T23790] max_ino=32 [ 1119.319329][T23790] i_nlink=1 [ 1119.322001][ T4440] EXT4-fs (loop1): unmounting filesystem. [ 1119.322677][T23790] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1119.338753][T23790] ext4 filesystem being mounted at /1706/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.355340][T23793] FAT-fs (loop4): Directory bread(block 64) failed [ 1119.408215][T23793] FAT-fs (loop4): Directory bread(block 65) failed [ 1119.415055][T23793] FAT-fs (loop4): Directory bread(block 66) failed [ 1119.436555][T23793] FAT-fs (loop4): Directory bread(block 67) failed [ 1119.443474][ T6659] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 1119.460414][ T6659] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1119.468959][T23793] FAT-fs (loop4): Directory bread(block 68) failed [ 1119.480664][ T4434] EXT4-fs (loop0): unmounting filesystem. [ 1119.487817][T23793] FAT-fs (loop4): Directory bread(block 69) failed [ 1119.576371][T23793] FAT-fs (loop4): Directory bread(block 70) failed [ 1119.597941][T23793] FAT-fs (loop4): Directory bread(block 71) failed [ 1119.625528][T23795] x_tables: unsorted underflow at hook 3 [ 1119.635610][T23793] FAT-fs (loop4): Directory bread(block 72) failed [ 1119.664047][T23793] FAT-fs (loop4): Directory bread(block 73) failed [ 1119.686364][ T8291] usb 4-1: USB disconnect, device number 18 [ 1119.929798][T23805] loop2: detected capacity change from 0 to 24 [ 1120.156056][T23809] netlink: 'syz.0.8552': attribute type 1 has an invalid length. [ 1120.273272][T23815] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1120.473771][ T26] audit: type=1400 audit(1778046850.421:40): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=23818 comm="syz.0.8557" [ 1120.971730][ T4399] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1120.973097][T23843] loop3: detected capacity change from 0 to 8 [ 1121.037048][T23843] SQUASHFS error: Failed to read block 0x6fc: -5 [ 1121.055086][T23843] SQUASHFS error: Unable to read metadata cache entry [6fa] [ 1121.180694][T23849] loop4: detected capacity change from 0 to 256 [ 1121.196883][ T4399] usb 1-1: Using ep0 maxpacket: 16 [ 1121.214587][ T4399] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.237054][ T4399] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1121.266148][ T4399] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1121.300478][ T4399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.330523][ T4399] usb 1-1: Product: syz [ 1121.343221][ T4399] usb 1-1: Manufacturer: syz [ 1121.356511][ T4399] usb 1-1: SerialNumber: syz [ 1121.571562][T23855] loop2: detected capacity change from 0 to 256 [ 1121.613203][ T4399] usb 1-1: 0:2 : does not exist [ 1121.630251][ T4399] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1121.694322][ T4399] usb 1-1: USB disconnect, device number 10 [ 1121.755400][ T4523] udevd[4523]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1122.355483][T23869] loop0: detected capacity change from 0 to 2048 [ 1122.415728][T23869] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1122.527752][T23875] loop1: detected capacity change from 0 to 512 [ 1122.640201][T23875] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1122.718123][T23875] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1122.804806][T23875] EXT4-fs (loop1): mount failed [ 1122.973809][T23888] loop0: detected capacity change from 0 to 4096 [ 1122.980374][T23894] tipc: Trying to set illegal importance in message [ 1123.003268][T23888] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1123.142677][T23888] ntfs: volume version 3.1. [ 1123.424624][T23904] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7) [ 1123.702913][T23916] xt_TCPMSS: Only works on TCP SYN packets [ 1123.991287][T23922] loop0: detected capacity change from 0 to 2048 [ 1124.010386][T23922] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1124.103646][T23926] IPv6: sit1: Disabled Multicast RS [ 1124.435883][T23901] loop1: detected capacity change from 0 to 32768 [ 1124.521477][T23901] [ 1124.521477][T23901] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1124.521477][T23901] [ 1124.618545][T23901] ERROR: (device loop1): dbReAlloc: the block is outside the filesystem [ 1124.618545][T23901] [ 1124.684585][T23942] loop3: detected capacity change from 0 to 16 [ 1124.720994][T23901] ERROR: (device loop1): remounting filesystem as read-only [ 1124.738001][T23942] erofs: (device loop3): mounted with root inode @ nid 36. [ 1124.830848][T23946] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1125.082960][T23952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8625'. [ 1125.125451][T23952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8625'. [ 1125.500276][T23965] netlink: 'syz.3.8627': attribute type 10 has an invalid length. [ 1125.534424][T23965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8627'. [ 1125.540276][T23966] loop1: detected capacity change from 0 to 512 [ 1125.647989][T23965] team0: Port device geneve0 added [ 1125.820917][T23966] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 1125.842277][T23966] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1125.863636][T23966] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.8620: Failed to acquire dquot type 1 [ 1125.912011][T23966] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.8620: bg 0: block 495: padding at end of block bitmap is not set [ 1125.980162][T23966] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1126.012687][T23966] EXT4-fs (loop1): 1 truncate cleaned up [ 1126.037467][T23966] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1126.063292][T23966] ext4 filesystem being mounted at /1657/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1126.159661][T23966] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 1126.208923][T23966] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1126.218972][T23966] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.8620: Failed to acquire dquot type 1 [ 1126.594308][ T4399] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1126.712895][ T4440] EXT4-fs (loop1): unmounting filesystem. [ 1126.825815][ T4399] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1126.860854][ T4399] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.929026][ T4399] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1126.948221][ T4399] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1126.971616][ T4399] usb 4-1: Product: syz [ 1126.975846][ T4399] usb 4-1: Manufacturer: syz [ 1127.032914][ T4399] hub 4-1:4.0: USB hub found [ 1127.167258][T24004] loop0: detected capacity change from 0 to 4096 [ 1127.219587][T24004] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1127.252563][ T4399] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 1127.337126][T24004] ntfs3: loop0: failed to convert "c46c" to cp775 [ 1127.454481][T24010] loop4: detected capacity change from 0 to 8192 [ 1127.489826][T24010] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1127.611913][ T4259] usb 4-1: USB disconnect, device number 19 [ 1127.667149][T24010] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1127.725494][T24010] REISERFS (device loop4): using ordered data mode [ 1127.752679][T24010] reiserfs: using flush barriers [ 1127.802044][T24010] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1127.874308][T24010] REISERFS (device loop4): checking transaction log (loop4) [ 1128.096784][T24010] REISERFS (device loop4): Using tea hash to sort names [ 1128.112746][T24010] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1128.178634][T24033] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8671'. [ 1128.196392][T24010] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1128.473647][T24039] Zero length message leads to an empty skb [ 1128.722440][T24046] netlink: 'syz.1.8667': attribute type 1 has an invalid length. [ 1128.783635][T24046] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8667'. [ 1128.992464][T24053] netlink: 'syz.0.8672': attribute type 2 has an invalid length. [ 1129.113485][T24057] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8675'. [ 1129.326821][T24065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8668'. [ 1129.375655][T24065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1129.592783][ T7721] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1129.796668][ T7721] usb 1-1: Using ep0 maxpacket: 16 [ 1129.804157][ T7721] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1129.824054][ T7721] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1129.841294][ T7721] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1129.878970][ T7721] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1129.898796][ T7721] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1129.920439][ T7721] usb 1-1: config 0 has no interface number 0 [ 1129.931072][ T7721] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1129.957977][ T4259] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1129.980445][ T7721] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1129.999694][ T7721] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1130.042139][ T7721] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1130.063909][ T7721] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1130.082252][ T7721] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1130.113503][ T7721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.139028][ T7721] usb 1-1: Product: syz [ 1130.143352][ T7721] usb 1-1: Manufacturer: syz [ 1130.160417][ T4259] usb 2-1: Using ep0 maxpacket: 8 [ 1130.160453][ T7721] usb 1-1: SerialNumber: syz [ 1130.167532][ T4259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1130.193123][ T7721] usb 1-1: config 0 descriptor?? [ 1130.200932][ T4259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1130.241817][T24091] loop2: detected capacity change from 0 to 256 [ 1130.248380][ T4259] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1130.284106][ T4259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1130.320949][ T4259] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1130.352945][ T4259] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1130.376606][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.387597][ T4259] usb 2-1: config 0 descriptor?? [ 1130.393509][T24077] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1130.431718][ C0] usb 1-1: async_complete: urb error -71 [ 1130.458615][ C0] usb 1-1: async_complete: urb error -71 [ 1130.464420][ C0] usb 1-1: async_complete: urb error -71 [ 1130.471606][ C0] usb 1-1: async_complete: urb error -71 [ 1130.477601][ T7721] get_1284_register: usb error -71 [ 1130.500333][ T7721] usb 1-1: USB disconnect, device number 11 [ 1130.808486][T24102] tmpfs: Bad value for 'mpol' [ 1130.973158][ T4399] usb 2-1: USB disconnect, device number 15 [ 1130.981691][ T4443] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 1131.981328][T24136] netlink: 'syz.1.8711': attribute type 10 has an invalid length. [ 1131.998463][T24134] loop3: detected capacity change from 0 to 64 [ 1132.000167][T24136] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8711'. [ 1132.051282][T24134] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1132.105482][T24136] team0: Port device geneve0 added [ 1132.145096][T24140] netlink: 'syz.4.8714': attribute type 7 has an invalid length. [ 1132.170722][T24140] netlink: 'syz.4.8714': attribute type 8 has an invalid length. [ 1132.309297][T24142] loop0: detected capacity change from 0 to 2048 [ 1132.394674][T24144] netlink: 'syz.3.8716': attribute type 1 has an invalid length. [ 1132.422121][T24115] loop2: detected capacity change from 0 to 32768 [ 1132.443792][T24144] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.8716'. [ 1132.471242][T24142] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1132.590396][T24115] JBD2: Ignoring recovery information on journal [ 1132.673978][T24115] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1132.730485][ T4434] EXT4-fs (loop0): unmounting filesystem. [ 1132.810471][T24159] cgroup: none used incorrectly [ 1132.842261][ T4401] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1132.888387][ T4437] ocfs2: Unmounting device (7,2) on (node local) [ 1133.063682][ T4401] usb 2-1: Using ep0 maxpacket: 32 [ 1133.073726][ T4401] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1133.095678][T24165] netlink: 'syz.3.8724': attribute type 6 has an invalid length. [ 1133.115065][ T4401] usb 2-1: config 0 has no interface number 0 [ 1133.129208][ T4401] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1133.187231][ T4401] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.230318][ T4401] usb 2-1: Product: syz [ 1133.255101][ T4401] usb 2-1: Manufacturer: syz [ 1133.259920][ T4401] usb 2-1: SerialNumber: syz [ 1133.319701][ T4401] usb 2-1: config 0 descriptor?? [ 1133.338267][ T4401] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1133.353884][T24171] CIFS mount error: No usable UNC path provided in device string! [ 1133.353884][T24171] [ 1133.371426][ T4401] usb 2-1: selecting invalid altsetting 1 [ 1133.378975][T24171] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1133.396184][ T4401] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1133.425489][ T4401] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1133.436896][ T4401] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1133.456066][T24175] loop2: detected capacity change from 0 to 256 [ 1133.472452][ T4401] usb 2-1: media controller created [ 1133.504774][T24175] exfat: Deprecated parameter 'utf8' [ 1133.545101][T24175] exfat: Deprecated parameter 'namecase' [ 1133.550851][ T4401] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1133.614679][ T4401] usb 2-1: DVB: registering adapter 2 frontend 0 (Zarlink ZL10353 DVB-T)... [ 1133.622601][ T26] audit: type=1326 audit(1778046862.691:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24176 comm="syz.0.8730" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9131b9cdd9 code=0x7ffc0000 [ 1133.643562][ T4401] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 1133.674706][T24175] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1133.690075][T24179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8731'. [ 1133.747567][ T26] audit: type=1326 audit(1778046862.738:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24176 comm="syz.0.8730" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9131b9cdd9 code=0x7ffc0000 [ 1133.747853][T24175] kAFS: unable to lookup cell 's@z0' [ 1133.876465][ T26] audit: type=1326 audit(1778046862.747:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24176 comm="syz.0.8730" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9131b9cdd9 code=0x7ffc0000 [ 1133.886079][ T4401] DVB: Unable to find symbol mxl5005s_attach() [ 1133.928324][ T4401] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1133.954662][ T26] audit: type=1326 audit(1778046862.747:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24176 comm="syz.0.8730" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9131b9cdd9 code=0x7ffc0000 [ 1133.989495][T24157] loop4: detected capacity change from 0 to 32768 [ 1134.004838][T24184] netlink: 'syz.3.8733': attribute type 10 has an invalid length. [ 1134.016653][ T26] audit: type=1326 audit(1778046862.775:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24176 comm="syz.0.8730" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f9131b9cdd9 code=0x7ffc0000 [ 1134.050360][ T4401] usb 2-1: USB disconnect, device number 16 [ 1134.055035][ T26] audit: type=1326 audit(1778046862.775:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24176 comm="syz.0.8730" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9131b9cdd9 code=0x7ffc0000 [ 1134.166810][T24157] ERROR: (device loop4): diNewExt: no free extents [ 1134.166810][T24157] [ 1134.239623][T24157] ialloc: diAlloc returned -5! [ 1134.251247][ T26] audit: type=1326 audit(1778046862.775:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24176 comm="syz.0.8730" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9131b9cdd9 code=0x7ffc0000 [ 1134.340792][ T26] audit: type=1326 audit(1778046862.775:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24176 comm="syz.0.8730" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9131b9cdd9 code=0x7ffc0000 [ 1134.364820][ C1] vkms_vblank_simulate: vblank timer overrun [ 1134.508166][ T26] audit: type=1326 audit(1778046862.775:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24176 comm="syz.0.8730" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9131b9cdd9 code=0x7ffc0000 [ 1134.560795][T24197] loop0: detected capacity change from 0 to 512 [ 1134.571879][T24193] loop3: detected capacity change from 0 to 256 [ 1134.650363][T24197] Quota error (device loop0): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 1134.719448][T24197] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.8738: Failed to acquire dquot type 1 [ 1134.798568][T24197] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.8738: bg 0: block 495: padding at end of block bitmap is not set [ 1134.865664][T24204] loop1: detected capacity change from 0 to 2048 [ 1134.872395][T24197] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1134.893612][T24197] EXT4-fs (loop0): 1 truncate cleaned up [ 1134.909796][T24197] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1134.948046][T24209] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1134.953187][T24197] ext4 filesystem being mounted at /1745/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1134.980624][T24204] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446744072317042688, rec_len=65535, name_len=255 [ 1135.015359][ T7721] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1135.069471][T24204] Remounting filesystem read-only [ 1135.100722][T24197] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.8738: Failed to acquire dquot type 1 [ 1135.171439][ T4434] EXT4-fs (loop0): unmounting filesystem. [ 1135.187104][T24213] netlink: 276 bytes leftover after parsing attributes in process `syz.4.8745'. [ 1135.236103][ T7721] usb 4-1: Using ep0 maxpacket: 32 [ 1135.265921][ T7721] usb 4-1: config 4 has an invalid interface number: 228 but max is 0 [ 1135.318805][ T7721] usb 4-1: config 4 has no interface number 0 [ 1135.362077][ T7721] usb 4-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 147, changing to 11 [ 1135.367424][T24218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8747'. [ 1135.423689][ T7721] usb 4-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 41529, setting to 1024 [ 1135.439770][ T7721] usb 4-1: config 4 interface 228 has no altsetting 0 [ 1135.460380][ T7721] usb 4-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 1135.506339][ T7721] usb 4-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 1135.536111][ T7721] usb 4-1: Product: syz [ 1135.547569][ T7721] usb 4-1: Manufacturer: syz [ 1135.570310][ T7721] usb 4-1: SerialNumber: syz [ 1135.632360][ T4399] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1135.737226][T24229] netlink: 'syz.0.8752': attribute type 27 has an invalid length. [ 1135.756117][T24229] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8752'. [ 1135.824386][ T7721] usb 4-1: invalid MIDI in EP 0 [ 1135.835862][ T4399] usb 2-1: Using ep0 maxpacket: 16 [ 1135.844193][ T4399] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1135.857858][ T4399] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1135.866296][ T4399] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1135.878091][ T4399] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1135.893283][ T4399] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1135.909747][ T4399] usb 2-1: config 0 has no interface number 0 [ 1135.911323][ T7721] snd-usb-audio: probe of 4-1:4.228 failed with error -22 [ 1135.923674][ T4399] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1135.937272][ T4399] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1135.948382][ T4399] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1135.967328][ T4399] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1135.974354][ T7721] usb 4-1: USB disconnect, device number 20 [ 1135.984711][ T4399] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1136.022677][ T4767] udevd[4767]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1136.056288][ T4399] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1136.057276][T24237] loop4: detected capacity change from 0 to 256 [ 1136.098879][ T4399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.120929][ T4399] usb 2-1: Product: syz [ 1136.138344][ T4399] usb 2-1: Manufacturer: syz [ 1136.150392][ T4399] usb 2-1: SerialNumber: syz [ 1136.169528][ T4399] usb 2-1: config 0 descriptor?? [ 1136.351727][T24241] loop0: detected capacity change from 0 to 16 [ 1136.402743][T24241] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1136.427673][ C1] usb 2-1: async_complete: urb error -71 [ 1136.433621][ C1] usb 2-1: async_complete: urb error -71 [ 1136.439372][ C1] usb 2-1: async_complete: urb error -71 [ 1136.445089][ C1] usb 2-1: async_complete: urb error -71 [ 1136.451554][ T4399] get_1284_register: usb error -71 [ 1136.487532][T24241] cramfs: Error -3 while decompressing! [ 1136.495331][ T4399] usb 2-1: USB disconnect, device number 17 [ 1136.521957][T24241] cramfs: ffffffff96d8d248(27)->ffff88805d960000(4096) [ 1136.562917][T24241] cramfs: Error -3 while decompressing! [ 1136.596045][T24241] cramfs: ffffffff96d8d248(27)->ffff88805d960000(4096) [ 1137.217065][T24267] loop4: detected capacity change from 0 to 128 [ 1137.253294][T24267] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 1137.461274][ T4446] sysv_free_block: flc_count > flc_size [ 1137.484830][ T4446] sysv_free_block: flc_count > flc_size [ 1137.490476][ T4446] sysv_free_block: flc_count > flc_size [ 1137.548815][ T4446] sysv_free_block: flc_count > flc_size [ 1137.554451][ T4446] sysv_free_block: flc_count > flc_size [ 1137.579070][ T4446] sysv_free_block: flc_count > flc_size [ 1137.596120][ T4446] sysv_free_block: flc_count > flc_size [ 1137.601750][ T4446] sysv_free_block: flc_count > flc_size [ 1137.629801][ T4446] sysv_free_block: flc_count > flc_size [ 1137.646597][ T4446] sysv_free_block: flc_count > flc_size [ 1137.665912][ T4446] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1138.158735][T24304] loop1: detected capacity change from 0 to 256 [ 1138.172746][T24305] loop3: detected capacity change from 0 to 16 [ 1138.222077][T24305] erofs: (device loop3): mounted with root inode @ nid 36. [ 1138.242969][T24307] netlink: 'syz.0.8792': attribute type 10 has an invalid length. [ 1138.285667][T24304] FAT-fs (loop1): Directory bread(block 64) failed [ 1138.307459][T24307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8792'. [ 1138.327810][T24304] FAT-fs (loop1): Directory bread(block 65) failed [ 1138.347080][T24304] FAT-fs (loop1): Directory bread(block 66) failed [ 1138.393409][T24307] team0: Port device geneve0 added [ 1138.407126][T24304] FAT-fs (loop1): Directory bread(block 67) failed [ 1138.421304][T24304] FAT-fs (loop1): Directory bread(block 68) failed [ 1138.441222][T24304] FAT-fs (loop1): Directory bread(block 69) failed [ 1138.504389][T24304] FAT-fs (loop1): Directory bread(block 70) failed [ 1138.511047][T24304] FAT-fs (loop1): Directory bread(block 71) failed [ 1138.522991][T24304] FAT-fs (loop1): Directory bread(block 72) failed [ 1138.532110][T24304] FAT-fs (loop1): Directory bread(block 73) failed [ 1138.695008][T24319] Driver unsupported XDP return value 0 on prog (id 545) dev N/A, expect packet loss! [ 1139.199213][T24335] netlink: 'syz.1.8803': attribute type 21 has an invalid length. [ 1139.246810][T24335] netlink: 'syz.1.8803': attribute type 6 has an invalid length. [ 1139.279228][T24335] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8803'. [ 1139.304969][ T8291] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1139.519122][ T8291] usb 5-1: Using ep0 maxpacket: 32 [ 1139.526649][ T8291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.592721][ T8291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.636356][ T8291] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1139.649348][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1139.655703][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1139.675613][ T8291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.701643][ T8291] usb 5-1: config 0 descriptor?? [ 1139.720408][ T8291] hub 5-1:0.0: USB hub found [ 1139.930918][ T8291] hub 5-1:0.0: 31 ports detected [ 1139.943169][ T8291] hub 5-1:0.0: insufficient power available to use all downstream ports [ 1140.007133][T24363] netlink: 'syz.2.8816': attribute type 10 has an invalid length. [ 1140.060178][T24363] team0: Device xfrm0 is of different type [ 1140.146447][ T8291] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1140.173713][ T8291] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1140.223026][ T8291] usbhid 5-1:0.0: can't add hid device: -71 [ 1140.242894][ T8291] usbhid: probe of 5-1:0.0 failed with error -71 [ 1140.312180][ T8291] usb 5-1: USB disconnect, device number 2 [ 1140.492774][T24380] overlayfs: missing 'lowerdir' [ 1140.958284][T24396] netlink: 'syz.4.8828': attribute type 10 has an invalid length. [ 1140.997582][T24396] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8828'. [ 1141.074540][T24402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8832'. [ 1141.106598][T24396] team0: Port device geneve0 added [ 1141.436379][T24412] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8837'. [ 1141.697134][T24424] loop0: detected capacity change from 0 to 256 [ 1141.737858][T24424] exfat: Deprecated parameter 'utf8' [ 1141.793106][T24424] exfat: Deprecated parameter 'namecase' [ 1141.836150][T24424] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1142.111361][T24438] loop1: detected capacity change from 0 to 64 [ 1142.217152][ T6658] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1142.242453][T24438] ================================================================== [ 1142.250592][T24438] BUG: KASAN: use-after-free in reiserfs_write_lock+0x58/0xd0 [ 1142.258171][T24438] Read of size 8 at addr ffff888051ac0ab8 by task syz.1.8850/24438 [ 1142.266072][T24438] [ 1142.268412][T24438] CPU: 1 PID: 24438 Comm: syz.1.8850 Not tainted syzkaller #0 [ 1142.275892][T24438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1142.285963][T24438] Call Trace: [ 1142.289318][T24438] [ 1142.292257][T24438] dump_stack_lvl+0x188/0x24e [ 1142.296959][T24438] ? read_lock_is_recursive+0x10/0x10 [ 1142.302350][T24438] ? show_regs_print_info+0x12/0x12 [ 1142.307563][T24438] ? load_image+0x400/0x400 [ 1142.312076][T24438] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1142.317546][T24438] ? __virt_addr_valid+0x188/0x540 [ 1142.322782][T24438] ? __virt_addr_valid+0x465/0x540 [ 1142.327926][T24438] ? reiserfs_write_lock+0x58/0xd0 [ 1142.333173][T24438] print_report+0xa8/0x210 [ 1142.337623][T24438] kasan_report+0x10b/0x140 [ 1142.342167][T24438] ? verify_lock_unused+0x140/0x140 [ 1142.347405][T24438] ? reiserfs_write_lock+0x58/0xd0 [ 1142.352544][T24438] reiserfs_write_lock+0x58/0xd0 [ 1142.357765][T24438] reiserfs_lookup+0x18a/0x480 [ 1142.362559][T24438] ? reiserfs_find_entry+0x18e0/0x18e0 [ 1142.368039][T24438] ? do_raw_spin_unlock+0x11d/0x230 [ 1142.373339][T24438] ? _raw_spin_unlock+0x24/0x40 [ 1142.378210][T24438] ? d_alloc+0x1e7/0x250 [ 1142.382462][T24438] lookup_one_qstr_excl+0x10e/0x240 [ 1142.387679][T24438] do_renameat2+0x4bf/0xce0 [ 1142.392207][T24438] ? __lock_acquire+0x7d10/0x7d10 [ 1142.397263][T24438] ? fsnotify_move+0x4e0/0x4e0 [ 1142.402096][T24438] ? __check_object_size+0x500/0xa40 [ 1142.407409][T24438] ? strncpy_from_user+0x1e3/0x350 [ 1142.412594][T24438] ? getname_flags+0x206/0x500 [ 1142.417555][T24438] __x64_sys_rename+0x82/0x90 [ 1142.422264][T24438] do_syscall_64+0x4c/0xa0 [ 1142.426708][T24438] ? clear_bhb_loop+0x60/0xb0 [ 1142.431405][T24438] ? clear_bhb_loop+0x60/0xb0 [ 1142.436097][T24438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.442107][T24438] RIP: 0033:0x7f0ed479cdd9 [ 1142.446539][T24438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.466963][T24438] RSP: 002b:00007f0ed565c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1142.475401][T24438] RAX: ffffffffffffffda RBX: 00007f0ed4a15fa0 RCX: 00007f0ed479cdd9 [ 1142.483651][T24438] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 00002000000009c0 [ 1142.491829][T24438] RBP: 00007f0ed4832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1142.499824][T24438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.507805][T24438] R13: 00007f0ed4a16038 R14: 00007f0ed4a15fa0 R15: 00007ffd99747148 [ 1142.515793][T24438] [ 1142.518818][T24438] [ 1142.521148][T24438] Allocated by task 4477: [ 1142.525479][T24438] kasan_set_track+0x4b/0x70 [ 1142.530090][T24438] __kasan_kmalloc+0x8e/0xa0 [ 1142.534783][T24438] __kmalloc+0xb0/0x240 [ 1142.539061][T24438] cfg80211_inform_bss_frame_data+0x69d/0x1390 [ 1142.545225][T24438] ieee80211_bss_info_update+0x738/0xc80 [ 1142.550968][T24438] ieee80211_ibss_rx_queued_mgmt+0x189d/0x2cd0 [ 1142.557228][T24438] ieee80211_iface_work+0x726/0xc80 [ 1142.562438][T24438] cfg80211_wiphy_work+0x221/0x260 [ 1142.567569][T24438] process_one_work+0x8a2/0x1160 [ 1142.572603][T24438] worker_thread+0xaa2/0x1270 [ 1142.577301][T24438] kthread+0x29d/0x330 [ 1142.581468][T24438] ret_from_fork+0x1f/0x30 [ 1142.585896][T24438] [ 1142.588237][T24438] Freed by task 6658: [ 1142.592227][T24438] kasan_set_track+0x4b/0x70 [ 1142.596862][T24438] kasan_save_free_info+0x2d/0x50 [ 1142.601927][T24438] ____kasan_slab_free+0x126/0x1e0 [ 1142.607078][T24438] slab_free_freelist_hook+0x131/0x1a0 [ 1142.612550][T24438] kmem_cache_free_bulk+0x348/0x460 [ 1142.617762][T24438] kfree_rcu_work+0x33f/0x890 [ 1142.622446][T24438] process_one_work+0x8a2/0x1160 [ 1142.627480][T24438] worker_thread+0xaa2/0x1270 [ 1142.632255][T24438] kthread+0x29d/0x330 [ 1142.636371][T24438] ret_from_fork+0x1f/0x30 [ 1142.640905][T24438] [ 1142.643246][T24438] Last potentially related work creation: [ 1142.648990][T24438] kasan_save_stack+0x3a/0x60 [ 1142.653691][T24438] __kasan_record_aux_stack+0xb2/0xc0 [ 1142.659132][T24438] kvfree_call_rcu+0x103/0x870 [ 1142.663957][T24438] cfg80211_update_known_bss+0x178/0xa20 [ 1142.669607][T24438] cfg80211_bss_update+0x15f/0x2250 [ 1142.674910][T24438] cfg80211_inform_bss_frame_data+0x9ec/0x1390 [ 1142.681180][T24438] ieee80211_bss_info_update+0x738/0xc80 [ 1142.686826][T24438] ieee80211_ibss_rx_queued_mgmt+0x189d/0x2cd0 [ 1142.692994][T24438] ieee80211_iface_work+0x726/0xc80 [ 1142.698286][T24438] cfg80211_wiphy_work+0x221/0x260 [ 1142.703583][T24438] process_one_work+0x8a2/0x1160 [ 1142.708533][T24438] worker_thread+0xaa2/0x1270 [ 1142.713482][T24438] kthread+0x29d/0x330 [ 1142.717558][T24438] ret_from_fork+0x1f/0x30 [ 1142.722079][T24438] [ 1142.724412][T24438] Second to last potentially related work creation: [ 1142.731097][T24438] kasan_save_stack+0x3a/0x60 [ 1142.735798][T24438] __kasan_record_aux_stack+0xb2/0xc0 [ 1142.741203][T24438] kvfree_call_rcu+0x103/0x870 [ 1142.746075][T24438] cfg80211_update_known_bss+0x178/0xa20 [ 1142.751731][T24438] cfg80211_bss_update+0x15f/0x2250 [ 1142.756944][T24438] cfg80211_inform_bss_frame_data+0x9ec/0x1390 [ 1142.763121][T24438] ieee80211_bss_info_update+0x738/0xc80 [ 1142.768768][T24438] ieee80211_ibss_rx_queued_mgmt+0x189d/0x2cd0 [ 1142.774949][T24438] ieee80211_iface_work+0x726/0xc80 [ 1142.780152][T24438] cfg80211_wiphy_work+0x221/0x260 [ 1142.785297][T24438] process_one_work+0x8a2/0x1160 [ 1142.790274][T24438] worker_thread+0xaa2/0x1270 [ 1142.794974][T24438] kthread+0x29d/0x330 [ 1142.799058][T24438] ret_from_fork+0x1f/0x30 [ 1142.803490][T24438] [ 1142.805833][T24438] The buggy address belongs to the object at ffff888051ac0a80 [ 1142.805833][T24438] which belongs to the cache kmalloc-96 of size 96 [ 1142.819721][T24438] The buggy address is located 56 bytes inside of [ 1142.819721][T24438] 96-byte region [ffff888051ac0a80, ffff888051ac0ae0) [ 1142.832830][T24438] [ 1142.835160][T24438] The buggy address belongs to the physical page: [ 1142.841662][T24438] page:ffffea000146b000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x51ac0 [ 1142.851906][T24438] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1142.859481][T24438] raw: 00fff00000000200 0000000000000000 dead000000000001 ffff888017441780 [ 1142.868073][T24438] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 1142.876655][T24438] page dumped because: kasan: bad access detected [ 1142.883156][T24438] page_owner tracks the page as allocated [ 1142.888959][T24438] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 4259, tgid 4259 (kworker/1:3), ts 80683118742, free_ts 23264687073 [ 1142.908682][T24438] post_alloc_hook+0x173/0x1a0 [ 1142.913466][T24438] get_page_from_freelist+0x1a1e/0x1ab0 [ 1142.919167][T24438] __alloc_pages+0x1ec/0x4f0 [ 1142.923771][T24438] alloc_slab_page+0x4f/0x160 [ 1142.928461][T24438] new_slab+0x87/0x2c0 [ 1142.932540][T24438] ___slab_alloc+0xbc6/0x1240 [ 1142.937225][T24438] __kmem_cache_alloc_node+0x1a0/0x260 [ 1142.942696][T24438] __kmalloc_node+0xa0/0x240 [ 1142.947311][T24438] memcg_alloc_slab_cgroups+0x83/0x120 [ 1142.952781][T24438] new_slab+0xc3/0x2c0 [ 1142.956860][T24438] ___slab_alloc+0xbc6/0x1240 [ 1142.961544][T24438] kmem_cache_alloc+0x1b7/0x2f0 [ 1142.966418][T24438] dst_alloc+0x101/0x160 [ 1142.970672][T24438] icmp6_dst_alloc+0x7f/0x460 [ 1142.975362][T24438] mld_sendpack+0x703/0xdc0 [ 1142.979963][T24438] mld_ifc_work+0x836/0xb40 [ 1142.984469][T24438] page last free stack trace: [ 1142.989145][T24438] free_unref_page_prepare+0x8b4/0x9a0 [ 1142.994615][T24438] free_unref_page+0x2e/0x3f0 [ 1142.999320][T24438] free_contig_range+0x9d/0x150 [ 1143.004200][T24438] destroy_args+0xf0/0xa0a [ 1143.008676][T24438] debug_vm_pgtable+0x33c/0x38e [ 1143.013539][T24438] do_one_initcall+0x26a/0x840 [ 1143.018328][T24438] do_initcall_level+0x137/0x1e4 [ 1143.023332][T24438] do_initcalls+0x4b/0x8a [ 1143.027674][T24438] kernel_init_freeable+0x415/0x5be [ 1143.032891][T24438] kernel_init+0x19/0x1b0 [ 1143.037320][T24438] ret_from_fork+0x1f/0x30 [ 1143.041753][T24438] [ 1143.044172][T24438] Memory state around the buggy address: [ 1143.049808][T24438] ffff888051ac0980: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1143.057874][T24438] ffff888051ac0a00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 1143.065944][T24438] >ffff888051ac0a80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1143.074022][T24438] ^ [ 1143.080002][T24438] ffff888051ac0b00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1143.088204][T24438] ffff888051ac0b80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1143.096359][T24438] ================================================================== [ 1143.172661][T24438] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1143.180021][T24438] CPU: 0 PID: 24438 Comm: syz.1.8850 Not tainted syzkaller #0 [ 1143.187531][T24438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1143.197711][T24438] Call Trace: [ 1143.201105][T24438] [ 1143.204063][T24438] dump_stack_lvl+0x188/0x24e [ 1143.208794][T24438] ? memcpy+0x3c/0x60 [ 1143.212814][T24438] ? show_regs_print_info+0x12/0x12 [ 1143.218057][T24438] ? load_image+0x400/0x400 [ 1143.222590][T24438] panic+0x2e5/0x730 [ 1143.226521][T24438] ? bpf_jit_dump+0xd0/0xd0 [ 1143.231149][T24438] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1143.237176][T24438] ? _raw_spin_unlock+0x40/0x40 [ 1143.242080][T24438] check_panic_on_warn+0x80/0xa0 [ 1143.247076][T24438] ? reiserfs_write_lock+0x58/0xd0 [ 1143.252323][T24438] end_report+0x66/0x110 [ 1143.256609][T24438] kasan_report+0x118/0x140 [ 1143.261252][T24438] ? verify_lock_unused+0x140/0x140 [ 1143.266638][T24438] ? reiserfs_write_lock+0x58/0xd0 [ 1143.271779][T24438] reiserfs_write_lock+0x58/0xd0 [ 1143.276735][T24438] reiserfs_lookup+0x18a/0x480 [ 1143.281613][T24438] ? reiserfs_find_entry+0x18e0/0x18e0 [ 1143.287110][T24438] ? do_raw_spin_unlock+0x11d/0x230 [ 1143.292329][T24438] ? _raw_spin_unlock+0x24/0x40 [ 1143.297232][T24438] ? d_alloc+0x1e7/0x250 [ 1143.301520][T24438] lookup_one_qstr_excl+0x10e/0x240 [ 1143.306761][T24438] do_renameat2+0x4bf/0xce0 [ 1143.311306][T24438] ? __lock_acquire+0x7d10/0x7d10 [ 1143.316373][T24438] ? fsnotify_move+0x4e0/0x4e0 [ 1143.321162][T24438] ? __check_object_size+0x500/0xa40 [ 1143.326556][T24438] ? strncpy_from_user+0x1e3/0x350 [ 1143.331687][T24438] ? getname_flags+0x206/0x500 [ 1143.336501][T24438] __x64_sys_rename+0x82/0x90 [ 1143.341222][T24438] do_syscall_64+0x4c/0xa0 [ 1143.345661][T24438] ? clear_bhb_loop+0x60/0xb0 [ 1143.350341][T24438] ? clear_bhb_loop+0x60/0xb0 [ 1143.355077][T24438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1143.360998][T24438] RIP: 0033:0x7f0ed479cdd9 [ 1143.365440][T24438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.385176][T24438] RSP: 002b:00007f0ed565c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1143.393600][T24438] RAX: ffffffffffffffda RBX: 00007f0ed4a15fa0 RCX: 00007f0ed479cdd9 [ 1143.401603][T24438] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 00002000000009c0 [ 1143.409586][T24438] RBP: 00007f0ed4832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1143.417589][T24438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1143.425592][T24438] R13: 00007f0ed4a16038 R14: 00007f0ed4a15fa0 R15: 00007ffd99747148 [ 1143.433572][T24438] [ 1143.436728][T24438] Kernel Offset: disabled [ 1143.441064][T24438] Rebooting in 86400 seconds..