last executing test programs: 1m14.560369364s ago: executing program 0 (id=2166): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080)={[{@delalloc}, {@errors_remount}]}, 0x81, 0x7d2, &(0x7f00000007c0)="$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") mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x801, 0x2) 1m14.005951862s ago: executing program 0 (id=2173): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) 1m13.778523765s ago: executing program 0 (id=2175): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x2}, 0x6, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000003a322b929c735580"], 0x48}, 0x2}, 0x0) 1m13.632876588s ago: executing program 0 (id=2176): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{@nodecompose}, {@nobarrier}, {@nodecompose}, {@force}, {@nobarrier}, {@type={'type', 0x3d, "aff0aae8"}}, {@nls={'nls', 0x3d, 'iso8859-9'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0x800, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5006d, 0x0) 1m13.281851863s ago: executing program 0 (id=2179): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x636, 0x82002) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1m12.761987022s ago: executing program 0 (id=2183): r0 = syz_io_uring_setup(0x6702, &(0x7f0000000340)={0x0, 0xc7a1, 0x8, 0x6}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 1m12.248151929s ago: executing program 32 (id=2183): r0 = syz_io_uring_setup(0x6702, &(0x7f0000000340)={0x0, 0xc7a1, 0x8, 0x6}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 1m2.884383906s ago: executing program 1 (id=2255): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x10100008) keyctl$get_security(0x11, r0, 0x0, 0x0) 1m2.596873511s ago: executing program 1 (id=2257): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f0000000300), 0x4, 0x96df, &(0x7f0000009680)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x1d9) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x80d8, 0x0, 0x2, 0x0, 0xc96a}) 1m0.73818782s ago: executing program 1 (id=2267): r0 = syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xeeeeeeee}) 59.909790723s ago: executing program 1 (id=2271): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000040)={0xa, {"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", 0x1000}}, 0x1006) 59.635699397s ago: executing program 3 (id=2272): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) lseek(r0, 0xfffffffffffffffa, 0x1) 59.380886611s ago: executing program 3 (id=2273): syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) writev(r0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000740)="82", 0x1}], 0x2) 59.006061727s ago: executing program 1 (id=2274): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0xfffffffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x3c}, 0xa, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1001}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 58.813925159s ago: executing program 3 (id=2276): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000001440)) 58.671305342s ago: executing program 1 (id=2277): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x2}}}}}}, 0x0) 58.337993167s ago: executing program 3 (id=2280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}}}}}}, 0x0) 57.804839885s ago: executing program 3 (id=2284): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x10) 57.454857501s ago: executing program 3 (id=2286): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x48001018, r0, 0x0) 43.508201909s ago: executing program 33 (id=2277): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x2}}}}}}, 0x0) 41.930265254s ago: executing program 34 (id=2286): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x48001018, r0, 0x0) 20.41721091s ago: executing program 2 (id=2328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "a8"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 20.012597557s ago: executing program 2 (id=2329): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000009c0)) 19.778062861s ago: executing program 2 (id=2331): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 19.366977787s ago: executing program 2 (id=2332): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) listen(r0, 0xfffdfffc) 19.215930019s ago: executing program 2 (id=2333): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x40, 0xc, 0x9, "61bcc4b3b6ade5444a"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 16.852843326s ago: executing program 2 (id=2338): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)={0x30, r1, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 15.96936612s ago: executing program 4 (id=2343): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) 15.821365032s ago: executing program 4 (id=2344): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000380)='./file0\x00', 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)) 15.694672774s ago: executing program 4 (id=2345): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x400, 0x51) getdents(r0, &(0x7f0000000240)=""/55, 0x37) getdents(r0, 0x0, 0x66) 15.543910496s ago: executing program 4 (id=2346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 15.401916079s ago: executing program 4 (id=2347): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 15.29648497s ago: executing program 4 (id=2348): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a0001ff000008000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) 1.483245607s ago: executing program 35 (id=2338): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)={0x30, r1, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 36 (id=2348): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a0001ff000008000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) kernel console output (not intermixed with test programs): k 73) failed [ 255.502755][ T9665] loop2: detected capacity change from 0 to 40427 [ 255.524491][ T9665] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 255.563846][ T9665] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 255.582017][ T5846] usb 1-1: USB disconnect, device number 7 [ 255.631141][ T9665] F2FS-fs (loop2): invalid crc value [ 255.669912][ T9665] F2FS-fs (loop2): Found nat_bits in checkpoint [ 255.843872][ T9665] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 255.855678][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.855782][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.871244][ T9692] loop3: detected capacity change from 0 to 256 [ 255.888604][ T9665] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 255.906804][ T9692] exfat: Deprecated parameter 'utf8' [ 255.912327][ T9692] exfat: Deprecated parameter 'utf8' [ 255.965005][ T9692] exfat: Deprecated parameter 'namecase' [ 256.010273][ T9692] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 256.938976][ T9695] loop1: detected capacity change from 0 to 32768 [ 256.996495][ T9695] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 257.096740][ T9714] loop2: detected capacity change from 0 to 256 [ 257.148681][ T9717] loop0: detected capacity change from 0 to 16 [ 257.182938][ T9717] erofs: (device loop0): mounted with root inode @ nid 36. [ 257.185964][ T9714] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 257.261454][ T9695] XFS (loop1): Ending clean mount [ 257.327323][ T9695] XFS (loop1): Quotacheck needed: Please wait. [ 257.407966][ T9695] XFS (loop1): Quotacheck: Done. [ 257.422797][ T9698] loop3: detected capacity change from 0 to 32768 [ 257.507007][ T9698] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 257.573614][ T9698] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 257.681348][ T9698] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 257.798095][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 257.804207][ T9698] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 258.909959][ T9741] loop2: detected capacity change from 0 to 1024 [ 258.926253][ T9741] EXT4-fs: Ignoring removed orlov option [ 258.989108][ T9741] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 259.059372][ T9741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.234974][ T9734] loop1: detected capacity change from 0 to 32768 [ 259.246471][ T9717] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 8200 of nid 36 [ 259.265326][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.284079][ T9734] ERROR: (device loop1): dtReadFirst: btstack overrun [ 259.284079][ T9734] [ 259.335931][ T9734] ERROR: (device loop1): remounting filesystem as read-only [ 259.343326][ T9734] btstack dump: [ 259.384560][ T9734] bn = 0, index = 0 [ 259.391722][ T9734] bn = 0, index = 0 [ 259.417621][ T9734] bn = 0, index = 0 [ 259.454471][ T9734] bn = 0, index = 0 [ 259.464924][ T9734] bn = 0, index = 0 [ 259.484580][ T9734] bn = 0, index = 0 [ 259.506197][ T9734] bn = 0, index = 0 [ 259.510080][ T9734] bn = 0, index = 0 [ 259.701111][ T9755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1547'. [ 260.191495][ T6333] udevd[6333]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 260.524639][ T9777] loop1: detected capacity change from 0 to 1024 [ 260.550588][ T9777] EXT4-fs: Ignoring removed orlov option [ 260.558548][ T9777] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 260.639479][ T9777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.695872][ T9782] loop2: detected capacity change from 0 to 16 [ 260.700778][ T9784] loop0: detected capacity change from 0 to 256 [ 260.734546][ T9782] erofs: (device loop2): mounted with root inode @ nid 36. [ 260.764637][ T5847] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 260.800701][ T9784] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 260.803149][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.959907][ T5847] usb 4-1: Using ep0 maxpacket: 8 [ 260.976902][ T5847] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 261.001340][ T5847] usb 4-1: config 0 has no interface number 0 [ 261.028142][ T5847] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 261.053966][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.072625][ T5847] usb 4-1: Product: syz [ 261.082778][ T5847] usb 4-1: Manufacturer: syz [ 261.101773][ T5847] usb 4-1: SerialNumber: syz [ 261.123977][ T5847] usb 4-1: config 0 descriptor?? [ 261.356661][ T5847] peak_usb 4-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 261.390124][ T9793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1561'. [ 261.573428][ T5847] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 261.593746][ T5847] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 261.600692][ T5847] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 261.722135][ T6333] udevd[6333]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 261.744627][ T5847] peak_usb: probe of 4-1:0.56 failed with error -22 [ 261.865947][ T5847] usb 4-1: USB disconnect, device number 14 [ 262.266043][ T9806] loop1: detected capacity change from 0 to 64 [ 262.354480][ T9782] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 8200 of nid 36 [ 262.385618][ T9798] loop0: detected capacity change from 0 to 32768 [ 262.453403][ T9798] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 262.579180][ T9817] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1569'. [ 262.601759][ T9817] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1569'. [ 262.631769][ T9798] XFS (loop0): Ending clean mount [ 262.653755][ T9798] XFS (loop0): Quotacheck needed: Please wait. [ 262.725962][ T9798] XFS (loop0): Quotacheck: Done. [ 262.886016][ T5774] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 263.014050][ T9821] loop3: detected capacity change from 0 to 256 [ 263.550285][ T9832] loop3: detected capacity change from 0 to 512 [ 263.589623][ T9832] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 263.610557][ T9832] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 263.622582][ T9832] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1575: invalid indirect mapped block 2683928664 (level 1) [ 263.664119][ T9832] EXT4-fs (loop3): Remounting filesystem read-only [ 263.671156][ T9832] EXT4-fs (loop3): 1 truncate cleaned up [ 263.684852][ T9834] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1576'. [ 263.694881][ T9834] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 263.700141][ T9832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.889786][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.056312][ T9846] loop3: detected capacity change from 0 to 16 [ 264.073498][ T9846] erofs: (device loop3): mounted with root inode @ nid 36. [ 264.114968][ T9848] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1581'. [ 264.161514][ T9848] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1581'. [ 264.176316][ T9850] loop1: detected capacity change from 0 to 256 [ 264.340518][ T9852] mkiss: ax0: crc mode is auto. [ 265.164213][ T9854] loop2: detected capacity change from 0 to 32768 [ 265.291728][ T5818] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 265.501403][ T5818] usb 1-1: Using ep0 maxpacket: 32 [ 265.508961][ T5818] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 265.517859][ T5818] usb 1-1: config 0 has no interface number 0 [ 265.524610][ T5818] usb 1-1: config 0 interface 12 has no altsetting 0 [ 265.534655][ T5818] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 265.543932][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.552879][ T5818] usb 1-1: Product: syz [ 265.557088][ T5818] usb 1-1: Manufacturer: syz [ 265.562280][ T5818] usb 1-1: SerialNumber: syz [ 265.569708][ T5818] usb 1-1: config 0 descriptor?? [ 265.595357][ T9846] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 8200 of nid 36 [ 266.241358][ T5818] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 266.248961][ T5818] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 266.281486][ T5818] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 266.289194][ T5818] f81534: probe of 1-1:0.12 failed with error -71 [ 266.318376][ T5818] usb 1-1: USB disconnect, device number 8 [ 266.617738][ T9882] loop3: detected capacity change from 0 to 64 [ 266.974654][ T9885] loop1: detected capacity change from 0 to 1024 [ 267.020297][ T9880] loop2: detected capacity change from 0 to 32768 [ 267.155378][ T9880] read_mapping_page failed! [ 267.199621][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 267.209407][ T9880] ERROR: (device loop2): txCommit: [ 267.209407][ T9880] [ 267.244246][ T9880] ERROR: (device loop2): remounting filesystem as read-only [ 268.417590][ T9897] loop1: detected capacity change from 0 to 32768 [ 268.467174][ T9897] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1605 (9897) [ 268.526272][ T9897] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 268.539831][ T9897] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 268.549048][ T5142] udevd[5142]: worker [6333] terminated by signal 33 (Unknown signal 33) [ 268.569965][ T9897] BTRFS info (device loop1): setting nodatacow, compression disabled [ 268.571144][ T9921] loop2: detected capacity change from 0 to 128 [ 268.578371][ T9897] BTRFS info (device loop1): enabling ssd optimizations [ 268.585162][ T5142] udevd[5142]: worker [6333] failed while handling '/devices/virtual/block/loop1' [ 268.606165][ T9897] BTRFS info (device loop1): setting datacow [ 268.624078][ T9897] BTRFS info (device loop1): doing ref verification [ 268.639761][ T9897] BTRFS info (device loop1): force clearing of disk cache [ 268.653369][ T9917] loop3: detected capacity change from 0 to 4096 [ 268.657257][ T9897] BTRFS info (device loop1): turning off barriers [ 268.668549][ T9897] BTRFS info (device loop1): using spread ssd allocation scheme [ 268.676762][ T9897] BTRFS info (device loop1): using free space tree [ 268.702024][ T9921] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 268.722073][ T9921] ext4 filesystem being mounted at /385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 268.753924][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.967743][ T9897] BTRFS info (device loop1): auto enabling async discard [ 269.016890][ T9897] BTRFS info (device loop1): rebuilding free space tree [ 269.062843][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.194643][ T5773] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 269.458010][ T9948] netlink: 536 bytes leftover after parsing attributes in process `syz.0.1624'. [ 269.467269][ T9948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1624'. [ 269.745313][ T9954] loop1: detected capacity change from 0 to 16 [ 269.799557][ T9954] erofs: (device loop1): mounted with root inode @ nid 36. [ 270.328437][ T9952] loop3: detected capacity change from 0 to 32768 [ 270.388619][ T9952] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1625 (9952) [ 270.446948][ T9952] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 270.470595][ T9952] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 270.489605][ T9952] BTRFS info (device loop3): enabling auto defrag [ 270.519450][ T9952] BTRFS info (device loop3): use no compression [ 270.549647][ T9952] BTRFS info (device loop3): force clearing of disk cache [ 270.556847][ T9952] BTRFS info (device loop3): turning on async discard [ 270.589038][ T9952] BTRFS info (device loop3): max_inline at 5 [ 270.604516][ T9952] BTRFS info (device loop3): force zlib compression, level 3 [ 270.643475][ T9952] BTRFS info (device loop3): using free space tree [ 270.763476][ T9952] BTRFS info (device loop3): enabling ssd optimizations [ 270.776552][ T9991] loop2: detected capacity change from 0 to 256 [ 270.794822][ T9952] BTRFS info (device loop3): rebuilding free space tree [ 270.888655][ T5818] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 270.899095][ T9991] FAT-fs (loop2): Directory bread(block 64) failed [ 270.968616][ T9991] FAT-fs (loop2): Directory bread(block 65) failed [ 270.978878][ T9991] FAT-fs (loop2): Directory bread(block 66) failed [ 271.001881][ T9991] FAT-fs (loop2): Directory bread(block 67) failed [ 271.022517][ T9991] FAT-fs (loop2): Directory bread(block 68) failed [ 271.042101][ T9991] FAT-fs (loop2): Directory bread(block 69) failed [ 271.072883][ T9991] FAT-fs (loop2): Directory bread(block 70) failed [ 271.103510][ T9991] FAT-fs (loop2): Directory bread(block 71) failed [ 271.118982][ T9991] FAT-fs (loop2): Directory bread(block 72) failed [ 271.121478][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.127566][ T9991] FAT-fs (loop2): Directory bread(block 73) failed [ 271.170424][ T5776] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 271.189454][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.217619][ T5818] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 271.237997][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.293410][ T5818] usb 1-1: config 0 descriptor?? [ 271.624899][ T9954] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 8200 of nid 36 [ 271.781428][ T5818] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 271.818634][ T5818] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 271.862090][ T5818] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0010/input/input18 [ 271.889805][ T5818] cm6533_jd 0003:0D8C:0022.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 272.125421][ T5870] usb 1-1: USB disconnect, device number 9 [ 272.174529][T10001] fido_id[10001]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 272.708284][T10017] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1648'. [ 272.885458][T10020] loop0: detected capacity change from 0 to 164 [ 272.912424][T10021] netlink: 536 bytes leftover after parsing attributes in process `syz.1.1641'. [ 272.929100][T10020] rock: directory entry would overflow storage [ 272.937828][T10021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1641'. [ 272.954773][T10020] rock: sig=0x66, size=4, remaining=3 [ 273.020017][T10020] rock: directory entry would overflow storage [ 273.046350][T10020] rock: sig=0x66, size=4, remaining=3 [ 273.254770][T10031] loop0: detected capacity change from 0 to 64 [ 273.372286][T10035] loop1: detected capacity change from 0 to 2048 [ 273.452411][T10036] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.267388][ T5870] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 274.501155][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.525185][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.565853][ T5870] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 274.594434][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.623298][ T5870] usb 3-1: config 0 descriptor?? [ 274.850346][T10066] loop0: detected capacity change from 0 to 1024 [ 274.928430][T10066] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 274.952501][T10066] hfsplus: xattr searching failed [ 274.973228][T10066] syz.0.1666: attempt to access beyond end of device [ 274.973228][T10066] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 275.020136][T10066] Buffer I/O error on dev loop0, logical block 458752, async page read [ 275.050543][T10066] hfsplus: unable to mark blocks free: error -5 [ 275.067461][T10066] hfsplus: can't free extent [ 275.104261][ T5870] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 275.131110][ T5870] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 275.156736][ T5870] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0011/input/input19 [ 275.192357][ T5870] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 275.340976][T10077] netlink: 'syz.1.1671': attribute type 153 has an invalid length. [ 275.496491][ T5818] usb 3-1: USB disconnect, device number 15 [ 276.187225][T10091] loop1: detected capacity change from 0 to 4096 [ 276.287008][T10094] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.321571][ T27] audit: type=1800 audit(1750346922.265:81): pid=10091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1687" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 277.035817][ T5870] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 277.101903][T10110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1686'. [ 277.255606][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 277.288790][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.314801][ T5870] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.349798][ T5870] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.375914][ T5870] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 277.414925][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 277.441690][ T5870] usb 2-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 277.462715][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.484496][ T5870] usb 2-1: config 0 descriptor?? [ 277.805235][ T5818] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 277.927006][ T5870] cypress 0003:04B4:ED81.0012: item fetching failed at offset 0/4 [ 277.956292][ T5870] cypress 0003:04B4:ED81.0012: parse failed [ 277.977671][ T5870] cypress: probe of 0003:04B4:ED81.0012 failed with error -22 [ 278.021919][T10112] loop0: detected capacity change from 0 to 40427 [ 278.055951][T10112] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 278.067026][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.087923][T10112] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 278.097434][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.127984][T10112] F2FS-fs (loop0): invalid crc value [ 278.137875][ T5818] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 278.174730][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.186694][T10112] F2FS-fs (loop0): Found nat_bits in checkpoint [ 278.201799][ T2176] usb 2-1: USB disconnect, device number 13 [ 278.221748][ T5818] usb 4-1: config 0 descriptor?? [ 278.357721][T10112] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 278.375601][T10112] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 278.752128][ T5818] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 278.776109][ T5818] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 278.782210][T10131] loop2: detected capacity change from 0 to 512 [ 278.798440][ T5818] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0013/input/input20 [ 278.847137][ T5818] cm6533_jd 0003:0D8C:0022.0013: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 279.053197][T10131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.084624][T10131] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.132502][ T5818] usb 4-1: USB disconnect, device number 15 [ 279.183027][T10131] EXT4-fs warning (device loop2): ext4_group_extend:1897: can't read last block, resize aborted [ 279.360002][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.514650][T10137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1704'. [ 279.744631][T10141] loop0: detected capacity change from 0 to 2048 [ 279.809434][T10141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.905460][T10146] loop3: detected capacity change from 0 to 1024 [ 279.977285][T10141] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.1693: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 280.139273][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.346955][ T1139] hfsplus: b-tree write err: -5, ino 4 [ 281.042500][T10175] loop0: detected capacity change from 0 to 1024 [ 281.212947][ T1139] hfsplus: b-tree write err: -5, ino 4 [ 281.263328][T10179] loop1: detected capacity change from 0 to 164 [ 282.103991][T10201] loop0: detected capacity change from 0 to 64 [ 282.362741][T10207] loop0: detected capacity change from 0 to 512 [ 282.410801][T10207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.424122][T10207] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 282.448096][T10207] EXT4-fs (loop0): shut down requested (1) [ 282.489729][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.498957][ T5818] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 282.692747][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 282.733205][ T5818] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.752657][ T5818] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 282.761618][ T5818] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 282.786887][T10198] loop3: detected capacity change from 0 to 32768 [ 282.813933][ T5818] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 282.826243][ T5818] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 282.836298][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.856450][ T5818] hub 2-1:1.0: bad descriptor, ignoring hub [ 282.862763][ T5818] hub: probe of 2-1:1.0 failed with error -5 [ 282.869372][ T5818] cdc_wdm 2-1:1.0: skipping garbage [ 282.882979][ T5818] cdc_wdm 2-1:1.0: skipping garbage [ 282.903828][T10198] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 282.917064][ T5818] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 282.955577][ T5818] cdc_wdm 2-1:1.0: Unknown control protocol [ 283.115020][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 283.335583][ T5847] usb 2-1: USB disconnect, device number 14 [ 283.487845][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1733'. [ 283.614113][T10213] loop0: detected capacity change from 0 to 32768 [ 283.690283][T10213] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 283.907543][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 284.473892][T10232] loop2: detected capacity change from 0 to 32768 [ 284.573229][ T27] audit: type=1800 audit(1750346930.519:82): pid=10232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1737" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 284.593695][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.604669][T10232] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 284.604669][T10232] [ 284.625549][T10232] ERROR: (device loop2): remounting filesystem as read-only [ 284.634807][T10232] xtLookup: xtSearch returned -5 [ 284.640855][T10232] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 284.640855][T10232] [ 284.860022][T10234] loop3: detected capacity change from 0 to 40427 [ 284.917856][T10234] F2FS-fs (loop3): invalid crc value [ 284.958236][T10234] F2FS-fs (loop3): Found nat_bits in checkpoint [ 285.101242][T10234] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 285.333168][ T5776] syz-executor: attempt to access beyond end of device [ 285.333168][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 285.371726][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 285.630909][T10267] loop0: detected capacity change from 0 to 512 [ 285.645594][T10267] EXT4-fs (loop0): Test dummy encryption mode enabled [ 285.691043][T10267] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1753: invalid indirect mapped block 2185560079 (level 0) [ 285.730868][T10270] loop1: detected capacity change from 0 to 512 [ 285.781623][T10267] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1753: invalid indirect mapped block 2683928664 (level 1) [ 285.801012][T10270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.839809][T10270] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.864432][T10267] EXT4-fs (loop0): 1 truncate cleaned up [ 285.909491][T10267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.958595][T10270] EXT4-fs warning (device loop1): ext4_group_extend:1897: can't read last block, resize aborted [ 286.114912][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.141013][ T5818] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 286.147419][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.343552][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 286.358163][ T5818] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.399877][ T5818] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 286.432103][ T5818] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 286.450590][ T5818] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 286.463730][ T5818] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 286.479299][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.499906][ T5818] hub 3-1:1.0: bad descriptor, ignoring hub [ 286.513835][ T5818] hub: probe of 3-1:1.0 failed with error -5 [ 286.520464][ T5818] cdc_wdm 3-1:1.0: skipping garbage [ 286.539564][ T5818] cdc_wdm 3-1:1.0: skipping garbage [ 286.557902][ T5818] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 286.564142][ T5818] cdc_wdm 3-1:1.0: Unknown control protocol [ 286.871465][ T5847] usb 3-1: USB disconnect, device number 16 [ 287.168597][T10302] loop0: detected capacity change from 0 to 512 [ 287.233829][T10302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.257080][T10302] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.334487][T10290] loop3: detected capacity change from 0 to 32768 [ 287.347089][T10302] EXT4-fs warning (device loop0): ext4_group_extend:1897: can't read last block, resize aborted [ 287.402664][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1767'. [ 287.457402][T10290] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 287.494313][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.738264][T10290] XFS (loop3): Ending clean mount [ 287.768603][T10290] XFS (loop3): Quotacheck needed: Please wait. [ 287.885148][T10290] XFS (loop3): Quotacheck: Done. [ 288.177289][ T5776] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 288.188962][T10332] loop1: detected capacity change from 0 to 1024 [ 288.829934][ T5846] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 288.928915][T10336] loop0: detected capacity change from 0 to 32768 [ 288.966283][T10336] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 289.039579][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 289.046183][T10336] XFS (loop0): Ending clean mount [ 289.047888][ T5846] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.058415][T10336] XFS (loop0): Quotacheck needed: Please wait. [ 289.076055][ T5846] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 289.085863][ T5846] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 289.097989][ T5846] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 289.109739][ T5846] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 289.118841][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.149470][ T5846] hub 2-1:1.0: bad descriptor, ignoring hub [ 289.155443][ T5846] hub: probe of 2-1:1.0 failed with error -5 [ 289.178729][ T5846] cdc_wdm 2-1:1.0: skipping garbage [ 289.194073][ T5846] cdc_wdm 2-1:1.0: skipping garbage [ 289.194618][T10336] XFS (loop0): Quotacheck: Done. [ 289.219960][ T5846] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 289.225944][ T5846] cdc_wdm 2-1:1.0: Unknown control protocol [ 289.306778][ T5774] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 289.520174][ T5818] usb 2-1: USB disconnect, device number 15 [ 289.885191][T10369] loop3: detected capacity change from 0 to 1024 [ 290.136054][T10375] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1791'. [ 290.170281][T10375] netlink: 'syz.1.1791': attribute type 9 has an invalid length. [ 290.469120][T10385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1796'. [ 290.930104][ T5847] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 291.122138][T10388] loop1: detected capacity change from 0 to 32768 [ 291.128928][ T5847] usb 1-1: Using ep0 maxpacket: 8 [ 291.145232][T10388] XFS: attr2 mount option is deprecated. [ 291.157357][ T5847] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.168255][T10388] XFS: ikeep mount option is deprecated. [ 291.174936][ T5847] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 291.187838][T10388] XFS: noikeep mount option is deprecated. [ 291.189814][T10402] loop2: detected capacity change from 0 to 4096 [ 291.211083][ T5847] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 291.232547][T10402] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 291.259404][ T5847] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 291.273850][ T5847] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 291.284224][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.299163][ T5847] hub 1-1:1.0: bad descriptor, ignoring hub [ 291.300367][T10388] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 291.342974][ T5847] hub: probe of 1-1:1.0 failed with error -5 [ 291.380338][ T5847] cdc_wdm 1-1:1.0: skipping garbage [ 291.386359][ T5847] cdc_wdm 1-1:1.0: skipping garbage [ 291.410720][ T5847] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 291.422909][ T5847] cdc_wdm 1-1:1.0: Unknown control protocol [ 291.426065][T10402] ntfs3: loop2: Failed to load $Extend (-22). [ 291.450517][T10402] ntfs3: loop2: Failed to initialize $Extend. [ 291.455655][T10388] XFS (loop1): Ending clean mount [ 291.491116][T10388] XFS (loop1): Quotacheck needed: Please wait. [ 291.565383][T10388] XFS (loop1): Quotacheck: Done. [ 291.574619][T10402] ntfs3: loop2: ino=21, "hugetlb.1GB.usage_in_bytes" mmap(write) compressed not supported [ 291.649942][ T5847] usb 1-1: USB disconnect, device number 10 [ 291.721891][ T5773] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 291.775118][T10412] loop3: detected capacity change from 0 to 16 [ 292.136841][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1808'. [ 292.277476][ T5789] Bluetooth: Frame is too long (len 10, expected len 5) [ 292.427276][T10428] loop3: detected capacity change from 0 to 512 [ 292.441029][T10428] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 292.481650][T10428] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.1812: bg 0: block 5: invalid block bitmap [ 292.496146][T10428] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 292.506282][T10428] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1812: invalid indirect mapped block 3 (level 2) [ 292.528024][T10428] EXT4-fs (loop3): 2 truncates cleaned up [ 292.530696][ T5847] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 292.539355][T10428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.741685][ T5847] usb 1-1: Using ep0 maxpacket: 8 [ 292.751263][ T5847] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 292.767166][ T5847] usb 1-1: config 179 has no interface number 0 [ 292.782240][T10438] can0: slcan on ptm0. [ 292.793055][ T5847] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 292.832062][ T5847] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 292.858712][ T5847] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 292.871656][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.875628][ T5847] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 292.967996][ T5847] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 292.989455][T10437] can0 (unregistered): slcan off ptm0. [ 293.007600][ T5847] usb 1-1: config 179 interface 65 has no altsetting 0 [ 293.026669][ T5847] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 293.073761][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.150205][ T5847] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input21 [ 293.247814][ T5127] input input21: unable to receive magic message: -110 [ 293.339436][ T5127] input input21: unable to receive magic message: -32 [ 293.437141][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 293.443727][ T5127] input input21: unable to receive magic message: -71 [ 293.445585][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 293.461195][ T5870] usb 1-1: USB disconnect, device number 11 [ 293.479532][ T5870] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 293.735451][T10462] loop3: detected capacity change from 0 to 2048 [ 293.757320][ T5847] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 293.762947][T10462] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.909712][ T27] audit: type=1326 audit(1750346939.863:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.1.1834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3aa78e929 code=0x0 [ 293.979499][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.009858][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.025117][ T5847] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.048585][ T5847] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.081840][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.102581][ T5847] usb 3-1: config 0 descriptor?? [ 294.548328][ T5847] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 294.583809][ T5847] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 294.752749][ T5847] usb 3-1: USB disconnect, device number 17 [ 295.181934][T10494] loop0: detected capacity change from 0 to 32768 [ 295.221075][ T27] audit: type=1800 audit(1750346941.174:84): pid=10494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1832" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 295.227970][T10494] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 295.227970][T10494] [ 295.255470][T10494] ERROR: (device loop0): remounting filesystem as read-only [ 295.286576][T10494] xtLookup: xtSearch returned -5 [ 295.291596][T10494] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 295.291596][T10494] [ 295.503614][T10507] loop2: detected capacity change from 0 to 2048 [ 295.636771][T10507] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.647677][T10511] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1838'. [ 295.685062][T10511] netlink: 'syz.1.1838': attribute type 9 has an invalid length. [ 295.727016][T10511] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1838'. [ 295.751708][T10511] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1838'. [ 296.333199][T10518] loop2: detected capacity change from 0 to 8192 [ 296.430507][T10518] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 296.515913][T10518] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 296.570320][T10518] REISERFS (device loop2): using ordered data mode [ 296.599031][T10518] reiserfs: using flush barriers [ 296.655347][T10518] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 296.741504][T10518] REISERFS (device loop2): checking transaction log (loop2) [ 296.864750][T10518] REISERFS (device loop2): Using tea hash to sort names [ 296.950436][T10518] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 297.127996][T10529] can0: slcan on ptm0. [ 297.261331][T10522] loop0: detected capacity change from 0 to 131072 [ 297.280789][T10522] F2FS-fs (loop0): Invalid log sectors per block(570425347) log sectorsize(9) [ 297.290078][T10522] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 297.318305][T10528] can0 (unregistered): slcan off ptm0. [ 297.374882][T10522] F2FS-fs (loop0): invalid crc value [ 297.490954][T10522] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 297.512832][T10522] F2FS-fs (loop0): Bad quota inode 2:50331648 [ 297.519092][T10522] F2FS-fs (loop0): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 297.531729][T10522] F2FS-fs (loop0): Cannot turn on quotas: error -22 [ 297.561551][T10522] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 297.568765][T10522] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 298.246477][T10527] loop1: detected capacity change from 0 to 32768 [ 298.294334][T10527] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1854 (10527) [ 298.383918][T10527] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 298.415816][T10527] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 298.427558][T10527] BTRFS info (device loop1): setting nodatacow, compression disabled [ 298.463101][T10527] BTRFS info (device loop1): force zlib compression, level 3 [ 298.504810][T10527] BTRFS info (device loop1): turning on sync discard [ 298.521911][T10527] BTRFS info (device loop1): force clearing of disk cache [ 298.535577][T10527] BTRFS info (device loop1): enabling ssd optimizations [ 298.542596][T10527] BTRFS info (device loop1): using spread ssd allocation scheme [ 298.594904][T10527] BTRFS info (device loop1): allowing degraded mounts [ 298.601761][T10527] BTRFS info (device loop1): not using ssd optimizations [ 298.656064][T10527] BTRFS info (device loop1): not using spread ssd allocation scheme [ 298.682862][T10527] BTRFS info (device loop1): using free space tree [ 298.809498][ T5789] Bluetooth: Frame is too long (len 10, expected len 5) [ 299.010854][T10527] BTRFS info (device loop1): rebuilding free space tree [ 299.031405][T10585] loop3: detected capacity change from 0 to 1024 [ 299.287837][ T12] hfsplus: b-tree write err: -5, ino 4 [ 299.685229][ T5773] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 299.716337][T10600] loop2: detected capacity change from 0 to 1024 [ 299.852258][T10599] hfsplus: invalid extended attribute record [ 300.045810][ T48] hfsplus: b-tree write err: -5, ino 4 [ 300.354406][T10612] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1864'. [ 300.404238][T10612] netlink: 'syz.0.1864': attribute type 9 has an invalid length. [ 300.439564][T10612] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1864'. [ 300.489563][T10612] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1864'. [ 300.889728][T10596] loop3: detected capacity change from 0 to 32768 [ 301.016551][ T27] audit: type=1800 audit(1750346946.977:85): pid=10596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1860" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 301.057839][T10596] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 301.057839][T10596] [ 301.074944][T10596] ERROR: (device loop3): remounting filesystem as read-only [ 301.083105][T10596] xtLookup: xtSearch returned -5 [ 301.090628][T10596] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 301.090628][T10596] [ 301.360773][T10608] loop1: detected capacity change from 0 to 32768 [ 301.380069][T10608] XFS: noikeep mount option is deprecated. [ 301.479838][T10608] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 301.614958][T10608] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 301.679636][T10608] XFS (loop1): Starting recovery (logdev: internal) [ 301.718127][T10608] XFS (loop1): Ending recovery (logdev: internal) [ 302.002028][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 302.038430][T10625] loop2: detected capacity change from 0 to 40427 [ 302.048620][T10625] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 302.065507][T10625] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 302.106054][T10625] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 302.115343][T10625] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 302.131035][T10625] F2FS-fs (loop2): invalid crc value [ 302.154251][T10625] F2FS-fs (loop2): Found nat_bits in checkpoint [ 302.306630][T10625] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 302.332034][T10625] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 302.446636][ T5775] syz-executor: attempt to access beyond end of device [ 302.446636][ T5775] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 302.468344][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 302.992777][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1882'. [ 303.001715][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'. [ 303.043316][T10662] netlink: 'syz.1.1882': attribute type 11 has an invalid length. [ 303.134679][T10666] loop0: detected capacity change from 0 to 1024 [ 303.208508][T10670] loop3: detected capacity change from 0 to 164 [ 303.230752][T10666] syz.0.1883: attempt to access beyond end of device [ 303.230752][T10666] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 303.280129][T10670] rock: directory entry would overflow storage [ 303.287569][T10666] Buffer I/O error on dev loop0, logical block 2889, async page read [ 303.298402][T10670] rock: sig=0x66, size=4, remaining=3 [ 303.333945][T10666] syz.0.1883: attempt to access beyond end of device [ 303.333945][T10666] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 303.405664][T10666] Buffer I/O error on dev loop0, logical block 2889, async page read [ 303.434629][T10671] syz.0.1883: attempt to access beyond end of device [ 303.434629][T10671] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 303.492487][ T27] audit: type=1800 audit(1750346949.438:86): pid=10666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1883" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 303.798392][T10687] loop0: detected capacity change from 0 to 1024 [ 303.894923][T10690] loop1: detected capacity change from 0 to 512 [ 303.904954][T10690] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 303.925227][T10690] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 303.939961][T10686] hfsplus: invalid extended attribute record [ 303.976396][T10690] EXT4-fs (loop1): 1 truncate cleaned up [ 303.991258][T10690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.017745][ T27] audit: type=1800 audit(1750346949.968:87): pid=10690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1895" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 304.092941][ T12] hfsplus: b-tree write err: -5, ino 4 [ 304.261471][T10699] loop0: detected capacity change from 0 to 164 [ 304.290112][T10699] rock: directory entry would overflow storage [ 304.325567][T10699] rock: sig=0x66, size=4, remaining=3 [ 304.510931][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.741039][T10707] loop1: detected capacity change from 0 to 64 [ 305.980194][T10709] loop3: detected capacity change from 0 to 131072 [ 305.990622][T10709] F2FS-fs (loop3): Invalid log sectors per block(570425347) log sectorsize(9) [ 305.999671][T10709] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 306.017317][T10709] F2FS-fs (loop3): invalid crc value [ 306.120569][T10709] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 306.136674][T10709] F2FS-fs (loop3): Bad quota inode 2:50331648 [ 306.142849][T10709] F2FS-fs (loop3): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 306.153319][T10709] F2FS-fs (loop3): Cannot turn on quotas: error -22 [ 306.171510][T10709] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 306.178617][T10709] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 306.404868][T10713] loop0: detected capacity change from 0 to 32768 [ 306.483467][T10730] loop1: detected capacity change from 0 to 164 [ 306.566770][T10730] rock: directory entry would overflow storage [ 306.580777][T10730] rock: sig=0x66, size=4, remaining=3 [ 307.237445][T10728] loop2: detected capacity change from 0 to 32768 [ 307.279141][T10728] XFS: noikeep mount option is deprecated. [ 307.329434][T10728] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 307.528636][T10728] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 307.586062][T10728] XFS (loop2): Starting recovery (logdev: internal) [ 307.648432][T10728] XFS (loop2): Ending recovery (logdev: internal) [ 307.722724][T10748] Invalid ELF header magic: != ELF [ 307.995389][ T5775] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 308.117542][T10736] loop0: detected capacity change from 0 to 32768 [ 308.162352][T10736] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1913 (10736) [ 308.213457][T10736] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 308.252330][T10736] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 308.286296][T10736] BTRFS info (device loop0): setting nodatacow, compression disabled [ 308.295154][T10736] BTRFS info (device loop0): force zlib compression, level 3 [ 308.314991][T10736] BTRFS info (device loop0): turning on sync discard [ 308.339475][T10736] BTRFS info (device loop0): force clearing of disk cache [ 308.351890][T10736] BTRFS info (device loop0): enabling ssd optimizations [ 308.358907][T10736] BTRFS info (device loop0): using spread ssd allocation scheme [ 308.370829][T10736] BTRFS info (device loop0): allowing degraded mounts [ 308.379056][T10736] BTRFS info (device loop0): not using ssd optimizations [ 308.391694][T10736] BTRFS info (device loop0): not using spread ssd allocation scheme [ 308.399748][T10736] BTRFS info (device loop0): using free space tree [ 308.561309][T10736] BTRFS info (device loop0): rebuilding free space tree [ 308.946221][ T5774] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 309.149625][ T5847] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 309.349445][ T5847] usb 2-1: Using ep0 maxpacket: 8 [ 309.412192][ T5847] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 309.420949][ T5847] usb 2-1: config 179 has no interface number 0 [ 309.443038][ T5847] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 309.479816][ T5847] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 309.504916][ T5847] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 309.545825][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1923'. [ 309.555967][ T5847] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 309.571830][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1923'. [ 309.581627][ T5847] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 309.595277][T10798] netlink: 'syz.0.1923': attribute type 11 has an invalid length. [ 309.605063][ T5847] usb 2-1: config 179 interface 65 has no altsetting 0 [ 309.616967][ T5847] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 309.633206][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.681177][ T5847] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input23 [ 309.786483][ T5127] input input23: unable to receive magic message: -110 [ 309.837874][ T5127] input input23: unable to receive magic message: -32 [ 309.883293][ T5127] input input23: unable to receive magic message: -32 [ 309.901422][T10802] loop2: detected capacity change from 0 to 64 [ 309.980694][ T5847] usb 2-1: USB disconnect, device number 16 [ 309.986700][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 310.005779][ T5847] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 310.355532][T10809] loop2: detected capacity change from 0 to 512 [ 310.378757][T10792] loop3: detected capacity change from 0 to 40427 [ 310.399519][T10792] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 310.406531][T10792] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 310.433289][T10792] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x7ffff [ 310.444009][T10792] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 310.463015][T10792] F2FS-fs (loop3): invalid crc value [ 310.486206][T10809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 310.514065][T10792] F2FS-fs (loop3): Found nat_bits in checkpoint [ 310.522083][T10809] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.663416][T10809] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 310.694957][T10809] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 310.725325][T10809] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1931: Failed to acquire dquot type 0 [ 310.747043][T10792] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 310.764178][T10792] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 310.868982][T10804] loop0: detected capacity change from 0 to 32768 [ 310.876622][T10804] XFS: noikeep mount option is deprecated. [ 310.925819][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 310.999444][T10804] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 311.101322][ T5776] syz-executor: attempt to access beyond end of device [ 311.101322][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 311.139191][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 311.166775][T10831] loop2: detected capacity change from 0 to 1024 [ 311.173716][T10804] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 311.233958][T10804] XFS (loop0): Starting recovery (logdev: internal) [ 311.269568][T10804] XFS (loop0): Ending recovery (logdev: internal) [ 311.289953][T10831] syz.2.1934: attempt to access beyond end of device [ 311.289953][T10831] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 311.328445][T10831] Buffer I/O error on dev loop2, logical block 2889, async page read [ 311.336649][T10831] syz.2.1934: attempt to access beyond end of device [ 311.336649][T10831] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 311.378437][T10831] Buffer I/O error on dev loop2, logical block 2889, async page read [ 311.387437][ T27] audit: type=1800 audit(1750346957.342:88): pid=10831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1934" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 311.388858][T10832] syz.2.1934: attempt to access beyond end of device [ 311.388858][T10832] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 311.533089][ T5774] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 311.567066][T10834] loop1: detected capacity change from 0 to 1024 [ 311.606820][T10834] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 311.627795][T10836] loop2: detected capacity change from 0 to 512 [ 311.715338][T10834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.727924][T10836] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 311.783952][T10836] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 311.875346][T10836] EXT4-fs (loop2): 1 truncate cleaned up [ 311.900413][T10836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.958706][T10834] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2797: inode #15: comm syz.1.1945: corrupted in-inode xattr: bad magic number in in-inode xattr [ 312.075147][ T27] audit: type=1800 audit(1750346958.022:89): pid=10836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1937" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 312.144131][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.694238][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.105061][T10861] loop2: detected capacity change from 0 to 256 [ 313.554276][T10880] syz.0.1963 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 313.601445][T10883] loop3: detected capacity change from 0 to 1024 [ 313.644435][T10883] syz.3.1955: attempt to access beyond end of device [ 313.644435][T10883] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 313.666622][T10883] Buffer I/O error on dev loop3, logical block 2889, async page read [ 313.666757][T10883] syz.3.1955: attempt to access beyond end of device [ 313.666757][T10883] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 313.666785][T10883] Buffer I/O error on dev loop3, logical block 2889, async page read [ 313.671727][ T27] audit: type=1800 audit(1750346959.623:90): pid=10883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1955" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 313.683565][T10883] syz.3.1955: attempt to access beyond end of device [ 313.683565][T10883] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 314.493093][T10904] loop2: detected capacity change from 0 to 4096 [ 314.581653][T10904] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 314.618856][T10904] ntfs3: loop2: Failed to load $Extend (-22). [ 314.645412][T10904] ntfs3: loop2: Failed to initialize $Extend. [ 314.677043][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 314.721768][T10909] loop1: detected capacity change from 0 to 512 [ 314.736318][T10909] EXT4-fs: Ignoring removed orlov option [ 314.767847][T10909] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 314.861030][ T8] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 314.871910][T10909] EXT4-fs (loop1): 1 orphan inode deleted [ 314.876388][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.887032][ T8] usb 4-1: Product: syz [ 314.891299][ T8] usb 4-1: Manufacturer: syz [ 314.895972][ T8] usb 4-1: SerialNumber: syz [ 314.914666][ T8] usb 4-1: config 0 descriptor?? [ 314.918825][T10909] EXT4-fs (loop1): 1 truncate cleaned up [ 314.945987][T10909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.014765][T10909] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.1.1970: path /520/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 315.096034][T10909] EXT4-fs (loop1): Remounting filesystem read-only [ 315.137059][ T8] usb 4-1: ignoring: probably an ADSL modem [ 315.161454][T10892] loop0: detected capacity change from 0 to 40427 [ 315.205123][T10892] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 315.212812][T10892] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 315.230411][T10892] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x7ffff [ 315.232768][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.242814][T10892] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 315.265368][T10892] F2FS-fs (loop0): invalid crc value [ 315.275848][T10892] F2FS-fs (loop0): Found nat_bits in checkpoint [ 315.394147][T10892] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 315.410978][T10892] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 315.467956][T10922] syz.2.1974: attempt to access beyond end of device [ 315.467956][T10922] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 315.500973][T10922] hfsplus: unable to find HFS+ superblock [ 315.507242][ T5774] syz-executor: attempt to access beyond end of device [ 315.507242][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 315.521915][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 315.560993][ T8] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 315.606698][ T8] usb 4-1: USB disconnect, device number 16 [ 316.003436][T10926] loop0: detected capacity change from 0 to 256 [ 316.033220][T10926] FAT-fs (loop0): Directory bread(block 64) failed [ 316.044893][T10926] FAT-fs (loop0): Directory bread(block 65) failed [ 316.052973][T10926] FAT-fs (loop0): Directory bread(block 66) failed [ 316.061184][T10926] FAT-fs (loop0): Directory bread(block 67) failed [ 316.070844][T10926] FAT-fs (loop0): Directory bread(block 68) failed [ 316.079305][T10926] FAT-fs (loop0): Directory bread(block 69) failed [ 316.086460][T10926] FAT-fs (loop0): Directory bread(block 70) failed [ 316.093167][T10926] FAT-fs (loop0): Directory bread(block 71) failed [ 316.100922][T10926] FAT-fs (loop0): Directory bread(block 72) failed [ 316.107971][T10926] FAT-fs (loop0): Directory bread(block 73) failed [ 316.818296][T10951] loop0: detected capacity change from 0 to 512 [ 316.836176][T10951] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 316.870480][T10951] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 316.911459][T10951] EXT4-fs (loop0): 1 truncate cleaned up [ 316.926957][T10951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.954117][ T27] audit: type=1800 audit(1750346962.915:91): pid=10951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1988" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 316.974422][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.259830][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.267012][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.316082][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.352001][T10966] rtc_cmos 00:00: Alarms can be up to one day in the future [ 317.476173][ T5847] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 317.486818][ T5846] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 317.665238][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 317.682927][ T5847] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 317.701383][ T5847] usb 3-1: config 179 has no interface number 0 [ 317.714209][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 317.715645][ T5847] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 317.738997][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.760734][ T5846] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.760791][ T5870] IPVS: starting estimator thread 0... [ 317.775135][ T5846] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 317.788664][ T5847] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 317.788699][ T5847] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 317.817285][ T5847] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 317.829603][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.841628][ T5847] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 317.883407][ T5847] usb 3-1: config 179 interface 65 has no altsetting 0 [ 317.892362][ T5846] usb 2-1: config 0 descriptor?? [ 317.897533][ T5847] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 317.897563][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.910152][ T5847] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input24 [ 317.946030][T10980] IPVS: using max 19 ests per chain, 45600 per kthread [ 318.005464][ T5127] input input24: unable to receive magic message: -110 [ 318.019849][ T5127] input input24: unable to receive magic message: -32 [ 318.056069][ T5127] input input24: unable to receive magic message: -32 [ 318.064226][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future [ 318.092908][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future [ 318.146577][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future [ 318.167805][ T5127] input input24: unable to receive magic message: -32 [ 318.206244][ T5127] input input24: unable to receive magic message: -32 [ 318.216509][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future [ 318.223983][ T5847] rtc rtc0: __rtc_set_alarm: err=-22 [ 318.268629][T10965] input input24: unable to receive magic message: -32 [ 318.268663][T10986] loop3: detected capacity change from 0 to 512 [ 318.284110][ T5847] usb 3-1: USB disconnect, device number 18 [ 318.284190][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 318.307190][T10986] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 318.332755][ T5847] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 318.353103][T10986] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 318.388617][T10986] EXT4-fs (loop3): 1 truncate cleaned up [ 318.428318][ T5846] ntrig 0003:1B96:0009.0015: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.1-1/input0 [ 318.456677][T10986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.511151][ T27] audit: type=1800 audit(1750346964.476:92): pid=10986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2004" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 318.639530][ T5846] usb 2-1: USB disconnect, device number 17 [ 318.648441][T10994] loop0: detected capacity change from 0 to 512 [ 318.713055][T10994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.721600][T10992] fido_id[10992]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 318.757753][T10994] ext4 filesystem being mounted at /506/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.883042][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.894200][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.150742][T11039] loop3: detected capacity change from 0 to 256 [ 320.204354][ T8] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 320.262344][T11039] FAT-fs (loop3): Directory bread(block 64) failed [ 320.275227][T11039] FAT-fs (loop3): Directory bread(block 65) failed [ 320.281927][T11039] FAT-fs (loop3): Directory bread(block 66) failed [ 320.314085][T11039] FAT-fs (loop3): Directory bread(block 67) failed [ 320.320911][T11039] FAT-fs (loop3): Directory bread(block 68) failed [ 320.340267][T11039] FAT-fs (loop3): Directory bread(block 69) failed [ 320.360223][T11039] FAT-fs (loop3): Directory bread(block 70) failed [ 320.385182][T11039] FAT-fs (loop3): Directory bread(block 71) failed [ 320.391905][T11039] FAT-fs (loop3): Directory bread(block 72) failed [ 320.401922][T11039] FAT-fs (loop3): Directory bread(block 73) failed [ 320.425136][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 320.453951][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.474654][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.514190][ T8] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 320.523340][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.582657][ T8] usb 3-1: config 0 descriptor?? [ 320.754024][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2031'. [ 320.900136][T11053] netlink: 87 bytes leftover after parsing attributes in process `syz.3.2034'. [ 320.926463][T11054] rtc_cmos 00:00: Alarms can be up to one day in the future [ 321.003705][ T5847] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 321.037758][ T8] ntrig 0003:1B96:0009.0016: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.2-1/input0 [ 321.055218][ T5870] rtc_cmos 00:00: Alarms can be up to one day in the future [ 321.062922][ T5870] rtc_cmos 00:00: Alarms can be up to one day in the future [ 321.086100][ T5870] rtc_cmos 00:00: Alarms can be up to one day in the future [ 321.095354][ T5870] rtc_cmos 00:00: Alarms can be up to one day in the future [ 321.102735][ T5870] rtc rtc0: __rtc_set_alarm: err=-22 [ 321.194323][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 321.202130][ T5847] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 321.216841][ T5847] usb 1-1: config 0 has no interface number 0 [ 321.223094][ T5847] usb 1-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.238516][ T8] usb 3-1: USB disconnect, device number 19 [ 321.252047][ T5847] usb 1-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.270208][ T5847] usb 1-1: config 0 interface 8 has no altsetting 0 [ 321.279381][ T5847] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 321.292592][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.308749][ T5847] usb 1-1: config 0 descriptor?? [ 321.729693][ T5847] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 321.737388][ T5847] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 321.744759][ T5847] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 321.751920][ T5847] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 321.759422][ T5847] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 321.768014][ T5847] uclogic 0003:5543:0522.0017: No inputs registered, leaving [ 321.777783][ T5847] uclogic 0003:5543:0522.0017: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.0-1/input8 [ 322.003504][T11062] loop3: detected capacity change from 0 to 4096 [ 322.011299][ T8] usb 1-1: USB disconnect, device number 12 [ 322.036814][T11062] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 322.106856][ T27] audit: type=1804 audit(1750346968.058:93): pid=11062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2040" name="/newroot/491/bus/file0" dev="loop3" ino=0 res=1 errno=0 [ 322.143490][ T5847] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 322.352961][ T5847] usb 2-1: Using ep0 maxpacket: 16 [ 322.360479][ T5847] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.383267][ T5847] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 322.417531][ T5847] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 322.448692][ T5847] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.459706][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 322.471989][ T5847] usb 2-1: SerialNumber: syz [ 322.724836][ T5847] usb 2-1: USB disconnect, device number 18 [ 322.962704][ T5846] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 323.112959][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 323.152685][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 323.160640][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 323.174390][ T5846] usb 3-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 323.183808][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.191862][ T5846] usb 3-1: Product: syz [ 323.196591][ T5846] usb 3-1: Manufacturer: syz [ 323.201230][ T5846] usb 3-1: SerialNumber: syz [ 323.208707][ T5846] usb 3-1: config 0 descriptor?? [ 323.219275][ T5846] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 323.307335][ T8] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 323.335297][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.354095][ T8] usb 1-1: Product: syz [ 323.358331][ T8] usb 1-1: Manufacturer: syz [ 323.370154][ T8] usb 1-1: SerialNumber: syz [ 323.386547][ T8] usb 1-1: config 0 descriptor?? [ 323.446828][ T5847] usb 3-1: USB disconnect, device number 20 [ 323.613511][ T8] usb 1-1: ignoring: probably an ADSL modem [ 324.022944][ T8] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 324.051596][ T8] usb 1-1: USB disconnect, device number 13 [ 324.227075][T11110] loop3: detected capacity change from 0 to 512 [ 324.277157][T11110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.307625][T11110] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.334935][T11117] loop2: detected capacity change from 0 to 64 [ 324.389072][T11110] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 324.506426][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.929861][T11133] loop3: detected capacity change from 0 to 1024 [ 324.958989][T11133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.012569][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 325.102232][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.211899][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 325.232816][ T8] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 325.241179][ T8] usb 1-1: config 179 has no interface number 0 [ 325.247906][ T8] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 325.259853][ T8] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 325.272853][ T8] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 325.284805][ T8] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 325.296830][ T8] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 325.311476][ T8] usb 1-1: config 179 interface 65 has no altsetting 0 [ 325.318439][ T8] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 325.328061][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.368646][ T8] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input26 [ 325.431619][ T5127] input input26: unable to receive magic message: -110 [ 325.461394][ T5127] input input26: unable to receive magic message: -32 [ 325.476129][T11137] loop1: detected capacity change from 0 to 32768 [ 325.483936][ T5127] input input26: unable to receive magic message: -32 [ 325.516439][T11137] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 325.535436][ T5127] input input26: unable to receive magic message: -32 [ 325.559072][ T5127] input input26: unable to receive magic message: -32 [ 325.596802][ T5127] input input26: unable to receive magic message: -32 [ 325.624470][T11125] input input26: unable to receive magic message: -32 [ 325.685622][T11137] XFS (loop1): Ending clean mount [ 325.698746][ T5818] usb 1-1: USB disconnect, device number 14 [ 325.698911][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 325.713085][ T5818] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 325.809379][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 326.317985][T11150] loop1: detected capacity change from 0 to 64 [ 326.745556][ T5870] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 326.862408][T11160] loop1: detected capacity change from 0 to 256 [ 326.938434][ T5870] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 326.970203][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.991001][ T5870] usb 3-1: Product: syz [ 326.995235][ T5870] usb 3-1: Manufacturer: syz [ 327.013486][T11166] loop1: detected capacity change from 0 to 1024 [ 327.018404][ T5870] usb 3-1: SerialNumber: syz [ 327.036245][ T5870] usb 3-1: config 0 descriptor?? [ 327.165095][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 327.208363][T11168] loop3: detected capacity change from 0 to 256 [ 327.248741][T11168] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 327.290772][ T5870] usb 3-1: ignoring: probably an ADSL modem [ 327.744867][ T5870] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 327.780257][ T5870] usb 3-1: USB disconnect, device number 21 [ 327.939646][T11182] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2090'. [ 328.643965][T11201] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2099'. [ 328.719894][ T5818] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 328.909598][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 328.917054][ T5818] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 328.933286][ T5818] usb 1-1: config 0 has no interface number 0 [ 328.940391][ T5818] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 328.969581][ T5818] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 329.000202][ T5818] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 329.019622][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.042750][ T5818] usb 1-1: Product: syz [ 329.046992][ T5818] usb 1-1: Manufacturer: syz [ 329.064443][ T5818] usb 1-1: SerialNumber: syz [ 329.091712][ T5818] usb 1-1: config 0 descriptor?? [ 329.121970][T11194] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 329.129387][T11194] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 329.364884][T11197] loop2: detected capacity change from 0 to 32768 [ 329.382491][T11194] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 329.443040][T11197] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 329.454684][T11194] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 329.525474][T11207] loop3: detected capacity change from 0 to 32768 [ 329.615471][T11207] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 329.742784][T11197] XFS (loop2): Ending clean mount [ 329.756533][T11209] loop1: detected capacity change from 0 to 32768 [ 329.840082][T11207] XFS (loop3): Ending clean mount [ 329.876258][T11207] XFS (loop3): Quotacheck needed: Please wait. [ 329.892627][T11209] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 329.917084][ T5818] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 329.941641][ T5818] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 329.958183][ T5818] asix: probe of 1-1:0.251 failed with error -71 [ 329.983536][ T5775] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 329.986505][ T5818] usb 1-1: USB disconnect, device number 15 [ 330.066778][T11207] XFS (loop3): Quotacheck: Done. [ 330.095538][ T5773] (syz-executor,5773,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 330.202762][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 330.425811][ T5776] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 330.735456][T11234] loop2: detected capacity change from 0 to 512 [ 330.788672][T11234] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 330.901804][T11234] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.2104: bg 0: block 5: invalid block bitmap [ 330.989616][T11234] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 331.039607][T11234] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2104: invalid indirect mapped block 3 (level 2) [ 331.090430][T11234] EXT4-fs (loop2): 2 truncates cleaned up [ 331.105124][T11234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.270032][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.161671][T11292] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 332.161671][T11292] The task syz.0.2128 (11292) triggered the difference, watch for misbehavior. [ 332.227230][T11291] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2131'. [ 332.348726][T11295] ALSA: seq fatal error: cannot create timer (-19) [ 332.673958][T11307] fuse: Bad value for 'fd' [ 333.027700][ T5870] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 333.282345][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.318252][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.355626][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.417330][ T5870] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 333.467414][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.508530][ T5870] usb 4-1: config 0 descriptor?? [ 333.944123][ T5870] kye 0003:0458:5011.0018: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 334.026882][ T5870] kye 0003:0458:5011.0018: unbalanced collection at end of report description [ 334.064045][ T5870] kye 0003:0458:5011.0018: parse failed [ 334.101313][ T5870] kye: probe of 0003:0458:5011.0018 failed with error -22 [ 334.133200][T11328] loop0: detected capacity change from 0 to 256 [ 334.162922][ T5870] usb 4-1: USB disconnect, device number 17 [ 334.196981][T11328] exfat: Deprecated parameter 'utf8' [ 334.284829][T11328] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 334.486861][ T27] audit: type=1800 audit(1750346980.394:94): pid=11328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2147" name="file1" dev="loop0" ino=1048742 res=0 errno=0 [ 334.703658][T11334] loop2: detected capacity change from 0 to 64 [ 334.959814][T11302] loop1: detected capacity change from 0 to 262144 [ 335.033662][T11302] F2FS-fs (loop1): invalid crc value [ 335.086943][T11302] F2FS-fs (loop1): Found nat_bits in checkpoint [ 335.146836][T11302] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 336.169120][T11371] loop0: detected capacity change from 0 to 2048 [ 336.240359][T11371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.342226][T11371] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.2166: inline data xattr refers to an external xattr inode [ 336.409210][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2171'. [ 336.425560][T11371] EXT4-fs (loop0): Remounting filesystem read-only [ 336.507240][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.014854][T11395] loop0: detected capacity change from 0 to 1024 [ 337.182764][ T5774] hfsplus: bad catalog entry type [ 337.304590][T11385] loop2: detected capacity change from 0 to 32768 [ 337.453343][ T27] audit: type=1800 audit(1750346983.415:95): pid=11382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2170" name="file0" dev="loop2" ino=7 res=0 errno=0 [ 337.599976][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 337.890946][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.036920][T11409] loop1: detected capacity change from 0 to 128 [ 338.071159][T11409] EXT4-fs: Ignoring removed oldalloc option [ 338.105200][T11409] EXT4-fs: inline encryption not supported [ 338.144096][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.168559][T11409] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.184560][T11409] ext4 filesystem being mounted at /565/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 338.216549][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.358976][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.442758][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 338.683142][T11423] loop3: detected capacity change from 0 to 1024 [ 338.712007][T11423] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 338.740037][T11423] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 338.754027][T11423] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 338.799711][T11423] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.2190: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 338.862541][T11423] EXT4-fs (loop3): no journal found [ 338.886765][T11423] EXT4-fs (loop3): can't get journal size [ 338.926425][T11423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 338.942518][ T12] tipc: Disabling bearer [ 338.960984][ T12] tipc: Left network mode [ 339.016911][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.324598][ T27] audit: type=1326 audit(1750346985.296:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11417 comm="syz.2.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537838e929 code=0x7fc00000 [ 339.364012][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.376255][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.395481][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.421268][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.433259][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.452669][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.493275][T11437] loop2: detected capacity change from 0 to 512 [ 339.535049][T11437] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 339.604560][T11437] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 339.624575][T11437] System zones: 1-12 [ 339.650876][T11437] EXT4-fs (loop2): orphan cleanup on readonly fs [ 339.684936][T11437] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2193: invalid indirect mapped block 12 (level 1) [ 339.731298][T11437] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2193: invalid indirect mapped block 2 (level 2) [ 339.748459][T11425] loop1: detected capacity change from 0 to 32768 [ 339.761928][T11437] EXT4-fs (loop2): 1 truncate cleaned up [ 339.775567][T11437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 339.853800][T11425] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 340.135785][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 340.307877][T11425] XFS (loop1): Ending clean mount [ 340.334767][T11425] XFS (loop1): Quotacheck needed: Please wait. [ 340.470247][T11425] XFS (loop1): Quotacheck: Done. [ 340.487544][ T27] audit: type=1326 audit(1750346986.457:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.3.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20638e929 code=0x7ffc0000 [ 340.578134][ T27] audit: type=1326 audit(1750346986.457:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.3.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20638e929 code=0x7ffc0000 [ 340.636069][ T27] audit: type=1326 audit(1750346986.527:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.3.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb20638d290 code=0x7ffc0000 [ 340.682011][ T27] audit: type=1326 audit(1750346986.527:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.3.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb20638d290 code=0x7ffc0000 [ 340.813150][ T27] audit: type=1326 audit(1750346986.527:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.3.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20638e929 code=0x7ffc0000 [ 340.862057][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 340.890376][ T27] audit: type=1326 audit(1750346986.527:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.3.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fb20638e929 code=0x7ffc0000 [ 340.965216][ T27] audit: type=1326 audit(1750346986.527:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.3.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20638e929 code=0x7ffc0000 [ 340.999983][ T27] audit: type=1326 audit(1750346986.527:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.3.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20638e929 code=0x7ffc0000 [ 341.463088][T11432] chnl_net:caif_netlink_parms(): no params data found [ 341.578846][ T5786] Bluetooth: hci0: command tx timeout [ 341.934061][ T12] hsr_slave_0: left promiscuous mode [ 341.953597][ T12] hsr_slave_1: left promiscuous mode [ 341.958470][T11509] loop3: detected capacity change from 0 to 2048 [ 341.978318][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.054083][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.113584][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.121058][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.190238][ T12] bridge_slave_1: left allmulticast mode [ 342.240502][ T12] bridge_slave_1: left promiscuous mode [ 342.263139][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.348444][ T12] bridge_slave_0: left allmulticast mode [ 342.376857][ T12] bridge_slave_0: left promiscuous mode [ 342.387994][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.550555][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2215'. [ 342.595462][ T12] veth0_macvtap: left promiscuous mode [ 342.601711][ T12] veth1_vlan: left promiscuous mode [ 342.623359][ T12] veth0_vlan: left promiscuous mode [ 342.819968][T11528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2217'. [ 343.652748][ T5786] Bluetooth: hci0: command tx timeout [ 343.988709][ T12] team0 (unregistering): Port device team_slave_1 removed [ 344.060980][ T12] team0 (unregistering): Port device team_slave_0 removed [ 344.117415][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.177709][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.834406][ T12] bond0 (unregistering): Released all slaves [ 345.074762][T11432] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.082350][T11432] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.089624][T11432] bridge_slave_0: entered allmulticast mode [ 345.100091][T11432] bridge_slave_0: entered promiscuous mode [ 345.131081][T11432] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.158657][T11432] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.201671][T11432] bridge_slave_1: entered allmulticast mode [ 345.213499][T11432] bridge_slave_1: entered promiscuous mode [ 345.352663][T11432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.454138][T11432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.722288][ T5786] Bluetooth: hci0: command tx timeout [ 345.724731][T11432] team0: Port device team_slave_0 added [ 345.812768][T11432] team0: Port device team_slave_1 added [ 346.084976][T11432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.101068][T11432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.163389][T11432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.227402][ T12] IPVS: stop unused estimator thread 0... [ 346.245069][T11432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.270677][T11432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.314176][T11432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.529775][T11432] hsr_slave_0: entered promiscuous mode [ 346.547083][T11432] hsr_slave_1: entered promiscuous mode [ 346.566963][T11432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.589215][T11432] Cannot create hsr debugfs directory [ 346.607230][T11601] Bluetooth: MGMT ver 1.22 [ 346.744558][T11604] loop2: detected capacity change from 0 to 1024 [ 346.794430][T11604] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 346.846061][T11604] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 346.900755][T11604] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 346.925355][T11604] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.2246: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 346.996920][T11604] EXT4-fs (loop2): no journal found [ 347.003583][T11604] EXT4-fs (loop2): can't get journal size [ 347.033576][T11604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 347.138371][T11612] loop3: detected capacity change from 0 to 1024 [ 347.161536][T11612] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 347.273930][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.285630][T11612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.574547][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.785549][T11432] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 347.800235][ T5786] Bluetooth: hci0: command tx timeout [ 347.819591][T11432] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 347.838226][T11432] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 347.925969][T11432] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 348.274613][T11432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.333531][T11432] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.374055][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.383079][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.391012][ T2176] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 348.451399][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.458680][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.602891][ T2176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 348.631776][ T2176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.665582][ T2176] usb 3-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 348.686977][ T2176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.725854][ T2176] usb 3-1: config 0 descriptor?? [ 349.009733][T11643] loop1: detected capacity change from 0 to 32768 [ 349.060448][T11643] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 349.120074][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2263'. [ 349.166735][ T2176] thrustmaster 0003:044F:B324.0019: item fetching failed at offset 4/5 [ 349.200412][ T2176] thrustmaster 0003:044F:B324.0019: parse failed [ 349.207038][ T2176] thrustmaster: probe of 0003:044F:B324.0019 failed with error -22 [ 349.317048][T11432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.330188][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2264'. [ 349.434981][ T9] usb 3-1: USB disconnect, device number 22 [ 349.507106][T11643] XFS (loop1): Ending clean mount [ 349.785732][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 350.144066][T11432] veth0_vlan: entered promiscuous mode [ 350.170922][T11701] loop3: detected capacity change from 0 to 1024 [ 350.192430][T11701] EXT4-fs: Ignoring removed nomblk_io_submit option [ 350.215763][T11432] veth1_vlan: entered promiscuous mode [ 350.287756][T11701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.314723][T11432] veth0_macvtap: entered promiscuous mode [ 350.344191][T11432] veth1_macvtap: entered promiscuous mode [ 350.361672][T11701] EXT4-fs error (device loop3): __ext4_new_inode:1075: comm syz.3.2269: reserved inode found cleared - inode=18 [ 350.488927][ T5846] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 350.503515][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.532123][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.543374][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.555373][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.566038][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.576775][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.612138][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.615086][T11432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.641177][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.679068][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.707353][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.728715][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.739395][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.750356][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.750438][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.750455][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.752440][T11432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.790279][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.814820][ T5846] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 350.814851][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.831749][ T5846] usb 3-1: config 0 descriptor?? [ 350.868364][T11432] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.868477][T11432] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.872078][T11432] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.872113][T11432] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.099688][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.099711][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.204956][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.204978][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.275522][ T5846] kye 0003:0458:5011.001A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 351.299762][ T5846] kye 0003:0458:5011.001A: unbalanced collection at end of report description [ 351.303872][T11721] loop3: detected capacity change from 0 to 2048 [ 351.324143][ T5846] kye 0003:0458:5011.001A: parse failed [ 351.358654][ T5846] kye: probe of 0003:0458:5011.001A failed with error -22 [ 351.401571][T11721] Alternate GPT is invalid, using primary GPT. [ 351.430229][T11721] loop3: p2 p3 p7 [ 351.544848][ T5846] usb 3-1: USB disconnect, device number 23 [ 351.956317][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 351.964501][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 351.979890][ T5792] udevd[5792]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 352.142859][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 353.369501][T11765] loop2: detected capacity change from 0 to 1024 [ 353.483326][T11765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.802166][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.276802][ T5846] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 356.478358][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.499537][ T5846] usb 5-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 356.530388][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.565509][ T5846] usb 5-1: config 0 descriptor?? [ 357.008209][ T5846] hid (null): report_id 0 is invalid [ 357.058730][ T5846] wacom 0003:056A:00ED.001B: report_id 0 is invalid [ 357.088294][ T5846] wacom 0003:056A:00ED.001B: item 0 0 1 8 parsing failed [ 357.113933][ T5846] wacom 0003:056A:00ED.001B: parse failed [ 357.140143][ T5846] wacom: probe of 0003:056A:00ED.001B failed with error -22 [ 357.277933][ T5846] usb 5-1: USB disconnect, device number 2 [ 358.068682][T11830] loop4: detected capacity change from 0 to 64 [ 358.340749][T11432] hfs: node 4:3 still has 1 user(s)! [ 364.297952][T11841] netlink: 'syz.4.2301': attribute type 4 has an invalid length. [ 364.334891][T11841] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2301'. [ 366.267002][ T27] audit: type=1326 audit(1750347012.250:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537838e929 code=0x7ffc0000 [ 366.370880][ T27] audit: type=1326 audit(1750347012.280:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537838e929 code=0x7ffc0000 [ 366.505285][ T27] audit: type=1326 audit(1750347012.310:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f537838e929 code=0x7ffc0000 [ 366.639055][ T27] audit: type=1326 audit(1750347012.310:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537838e929 code=0x7ffc0000 [ 366.745745][ T27] audit: type=1326 audit(1750347012.310:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537838e929 code=0x7ffc0000 [ 366.893566][ T27] audit: type=1326 audit(1750347012.320:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f537838e929 code=0x7ffc0000 [ 367.030813][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'. [ 367.060605][ T27] audit: type=1326 audit(1750347012.320:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537838e929 code=0x7ffc0000 [ 367.224580][ T27] audit: type=1326 audit(1750347012.320:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537838e929 code=0x7ffc0000 [ 367.433075][T11861] loop4: detected capacity change from 0 to 32768 [ 367.484726][T11861] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 scanned by syz.4.2310 (11861) [ 367.620493][T11861] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 367.689608][T11861] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 367.770011][T11861] BTRFS info (device loop4): using free space tree [ 368.035263][T11861] BTRFS info (device loop4): enabling ssd optimizations [ 368.080602][T11861] BTRFS info (device loop4): auto enabling async discard [ 368.478682][T11432] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 369.162476][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.175206][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.184366][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.195012][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.202954][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 369.211390][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.529676][T11910] loop4: detected capacity change from 0 to 4096 [ 369.591472][T11910] ntfs3: Bad value for 'gid' [ 370.204187][T11912] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2313'. [ 370.390100][ T5789] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.402496][ T5789] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.414146][ T5789] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.423651][ T5789] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.434956][ T5789] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 370.443102][ T5789] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.308521][ T5789] Bluetooth: hci4: command tx timeout [ 372.507930][ T5789] Bluetooth: hci5: command tx timeout [ 373.389761][ T5789] Bluetooth: hci4: command tx timeout [ 374.586905][ T5789] Bluetooth: hci5: command tx timeout [ 375.470825][ T5789] Bluetooth: hci4: command tx timeout [ 376.665779][ T5789] Bluetooth: hci5: command tx timeout [ 377.549790][ T5789] Bluetooth: hci4: command tx timeout [ 378.671648][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.678141][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.744854][ T5789] Bluetooth: hci5: command tx timeout [ 383.839791][T11906] chnl_net:caif_netlink_parms(): no params data found [ 384.327738][T11913] chnl_net:caif_netlink_parms(): no params data found [ 384.856828][T11906] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.895826][T11906] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.940576][T11906] bridge_slave_0: entered allmulticast mode [ 384.979637][T11906] bridge_slave_0: entered promiscuous mode [ 385.083172][T11906] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.090378][T11906] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.171813][T11906] bridge_slave_1: entered allmulticast mode [ 385.232182][T11906] bridge_slave_1: entered promiscuous mode [ 385.572430][T11906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.753584][T11943] loop2: detected capacity change from 0 to 32768 [ 385.817359][T11906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.916937][T11943] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 385.975183][T11943] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 386.013718][T11913] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.020911][T11913] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.114091][T11913] bridge_slave_0: entered allmulticast mode [ 386.162159][T11913] bridge_slave_0: entered promiscuous mode [ 386.258629][T11943] XFS (loop2): Ending clean mount [ 386.299114][T11943] XFS (loop2): Quotacheck needed: Please wait. [ 386.450824][ T1095] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 386.531896][T11906] team0: Port device team_slave_0 added [ 386.539874][ T1095] XFS (loop2): Unmount and run xfs_repair [ 386.571899][T11949] loop4: detected capacity change from 0 to 40427 [ 386.584743][ T1095] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 386.602766][T11913] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.633763][ T1095] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 386.644520][T11913] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.664521][T11949] F2FS-fs (loop4): invalid crc value [ 386.695087][T11913] bridge_slave_1: entered allmulticast mode [ 386.721756][ T1095] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 386.744168][T11949] F2FS-fs (loop4): Found nat_bits in checkpoint [ 386.752417][T11913] bridge_slave_1: entered promiscuous mode [ 386.772482][ T1095] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 386.856684][ T1095] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 386.902595][ T1095] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 386.956517][T11906] team0: Port device team_slave_1 added [ 386.969806][ T1095] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 387.028809][ T1095] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 387.088089][T11949] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 387.100679][ T1095] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 387.163295][ T1095] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74 [ 387.270919][T11943] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 387.391329][T11913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.471517][ T5775] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 387.650875][T11906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.657891][T11906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.841767][T11906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.007462][T11913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.335295][T11906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.400192][T11906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.593994][T11906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.986468][T11913] team0: Port device team_slave_0 added [ 389.411071][T11913] team0: Port device team_slave_1 added [ 389.781749][T11906] hsr_slave_0: entered promiscuous mode [ 389.830715][T11906] hsr_slave_1: entered promiscuous mode [ 389.895011][T11906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.913330][T11906] Cannot create hsr debugfs directory [ 390.092286][T11913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.125567][T11913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.156368][T11997] loop4: detected capacity change from 0 to 256 [ 390.218976][T11997] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 390.258608][T11997] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 390.291455][T11913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.363284][T11997] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 390.877354][T12005] loop2: detected capacity change from 0 to 1024 [ 390.946528][T12005] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 390.968176][T12005] hfsplus: xattr searching failed [ 390.996618][ T27] audit: type=1800 audit(1750347036.982:113): pid=12005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2331" name="memory.events" dev="loop2" ino=26 res=0 errno=0 [ 391.028303][T12005] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 391.042280][T12005] hfsplus: xattr searching failed [ 391.088635][ T2176] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 391.115160][ T58] hfsplus: b-tree write err: -5, ino 4 [ 391.272034][ T2176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.308371][ T2176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.349482][ T2176] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.402678][ T2176] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.430601][ T2176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.457251][ T2176] usb 5-1: config 0 descriptor?? [ 391.708364][ T5846] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 391.918429][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 391.948442][ T5846] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 391.966997][ T2176] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 391.982086][ T5846] usb 3-1: config 0 has no interface number 0 [ 391.999809][ T5846] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 392.019220][ T2176] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 392.065463][ T5846] usb 3-1: config 0 interface 85 has no altsetting 0 [ 392.091294][ T5846] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 392.111210][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.148007][ T5846] usb 3-1: Product: syz [ 392.169382][ T5846] usb 3-1: Manufacturer: syz [ 392.174049][ T5846] usb 3-1: SerialNumber: syz [ 392.229021][ T5846] usb 3-1: config 0 descriptor?? [ 392.275579][ T2176] usb 5-1: USB disconnect, device number 3 [ 392.379870][T12011] fido_id[12011]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 392.665106][ T5846] appletouch 3-1:0.85: Geyser mode initialized. [ 392.681860][ T5846] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input27 [ 393.045922][ T2176] usb 3-1: USB disconnect, device number 24 [ 393.170491][ T2176] appletouch 3-1:0.85: input: appletouch disconnected [ 393.634678][T12020] netlink: 'syz.4.2337': attribute type 2 has an invalid length. [ 393.683941][T12020] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2337'. [ 394.253716][ T27] audit: type=1326 audit(1750347040.254:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12027 comm="syz.4.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d58b8e929 code=0x7ffc0000 [ 394.312850][ T27] audit: type=1326 audit(1750347040.284:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12027 comm="syz.4.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f4d58b8e929 code=0x7ffc0000 [ 394.403630][ T27] audit: type=1326 audit(1750347040.284:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12027 comm="syz.4.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d58b8e929 code=0x7ffc0000 [ 395.016367][T12038] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2346'. [ 409.982922][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 409.995279][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 410.004585][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 410.017709][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 410.025886][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 410.034952][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 411.050703][ T5786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 411.062294][ T5786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 411.076300][ T5786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 411.093761][ T5786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 411.101808][ T5786] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 411.110132][ T5786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 412.088331][ T5789] Bluetooth: hci3: command tx timeout [ 413.208758][ T5789] Bluetooth: hci6: command tx timeout [ 414.167044][ T5789] Bluetooth: hci3: command tx timeout [ 415.286567][ T5789] Bluetooth: hci6: command tx timeout [ 416.246043][ T5789] Bluetooth: hci3: command tx timeout [ 417.375451][ T5789] Bluetooth: hci6: command tx timeout [ 418.325672][ T5789] Bluetooth: hci3: command tx timeout [ 419.452396][ T5789] Bluetooth: hci6: command tx timeout [ 428.430345][ T5786] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 428.449237][ T5786] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 428.458534][ T5786] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 428.480828][ T5786] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 428.491371][ T5786] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 428.500778][ T5786] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 429.584354][ T5789] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 429.599657][ T5789] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 429.608365][ T5789] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 429.616992][ T5789] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 429.624978][ T5789] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 429.632643][ T5789] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 430.558929][ T5786] Bluetooth: hci7: command tx timeout [ 431.678469][ T5786] Bluetooth: hci8: command tx timeout [ 432.637826][ T5786] Bluetooth: hci7: command tx timeout [ 433.765376][ T5786] Bluetooth: hci8: command tx timeout [ 434.716822][ T5786] Bluetooth: hci7: command tx timeout [ 435.839247][ T5786] Bluetooth: hci8: command tx timeout [ 436.795694][ T5786] Bluetooth: hci7: command tx timeout [ 437.915361][ T5786] Bluetooth: hci8: command tx timeout [ 440.078753][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.089338][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.629605][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 470.346196][ T5786] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 470.358075][ T5786] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 470.369044][ T5786] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 470.377267][ T5786] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 470.389562][ T5786] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 470.398327][ T5786] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 471.125991][ T5087] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 471.137152][ T5087] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 471.146241][ T5087] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 471.154631][ T5087] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 471.163070][ T5087] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 471.174313][ T5087] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 475.727314][ T5786] Bluetooth: hci10: command tx timeout [ 475.763022][T11913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.818687][T11913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.979784][T11913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.048372][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2348'. [ 477.743267][ T5087] Bluetooth: hci10: command tx timeout [ 477.824646][ T5087] Bluetooth: hci9: command tx timeout [ 479.814285][ T5789] Bluetooth: hci10: command tx timeout [ 479.894372][ T5789] Bluetooth: hci9: command tx timeout [ 481.897996][ T5789] Bluetooth: hci10: command tx timeout [ 481.973225][ T5789] Bluetooth: hci9: command tx timeout [ 484.052145][ T5789] Bluetooth: hci9: command tx timeout [ 489.574234][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 489.585264][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 489.594856][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 489.610678][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 489.618733][ T5087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 489.626850][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 490.044664][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 490.059197][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 490.068562][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 490.076930][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 490.084876][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 490.092344][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 491.728367][ T5087] Bluetooth: hci0: command tx timeout [ 492.128098][ T5087] Bluetooth: hci2: command tx timeout [ 493.810851][ T5087] Bluetooth: hci0: command tx timeout [ 494.207048][ T5087] Bluetooth: hci2: command tx timeout [ 495.886467][ T5087] Bluetooth: hci0: command tx timeout [ 496.286190][ T5087] Bluetooth: hci2: command tx timeout [ 497.971586][ T5087] Bluetooth: hci0: command tx timeout [ 498.364966][ T5087] Bluetooth: hci2: command tx timeout [ 501.487992][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.502369][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.387507][ T28] INFO: task syz.1.2277:11739 blocked for more than 143 seconds. [ 512.421468][ T28] Not tainted 6.6.94-syzkaller #0 [ 512.427079][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 512.475449][ T28] task:syz.1.2277 state:D stack:24944 pid:11739 ppid:5773 flags:0x00004006 [ 512.528907][ T28] Call Trace: [ 512.532297][ T28] [ 512.535284][ T28] __schedule+0x14e2/0x4580 [ 512.633244][ T28] ? _find_first_zero_bit+0xd3/0x100 [ 512.667619][ T28] ? asan.module_dtor+0x20/0x20 [ 512.672607][ T28] schedule+0xbd/0x170 [ 512.676737][ T28] schedule_timeout+0x9b/0x280 [ 512.795587][ T28] ? console_conditional_schedule+0x40/0x40 [ 512.808221][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 512.814292][ T28] ? lock_chain_count+0x20/0x20 [ 512.868654][ T28] ? _raw_spin_lock_irq+0xaf/0xe0 [ 512.873792][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 512.907533][ T28] ? wait_for_completion+0x26c/0x590 [ 512.912921][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.944710][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 512.973442][ T28] ? wait_for_completion+0x26c/0x590 [ 512.994098][ T28] wait_for_completion+0x2bd/0x590 [ 513.008996][ T28] ? io_schedule+0xd0/0xd0 [ 513.013514][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.034344][ T28] ? __flush_work+0xe6/0x9f0 [ 513.063472][ T28] __flush_work+0x895/0x9f0 [ 513.068510][ T28] ? __flush_work+0xe6/0x9f0 [ 513.087442][ T28] ? flush_work+0x20/0x20 [ 513.091875][ T28] ? move_linked_works+0x230/0x230 [ 513.097054][ T28] ? lock_chain_count+0x20/0x20 [ 513.124685][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 513.145299][ T28] ? __cancel_work_timer+0x335/0x520 [ 513.164226][ T28] __cancel_work_timer+0x3b0/0x520 [ 513.175697][ T28] ? cancel_work_sync+0x20/0x20 [ 513.196593][ T28] ? mutex_unlock+0x10/0x10 [ 513.209852][ T28] ? kmem_cache_free+0xf8/0x280 [ 513.214794][ T28] htable_put+0x1dc/0x240 [ 513.239930][ T28] ? hashlimit_mt_check_v1+0x360/0x360 [ 513.245616][ T28] cleanup_entry+0x13a/0x310 [ 513.264767][ T28] ? translate_table+0x2020/0x2020 [ 513.281569][ T28] ? xt_find_target+0x1f4/0x230 [ 513.286539][ T28] translate_table+0x1e3e/0x2020 [ 513.315056][ T28] ? ip6t_register_table+0x7b0/0x7b0 [ 513.344649][ T28] ? __might_fault+0xaa/0x120 [ 513.359365][ T28] ? __virt_addr_valid+0x18c/0x540 [ 513.364571][ T28] ? __might_fault+0xc6/0x120 [ 513.388815][ T28] ? __might_fault+0xaa/0x120 [ 513.393610][ T28] do_ip6t_set_ctl+0x969/0xcd0 [ 513.413991][ T28] ? ip6t_unregister_table_exit+0x230/0x230 [ 513.434840][ T28] ? __lock_acquire+0x7c80/0x7c80 [ 513.454478][ T28] ? rcu_is_watching+0x15/0xb0 [ 513.474176][ T28] ? trace_contention_end+0x39/0xe0 [ 513.481128][ T28] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 513.495472][ T28] ? mutex_unlock+0x10/0x10 [ 513.517726][ T28] nf_setsockopt+0x263/0x280 [ 513.522415][ T28] rawv6_setsockopt+0x23b/0x5a0 [ 513.555227][ T28] ? raw6_destroy+0x30/0x30 [ 513.567156][ T28] ? aa_sock_opt_perm+0x74/0x100 [ 513.572196][ T28] ? sock_common_setsockopt+0x36/0xc0 [ 513.599504][ T28] ? sock_common_recvmsg+0x1b0/0x1b0 [ 513.604991][ T28] do_sock_setsockopt+0x254/0x3e0 [ 513.627350][ T28] ? __ia32_sys_recv+0xb0/0xb0 [ 513.632213][ T28] ? __fdget+0x180/0x210 [ 513.636511][ T28] __x64_sys_setsockopt+0x1be/0x250 [ 513.684839][ T28] do_syscall_64+0x55/0xb0 [ 513.693132][ T28] ? clear_bhb_loop+0x40/0x90 [ 513.707149][ T28] ? clear_bhb_loop+0x40/0x90 [ 513.711915][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.747401][ T28] RIP: 0033:0x7fc3aa78e929 [ 513.751959][ T28] RSP: 002b:00007fc3ab619038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 513.776414][ T28] RAX: ffffffffffffffda RBX: 00007fc3aa9b5fa0 RCX: 00007fc3aa78e929 [ 513.807181][ T28] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 513.815244][ T28] RBP: 00007fc3aa810b39 R08: 0000000000000508 R09: 0000000000000000 [ 513.847010][ T28] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 513.855064][ T28] R13: 0000000000000000 R14: 00007fc3aa9b5fa0 R15: 00007ffc116fe868 [ 513.892071][ T28] [ 513.908245][ T28] [ 513.908245][ T28] Showing all locks held in the system: [ 513.916124][ T28] 2 locks held by kworker/0:0/8: [ 513.987544][ T28] 2 locks held by kworker/0:1/9: [ 513.992565][ T28] 1 lock held by khungtaskd/28: [ 514.027127][ T28] #0: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 514.060625][ T28] 4 locks held by kworker/u4:3/48: [ 514.065813][ T28] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 514.136991][ T28] #1: ffffc90000b8fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 514.184406][ T28] #2: ffffffff8dfa1ed0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 514.237920][ T28] #3: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 514.269591][ T28] 3 locks held by kworker/u4:4/58: [ 514.274775][ T28] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 514.336090][ T28] #1: ffffc90001597d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 514.385459][ T28] #2: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 514.424187][ T28] 2 locks held by kworker/1:2/785: [ 514.429908][ T28] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 514.476786][ T28] #1: ffffc900038a7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 514.507930][ T28] 2 locks held by kworker/0:2/1189: [ 514.513222][ T28] 1 lock held by dhcpcd/5437: [ 514.571749][ T28] #0: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 514.623283][ T28] 2 locks held by getty/5537: [ 514.634906][ T28] #0: ffff88802d4650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 514.663883][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 514.694241][ T28] 3 locks held by kworker/1:4/5818: [ 514.707705][ T28] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 514.742107][ T28] #1: ffffc900047afd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 514.759595][ T28] #2: ffffffff8cd35738 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x448/0x830 [ 514.771474][ T28] 3 locks held by kworker/1:7/5846: [ 514.786069][ T28] #0: ffff88802c735938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 514.804861][ T28] #1: ffffc90004a2fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 514.826586][ T28] #2: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 514.836200][ T28] 5 locks held by kworker/0:4/5847: [ 514.854509][ T28] 2 locks held by kworker/0:5/5870: [ 514.864576][ T28] 3 locks held by kworker/0:6/5871: [ 514.872430][ T28] 1 lock held by syz-executor/11906: [ 514.883385][ T28] #0: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 514.895330][ T28] 1 lock held by syz-executor/11913: [ 514.901251][ T28] #0: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 514.920409][ T28] 1 lock held by syz.2.2338/12022: [ 514.925669][ T28] #0: ffffffff8cd35600 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 [ 514.945819][ T28] 1 lock held by syz.4.2348/12042: [ 514.953786][ T28] #0: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 514.966435][ T28] 2 locks held by syz-executor/12054: [ 514.971860][ T28] #0: ffffffff8dfa1ed0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x351/0x5e0 [ 514.990654][ T28] #1: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x2b4/0x770 [ 515.006759][ T28] 2 locks held by syz-executor/12060: [ 515.012190][ T28] #0: ffffffff8dfa1ed0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x351/0x5e0 [ 515.029505][ T28] #1: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x2b4/0x770 [ 515.042871][ T28] 2 locks held by syz-executor/12065: [ 515.057760][ T28] #0: ffffffff8dfa1ed0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x351/0x5e0 [ 515.073909][ T28] #1: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x2b4/0x770 [ 515.083963][ T28] 5 locks held by syz-executor/12068: [ 515.097363][ T28] #0: ffff88807e240e30 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1fe/0x500 [ 515.116216][ T28] #1: ffff88807e240078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x4c9/0xfb0 [ 515.134067][ T28] #2: ffffffff8e11c168 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa1/0x220 [ 515.145813][ T28] #3: ffff888043d47338 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x70/0x660 [ 515.161349][ T28] #4: ffffffff8cd35738 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 515.172981][ T28] 1 lock held by syz-executor/12093: [ 515.189060][ T28] #0: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 515.205654][ T28] 1 lock held by syz-executor/12097: [ 515.211385][ T28] #0: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 515.230914][ T28] [ 515.233309][ T28] ============================================= [ 515.233309][ T28] [ 515.246454][ T28] NMI backtrace for cpu 1 [ 515.250851][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.6.94-syzkaller #0 [ 515.258694][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 515.268789][ T28] Call Trace: [ 515.272102][ T28] [ 515.275068][ T28] dump_stack_lvl+0x16c/0x230 [ 515.279802][ T28] ? show_regs_print_info+0x20/0x20 [ 515.285052][ T28] ? load_image+0x3b0/0x3b0 [ 515.289618][ T28] nmi_cpu_backtrace+0x39b/0x3d0 [ 515.294611][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 515.300809][ T28] ? _printk+0xd0/0x110 [ 515.305007][ T28] ? load_image+0x3b0/0x3b0 [ 515.309554][ T28] ? load_image+0x3b0/0x3b0 [ 515.314104][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 515.320222][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 515.326257][ T28] watchdog+0xf41/0xf80 [ 515.330497][ T28] ? watchdog+0x1e1/0xf80 [ 515.334875][ T28] kthread+0x2fa/0x390 [ 515.338986][ T28] ? hungtask_pm_notify+0x90/0x90 [ 515.344067][ T28] ? kthread_blkcg+0xd0/0xd0 [ 515.348701][ T28] ret_from_fork+0x48/0x80 [ 515.353160][ T28] ? kthread_blkcg+0xd0/0xd0 [ 515.357782][ T28] ret_from_fork_asm+0x11/0x20 [ 515.362605][ T28] [ 515.366611][ T28] Sending NMI from CPU 1 to CPUs 0: [ 515.371868][ C0] NMI backtrace for cpu 0 [ 515.371889][ C0] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.6.94-syzkaller #0 [ 515.371905][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 515.371916][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 515.371943][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2e/0x60 [ 515.371966][ C0] Code: 48 8b 04 24 65 48 8b 0d 20 24 7e 7e 65 8b 15 21 24 7e 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 <74> 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b [ 515.371981][ C0] RSP: 0018:ffffc90000006d90 EFLAGS: 00000246 [ 515.371994][ C0] RAX: ffffffff813a97c1 RBX: ffffffff8eac21d0 RCX: ffff88801b240000 [ 515.372006][ C0] RDX: 0000000000000100 RSI: ffffffff885b8ab3 RDI: ffffffff885b848e [ 515.372018][ C0] RBP: ffffffff8eac21d0 R08: ffffc90000006f30 R09: 0000000000000005 [ 515.372029][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff8eac21d4 [ 515.372040][ C0] R13: ffffffff885b848e R14: ffffffff885b8ab3 R15: ffffffff8eac21d0 [ 515.372052][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 515.372065][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 515.372076][ C0] CR2: 00007f537857e2d8 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 515.372090][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 515.372099][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 515.372109][ C0] Call Trace: [ 515.372114][ C0] [ 515.372119][ C0] unwind_next_frame+0x501/0x2970 [ 515.372150][ C0] ? skb_release_data+0x633/0x800 [ 515.372169][ C0] ? skb_release_data+0x634/0x800 [ 515.372186][ C0] ? skb_release_data+0x634/0x800 [ 515.372201][ C0] ? stack_trace_save+0xe0/0xe0 [ 515.372220][ C0] arch_stack_walk+0x144/0x190 [ 515.372238][ C0] ? skb_release_data+0x634/0x800 [ 515.372256][ C0] stack_trace_save+0x9c/0xe0 [ 515.372275][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 515.372300][ C0] kasan_set_track+0x4e/0x70 [ 515.372321][ C0] ? kasan_set_track+0x4e/0x70 [ 515.372339][ C0] ? kasan_save_free_info+0x2e/0x50 [ 515.372363][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 515.372384][ C0] ? slab_free_freelist_hook+0x130/0x1b0 [ 515.372402][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 515.372416][ C0] ? skb_release_data+0x634/0x800 [ 515.372457][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 515.372471][ C0] kasan_save_free_info+0x2e/0x50 [ 515.372495][ C0] ____kasan_slab_free+0x126/0x1e0 [ 515.372518][ C0] slab_free_freelist_hook+0x130/0x1b0 [ 515.372539][ C0] ? skb_release_data+0x634/0x800 [ 515.372555][ C0] __kmem_cache_free+0xba/0x1f0 [ 515.372572][ C0] skb_release_data+0x634/0x800 [ 515.372595][ C0] consume_skb+0xb2/0x110 [ 515.372612][ C0] nft_synproxy_eval_v4+0x377/0x560 [ 515.372641][ C0] ? nft_synproxy_do_eval+0x570/0x570 [ 515.372660][ C0] ? nf_ip_checksum+0x13c/0x520 [ 515.372684][ C0] nft_synproxy_do_eval+0x342/0x570 [ 515.372704][ C0] ? nft_synproxy_validate+0xc0/0xc0 [ 515.372720][ C0] ? mark_lock+0x94/0x320 [ 515.372743][ C0] ? verify_lock_unused+0x140/0x140 [ 515.372762][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 515.372786][ C0] nft_do_chain+0x3f9/0x1580 [ 515.372811][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 515.372849][ C0] nft_do_chain_inet+0x25b/0x330 [ 515.372866][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 515.372882][ C0] ? ipt_do_table+0x2b2/0x15f0 [ 515.372906][ C0] ? nf_nat_ipv4_local_in+0x20d/0x5b0 [ 515.372934][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 515.372950][ C0] nf_hook_slow+0xbd/0x200 [ 515.372973][ C0] NF_HOOK+0x204/0x390 [ 515.373000][ C0] ? NF_HOOK+0x390/0x390 [ 515.373023][ C0] ? NF_HOOK+0x9b/0x390 [ 515.373046][ C0] ? ip_local_deliver+0x1b0/0x1b0 [ 515.373070][ C0] ? ip_rcv_finish_core+0xd8f/0x1bc0 [ 515.373096][ C0] ? NF_HOOK+0x390/0x390 [ 515.373122][ C0] ? ip_local_deliver+0x122/0x1b0 [ 515.373149][ C0] NF_HOOK+0x303/0x390 [ 515.373174][ C0] ? ip_rcv_core+0xdb0/0xdb0 [ 515.373197][ C0] ? NF_HOOK+0x9b/0x390 [ 515.373220][ C0] ? ip_local_deliver+0x1b0/0x1b0 [ 515.373246][ C0] ? ip_rcv_core+0xdb0/0xdb0 [ 515.373272][ C0] ? ip_local_deliver_finish+0x510/0x510 [ 515.373298][ C0] ? ip_local_deliver_finish+0x510/0x510 [ 515.373324][ C0] __netif_receive_skb+0xcc/0x290 [ 515.373345][ C0] ? process_backlog+0x2be/0x6e0 [ 515.373362][ C0] process_backlog+0x380/0x6e0 [ 515.373388][ C0] ? trigger_rx_softirq+0x60/0x60 [ 515.373405][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 515.373425][ C0] ? lock_chain_count+0x20/0x20 [ 515.373443][ C0] __napi_poll+0xc0/0x460 [ 515.373459][ C0] ? net_rx_action+0x374/0xbf0 [ 515.373478][ C0] net_rx_action+0x5ea/0xbf0 [ 515.373502][ C0] ? net_tx_action+0x950/0x950 [ 515.373519][ C0] ? detach_timer+0x2b0/0x2b0 [ 515.373536][ C0] ? lock_chain_count+0x20/0x20 [ 515.373551][ C0] ? try_to_wake_up+0x6f8/0x10b0 [ 515.373582][ C0] handle_softirqs+0x280/0x820 [ 515.373599][ C0] ? do_softirq+0xed/0x180 [ 515.373616][ C0] ? do_softirq+0x180/0x180 [ 515.373633][ C0] ? mod_peer_timer+0x1f/0x250 [ 515.373653][ C0] do_softirq+0xed/0x180 [ 515.373666][ C0] [ 515.373670][ C0] [ 515.373676][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 515.373692][ C0] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 515.373710][ C0] ? mod_peer_timer+0x1f/0x250 [ 515.373735][ C0] ? rcu_is_watching+0x15/0xb0 [ 515.373758][ C0] __local_bh_enable_ip+0x178/0x1c0 [ 515.373774][ C0] ? _local_bh_enable+0xa0/0xa0 [ 515.373788][ C0] ? mod_peer_timer+0x1f/0x250 [ 515.373806][ C0] ? mod_peer_timer+0x1f/0x250 [ 515.373826][ C0] ? mod_peer_timer+0x203/0x250 [ 515.373846][ C0] wg_packet_tx_worker+0x23e/0x7c0 [ 515.373866][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 515.373887][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.373914][ C0] ? process_scheduled_works+0x957/0x15b0 [ 515.373934][ C0] process_scheduled_works+0xa45/0x15b0 [ 515.373968][ C0] ? assign_work+0x400/0x400 [ 515.373992][ C0] ? assign_work+0x39e/0x400 [ 515.374013][ C0] worker_thread+0xa55/0xfc0 [ 515.374033][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 515.374059][ C0] ? _raw_spin_unlock+0x40/0x40 [ 515.374083][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 515.374120][ C0] kthread+0x2fa/0x390 [ 515.374133][ C0] ? pr_cont_work+0x560/0x560 [ 515.374152][ C0] ? kthread_blkcg+0xd0/0xd0 [ 515.374167][ C0] ret_from_fork+0x48/0x80 [ 515.374186][ C0] ? kthread_blkcg+0xd0/0xd0 [ 515.374200][ C0] ret_from_fork_asm+0x11/0x20 [ 515.374230][ C0] [ 516.044333][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 516.051339][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.6.94-syzkaller #0 [ 516.059204][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 516.069290][ T28] Call Trace: [ 516.072608][ T28] [ 516.075745][ T28] dump_stack_lvl+0x16c/0x230 [ 516.080470][ T28] ? show_regs_print_info+0x20/0x20 [ 516.085712][ T28] ? load_image+0x3b0/0x3b0 [ 516.090263][ T28] panic+0x2c0/0x710 [ 516.094194][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 516.099870][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 516.104417][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 516.110001][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 516.116207][ T28] watchdog+0xf80/0xf80 [ 516.120413][ T28] ? watchdog+0x1e1/0xf80 [ 516.124783][ T28] kthread+0x2fa/0x390 [ 516.128888][ T28] ? hungtask_pm_notify+0x90/0x90 [ 516.133953][ T28] ? kthread_blkcg+0xd0/0xd0 [ 516.138571][ T28] ret_from_fork+0x48/0x80 [ 516.143026][ T28] ? kthread_blkcg+0xd0/0xd0 [ 516.147648][ T28] ret_from_fork_asm+0x11/0x20 [ 516.152469][ T28] [ 516.155831][ T28] Kernel Offset: disabled [ 516.160293][ T28] Rebooting in 86400 seconds..