last executing test programs: 3.362502952s ago: executing program 2 (id=1246): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xc0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x8, 0x7, 0x5, 0x3, 0x7, 0x0, 0x52, 0x3}}]}}]}, 0x44}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.242414424s ago: executing program 2 (id=1249): sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 2.287948707s ago: executing program 4 (id=1269): syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') epoll_create1(0x0) socket$inet(0x10, 0x3, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x10) 2.155411389s ago: executing program 2 (id=1272): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x104, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x48, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x77a1, 0x2, 0x0, 0x43}, {0x5, 0x3, 0x3, 0xbe}, {0x8, 0x80, 0x4, 0x3b40b934}, {0x36c, 0xff, 0x9, 0xb}, {0x6, 0x6, 0x6e, 0x10001}, {0x9ba, 0x0, 0x8, 0x401}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x22}}, @filter_kind_options=@f_route={{0xa}, {0x6c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_POLICE={0x54, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0xffffffffffffffff, 0x3, 0xa, 0x6, {0x7, 0x2, 0x1, 0x9, 0x0, 0x4}, {0x10, 0x2, 0x6, 0xfffe, 0x1, 0xeaa1}, 0x6, 0x200, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa71}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.154505699s ago: executing program 4 (id=1273): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[], [], 0x2c}) mount(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ceph\x00', 0x0, 0x0) 2.07652829s ago: executing program 3 (id=1275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 2.0632365s ago: executing program 2 (id=1276): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1}, 0xfffdff7a}], 0x2, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x40008000}, 0x4000) 1.968018952s ago: executing program 4 (id=1278): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) 1.899380223s ago: executing program 3 (id=1280): setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[], 0xff, 0xc34, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x404043000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000080), 0x4) 1.443997269s ago: executing program 3 (id=1284): syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') epoll_create1(0x0) socket$inet(0x10, 0x3, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x10) 1.174294403s ago: executing program 3 (id=1288): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x100, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x1, 0x0, r0, 0x0}]) 1.071681135s ago: executing program 1 (id=1289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="90020000000000001c00128009000100766c616e000000000c00028006000100"], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 1.068902184s ago: executing program 2 (id=1290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.016461715s ago: executing program 1 (id=1291): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="48010000100013070000000000000000fe880000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000003320000020010000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000235000002"], 0x148}}, 0x0) 964.018566ms ago: executing program 4 (id=1292): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000019c0)={'#! ', './file1/../file0', [{0x20, ','}], 0xa, "b5a4be350e7611b133a163b4ab1b0400000000000000000000000000000080ca925f71fcd3da0ed66c23ef689b28ee5c370a4b0eae91c3f16ee47acd81e02bbef5d3e59a0c1408636e6fd52ba9d446590747008418fd7319b2d74459b026c32ff8293eb0f59fa7b69ee06054e4b756cd85e7cf4c3af63461d53f4c9c938bcba0af249f05e185a4e8275ff49723b94e129caded69015fb912ff9cb0cf7bae0c4e8dd11dab9a2704c69e02aa5abc5229c574e4a9f532a2da381fd22d31cac62152b18f942182"}, 0xdb) write$UHID_CREATE2(r1, &(0x7f0000000400)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x92, 0x2, 0xf968, 0x8, 0xfffffff8, 0x2, "dd5ce941660a14aa959737e2d933454771fbf5f278bcbfe14194398fdd88d01ad7e25fbf8ffd0b46e1bb095a2a02daa7970ffdf300638055d9bdcf97986e674ee19127b6aa12c397379542f1b91a1b454123a24f4ab05d5805464ea03f520b366577346a04a05b18c396161abfa8010f28571b3de3449cf8ea7735af4eb21fc157ed6611c905dafe9c2425333c2748f6f31d"}}, 0x1aa) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 963.760016ms ago: executing program 1 (id=1293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x800) 908.290107ms ago: executing program 4 (id=1294): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000b00)=ANY=[], 0x204}, 0x1, 0x0, 0x0, 0x40}, 0x40040c0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 846.544718ms ago: executing program 4 (id=1296): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 709.78075ms ago: executing program 1 (id=1299): epoll_create1(0x0) epoll_create1(0x0) socket$inet(0x10, 0x3, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x10) 689.6681ms ago: executing program 2 (id=1300): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1}, 0xfffdff7a}], 0x2, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x40008000}, 0x4000) 559.702702ms ago: executing program 0 (id=1301): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 559.372402ms ago: executing program 1 (id=1302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) 501.885622ms ago: executing program 0 (id=1303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004700)=ANY=[@ANYBLOB="09000000040000000700000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25) 481.522792ms ago: executing program 1 (id=1304): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/107, 0x6b}, {&(0x7f0000000200)=""/124, 0x7c}], 0x2) tkill(r0, 0x8) 372.026164ms ago: executing program 0 (id=1305): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 223.448466ms ago: executing program 0 (id=1306): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000019c0)={'#! ', './file1/../file0', [{0x20, ','}], 0xa, "b5a4be350e7611b133a163b4ab1b0400000000000000000000000000000080ca925f71fcd3da0ed66c23ef689b28ee5c370a4b0eae91c3f16ee47acd81e02bbef5d3e59a0c1408636e6fd52ba9d446590747008418fd7319b2d74459b026c32ff8293eb0f59fa7b69ee06054e4b756cd85e7cf4c3af63461d53f4c9c938bcba0af249f05e185a4e8275ff49723b94e129caded69015fb912ff9cb0cf7bae0c4e8dd11dab9a2704c69e02aa5abc5229c574e4a9f532a2da381fd22d31cac62152b18f942182"}, 0xdb) write$UHID_CREATE2(r1, &(0x7f0000000400)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x92, 0x2, 0xf968, 0x8, 0xfffffff8, 0x2, "dd5ce941660a14aa959737e2d933454771fbf5f278bcbfe14194398fdd88d01ad7e25fbf8ffd0b46e1bb095a2a02daa7970ffdf300638055d9bdcf97986e674ee19127b6aa12c397379542f1b91a1b454123a24f4ab05d5805464ea03f520b366577346a04a05b18c396161abfa8010f28571b3de3449cf8ea7735af4eb21fc157ed6611c905dafe9c2425333c2748f6f31d"}}, 0x1aa) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 141.146707ms ago: executing program 3 (id=1307): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000b00)=ANY=[], 0x204}, 0x1, 0x0, 0x0, 0x40}, 0x40040c0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 106.197268ms ago: executing program 0 (id=1308): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 63.675189ms ago: executing program 3 (id=1309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x800) 0s ago: executing program 0 (id=1310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40010) kernel console output (not intermixed with test programs): [ 41.077000][ T4425] hfsplus: cannot replace xattr [ 41.134029][ T4368] hfsplus: b-tree write err: -5, ino 4 [ 41.138112][ T4305] Bluetooth: hci3: command 0x040f tx timeout [ 41.322446][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.354415][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.797320][ T4398] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.799970][ T4398] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.802180][ T4398] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.804543][ T4398] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.013751][ T4402] netlink: 'syz.3.10': attribute type 10 has an invalid length. [ 42.026740][ T4402] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.029175][ T4402] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.051306][ T4402] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.053168][ T4402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.055465][ T4402] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.057374][ T4402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.065812][ T4402] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 42.105820][ T4417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'. [ 42.202453][ T4442] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.20' sets config #1 [ 42.309144][ T4450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.311685][ T4450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.426404][ T4456] device macsec1 entered promiscuous mode [ 42.443844][ T4458] loop4: detected capacity change from 0 to 1024 [ 42.475672][ T4465] loop3: detected capacity change from 0 to 128 [ 42.478281][ T4465] ======================================================= [ 42.478281][ T4465] WARNING: The mand mount option has been deprecated and [ 42.478281][ T4465] and is ignored by this kernel. Remove the mand [ 42.478281][ T4465] option from the mount to silence this warning. [ 42.478281][ T4465] ======================================================= [ 42.490927][ T4465] FAT-fs (loop3): Unrecognized mount option "u]%free" or missing value [ 42.580476][ T4458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.597159][ T4458] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.29: Allocating blocks 385-513 which overlap fs metadata [ 42.634582][ T4476] loop2: detected capacity change from 0 to 7 [ 42.639293][ T4472] device geneve2 entered promiscuous mode [ 42.642867][ T4476] Dev loop2: unable to read RDB block 7 [ 42.644490][ T4476] loop2: unable to read partition table [ 42.646025][ T4476] loop2: partition table beyond EOD, truncated [ 42.648140][ T4476] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 42.696116][ T4458] EXT4-fs (loop4): pa 000000001a220359: logic 16, phys. 129, len 24 [ 42.698458][ T4458] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 42.719863][ T4478] loop2: detected capacity change from 0 to 4096 [ 42.722209][ T4478] ntfs3: Unknown parameter 'hide_dot_files' [ 42.802183][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 43.139063][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 43.140711][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 43.142293][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 43.143853][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 43.231922][ T4497] loop4: detected capacity change from 0 to 32768 [ 43.238750][ T4497] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.42 (4497) [ 43.253682][ T4497] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 43.256081][ T4497] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 43.258743][ T4497] BTRFS info (device loop4): enabling auto defrag [ 43.260239][ T4497] BTRFS info (device loop4): force zlib compression, level 3 [ 43.262079][ T4497] BTRFS info (device loop4): disabling auto defrag [ 43.263547][ T4497] BTRFS info (device loop4): enabling auto defrag [ 43.264965][ T4497] BTRFS info (device loop4): max_inline at 0 [ 43.266537][ T4497] BTRFS info (device loop4): using free space tree [ 43.310271][ T4509] tipc: Started in network mode [ 43.311740][ T4509] tipc: Node identity ea6415f219cd, cluster identity 4711 [ 43.314045][ T4509] tipc: Enabled bearer , priority 0 [ 43.330262][ T4509] device syzkaller0 entered promiscuous mode [ 43.332188][ T4509] tipc: Resetting bearer [ 43.341962][ T4504] tipc: Resetting bearer [ 43.411583][ T4497] BTRFS info (device loop4): enabling ssd optimizations [ 43.466195][ T4298] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 43.728167][ T4357] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.908129][ T4357] usb 1-1: Using ep0 maxpacket: 16 [ 43.914626][ T4357] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 43.920462][ T4357] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 43.922879][ T4357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.924899][ T4357] usb 1-1: Product: syz [ 43.925958][ T4357] usb 1-1: Manufacturer: syz [ 43.927112][ T4357] usb 1-1: SerialNumber: syz [ 43.936844][ T4357] usb 1-1: config 0 descriptor?? [ 44.318714][ T4350] tipc: Node number set to 4087944690 [ 46.481698][ T4431] usb 1-1: USB disconnect, device number 2 [ 46.947740][ T4431] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.978190][ T4305] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 46.981291][ T4305] Bluetooth: hci3: Injecting HCI hardware error event [ 46.983908][ T4305] Bluetooth: hci3: hardware error 0x00 [ 47.127750][ T4431] usb 1-1: Using ep0 maxpacket: 16 [ 47.132968][ T4431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.135733][ T4431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.139074][ T4431] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 47.141437][ T4431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.146094][ T4431] usb 1-1: config 0 descriptor?? [ 47.566645][ T4431] aquacomputer_d5next 0003:0C70:F00A.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.0-1/input0 [ 47.764961][ T4347] usb 1-1: USB disconnect, device number 3 [ 48.587880][ T4347] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 48.780145][ T4347] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.782780][ T4347] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 48.784985][ T4347] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 48.787822][ T4347] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.793673][ T4347] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.795914][ T4347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.798123][ T4347] usb 1-1: Product: syz [ 48.799176][ T4347] usb 1-1: Manufacturer: syz [ 48.800326][ T4347] usb 1-1: SerialNumber: syz [ 49.138215][ T4305] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 49.214249][ T4431] usb 1-1: USB disconnect, device number 4 [ 49.981675][ T4558] loop0: detected capacity change from 0 to 32768 [ 50.028399][ T4558] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 50.074878][ T4304] ocfs2: Unmounting device (7,0) on (node local) [ 50.519642][ T4568] loop0: detected capacity change from 0 to 40427 [ 50.532410][ T4568] F2FS-fs (loop0): invalid crc value [ 50.557110][ T4568] F2FS-fs (loop0): Found nat_bits in checkpoint [ 50.578677][ T4568] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 50.967689][ T4348] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 51.167810][ T4348] usb 1-1: Using ep0 maxpacket: 32 [ 51.170455][ T4348] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 51.172499][ T4348] usb 1-1: config 0 has no interface number 0 [ 51.174079][ T4348] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 51.176795][ T4348] usb 1-1: config 0 interface 85 has no altsetting 0 [ 51.181352][ T4348] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 51.183609][ T4348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.185622][ T4348] usb 1-1: Product: syz [ 51.186648][ T4348] usb 1-1: Manufacturer: syz [ 51.187930][ T4348] usb 1-1: SerialNumber: syz [ 51.191989][ T4348] usb 1-1: config 0 descriptor?? [ 51.803168][ T4348] appletouch 1-1:0.85: Geyser mode initialized. [ 51.806290][ T4348] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input2 [ 52.009735][ T4348] usb 1-1: USB disconnect, device number 5 [ 52.109448][ T4348] appletouch 1-1:0.85: input: appletouch disconnected [ 52.625188][ T4578] loop0: detected capacity change from 0 to 4096 [ 52.630375][ T4578] ntfs3: Unknown parameter 'hide_dot_files' [ 52.937807][ T4327] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 53.142118][ T4327] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 53.144507][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.146642][ T4327] usb 1-1: Product: syz [ 53.147817][ T4327] usb 1-1: Manufacturer: syz [ 53.148786][ T4327] usb 1-1: SerialNumber: syz [ 53.152339][ T4327] usb 1-1: config 0 descriptor?? [ 53.160344][ T4327] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 53.763973][ T4327] gspca_sunplus: reg_r err -71 [ 53.765228][ T4327] sunplus: probe of 1-1:0.0 failed with error -71 [ 53.777024][ T4327] usb 1-1: USB disconnect, device number 6 [ 54.090447][ T4504] tipc: Disabling bearer [ 54.094136][ T4520] netlink: 44 bytes leftover after parsing attributes in process `syz.1.48'. [ 54.370721][ T4591] mmap: syz.2.67 (4591) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.391590][ T4588] loop4: detected capacity change from 0 to 32768 [ 54.432724][ T4588] XFS (loop4): Mounting V5 Filesystem [ 54.577494][ T4607] loop0: detected capacity change from 0 to 512 [ 54.635816][ T4588] XFS (loop4): Ending clean mount [ 54.651734][ T4588] XFS (loop4): Quotacheck needed: Please wait. [ 54.665498][ T4599] lo speed is unknown, defaulting to 1000 [ 54.669805][ T4599] lo speed is unknown, defaulting to 1000 [ 54.677197][ T4599] lo speed is unknown, defaulting to 1000 [ 54.689070][ T4588] XFS (loop4): Quotacheck: Done. [ 54.764725][ T4599] infiniband syz0: set active [ 54.765999][ T4599] infiniband syz0: added lo [ 54.783692][ T4599] RDS/IB: syz0: added [ 54.785520][ T4599] smc: adding ib device syz0 with port count 1 [ 54.787113][ T4599] smc: ib device syz0 port 1 has pnetid [ 54.790410][ T4599] lo speed is unknown, defaulting to 1000 [ 54.826671][ T4599] lo speed is unknown, defaulting to 1000 [ 54.861379][ T4599] lo speed is unknown, defaulting to 1000 [ 54.894746][ T4599] lo speed is unknown, defaulting to 1000 [ 54.929915][ T4599] lo speed is unknown, defaulting to 1000 [ 54.993474][ T4350] lo speed is unknown, defaulting to 1000 [ 54.995545][ T4350] lo speed is unknown, defaulting to 1000 [ 55.009849][ T4615] loop1: detected capacity change from 0 to 32768 [ 55.066344][ T4607] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 55.068458][ T4615] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 55.085458][ T4298] XFS (loop4): Unmounting Filesystem [ 55.094950][ T4615] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 55.255090][ T4304] EXT4-fs (loop0): unmounting filesystem. [ 55.259735][ T4299] ocfs2: Unmounting device (7,1) on (node local) [ 55.496492][ T4630] loop0: detected capacity change from 0 to 64 [ 55.613539][ T4630] hfs: filesystem is marked locked, mounting read-only. [ 55.658532][ T4632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.660956][ T4632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.958907][ T4646] input: syz0 as /devices/virtual/input/input3 [ 55.990607][ T4647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 56.003925][ T4650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.006591][ T4647] loop1: detected capacity change from 0 to 256 [ 56.014603][ T4650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.033185][ T4647] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 56.331809][ T4655] loop0: detected capacity change from 0 to 32768 [ 56.398725][ T4655] XFS (loop0): Mounting V5 Filesystem [ 56.437145][ T4655] XFS (loop0): Ending clean mount [ 56.443814][ T4348] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0x108, xfs_finobt block 0x20 [ 56.446832][ T4348] XFS (loop0): Unmount and run xfs_repair [ 56.449635][ T4348] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 56.451887][ T4348] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 56.454139][ T4348] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 56.456341][ T4348] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 56.482743][ T4348] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 56.485075][ T4348] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 56.487159][ T4348] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 56.507657][ T4348] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.510488][ T4348] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.512875][ T4655] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x20 len 8 error 74 [ 56.515994][ T4655] XFS (loop0): Failed to initialize disk quotas. [ 56.523139][ T4669] loop4: detected capacity change from 0 to 24 [ 56.538053][ T4669] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 56.548060][ T4669] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 56.597494][ T4672] usb usb1: usbfs: process 4672 (syz.3.94) did not claim interface 0 before use [ 56.655221][ T4304] XFS (loop0): Unmounting Filesystem [ 56.696659][ T4675] loop8: detected capacity change from 0 to 8 [ 56.706801][ T4675] Dev loop8: unable to read RDB block 8 [ 56.717271][ T4675] loop8: unable to read partition table [ 56.721906][ T4675] loop8: partition table beyond EOD, truncated [ 56.724687][ T4675] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 57.541151][ T4680] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 57.573497][ T4689] loop4: detected capacity change from 0 to 512 [ 57.605440][ T4689] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.625815][ T4689] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.633696][ T4689] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.100: invalid indirect mapped block 4294967295 (level 1) [ 57.646332][ T4689] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.100: invalid indirect mapped block 4294967295 (level 1) [ 57.658534][ T4689] EXT4-fs (loop4): 2 truncates cleaned up [ 57.660110][ T4689] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 57.777416][ T4696] loop1: detected capacity change from 0 to 128 [ 57.821595][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 57.865184][ T4696] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 57.912287][ T4695] loop2: detected capacity change from 0 to 40427 [ 57.916755][ T4695] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 57.918959][ T4695] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 57.923255][ T4695] F2FS-fs (loop2): invalid crc value [ 57.954049][ T4695] F2FS-fs (loop2): Found nat_bits in checkpoint [ 57.975380][ T4695] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 57.977286][ T4695] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 58.142806][ T4299] EXT4-fs (loop1): unmounting filesystem. [ 58.364348][ T4718] loop0: detected capacity change from 0 to 256 [ 58.366460][ T4718] exfat: Deprecated parameter 'utf8' [ 58.372913][ T4718] exfat: Unknown parameter 'zero_size_dir' [ 58.411100][ T4292] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 58.499642][ T4723] Bluetooth: MGMT ver 1.22 [ 58.700510][ T4728] loop4: detected capacity change from 0 to 32768 [ 58.706238][ T4728] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.116 (4728) [ 58.711112][ T4728] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 58.713684][ T4728] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 58.715780][ T4728] BTRFS info (device loop4): using free space tree [ 58.723396][ T4740] loop0: detected capacity change from 0 to 128 [ 58.735615][ T4740] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 58.843242][ T4304] EXT4-fs (loop0): unmounting filesystem. [ 58.881889][ T4728] BTRFS info (device loop4): enabling ssd optimizations [ 59.068828][ T4298] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 59.175324][ T4755] loop2: detected capacity change from 0 to 4096 [ 59.195251][ T4755] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 59.236455][ T4762] loop3: detected capacity change from 0 to 65536 [ 59.304970][ T4762] XFS (loop3): Mounting V5 Filesystem [ 59.353010][ T4762] XFS (loop3): Ending clean mount [ 59.388706][ T4755] ntfs3: loop2: Failed to load $Extend. [ 59.525911][ T4618] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4618) [ 59.739549][ T4779] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 59.816607][ T4310] XFS (loop3): Unmounting Filesystem [ 59.953650][ T4789] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 60.157744][ T4350] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 60.160728][ T4796] loop4: detected capacity change from 0 to 128 [ 60.185840][ T4796] omfs: sysblock number (f784317bf884317b) is out of range [ 60.366770][ T4350] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 60.375151][ T4350] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 60.375817][ T4804] loop4: detected capacity change from 0 to 256 [ 60.377817][ T4350] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 60.377851][ T4350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.399371][ T4786] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 60.495100][ T4804] FAT-fs (loop4): Directory bread(block 64) failed [ 60.496807][ T4804] FAT-fs (loop4): Directory bread(block 65) failed [ 60.507177][ T4804] FAT-fs (loop4): Directory bread(block 66) failed [ 60.513547][ T4804] FAT-fs (loop4): Directory bread(block 67) failed [ 60.515496][ T4804] FAT-fs (loop4): Directory bread(block 68) failed [ 60.525563][ T4804] FAT-fs (loop4): Directory bread(block 69) failed [ 60.527335][ T4804] FAT-fs (loop4): Directory bread(block 70) failed [ 60.535763][ T4804] FAT-fs (loop4): Directory bread(block 71) failed [ 60.537513][ T4804] FAT-fs (loop4): Directory bread(block 72) failed [ 60.543145][ T4804] FAT-fs (loop4): Directory bread(block 73) failed [ 60.558906][ T4810] binder: 4805:4810 tried to acquire reference to desc 0, got 1 instead [ 60.574663][ T4350] binder: undelivered TRANSACTION_COMPLETE [ 60.613447][ T4350] binder: undelivered transaction 5, process died. [ 60.651235][ T4350] usb 1-1: USB disconnect, device number 7 [ 60.876527][ T4829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.883369][ T4829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.892100][ T4829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.937846][ T4829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.964856][ T4832] loop3: detected capacity change from 0 to 64 [ 60.973224][ T4833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.975959][ T4833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.982891][ T4835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.991765][ T4832] hfs: request for non-existent node 131072 in B*Tree [ 60.993670][ T4832] hfs: request for non-existent node 131072 in B*Tree [ 61.015657][ T4835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.227470][ T4835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.233828][ T4835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.320305][ T4841] loop3: detected capacity change from 0 to 32768 [ 61.363376][ T4841] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 61.376305][ T4841] (syz.3.151,4841,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 61.378715][ T4841] (syz.3.151,4841,0):ocfs2_search_chain:1761 ERROR: status = -12 [ 61.380863][ T4841] (syz.3.151,4841,0):ocfs2_search_chain:1871 ERROR: status = -12 [ 61.382709][ T4841] (syz.3.151,4841,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -12 [ 61.384786][ T4841] (syz.3.151,4841,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -12 [ 61.386847][ T4841] (syz.3.151,4841,0):ocfs2_claim_new_inode:2216 ERROR: status = -12 [ 61.389091][ T4841] (syz.3.151,4841,0):ocfs2_claim_new_inode:2231 ERROR: status = -12 [ 61.391163][ T4841] (syz.3.151,4841,0):ocfs2_mknod_locked:639 ERROR: status = -12 [ 61.393198][ T4841] (syz.3.151,4841,0):ocfs2_mknod:385 ERROR: status = -12 [ 61.395592][ T4841] (syz.3.151,4841,0):ocfs2_mknod:502 ERROR: status = -12 [ 61.397665][ T4841] (syz.3.151,4841,0):ocfs2_mkdir:659 ERROR: status = -12 [ 61.424346][ T4310] ocfs2: Unmounting device (7,3) on (node local) [ 61.521028][ T4850] loop3: detected capacity change from 0 to 2048 [ 61.526822][ T4850] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 61.529619][ T4850] NILFS (loop3): mounting unchecked fs [ 61.531128][ T4850] NILFS (loop3): recovery required for readonly filesystem [ 61.532960][ T4850] NILFS (loop3): write access will be enabled during recovery [ 61.564646][ T4850] NILFS (loop3): recovery complete [ 61.695528][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 61.887510][ T4872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.887924][ T4872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.914563][ T4874] loop0: detected capacity change from 0 to 256 [ 61.935918][ T4874] FAT-fs (loop0): Directory bread(block 64) failed [ 61.937545][ T4874] FAT-fs (loop0): Directory bread(block 65) failed [ 61.946233][ T4874] FAT-fs (loop0): Directory bread(block 66) failed [ 61.962944][ T4874] FAT-fs (loop0): Directory bread(block 67) failed [ 61.964703][ T4874] FAT-fs (loop0): Directory bread(block 68) failed [ 61.966383][ T4874] FAT-fs (loop0): Directory bread(block 69) failed [ 61.968976][ T4874] FAT-fs (loop0): Directory bread(block 70) failed [ 61.970585][ T4874] FAT-fs (loop0): Directory bread(block 71) failed [ 61.972336][ T4874] FAT-fs (loop0): Directory bread(block 72) failed [ 61.973966][ T4874] FAT-fs (loop0): Directory bread(block 73) failed [ 62.066725][ T4877] process 'syz.3.166' launched '/dev/fd/3' with NULL argv: empty string added [ 62.170890][ T4884] loop3: detected capacity change from 0 to 16 [ 62.181322][ T4884] erofs: (device loop3): mounted with root inode @ nid 36. [ 62.259970][ T4886] loop0: detected capacity change from 0 to 128 [ 62.294188][ T4886] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 62.301392][ T4886] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 62.326187][ T4304] EXT4-fs (loop0): unmounting filesystem. [ 62.616850][ T4908] loop3: detected capacity change from 0 to 64 [ 62.725607][ T4910] loop2: detected capacity change from 0 to 736 [ 62.948597][ T4921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.950945][ T4921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.293343][ T4931] netlink: 'syz.2.192': attribute type 10 has an invalid length. [ 63.295787][ T4931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.192'. [ 63.379146][ T4932] loop0: detected capacity change from 0 to 32768 [ 63.383968][ T4932] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.191 (4932) [ 63.391737][ T4932] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 63.394430][ T4932] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 63.396551][ T4932] BTRFS info (device loop0): using free space tree [ 63.477944][ T4931] team0: Port device geneve0 added [ 63.653217][ T4940] loop1: detected capacity change from 0 to 40427 [ 63.656914][ T4940] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 63.659123][ T4940] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 63.662583][ T4940] F2FS-fs (loop1): invalid crc value [ 63.675917][ T4932] BTRFS info (device loop0): enabling ssd optimizations [ 63.706740][ T4940] F2FS-fs (loop1): Found nat_bits in checkpoint [ 63.736080][ T4940] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 63.738193][ T4940] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 64.313455][ T4970] random: crng reseeded on system resumption [ 64.517141][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.519144][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.686824][ T4304] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 64.845412][ T4973] loop3: detected capacity change from 0 to 65536 [ 64.935641][ T4973] XFS (loop3): Mounting V5 Filesystem [ 65.013493][ T4973] XFS (loop3): Ending clean mount [ 65.030855][ T14] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x6 [ 65.033863][ T14] XFS (loop3): Unmount and run xfs_repair [ 65.035292][ T14] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 65.037081][ T14] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 65.047662][ T14] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 65.051012][ T14] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 65.062810][ T14] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 65.065154][ T14] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 65.067333][ T14] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 65.088604][ T14] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 65.090858][ T14] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 65.092985][ T4973] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x6 len 2 error 74 [ 65.105595][ T4973] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x570/0xac4 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 65.109286][ T4973] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 65.182007][ T4985] lo speed is unknown, defaulting to 1000 [ 65.186871][ T4310] XFS (loop3): Unmounting Filesystem [ 65.546183][ T4991] loop0: detected capacity change from 0 to 32768 [ 65.586516][ T4991] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 65.593328][ T4991] XFS (loop0): Mounting V5 Filesystem [ 65.658651][ T4991] XFS (loop0): Ending clean mount [ 65.663247][ T4991] XFS (loop0): Quotacheck needed: Please wait. [ 65.728543][ T4991] XFS (loop0): Quotacheck: Done. [ 65.844548][ T5005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.847062][ T5005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.855899][ T4304] XFS (loop0): Unmounting Filesystem [ 66.181915][ T5017] loop3: detected capacity change from 0 to 1024 [ 66.198471][ T5017] EXT4-fs: Ignoring removed orlov option [ 66.200052][ T5017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.286450][ T5011] loop2: detected capacity change from 0 to 32768 [ 66.293401][ T5011] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 66.326248][ T5017] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 66.645095][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 66.803368][ T5038] loop4: detected capacity change from 0 to 4096 [ 66.808546][ T5038] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 66.844025][ T5042] loop3: detected capacity change from 0 to 16 [ 66.847874][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 66.872893][ T5042] erofs: (device loop3): mounted with root inode @ nid 36. [ 66.898048][ T5044] capability: warning: `syz.2.222' uses 32-bit capabilities (legacy support in use) [ 67.016118][ T5047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.019103][ T5047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.022279][ T5047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.024525][ T5047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.028083][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 67.033984][ T7] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 67.036179][ T7] usb 1-1: config 0 has an invalid interface number: 164 but max is 0 [ 67.038785][ T7] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 67.041018][ T7] usb 1-1: config 0 has no interface number 0 [ 67.042594][ T7] usb 1-1: config 0 has no interface number 1 [ 67.044155][ T7] usb 1-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30 [ 67.055693][ T7] usb 1-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 67.058509][ T5050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.061358][ T7] usb 1-1: config 0 interface 50 has no altsetting 0 [ 67.063347][ T7] usb 1-1: config 0 interface 164 has no altsetting 0 [ 67.066454][ T5050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.081950][ T7] usb 1-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a [ 67.084297][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.086332][ T7] usb 1-1: Product: syz [ 67.087380][ T7] usb 1-1: Manufacturer: syz [ 67.089488][ T7] usb 1-1: SerialNumber: syz [ 67.106422][ T7] usb 1-1: config 0 descriptor?? [ 67.111230][ T7] usb 1-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 67.184298][ T5056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.188070][ T5056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.257878][ T7] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 67.371301][ T5063] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.654959][ T5067] loop3: detected capacity change from 0 to 32768 [ 67.690903][ T5067] XFS (loop3): Mounting V5 Filesystem [ 67.725528][ T5067] XFS (loop3): Ending clean mount [ 67.736833][ T5067] XFS (loop3): Quotacheck needed: Please wait. [ 67.765297][ T5067] XFS (loop3): Quotacheck: Done. [ 67.922667][ T5078] loop4: detected capacity change from 0 to 32768 [ 67.926245][ T5078] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.231 (5078) [ 67.932625][ T5078] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 67.935294][ T5078] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 67.937723][ T5078] BTRFS info (device loop4): force clearing of disk cache [ 67.939521][ T5078] BTRFS info (device loop4): enabling ssd optimizations [ 67.941319][ T5078] BTRFS info (device loop4): using spread ssd allocation scheme [ 67.943189][ T5078] BTRFS info (device loop4): using free space tree [ 67.981094][ T5085] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.983521][ T5085] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.985750][ T5085] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.988095][ T5085] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.992331][ T5085] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 67.997786][ T7] usb 1-1: device descriptor read/64, error -71 [ 68.089147][ T5078] BTRFS info (device loop4): rebuilding free space tree [ 68.120450][ T5071] BTRFS warning (device loop4): get dev_stats failed, device not found [ 68.153018][ T4298] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 68.267800][ T7] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 68.337137][ T4310] XFS (loop3): Unmounting Filesystem [ 68.380267][ T5102] loop1: detected capacity change from 0 to 32768 [ 68.384567][ T5102] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.234 (5102) [ 68.410300][ T5102] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.413679][ T5102] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 68.415798][ T5102] BTRFS info (device loop1): using free space tree [ 68.566640][ T5102] BTRFS info (device loop1): enabling ssd optimizations [ 68.583817][ T4292] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop4 scanned by udevd (4292) [ 68.631484][ T5125] loop2: detected capacity change from 0 to 256 [ 68.660623][ T5125] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.663351][ T5125] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 68.699149][ T5127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.701787][ T5127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.714845][ T4368] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 68.779124][ T5125] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 68.806085][ T4299] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.961908][ T7] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 68.964645][ T7] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 68.991132][ T4357] usb 1-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 68.993474][ T4357] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 69.165324][ T7] usb 1-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 69.169688][ T7] usb 1-1: selecting invalid altsetting 0 [ 69.249470][ T5142] loop2: detected capacity change from 0 to 1024 [ 69.259603][ T5142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.285025][ T5142] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 69.343674][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 69.665069][ T5154] loop1: detected capacity change from 0 to 32768 [ 69.683582][ T5154] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.249 (5154) [ 69.942364][ T5152] loop2: detected capacity change from 0 to 65536 [ 69.946052][ T111] cfg80211: failed to load regulatory.db [ 69.952704][ T5154] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 69.955450][ T5154] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 69.957518][ T5154] BTRFS info (device loop1): setting nodatacow, compression disabled [ 69.960693][ T5154] BTRFS info (device loop1): force clearing of disk cache [ 69.962552][ T5154] BTRFS info (device loop1): enabling ssd optimizations [ 69.964282][ T5154] BTRFS info (device loop1): using spread ssd allocation scheme [ 69.966279][ T5154] BTRFS info (device loop1): not using spread ssd allocation scheme [ 69.968970][ T5154] BTRFS info (device loop1): turning on async discard [ 69.970659][ T5154] BTRFS info (device loop1): doing ref verification [ 69.972291][ T5154] BTRFS info (device loop1): using free space tree [ 69.974214][ T7] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 70.020740][ T5152] XFS (loop2): Mounting V5 Filesystem [ 70.049722][ T5152] XFS (loop2): Ending clean mount [ 70.070935][ T5152] syz.2.246 sent an empty control message without MSG_MORE. [ 70.098344][ T5152] cgroup: none used incorrectly [ 70.103523][ T4349] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x6 [ 70.106316][ T4349] XFS (loop2): Unmount and run xfs_repair [ 70.108671][ T4349] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 70.122336][ T4349] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 70.124640][ T4349] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 70.126858][ T4349] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 70.138110][ T4349] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 70.140540][ T4349] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 70.142724][ T4349] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 70.144924][ T4349] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.147047][ T4349] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.150210][ T5152] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x6 len 2 error 74 [ 70.156912][ T5152] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x570/0xac4 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 70.160877][ T5152] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 70.190141][ T5154] BTRFS info (device loop1): rebuilding free space tree [ 70.205856][ T5154] BTRFS info (device loop1): checking UUID tree [ 70.341540][ T4308] XFS (loop2): Unmounting Filesystem [ 70.384039][ T4299] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 70.426359][ T7] usb 1-1: failed to restore interface 50 altsetting 4 (error=-71) [ 70.432749][ T7] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 70.434755][ T7] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 70.456397][ T7] usb 1-1: USB disconnect, device number 8 [ 70.789938][ T4618] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop1 scanned by udevd (4618) [ 70.954490][ T5203] loop4: detected capacity change from 0 to 1024 [ 70.956912][ T5203] hfsplus: gid requires an argument [ 70.987695][ T5203] hfsplus: unable to parse mount options [ 71.143662][ T4686] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 71.154951][ T5210] loop1: detected capacity change from 0 to 1024 [ 71.160686][ T5210] hfsplus: gid requires an argument [ 71.162015][ T5210] hfsplus: unable to parse mount options [ 71.448367][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 71.504256][ T5229] netlink: 'syz.4.269': attribute type 29 has an invalid length. [ 71.535523][ T5224] loop2: detected capacity change from 0 to 4096 [ 71.550109][ T5224] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 71.607546][ T5224] ntfs3: loop2: Failed to load $Extend. [ 71.652231][ T5234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.654735][ T5234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.915583][ T5236] loop2: detected capacity change from 0 to 40427 [ 71.925074][ T5236] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 71.930791][ T5236] F2FS-fs (loop2): invalid crc value [ 71.935760][ T5236] F2FS-fs (loop2): Found nat_bits in checkpoint [ 71.952519][ T5236] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 71.965702][ T5236] syz.2.272: attempt to access beyond end of device [ 71.965702][ T5236] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 72.209253][ T5242] loop2: detected capacity change from 0 to 4096 [ 72.213005][ T5242] ntfs3: Unknown parameter 'windows_names' [ 72.350192][ T5225] team0 (unregistering): Port device team_slave_0 removed [ 72.370854][ T5225] team0 (unregistering): Port device team_slave_1 removed [ 72.434019][ T5229] netlink: 'syz.4.269': attribute type 29 has an invalid length. [ 72.500463][ T5251] loop2: detected capacity change from 0 to 4096 [ 72.509988][ T5251] ntfs3: Unknown parameter 'nocase' [ 72.535805][ T5254] only policy match revision 0 supported [ 72.535824][ T5254] unable to load match [ 72.617046][ T5256] netlink: 'syz.0.279': attribute type 2 has an invalid length. [ 72.619625][ T5256] netlink: 'syz.0.279': attribute type 11 has an invalid length. [ 72.621713][ T5256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.279'. [ 72.794540][ T5266] loop4: detected capacity change from 0 to 512 [ 72.796880][ T5266] EXT4-fs: Ignoring removed nobh option [ 72.827342][ T5266] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 72.862394][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 72.934579][ T5274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 72.944970][ T5274] device vlan0 entered promiscuous mode [ 72.958928][ T5274] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 73.109088][ T5280] loop4: detected capacity change from 0 to 128 [ 73.112152][ T5280] FAT-fs (loop4): bogus number of reserved sectors [ 73.114019][ T5280] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 73.123819][ T5280] FAT-fs (loop4): Can't find a valid FAT filesystem [ 73.168297][ T4809] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.211517][ T5286] loop0: detected capacity change from 0 to 128 [ 73.215784][ T5286] omfs: sysblock number (f784317bf884317b) is out of range [ 73.291984][ T5290] netlink: 32 bytes leftover after parsing attributes in process `syz.0.295'. [ 73.383877][ T5298] netlink: 72 bytes leftover after parsing attributes in process `syz.0.298'. [ 73.490652][ T5305] loop8: detected capacity change from 0 to 8 [ 73.494912][ T5305] Dev loop8: unable to read RDB block 8 [ 73.496583][ T5305] loop8: unable to read partition table [ 73.498696][ T5305] loop8: partition table beyond EOD, truncated [ 73.500379][ T5305] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 73.607683][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 73.673796][ T5311] netlink: 'syz.1.305': attribute type 10 has an invalid length. [ 73.675852][ T5311] netlink: 40 bytes leftover after parsing attributes in process `syz.1.305'. [ 73.684359][ T5311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.686806][ T5311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.700770][ T5311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.707044][ T5311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.730823][ T5317] loop0: detected capacity change from 0 to 128 [ 73.765966][ T5317] FAT-fs (loop0): bogus number of reserved sectors [ 73.767733][ T5317] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 73.773488][ T5311] team0: Port device geneve0 added [ 73.778767][ T5317] FAT-fs (loop0): Can't find a valid FAT filesystem [ 73.786162][ T5319] loop4: detected capacity change from 0 to 2048 [ 73.801092][ T5319] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 73.827366][ T5319] NILFS (loop4): mounting unchecked fs [ 73.830051][ T5319] NILFS (loop4): recovery required for readonly filesystem [ 73.831925][ T5319] NILFS (loop4): write access will be enabled during recovery [ 73.850690][ T4809] udevd[4809]: incorrect nilfs2 checksum on /dev/loop4 [ 73.946280][ T5323] loop1: detected capacity change from 0 to 512 [ 73.994155][ T5319] NILFS (loop4): recovery complete [ 74.013043][ T5323] EXT4-fs (loop1): Test dummy encryption mode enabled [ 74.014875][ T5323] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.065323][ T5323] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.082218][ T5325] loop0: detected capacity change from 0 to 128 [ 74.109676][ T5323] EXT4-fs (loop1): 1 truncate cleaned up [ 74.111195][ T5323] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 74.224776][ T4299] EXT4-fs (loop1): unmounting filesystem. [ 74.448083][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 74.513510][ T5330] loop2: detected capacity change from 0 to 32768 [ 74.537098][ T5330] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 74.547038][ T5330] (syz.2.314,5330,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 74.555209][ T5330] ocfs2: Unmounting device (7,2) on (node local) [ 74.621627][ T4618] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.691759][ T5350] device syzkaller1 entered promiscuous mode [ 74.753790][ T5354] netlink: 'syz.2.322': attribute type 10 has an invalid length. [ 74.760928][ T5354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.322'. [ 74.823745][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 74.837394][ T5356] loop4: detected capacity change from 0 to 256 [ 74.864502][ T5358] only policy match revision 0 supported [ 74.864523][ T5358] unable to load match [ 74.900067][ T5356] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 74.975237][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 75.006159][ T5356] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.059624][ T5368] loop2: detected capacity change from 0 to 2048 [ 75.074319][ T5368] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 75.080404][ T5368] NILFS (loop2): mounting unchecked fs [ 75.084101][ T5368] NILFS (loop2): recovery required for readonly filesystem [ 75.091571][ T5368] NILFS (loop2): write access will be enabled during recovery [ 75.115117][ T5368] NILFS (loop2): recovery complete [ 75.319938][ T5381] loop0: detected capacity change from 0 to 512 [ 75.369055][ T5381] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 75.381749][ T5381] EXT2-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 75.384251][ T5381] EXT2-fs (loop0): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 75.536811][ T5387] netlink: 'syz.0.336': attribute type 10 has an invalid length. [ 75.583916][ T5387] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 75.609661][ T5397] sctp: [Deprecated]: syz.3.340 (pid 5397) Use of int in max_burst socket option deprecated. [ 75.609661][ T5397] Use struct sctp_assoc_value instead [ 75.615854][ T5394] only policy match revision 0 supported [ 75.615871][ T5394] unable to load match [ 75.712720][ T5400] loop0: detected capacity change from 0 to 256 [ 75.746186][ T5400] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 75.794543][ T5402] loop1: detected capacity change from 0 to 2048 [ 75.806386][ T5400] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.815951][ T5402] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 75.831940][ T5402] NILFS (loop1): mounting unchecked fs [ 75.833454][ T5402] NILFS (loop1): recovery required for readonly filesystem [ 75.835218][ T5402] NILFS (loop1): write access will be enabled during recovery [ 75.862547][ T4618] udevd[4618]: incorrect nilfs2 checksum on /dev/loop1 [ 75.889324][ T5402] NILFS (loop1): recovery complete [ 76.129980][ T5416] loop0: detected capacity change from 0 to 2048 [ 76.173017][ T5421] loop2: detected capacity change from 0 to 164 [ 76.174089][ T5416] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.196965][ T5416] NILFS (loop0): mounting unchecked fs [ 76.222632][ T5421] syz.2.348: attempt to access beyond end of device [ 76.222632][ T5421] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 76.226731][ T5421] syz.2.348: attempt to access beyond end of device [ 76.226731][ T5421] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 76.230748][ T5416] NILFS (loop0): recovery required for readonly filesystem [ 76.231811][ T4809] udevd[4809]: incorrect nilfs2 checksum on /dev/loop0 [ 76.232694][ T5416] NILFS (loop0): write access will be enabled during recovery [ 76.276587][ T4809] udevd[4809]: incorrect nilfs2 checksum on /dev/loop0 [ 76.308850][ T5416] NILFS (loop0): recovery complete [ 76.394321][ T5431] netlink: 'syz.4.353': attribute type 10 has an invalid length. [ 76.482396][ T5431] team0: Port device geneve0 added [ 76.713277][ T5438] loop1: detected capacity change from 0 to 32768 [ 76.722084][ T5438] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 76.841748][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 76.865955][ T4809] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 77.042410][ T7] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 77.044764][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.046822][ T7] usb 1-1: Product: syz [ 77.050511][ T7] usb 1-1: Manufacturer: syz [ 77.051783][ T7] usb 1-1: SerialNumber: syz [ 77.054688][ T7] usb 1-1: config 0 descriptor?? [ 77.062193][ T7] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 009 [ 77.630818][ T7] (null): failure reading functionality [ 77.735659][ T5481] x_tables: duplicate underflow at hook 2 [ 77.835702][ T7] i2c i2c-1: failure reading functionality [ 77.838526][ T7] i2c i2c-1: failure reading functionality [ 77.839976][ T7] i2c i2c-1: No suitable probing method supported for address 0x18 [ 77.843291][ T7] i2c i2c-1: failure reading functionality [ 77.845016][ T7] i2c i2c-1: failure reading functionality [ 77.846374][ T7] i2c i2c-1: No suitable probing method supported for address 0x19 [ 77.855401][ T7] i2c i2c-1: failure reading functionality [ 77.857144][ T7] i2c i2c-1: failure reading functionality [ 77.858870][ T7] i2c i2c-1: No suitable probing method supported for address 0x1A [ 77.861137][ T7] i2c i2c-1: failure reading functionality [ 77.862878][ T7] i2c i2c-1: failure reading functionality [ 77.864838][ T7] i2c i2c-1: No suitable probing method supported for address 0x1B [ 77.867125][ T7] i2c i2c-1: failure reading functionality [ 77.873803][ T7] i2c i2c-1: failure reading functionality [ 77.875465][ T7] i2c i2c-1: No suitable probing method supported for address 0x1C [ 77.877564][ T7] i2c i2c-1: failure reading functionality [ 77.880623][ T7] i2c i2c-1: failure reading functionality [ 77.882029][ T7] i2c i2c-1: No suitable probing method supported for address 0x1D [ 77.884157][ T7] i2c i2c-1: failure reading functionality [ 77.886151][ T7] i2c i2c-1: failure reading functionality [ 77.900497][ T7] i2c i2c-1: No suitable probing method supported for address 0x1E [ 77.902788][ T7] i2c i2c-1: failure reading functionality [ 77.904507][ T7] i2c i2c-1: failure reading functionality [ 77.905950][ T7] i2c i2c-1: No suitable probing method supported for address 0x1F [ 77.908550][ T7] i2c i2c-1: failure reading functionality [ 77.910277][ T7] i2c i2c-1: failure reading functionality [ 77.911789][ T7] i2c i2c-1: No suitable probing method supported for address 0x48 [ 77.914037][ T7] i2c i2c-1: failure reading functionality [ 77.915705][ T7] i2c i2c-1: failure reading functionality [ 77.917057][ T7] i2c i2c-1: No suitable probing method supported for address 0x49 [ 77.919437][ T7] i2c i2c-1: failure reading functionality [ 77.921187][ T7] i2c i2c-1: failure reading functionality [ 77.922720][ T7] i2c i2c-1: No suitable probing method supported for address 0x4A [ 77.932242][ T7] i2c i2c-1: failure reading functionality [ 77.934316][ T7] i2c i2c-1: failure reading functionality [ 77.936297][ T7] i2c i2c-1: No suitable probing method supported for address 0x4B [ 77.939936][ T7] i2c i2c-1: failure reading functionality [ 77.941622][ T7] i2c i2c-1: failure reading functionality [ 77.949858][ T7] i2c i2c-1: No suitable probing method supported for address 0x4C [ 77.959120][ T7] i2c i2c-1: failure reading functionality [ 77.961154][ T7] i2c i2c-1: failure reading functionality [ 77.962717][ T7] i2c i2c-1: No suitable probing method supported for address 0x4D [ 77.967900][ T7] i2c i2c-1: failure reading functionality [ 77.970079][ T7] i2c i2c-1: failure reading functionality [ 77.971843][ T7] i2c i2c-1: No suitable probing method supported for address 0x4E [ 77.974177][ T7] i2c i2c-1: failure reading functionality [ 77.975918][ T7] i2c i2c-1: failure reading functionality [ 77.978473][ T7] i2c i2c-1: No suitable probing method supported for address 0x4F [ 77.980812][ T7] i2c i2c-1: failure reading functionality [ 77.982841][ T7] i2c i2c-1: failure reading functionality [ 77.984483][ T7] i2c i2c-1: No suitable probing method supported for address 0x18 [ 77.986802][ T7] i2c i2c-1: failure reading functionality [ 77.989698][ T7] i2c i2c-1: failure reading functionality [ 77.991333][ T7] i2c i2c-1: No suitable probing method supported for address 0x19 [ 77.993921][ T7] i2c i2c-1: failure reading functionality [ 77.995807][ T7] i2c i2c-1: failure reading functionality [ 77.997441][ T7] i2c i2c-1: No suitable probing method supported for address 0x1A [ 78.000494][ T7] i2c i2c-1: failure reading functionality [ 78.002351][ T7] i2c i2c-1: failure reading functionality [ 78.004531][ T7] i2c i2c-1: No suitable probing method supported for address 0x29 [ 78.007315][ T7] i2c i2c-1: failure reading functionality [ 78.009451][ T7] i2c i2c-1: failure reading functionality [ 78.010995][ T7] i2c i2c-1: No suitable probing method supported for address 0x2A [ 78.013242][ T7] i2c i2c-1: failure reading functionality [ 78.015200][ T7] i2c i2c-1: failure reading functionality [ 78.016838][ T7] i2c i2c-1: No suitable probing method supported for address 0x2B [ 78.020706][ T7] i2c i2c-1: failure reading functionality [ 78.022376][ T7] i2c i2c-1: failure reading functionality [ 78.024070][ T7] i2c i2c-1: No suitable probing method supported for address 0x48 [ 78.029279][ T4305] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 78.031516][ T4305] Bluetooth: hci1: Injecting HCI hardware error event [ 78.034639][ T47] Bluetooth: hci1: hardware error 0x00 [ 78.039249][ T7] i2c i2c-1: failure reading functionality [ 78.041092][ T7] i2c i2c-1: failure reading functionality [ 78.042735][ T7] i2c i2c-1: No suitable probing method supported for address 0x49 [ 78.045146][ T7] i2c i2c-1: failure reading functionality [ 78.047147][ T7] i2c i2c-1: failure reading functionality [ 78.052138][ T7] i2c i2c-1: No suitable probing method supported for address 0x4A [ 78.054469][ T7] i2c i2c-1: failure reading functionality [ 78.056083][ T7] i2c i2c-1: failure reading functionality [ 78.059323][ T7] i2c i2c-1: No suitable probing method supported for address 0x4B [ 78.061729][ T7] i2c i2c-1: failure reading functionality [ 78.063606][ T7] i2c i2c-1: failure reading functionality [ 78.065103][ T7] i2c i2c-1: No suitable probing method supported for address 0x4C [ 78.067394][ T7] i2c i2c-1: failure reading functionality [ 78.073169][ T7] i2c i2c-1: failure reading functionality [ 78.074788][ T7] i2c i2c-1: No suitable probing method supported for address 0x4D [ 78.077240][ T7] i2c i2c-1: failure reading functionality [ 78.079519][ T7] i2c i2c-1: failure reading functionality [ 78.081296][ T7] i2c i2c-1: No suitable probing method supported for address 0x4E [ 78.086612][ T7] i2c i2c-1: failure reading functionality [ 78.093474][ T7] i2c i2c-1: failure reading functionality [ 78.095112][ T7] i2c i2c-1: No suitable probing method supported for address 0x4F [ 78.097455][ T7] i2c i2c-1: connected i2c-tiny-usb device [ 78.106121][ T7] usb 1-1: USB disconnect, device number 9 [ 78.127925][ T4809] udevd[4809]: setting owner of /dev/bus/usb/001/009 to uid=0, gid=0 failed: No such file or directory [ 78.177886][ T5498] 9pnet_virtio: no channels available for device syz [ 78.224886][ T5500] loop8: detected capacity change from 0 to 7 [ 78.227060][ T5500] Dev loop8: unable to read RDB block 7 [ 78.229484][ T5500] loop8: unable to read partition table [ 78.231444][ T5500] loop8: partition table beyond EOD, truncated [ 78.233349][ T5500] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 78.556700][ T5516] binder: 5515 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 78.556724][ T5516] binder: 5515:5516 ioctl c018620c 20000180 returned -22 [ 78.788173][ T5518] loop0: detected capacity change from 0 to 32768 [ 79.880883][ T5531] loop8: detected capacity change from 0 to 8 [ 79.884876][ T4618] Dev loop8: unable to read RDB block 8 [ 79.886454][ T4618] loop8: unable to read partition table [ 79.888891][ T4618] loop8: partition table beyond EOD, truncated [ 79.901646][ T5531] Dev loop8: unable to read RDB block 8 [ 79.903108][ T5531] loop8: unable to read partition table [ 79.904651][ T5531] loop8: partition table beyond EOD, truncated [ 79.906433][ T5531] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 80.257777][ T47] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 80.338146][ T4529] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 80.533819][ T4529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.537047][ T4529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.540273][ T4529] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.543643][ T4529] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.546100][ T4529] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.556671][ T4529] usb 1-1: config 0 descriptor?? [ 80.967236][ T4529] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 80.978883][ T4529] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 81.242676][ T4529] usb 1-1: USB disconnect, device number 10 [ 82.734091][ T5548] loop0: detected capacity change from 0 to 2048 [ 82.745092][ T5548] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.747651][ T5548] NILFS (loop0): mounting unchecked fs [ 82.749009][ T5548] NILFS (loop0): recovery required for readonly filesystem [ 82.750763][ T5548] NILFS (loop0): write access will be enabled during recovery [ 82.763154][ T5548] NILFS (loop0): recovery complete [ 88.362693][ T5510] tipc: Enabling of bearer rejected, failed to enable media [ 88.428293][ T5558] loop8: detected capacity change from 0 to 8 [ 88.433544][ T5558] Dev loop8: unable to read RDB block 8 [ 88.435196][ T5558] loop8: unable to read partition table [ 88.436598][ T5558] loop8: partition table beyond EOD, truncated [ 88.447710][ T5558] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 88.577936][ T5565] netlink: 'syz.3.408': attribute type 10 has an invalid length. [ 88.580181][ T5565] __nla_validate_parse: 3 callbacks suppressed [ 88.580190][ T5565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.408'. [ 88.667342][ T5565] team0: Port device geneve0 added [ 88.674589][ T5574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.691228][ T5574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.760829][ T5577] loop0: detected capacity change from 0 to 2048 [ 88.772092][ T5577] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 88.774500][ T5577] NILFS (loop0): mounting unchecked fs [ 88.775880][ T5577] NILFS (loop0): recovery required for readonly filesystem [ 88.778132][ T5577] NILFS (loop0): write access will be enabled during recovery [ 88.801695][ T5577] NILFS (loop0): recovery complete [ 88.896332][ T5588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.900933][ T5588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.992609][ T5589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.420'. [ 89.258988][ T5593] loop0: detected capacity change from 0 to 32768 [ 89.291288][ T5593] XFS (loop0): Mounting V5 Filesystem [ 89.360176][ T5593] XFS (loop0): Ending clean mount [ 89.363444][ T5593] XFS (loop0): Quotacheck needed: Please wait. [ 89.411535][ T5593] XFS (loop0): Quotacheck: Done. [ 89.454835][ T5611] loop8: detected capacity change from 0 to 8 [ 89.456879][ T5611] Dev loop8: unable to read RDB block 8 [ 89.462544][ T5611] loop8: unable to read partition table [ 89.464139][ T5611] loop8: partition table beyond EOD, truncated [ 89.465956][ T5611] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 89.553928][ T4304] XFS (loop0): Unmounting Filesystem [ 89.708717][ T5624] loop1: detected capacity change from 0 to 2048 [ 89.718819][ T5624] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 89.721628][ T5624] NILFS (loop1): mounting unchecked fs [ 89.723049][ T5624] NILFS (loop1): recovery required for readonly filesystem [ 89.724880][ T5624] NILFS (loop1): write access will be enabled during recovery [ 89.743964][ T5552] udevd[5552]: incorrect nilfs2 checksum on /dev/loop1 [ 89.745511][ T5624] NILFS (loop1): recovery complete [ 90.003316][ T5635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'. [ 90.027206][ T5637] netlink: 'syz.0.429': attribute type 10 has an invalid length. [ 90.041021][ T5637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.429'. [ 90.043498][ T5637] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 90.133142][ T5633] loop2: detected capacity change from 0 to 32768 [ 90.144678][ T5633] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 90.235717][ T5612] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 90.519297][ T5646] loop1: detected capacity change from 0 to 32768 [ 90.572940][ T5646] XFS (loop1): Mounting V5 Filesystem [ 90.624641][ T5646] XFS (loop1): Ending clean mount [ 90.627073][ T5646] XFS (loop1): Quotacheck needed: Please wait. [ 90.658723][ T5646] XFS (loop1): Quotacheck: Done. [ 90.835019][ T5670] netlink: 'syz.4.447': attribute type 10 has an invalid length. [ 90.837046][ T5670] netlink: 40 bytes leftover after parsing attributes in process `syz.4.447'. [ 90.862581][ T4299] XFS (loop1): Unmounting Filesystem [ 90.926023][ T5680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 91.235349][ T5688] loop0: detected capacity change from 0 to 32768 [ 91.244674][ T5688] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 91.250841][ T5693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.253094][ T5693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.425342][ T5552] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 91.606332][ T5714] netlink: 'syz.1.467': attribute type 10 has an invalid length. [ 91.608685][ T5714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.467'. [ 91.631364][ T5714] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.633643][ T5714] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.636235][ T5714] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.648685][ T5714] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.689567][ T5721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.465'. [ 92.178919][ T5760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.480'. [ 92.262753][ T5762] netlink: 'syz.1.484': attribute type 10 has an invalid length. [ 92.266086][ T5762] netlink: 40 bytes leftover after parsing attributes in process `syz.1.484'. [ 92.610574][ T47] Bluetooth: hci4: Malformed Event: 0x13 [ 92.762673][ T5789] binder: 5786:5789 tried to acquire reference to desc 0, got 1 instead [ 92.823244][ T5191] binder: release 5786:5789 transaction 15 out, still active [ 92.857175][ T4529] binder: send failed reply for transaction 15, target dead [ 92.917288][ T5798] netlink: 'syz.0.501': attribute type 10 has an invalid length. [ 92.927027][ T5798] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 93.221053][ T5817] netlink: 'syz.4.511': attribute type 6 has an invalid length. [ 93.349477][ T5828] netlink: 'syz.1.516': attribute type 10 has an invalid length. [ 93.797736][ T5860] netlink: 'syz.1.530': attribute type 10 has an invalid length. [ 93.799719][ T5860] __nla_validate_parse: 4 callbacks suppressed [ 93.799728][ T5860] netlink: 40 bytes leftover after parsing attributes in process `syz.1.530'. [ 93.961282][ T5872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.535'. [ 94.033228][ T27] audit: type=1326 audit(349.992:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb5b728 code=0x7ff00000 [ 94.042368][ T27] audit: type=1326 audit(349.992:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb5b728 code=0x7ff00000 [ 94.052156][ T27] audit: type=1326 audit(349.992:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb5b728 code=0x7ff00000 [ 94.058243][ T27] audit: type=1326 audit(349.992:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb5b728 code=0x7ff00000 [ 94.063921][ T27] audit: type=1326 audit(349.992:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb5b728 code=0x7ff00000 [ 94.073705][ T27] audit: type=1326 audit(349.992:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb5b728 code=0x7ff00000 [ 94.085745][ T27] audit: type=1326 audit(349.992:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb5b728 code=0x7ff00000 [ 94.093156][ T27] audit: type=1326 audit(349.992:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb5b728 code=0x7ff00000 [ 94.100316][ T27] audit: type=1326 audit(349.992:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb5b728 code=0x7ff00000 [ 94.105277][ T27] audit: type=1326 audit(349.992:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb5b728 code=0x7ff00000 [ 94.122751][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 94.125101][ T5878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.539'. [ 94.201070][ T5882] netlink: 'syz.4.542': attribute type 10 has an invalid length. [ 94.203104][ T5882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.542'. [ 94.473226][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'. [ 94.524969][ T5908] lo speed is unknown, defaulting to 1000 [ 94.620365][ T5909] loop1: detected capacity change from 0 to 1024 [ 94.634315][ T5915] netlink: 'syz.3.555': attribute type 10 has an invalid length. [ 94.636619][ T5915] netlink: 40 bytes leftover after parsing attributes in process `syz.3.555'. [ 94.669118][ T5909] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 94.685071][ T5913] loop2: detected capacity change from 0 to 4096 [ 94.709020][ T5913] ntfs3: Unknown parameter 'windows_names' [ 94.788049][ T5924] loop4: detected capacity change from 0 to 256 [ 94.892813][ T4299] EXT4-fs (loop1): unmounting filesystem. [ 95.107904][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.110302][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.165340][ T5942] loop1: detected capacity change from 0 to 2048 [ 95.175024][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.566'. [ 95.224895][ T5552] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.399052][ T5956] netlink: 'syz.4.570': attribute type 10 has an invalid length. [ 95.401510][ T5956] netlink: 40 bytes leftover after parsing attributes in process `syz.4.570'. [ 96.014306][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'. [ 96.316026][ T5987] netlink: 'syz.3.584': attribute type 10 has an invalid length. [ 96.695759][ T4686] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 96.714667][ T6018] netlink: 'syz.3.596': attribute type 10 has an invalid length. [ 96.786566][ T6020] netlink: 'syz.1.597': attribute type 32 has an invalid length. [ 96.972577][ T6023] loop0: detected capacity change from 0 to 32768 [ 97.038795][ T6023] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 97.145777][ T4304] ocfs2: Unmounting device (7,0) on (node local) [ 97.164883][ T6044] loop8: detected capacity change from 0 to 8 [ 97.182403][ T6044] Dev loop8: unable to read RDB block 8 [ 97.184062][ T6044] loop8: unable to read partition table [ 97.185598][ T6044] loop8: partition table beyond EOD, truncated [ 97.202565][ T6044] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 97.334977][ T6053] netlink: 'syz.1.609': attribute type 10 has an invalid length. [ 97.492052][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 97.711662][ T6083] loop8: detected capacity change from 0 to 8 [ 97.716619][ T6082] netlink: 'syz.4.620': attribute type 10 has an invalid length. [ 97.727244][ T5552] Dev loop8: unable to read RDB block 8 [ 97.734880][ T5552] loop8: unable to read partition table [ 97.736566][ T5552] loop8: partition table beyond EOD, truncated [ 97.766779][ T6083] Dev loop8: unable to read RDB block 8 [ 97.768374][ T6083] loop8: unable to read partition table [ 97.776287][ T6083] loop8: partition table beyond EOD, truncated [ 97.783274][ T6083] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 97.872799][ T6089] loop4: detected capacity change from 0 to 1024 [ 97.896592][ T6089] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 97.900881][ T6089] EXT4-fs (loop4): orphan cleanup on readonly fs [ 97.925234][ T6089] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 97.939078][ T6089] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #3: comm syz.4.623: mark_inode_dirty error [ 97.951203][ T6089] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.623: Invalid block bitmap block 3 in block_group 0 [ 97.964713][ T6089] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 97.982123][ T6089] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #3: comm syz.4.623: mark_inode_dirty error [ 97.988886][ T6089] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm syz.4.623: lblock 6 mapped to illegal pblock 1 (length 1) [ 97.995547][ T6089] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.623: lblock 0 mapped to illegal pblock 48 (length 1) [ 98.005665][ T6089] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.623: Failed to acquire dquot type 0 [ 98.011626][ T6101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.014390][ T6089] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 49: comm syz.4.623: lblock 1 mapped to illegal pblock 49 (length 1) [ 98.043830][ T6101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.059360][ T6089] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.623: Failed to acquire dquot type 0 [ 98.075427][ T6089] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 98.086328][ T6089] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #15: comm syz.4.623: mark_inode_dirty error [ 98.091619][ T6089] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 98.094195][ T6089] EXT4-fs (loop4): 1 orphan inode deleted [ 98.096195][ T6089] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.172871][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 98.211692][ T4682] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 98.284920][ T6115] netlink: 'syz.4.633': attribute type 10 has an invalid length. [ 98.406227][ T6124] loop8: detected capacity change from 0 to 8 [ 98.409494][ T5552] Dev loop8: unable to read RDB block 8 [ 98.411113][ T5552] loop8: unable to read partition table [ 98.412640][ T5552] loop8: partition table beyond EOD, truncated [ 98.417339][ T6124] Dev loop8: unable to read RDB block 8 [ 98.420046][ T6124] loop8: unable to read partition table [ 98.421921][ T6124] loop8: partition table beyond EOD, truncated [ 98.434775][ T6124] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 98.757465][ T6137] loop0: detected capacity change from 0 to 2048 [ 98.778882][ T6137] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.785493][ T6137] NILFS (loop0): mounting unchecked fs [ 98.884956][ T6137] NILFS (loop0): recovery complete [ 98.921315][ T6145] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.005483][ T6150] netlink: 'syz.4.645': attribute type 10 has an invalid length. [ 99.012509][ T6150] __nla_validate_parse: 11 callbacks suppressed [ 99.012522][ T6150] netlink: 40 bytes leftover after parsing attributes in process `syz.4.645'. [ 99.165041][ T6158] loop8: detected capacity change from 0 to 8 [ 99.167883][ T5552] Dev loop8: unable to read RDB block 8 [ 99.169374][ T5552] loop8: unable to read partition table [ 99.170828][ T5552] loop8: partition table beyond EOD, truncated [ 99.175350][ T6158] Dev loop8: unable to read RDB block 8 [ 99.176954][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 99.177077][ T6158] loop8: unable to read partition table [ 99.186860][ T6158] loop8: partition table beyond EOD, truncated [ 99.194868][ T6158] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 99.373334][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'. [ 99.523254][ T6185] netlink: 'syz.4.658': attribute type 10 has an invalid length. [ 99.525587][ T6185] netlink: 40 bytes leftover after parsing attributes in process `syz.4.658'. [ 99.657726][ T6179] loop2: detected capacity change from 0 to 40427 [ 99.668075][ T6179] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 99.670121][ T6179] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 99.673456][ T6179] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 99.709169][ T6179] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.725542][ T6179] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 99.727410][ T6179] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 99.826970][ T4685] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 99.893536][ T6202] loop8: detected capacity change from 0 to 8 [ 99.903560][ T5612] Dev loop8: unable to read RDB block 8 [ 99.905030][ T5612] loop8: unable to read partition table [ 99.906552][ T5612] loop8: partition table beyond EOD, truncated [ 99.913078][ T6202] Dev loop8: unable to read RDB block 8 [ 99.915206][ T6202] loop8: unable to read partition table [ 99.916927][ T6202] loop8: partition table beyond EOD, truncated [ 99.939359][ T6202] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 100.231898][ T6224] netlink: 'syz.0.670': attribute type 10 has an invalid length. [ 100.234282][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.667'. [ 100.237171][ T6224] netlink: 40 bytes leftover after parsing attributes in process `syz.0.670'. [ 100.242475][ T6224] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 100.378771][ T1602] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 100.700649][ T6242] loop8: detected capacity change from 0 to 8 [ 100.714508][ T5552] Dev loop8: unable to read RDB block 8 [ 100.716082][ T5552] loop8: unable to read partition table [ 100.718228][ T5552] loop8: partition table beyond EOD, truncated [ 100.722732][ T6242] Dev loop8: unable to read RDB block 8 [ 100.729379][ T6242] loop8: unable to read partition table [ 100.738594][ T6242] loop8: partition table beyond EOD, truncated [ 100.763536][ T6242] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 100.839170][ T6249] netlink: 'syz.0.681': attribute type 10 has an invalid length. [ 100.841525][ T6249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.681'. [ 100.844255][ T6249] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 101.094070][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.684'. [ 101.259745][ T6275] netlink: 'syz.1.690': attribute type 21 has an invalid length. [ 101.261735][ T6275] netlink: 'syz.1.690': attribute type 4 has an invalid length. [ 101.276558][ T6277] loop8: detected capacity change from 0 to 8 [ 101.283259][ T5552] Dev loop8: unable to read RDB block 8 [ 101.284736][ T5552] loop8: unable to read partition table [ 101.286289][ T5552] loop8: partition table beyond EOD, truncated [ 101.295909][ T6277] Dev loop8: unable to read RDB block 8 [ 101.307883][ T6277] loop8: unable to read partition table [ 101.309660][ T6277] loop8: partition table beyond EOD, truncated [ 101.311291][ T6277] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 101.342078][ T6281] netlink: 'syz.3.693': attribute type 10 has an invalid length. [ 101.344292][ T6281] netlink: 40 bytes leftover after parsing attributes in process `syz.3.693'. [ 101.546197][ T4686] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 101.568623][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.575138][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.668295][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 101.888097][ T6305] loop0: detected capacity change from 0 to 32768 [ 101.913647][ T6305] XFS (loop0): Mounting V5 Filesystem [ 101.931690][ T6318] netlink: 'syz.2.706': attribute type 10 has an invalid length. [ 101.933909][ T6318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.706'. [ 102.009164][ T6305] XFS (loop0): Ending clean mount [ 102.012358][ T6305] XFS (loop0): Quotacheck needed: Please wait. [ 102.049446][ T6305] XFS (loop0): Quotacheck: Done. [ 102.090053][ T4304] XFS (loop0): Unmounting Filesystem [ 102.198718][ T4686] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 102.410492][ T6349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.419736][ T6349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.661848][ T6365] netlink: 'syz.0.719': attribute type 10 has an invalid length. [ 102.663887][ T6365] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 102.715795][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.728405][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.804109][ T6373] binder: 6372:6373 context manager tried to acquire desc 0 [ 102.807109][ T6373] binder: 6372:6373 ioctl c0306201 20000380 returned -22 [ 102.825687][ T1602] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 103.382534][ T6404] netlink: 'syz.0.732': attribute type 10 has an invalid length. [ 103.403862][ T6404] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 103.504810][ T6410] loop8: detected capacity change from 0 to 8 [ 103.508896][ T5552] Dev loop8: unable to read RDB block 8 [ 103.510438][ T5552] loop8: unable to read partition table [ 103.512170][ T5552] loop8: partition table beyond EOD, truncated [ 103.549120][ T6410] Dev loop8: unable to read RDB block 8 [ 103.550629][ T6410] loop8: unable to read partition table [ 103.555927][ T6410] loop8: partition table beyond EOD, truncated [ 103.565654][ T6410] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 103.644820][ T6420] loop0: detected capacity change from 0 to 64 [ 103.876309][ T6436] loop0: detected capacity change from 0 to 4096 [ 103.889126][ T6436] ntfs3: Unknown parameter 'windows_names' [ 104.093453][ T6447] netlink: 'syz.2.749': attribute type 10 has an invalid length. [ 104.095454][ T6447] __nla_validate_parse: 5 callbacks suppressed [ 104.095462][ T6447] netlink: 40 bytes leftover after parsing attributes in process `syz.2.749'. [ 104.421275][ T27] kauditd_printk_skb: 144 callbacks suppressed [ 104.421287][ T27] audit: type=1326 audit(360.382:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb5b728 code=0x7ffc0000 [ 104.430141][ T27] audit: type=1326 audit(360.392:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=266 compat=0 ip=0xffffbbb5b728 code=0x7ffc0000 [ 104.437977][ T27] audit: type=1326 audit(360.392:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb5b728 code=0x7ffc0000 [ 104.585894][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.759'. [ 104.709239][ T6490] netlink: 'syz.3.764': attribute type 10 has an invalid length. [ 104.711206][ T6490] netlink: 40 bytes leftover after parsing attributes in process `syz.3.764'. [ 104.711869][ T6493] loop8: detected capacity change from 0 to 8 [ 104.716130][ T5552] Dev loop8: unable to read RDB block 8 [ 104.717724][ T5552] loop8: unable to read partition table [ 104.719604][ T5552] loop8: partition table beyond EOD, truncated [ 104.725353][ T6493] Dev loop8: unable to read RDB block 8 [ 104.726803][ T6493] loop8: unable to read partition table [ 104.730584][ T6493] loop8: partition table beyond EOD, truncated [ 104.742580][ T6493] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 104.820313][ T1602] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 104.920554][ T6494] loop2: detected capacity change from 0 to 32768 [ 104.932728][ T6494] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 105.085880][ T4308] (syz-executor,4308,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 105.098158][ T4308] ocfs2: Unmounting device (7,2) on (node local) [ 105.379567][ T6526] loop1: detected capacity change from 0 to 2048 [ 105.399230][ T6526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.495874][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.777'. [ 105.505755][ T6536] loop8: detected capacity change from 0 to 8 [ 105.524134][ T5612] Dev loop8: unable to read RDB block 8 [ 105.525882][ T5612] loop8: unable to read partition table [ 105.532377][ T5612] loop8: partition table beyond EOD, truncated [ 105.572165][ T6536] Dev loop8: unable to read RDB block 8 [ 105.573714][ T6536] loop8: unable to read partition table [ 105.575270][ T6536] loop8: partition table beyond EOD, truncated [ 105.576851][ T6536] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 105.761440][ T6545] netlink: 'syz.0.782': attribute type 10 has an invalid length. [ 105.766975][ T6544] binder: 6543:6544 ioctl 4018620d 0 returned -22 [ 105.774031][ T6545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.782'. [ 105.779163][ T6544] binder: 6543:6544 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 105.784798][ T6545] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 105.792718][ T6544] binder: 6544 RLIMIT_NICE not set [ 105.842260][ T6548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.844771][ T6548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.235387][ T6576] loop8: detected capacity change from 0 to 8 [ 106.242067][ T5552] Dev loop8: unable to read RDB block 8 [ 106.243526][ T5552] loop8: unable to read partition table [ 106.245003][ T5552] loop8: partition table beyond EOD, truncated [ 106.250963][ T6576] Dev loop8: unable to read RDB block 8 [ 106.252385][ T6576] loop8: unable to read partition table [ 106.253876][ T6576] loop8: partition table beyond EOD, truncated [ 106.266100][ T6576] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 106.338560][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.794'. [ 106.342891][ T6584] netlink: 'syz.4.795': attribute type 10 has an invalid length. [ 106.345075][ T6584] netlink: 40 bytes leftover after parsing attributes in process `syz.4.795'. [ 106.440002][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 106.636705][ T6603] loop7: detected capacity change from 0 to 16384 [ 106.774586][ T6608] loop8: detected capacity change from 0 to 8 [ 106.791257][ T6608] Dev loop8: unable to read RDB block 8 [ 106.798892][ T6608] loop8: unable to read partition table [ 106.805214][ T6608] loop8: partition table beyond EOD, truncated [ 106.818804][ T6608] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 106.875656][ T6612] netlink: 'syz.1.806': attribute type 10 has an invalid length. [ 106.877824][ T6612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.806'. [ 106.955974][ T6617] loop4: detected capacity change from 0 to 128 [ 106.967913][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'. [ 107.057136][ T4682] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 107.209408][ T6629] loop4: detected capacity change from 0 to 512 [ 107.235576][ T6634] loop1: detected capacity change from 0 to 128 [ 107.242592][ T6629] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.312002][ T6629] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.330647][ T6634] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 107.442045][ T6645] loop8: detected capacity change from 0 to 8 [ 107.452119][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 107.484354][ T6645] Dev loop8: unable to read RDB block 8 [ 107.485751][ T6645] loop8: unable to read partition table [ 107.487303][ T6645] loop8: partition table beyond EOD, truncated [ 107.524634][ T6645] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 107.543492][ T4299] EXT4-fs (loop1): unmounting filesystem. [ 107.545575][ T6648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.550552][ T6648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.565141][ T6650] loop4: detected capacity change from 0 to 47 [ 107.632199][ T6654] netlink: 'syz.1.820': attribute type 10 has an invalid length. [ 107.634172][ T6654] netlink: 40 bytes leftover after parsing attributes in process `syz.1.820'. [ 107.675243][ T6650] overlayfs: upper fs needs to support d_type. [ 107.704519][ T6650] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 107.706350][ T6650] overlayfs: failed to set xattr on upper [ 107.726760][ T6650] overlayfs: ...falling back to index=off,metacopy=off. [ 107.733613][ T4368] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 107.746632][ T6650] overlayfs: conflicting lowerdir path [ 107.912037][ T6667] loop1: detected capacity change from 0 to 2048 [ 107.923773][ T6667] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18576, location=18576 [ 107.950070][ T6667] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.188464][ T6681] loop8: detected capacity change from 0 to 8 [ 108.191088][ T5552] Dev loop8: unable to read RDB block 8 [ 108.192576][ T5552] loop8: unable to read partition table [ 108.194152][ T5552] loop8: partition table beyond EOD, truncated [ 108.202772][ T6681] Dev loop8: unable to read RDB block 8 [ 108.204235][ T6681] loop8: unable to read partition table [ 108.205755][ T6681] loop8: partition table beyond EOD, truncated [ 108.207324][ T6681] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 108.236501][ T6686] netlink: 'syz.0.835': attribute type 10 has an invalid length. [ 108.242635][ T6686] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 108.288453][ T4682] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 108.582178][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.598142][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.702234][ T6721] netlink: 'syz.1.849': attribute type 10 has an invalid length. [ 108.716705][ T4368] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 108.726134][ T6722] loop8: detected capacity change from 0 to 8 [ 108.739916][ T5552] Dev loop8: unable to read RDB block 8 [ 108.741348][ T5552] loop8: unable to read partition table [ 108.742909][ T5552] loop8: partition table beyond EOD, truncated [ 108.748424][ T6722] Dev loop8: unable to read RDB block 8 [ 108.749843][ T6722] loop8: unable to read partition table [ 108.762737][ T6722] loop8: partition table beyond EOD, truncated [ 108.782195][ T6722] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 109.211196][ T6754] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 109.213297][ T6754] __nla_validate_parse: 4 callbacks suppressed [ 109.213306][ T6754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.862'. [ 109.273718][ T1602] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 109.356367][ T6763] loop8: detected capacity change from 0 to 8 [ 109.362158][ T5552] Dev loop8: unable to read RDB block 8 [ 109.363617][ T5552] loop8: unable to read partition table [ 109.365110][ T5552] loop8: partition table beyond EOD, truncated [ 109.385048][ T6763] Dev loop8: unable to read RDB block 8 [ 109.386594][ T6763] loop8: unable to read partition table [ 109.413551][ T6763] loop8: partition table beyond EOD, truncated [ 109.422928][ T6763] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 109.486147][ T6773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.505277][ T6773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.556973][ T6777] loop2: detected capacity change from 0 to 4096 [ 109.601306][ T6777] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 109.659715][ T6777] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 109.701315][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 109.814351][ T6795] netlink: 'syz.2.875': attribute type 10 has an invalid length. [ 109.816558][ T6795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.875'. [ 109.853216][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 109.860931][ T6797] infiniband syz0: set active [ 109.863513][ T6797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.867110][ T4529] lo speed is unknown, defaulting to 1000 [ 110.050054][ T4368] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 110.110560][ T6805] loop8: detected capacity change from 0 to 8 [ 110.113613][ T6799] loop2: detected capacity change from 0 to 40427 [ 110.117026][ T5552] Dev loop8: unable to read RDB block 8 [ 110.123332][ T5552] loop8: unable to read partition table [ 110.124948][ T5552] loop8: partition table beyond EOD, truncated [ 110.130109][ T6805] Dev loop8: unable to read RDB block 8 [ 110.130139][ T6805] loop8: unable to read partition table [ 110.130362][ T6805] loop8: partition table beyond EOD, [ 110.133380][ T6799] F2FS-fs (loop2): invalid crc value [ 110.136437][ T6805] truncated [ 110.137260][ T6805] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 110.150553][ T6799] F2FS-fs (loop2): Found nat_bits in checkpoint [ 110.165672][ T6799] F2FS-fs (loop2): Start checkpoint disabled! [ 110.185436][ T6799] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 110.440295][ T4685] kworker/u4:9: attempt to access beyond end of device [ 110.440295][ T4685] loop2: rw=1, sector=45096, nr_sectors = 24 limit=40427 [ 110.595705][ T1602] kworker/u4:5: attempt to access beyond end of device [ 110.595705][ T1602] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 110.622947][ T6824] netlink: 'syz.3.888': attribute type 10 has an invalid length. [ 110.627827][ T6824] netlink: 40 bytes leftover after parsing attributes in process `syz.3.888'. [ 110.890320][ T6843] loop1: detected capacity change from 0 to 164 [ 110.956682][ T6846] loop8: detected capacity change from 0 to 8 [ 110.963448][ T6846] Dev loop8: unable to read RDB block 8 [ 110.965784][ T6846] loop8: unable to read partition table [ 110.979883][ T6846] loop8: partition table beyond EOD, truncated [ 110.984991][ T6846] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 111.115026][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.898'. [ 111.639403][ T4685] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 111.721010][ T6877] netlink: 'syz.3.903': attribute type 10 has an invalid length. [ 111.726202][ T6877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.903'. [ 111.962164][ T6891] loop2: detected capacity change from 0 to 2048 [ 112.001527][ T6897] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.033499][ T6891] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=128, inode=18302628885633695744, rec_len=65535, name_len=255 [ 112.047010][ T6892] nvme_fabrics: missing parameter 'transport=%s' [ 112.057402][ T6891] Remounting filesystem read-only [ 112.059508][ T6892] nvme_fabrics: missing parameter 'nqn=%s' [ 112.061106][ T6891] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=128, inode=18302628885633695744, rec_len=65535, name_len=255 [ 112.066013][ T6891] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=128, inode=18302628885633695744, rec_len=65535, name_len=255 [ 112.071379][ T6891] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=128, inode=18302628885633695744, rec_len=65535, name_len=255 [ 112.080996][ T6891] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=128, inode=18302628885633695744, rec_len=65535, name_len=255 [ 112.098313][ T6891] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=128, inode=18302628885633695744, rec_len=65535, name_len=255 [ 112.297415][ T6914] netlink: 'syz.2.914': attribute type 10 has an invalid length. [ 112.307787][ T6914] netlink: 40 bytes leftover after parsing attributes in process `syz.2.914'. [ 112.489067][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.916'. [ 112.554525][ T4686] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 112.660045][ T6930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.922'. [ 112.704087][ T6932] loop8: detected capacity change from 0 to 8 [ 112.710296][ T6932] Dev loop8: unable to read RDB block 8 [ 112.716285][ T6932] loop8: unable to read partition table [ 112.721910][ T6932] loop8: partition table beyond EOD, truncated [ 112.723602][ T6932] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 113.086794][ T4685] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 113.191560][ T6972] loop8: detected capacity change from 0 to 8 [ 113.196445][ T5552] Dev loop8: unable to read RDB block 8 [ 113.198213][ T5552] loop8: unable to read partition table [ 113.199797][ T5552] loop8: partition table beyond EOD, truncated [ 113.227107][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 113.247922][ T6972] Dev loop8: unable to read RDB block 8 [ 113.249474][ T6972] loop8: unable to read partition table [ 113.250995][ T6972] loop8: partition table beyond EOD, truncated [ 113.264217][ T6972] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 113.393329][ T6981] can0: slcan on ptm0. [ 113.519029][ T6986] can0 (unregistered): slcan off ptm0. [ 113.522757][ T6986] sp0: Synchronizing with TNC [ 113.839388][ T4686] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 114.016746][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 114.084243][ T7036] loop8: detected capacity change from 0 to 8 [ 114.087001][ T5552] Dev loop8: unable to read RDB block 8 [ 114.088641][ T5552] loop8: unable to read partition table [ 114.090138][ T5552] loop8: partition table beyond EOD, truncated [ 114.094377][ T7036] Dev loop8: unable to read RDB block 8 [ 114.095810][ T7036] loop8: unable to read partition table [ 114.097357][ T7036] loop8: partition table beyond EOD, truncated [ 114.112114][ T7036] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 114.319844][ T7048] loop0: detected capacity change from 0 to 4096 [ 114.344707][ T7048] ntfs3: Unknown parameter 'windows_names' [ 114.704370][ T4682] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 114.874427][ T7075] loop0: detected capacity change from 0 to 32768 [ 114.911824][ T7079] loop2: detected capacity change from 0 to 32768 [ 114.919897][ T7075] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 114.928116][ T7079] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 114.931009][ T7079] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 114.940862][ T7075] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 114.979000][ T7079] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 115.033691][ T4304] ocfs2: Unmounting device (7,0) on (node local) [ 115.129547][ T7078] __nla_validate_parse: 4 callbacks suppressed [ 115.129561][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.969'. [ 115.165923][ T4308] ocfs2: Unmounting device (7,2) on (node local) [ 115.265454][ T7092] loop8: detected capacity change from 0 to 8 [ 115.282594][ T7092] Dev loop8: unable to read RDB block 8 [ 115.284109][ T7092] loop8: unable to read partition table [ 115.285627][ T7092] loop8: partition table beyond EOD, truncated [ 115.287197][ T7092] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 115.865903][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.984'. [ 116.253587][ T7134] loop1: detected capacity change from 0 to 65536 [ 116.336664][ T7134] XFS (loop1): Mounting V5 Filesystem [ 116.373761][ T7163] binder: 7160 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 116.373782][ T7163] binder: 7160:7163 ioctl c018620c 20000180 returned -22 [ 116.386532][ T7134] XFS (loop1): Ending clean mount [ 116.490244][ T4299] XFS (loop1): Unmounting Filesystem [ 116.496270][ T1578] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 116.641339][ T7172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.646516][ T7172] bridge0: port 3(bond1) entered blocking state [ 116.648427][ T7172] bridge0: port 3(bond1) entered disabled state [ 116.651146][ T7172] device bond1 entered promiscuous mode [ 116.652866][ T7172] bridge0: port 3(bond1) entered blocking state [ 116.654584][ T7172] bridge0: port 3(bond1) entered forwarding state [ 116.656675][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1000'. [ 116.728665][ T7186] loop8: detected capacity change from 0 to 8 [ 116.730908][ T7186] Dev loop8: unable to read RDB block 8 [ 116.732447][ T7186] loop8: unable to read partition table [ 116.738766][ T7186] loop8: partition table beyond EOD, truncated [ 116.740458][ T7186] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 116.794804][ T7188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.797422][ T7188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.903607][ T9] bridge0: port 3(bond1) entered disabled state [ 117.324236][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1015'. [ 117.695504][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1022'. [ 117.733851][ T7240] loop2: detected capacity change from 0 to 2048 [ 117.740901][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 117.756775][ T7240] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.829021][ T7244] loop8: detected capacity change from 0 to 8 [ 117.831257][ T7244] Dev loop8: unable to read RDB block 8 [ 117.832895][ T7244] loop8: unable to read partition table [ 117.834522][ T7244] loop8: partition table beyond EOD, truncated [ 117.836441][ T7244] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 117.989091][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1030'. [ 118.261871][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 118.370813][ T7277] loop8: detected capacity change from 0 to 7 [ 118.382122][ T7277] Dev loop8: unable to read RDB block 7 [ 118.383597][ T7277] loop8: unable to read partition table [ 118.385173][ T7277] loop8: partition table beyond EOD, truncated [ 118.386738][ T7277] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 118.512758][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1044'. [ 118.634244][ T4685] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 118.657803][ T5191] atkbd serio0: keyboard reset failed on [ 118.674994][ T7298] loop8: detected capacity change from 0 to 7 [ 118.677002][ T7298] Dev loop8: unable to read RDB block 7 [ 118.682576][ T7298] loop8: unable to read partition table [ 118.684092][ T7298] loop8: partition table beyond EOD, truncated [ 118.685652][ T7298] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 118.850651][ T7312] loop0: detected capacity change from 0 to 512 [ 118.853400][ T7312] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.874002][ T7312] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 118.886973][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1059'. [ 118.892526][ T7312] EXT4-fs (loop0): 1 truncate cleaned up [ 118.895799][ T7312] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 118.923960][ T4304] EXT4-fs (loop0): unmounting filesystem. [ 118.954219][ T7320] ipt_CLUSTERIP: Please specify destination IP [ 118.987525][ T7324] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 118.993810][ T7323] loop4: detected capacity change from 0 to 256 [ 119.012067][ T7324] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 119.038665][ T7324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1060'. [ 119.043170][ T7323] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 119.074273][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1062'. [ 119.148736][ T7329] loop8: detected capacity change from 0 to 7 [ 119.151114][ T7329] Dev loop8: unable to read RDB block 7 [ 119.152756][ T7329] loop8: unable to read partition table [ 119.154358][ T7329] loop8: partition table beyond EOD, truncated [ 119.156345][ T7329] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 119.320801][ T1578] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 119.926112][ T7372] loop1: detected capacity change from 0 to 512 [ 119.935954][ T7372] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.981414][ T7372] EXT4-fs (loop1): 1 truncate cleaned up [ 119.984236][ T7372] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 120.113824][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 120.215495][ T4299] EXT4-fs (loop1): unmounting filesystem. [ 120.469345][ T7399] loop8: detected capacity change from 0 to 8 [ 120.475289][ T7399] Dev loop8: unable to read RDB block 8 [ 120.476754][ T7399] loop8: unable to read partition table [ 120.479060][ T7399] loop8: partition table beyond EOD, truncated [ 120.480621][ T7399] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 120.594284][ T7403] __nla_validate_parse: 1 callbacks suppressed [ 120.594297][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'. [ 120.775955][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 120.962954][ T7423] loop8: detected capacity change from 0 to 8 [ 120.971971][ T5552] Dev loop8: unable to read RDB block 8 [ 120.973402][ T5552] loop8: unable to read partition table [ 120.975049][ T5552] loop8: partition table beyond EOD, truncated [ 120.977223][ T7423] Dev loop8: unable to read RDB block 8 [ 120.979719][ T7423] loop8: unable to read partition table [ 120.981274][ T7423] loop8: partition table beyond EOD, truncated [ 120.984634][ T7423] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 121.213135][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.216927][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.341988][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1104'. [ 121.416694][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 121.483996][ T4686] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 121.673757][ T7454] loop4: detected capacity change from 0 to 512 [ 121.689178][ T7454] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.722771][ T7454] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.1111: inode #13: comm syz.4.1111: iget: illegal inode # [ 121.783113][ T7454] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1111: couldn't read orphan inode 13 (err -117) [ 121.794572][ T7454] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.968234][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1116'. [ 121.982838][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 122.219089][ T4686] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 122.338957][ T7482] loop8: detected capacity change from 0 to 8 [ 122.344208][ T5552] Dev loop8: unable to read RDB block 8 [ 122.345677][ T5552] loop8: unable to read partition table [ 122.347187][ T5552] loop8: partition table beyond EOD, truncated [ 122.382987][ T7482] Dev loop8: unable to read RDB block 8 [ 122.384477][ T7482] loop8: unable to read partition table [ 122.385809][ T7482] loop8: partition table beyond EOD, truncated [ 122.391851][ T7482] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 122.545861][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1129'. [ 122.909762][ T7508] loop4: detected capacity change from 0 to 512 [ 122.950960][ T7508] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 122.999261][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 123.096749][ T4685] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 123.199978][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1139'. [ 123.207728][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1139'. [ 123.215308][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'. [ 123.226713][ T7521] loop8: detected capacity change from 0 to 8 [ 123.228794][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'. [ 123.231457][ T5552] Dev loop8: unable to read RDB block 8 [ 123.232921][ T5552] loop8: unable to read partition table [ 123.234465][ T5552] loop8: partition table beyond EOD, truncated [ 123.247801][ T7521] Dev loop8: unable to read RDB block 8 [ 123.249083][ T7521] loop8: unable to read partition table [ 123.263959][ T7525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1142'. [ 123.270061][ T7521] loop8: partition table beyond EOD, truncated [ 123.275081][ T7521] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 123.428821][ T7524] loop0: detected capacity change from 0 to 32768 [ 123.436227][ T7524] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 123.572954][ T5552] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 123.752894][ T7539] dccp_close: ABORT with 68 bytes unread [ 123.771472][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 123.922666][ T7550] overlayfs: failed to clone upperpath [ 123.981963][ T7555] loop8: detected capacity change from 0 to 8 [ 123.984320][ T5552] Dev loop8: unable to read RDB block 8 [ 123.985730][ T5552] loop8: unable to read partition table [ 123.987215][ T5552] loop8: partition table beyond EOD, truncated [ 123.993083][ T7555] Dev loop8: unable to read RDB block 8 [ 123.995890][ T7555] loop8: unable to read partition table [ 124.002004][ T7555] loop8: partition table beyond EOD, truncated [ 124.007882][ T7555] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 124.197802][ T4529] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 124.361670][ T7574] tc_dump_action: action bad kind [ 124.397807][ T4529] usb 1-1: Using ep0 maxpacket: 32 [ 124.402373][ T4529] usb 1-1: unable to get BOS descriptor or descriptor too short [ 124.405353][ T4529] usb 1-1: config 6 has an invalid interface number: 155 but max is 0 [ 124.407430][ T4529] usb 1-1: config 6 has no interface number 0 [ 124.416056][ T4529] usb 1-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=51.5f [ 124.419621][ T4529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.421642][ T4529] usb 1-1: Product: syz [ 124.422658][ T4529] usb 1-1: Manufacturer: syz [ 124.423815][ T4529] usb 1-1: SerialNumber: syz [ 124.507202][ T4685] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 124.556811][ T7587] loop8: detected capacity change from 0 to 8 [ 124.563600][ T5552] Dev loop8: unable to read RDB block 8 [ 124.566869][ T5552] loop8: unable to read partition table [ 124.569148][ T5552] loop8: partition table beyond EOD, truncated [ 124.572805][ T7587] Dev loop8: unable to read RDB block 8 [ 124.591322][ T7587] loop8: unable to read partition table [ 124.593043][ T7587] loop8: partition table beyond EOD, truncated [ 124.606547][ T7587] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 124.674864][ T4529] usb 1-1: USB disconnect, device number 11 [ 124.709282][ T7594] loop4: detected capacity change from 0 to 16 [ 124.715363][ T7594] erofs: (device loop4): mounted with root inode @ nid 36. [ 124.883941][ T7606] loop1: detected capacity change from 0 to 1024 [ 124.915029][ T7606] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.027253][ T1578] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 125.112425][ T4299] EXT4-fs (loop1): unmounting filesystem. [ 125.183907][ T7622] loop8: detected capacity change from 0 to 8 [ 125.186205][ T7622] Dev loop8: unable to read RDB block 8 [ 125.187741][ T7622] loop8: unable to read partition table [ 125.189509][ T7622] loop8: partition table beyond EOD, truncated [ 125.206628][ T7622] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 125.506071][ T4682] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 125.678177][ T7634] loop0: detected capacity change from 0 to 65536 [ 125.745707][ T7634] XFS (loop0): Mounting V5 Filesystem [ 125.798541][ T7634] XFS (loop0): Ending clean mount [ 125.807251][ T4529] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x6 [ 125.815076][ T4529] XFS (loop0): Unmount and run xfs_repair [ 125.816661][ T4529] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 125.831524][ T4529] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 125.833911][ T4529] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 125.836077][ T4529] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 125.844486][ T4529] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 125.846867][ T4529] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 125.850222][ T4529] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 125.852605][ T4529] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 125.854816][ T4529] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 125.860476][ T7634] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x6 len 2 error 74 [ 125.867235][ T7634] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x570/0xac4 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 125.871168][ T7634] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 125.895822][ T4304] XFS (loop0): Unmounting Filesystem [ 125.942950][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.944663][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.946355][ T7667] __nla_validate_parse: 5 callbacks suppressed [ 125.946366][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1201'. [ 125.984937][ T7661] tipc: Started in network mode [ 125.986285][ T7661] tipc: Node identity 7f000001, cluster identity 4711 [ 125.996855][ T7661] tipc: Enabled bearer , priority 10 [ 126.248824][ T7683] netlink: 'syz.4.1207': attribute type 10 has an invalid length. [ 126.251915][ T7683] device lo entered promiscuous mode [ 126.258680][ T7683] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 126.423015][ T7692] loop8: detected capacity change from 0 to 8 [ 126.425930][ T5552] Dev loop8: unable to read RDB block 8 [ 126.427460][ T5552] loop8: unable to read partition table [ 126.429536][ T5552] loop8: partition table beyond EOD, truncated [ 126.434119][ T7692] Dev loop8: unable to read RDB block 8 [ 126.435816][ T7692] loop8: unable to read partition table [ 126.437361][ T7692] loop8: partition table beyond EOD, truncated [ 126.444691][ T7692] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 126.493607][ T1578] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 126.613766][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1214'. [ 126.839643][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.858644][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.877549][ T7722] loop8: detected capacity change from 0 to 8 [ 126.880543][ T5552] Dev loop8: unable to read RDB block 8 [ 126.882086][ T5552] loop8: unable to read partition table [ 126.883658][ T5552] loop8: partition table beyond EOD, truncated [ 126.890424][ T7722] Dev loop8: unable to read RDB block 8 [ 126.891907][ T7722] loop8: unable to read partition table [ 126.893375][ T7722] loop8: partition table beyond EOD, truncated [ 126.894862][ T7722] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 126.995545][ T4682] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 127.107875][ T5192] tipc: Node number set to 2130706433 [ 127.183072][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1232'. [ 127.227485][ T7747] 9pnet_fd: Insufficient options for proto=fd [ 127.373939][ T7755] loop8: detected capacity change from 0 to 8 [ 127.376371][ T5552] Dev loop8: unable to read RDB block 8 [ 127.378416][ T5552] loop8: unable to read partition table [ 127.379998][ T5552] loop8: partition table beyond EOD, truncated [ 127.397408][ T7757] loop4: detected capacity change from 0 to 1024 [ 127.412165][ T7757] EXT4-fs: Ignoring removed oldalloc option [ 127.415068][ T7757] EXT4-fs: Ignoring removed orlov option [ 127.422580][ T7755] Dev loop8: unable to read RDB block 8 [ 127.426567][ T7755] loop8: unable to read partition table [ 127.434216][ T7755] loop8: partition table beyond EOD, truncated [ 127.435979][ T7755] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 127.468324][ T7757] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 127.497684][ T1578] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 127.647062][ T7770] loop1: detected capacity change from 0 to 128 [ 127.703734][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 127.938351][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1248'. [ 127.941356][ T7788] loop0: detected capacity change from 0 to 1024 [ 128.060345][ T4686] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 128.409196][ T7806] loop1: detected capacity change from 0 to 40427 [ 128.414408][ T7806] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 128.416339][ T7806] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 128.421377][ T7806] F2FS-fs (loop1): invalid crc value [ 128.432909][ T7806] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.445509][ T7806] F2FS-fs (loop1): recover fsync data on readonly fs [ 128.447840][ T7806] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 128.449815][ T7806] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.465828][ T7806] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 128.655745][ T7830] loop8: detected capacity change from 0 to 8 [ 128.660604][ T7830] Dev loop8: unable to read RDB block 8 [ 128.662294][ T7830] loop8: unable to read partition table [ 128.663832][ T7830] loop8: partition table beyond EOD, truncated [ 128.668171][ T7830] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 128.816376][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1268'. [ 128.836036][ T9] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 128.956116][ T7850] ceph: separator ':' missing in source [ 129.127142][ T7864] loop8: detected capacity change from 0 to 8 [ 129.129888][ T5552] Dev loop8: unable to read RDB block 8 [ 129.144618][ T5552] loop8: unable to read partition table [ 129.146330][ T5552] loop8: partition table beyond EOD, truncated [ 129.173498][ T7864] Dev loop8: unable to read RDB block 8 [ 129.174987][ T7864] loop8: unable to read partition table [ 129.176607][ T7864] loop8: partition table beyond EOD, truncated [ 129.189122][ T7864] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 129.470722][ T7873] @: renamed from vlan0 [ 129.753086][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 129.984943][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1289'. [ 130.059829][ T7894] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1291'. [ 130.104657][ T7900] loop8: detected capacity change from 0 to 8 [ 130.107086][ T7900] Dev loop8: unable to read RDB block 8 [ 130.108739][ T7900] loop8: unable to read partition table [ 130.110317][ T7900] loop8: partition table beyond EOD, truncated [ 130.120489][ T7900] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 130.266878][ T4686] Bluetooth: hci5: Frame reassembly failed (-84) [ 130.864838][ T7929] loop8: detected capacity change from 0 to 8 [ 130.872028][ T5552] Dev loop8: unable to read RDB block 8 [ 130.873580][ T5552] loop8: unable to read partition table [ 130.875142][ T5552] loop8: partition table beyond EOD, truncated [ 130.901084][ T7929] Dev loop8: unable to read RDB block 8 [ 130.902752][ T7929] loop8: unable to read partition table [ 130.905437][ T7929] loop8: partition table beyond EOD, truncated [ 130.909283][ T7929] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 130.995842][ T7933] binder: 7932:7933 ioctl c018620c 0 returned -14 [ 131.069207][ T4357] ------------[ cut here ]------------ [ 131.070933][ T4357] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw' [ 131.073043][ T4357] WARNING: CPU: 0 PID: 4357 at fs/sysfs/group.c:280 sysfs_remove_group+0x174/0x288 [ 131.075321][ T4357] Modules linked in: [ 131.076275][ T4357] CPU: 0 PID: 4357 Comm: kworker/0:6 Not tainted 6.1.138-syzkaller #0 [ 131.078371][ T4357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.081110][ T4357] Workqueue: events request_firmware_work_func [ 131.082749][ T4357] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 131.084824][ T4357] pc : sysfs_remove_group+0x174/0x288 [ 131.086220][ T4357] lr : sysfs_remove_group+0x174/0x288 [ 131.087653][ T4357] sp : ffff800020bb7740 [ 131.088735][ T4357] x29: ffff800020bb7740 x28: ffff0000d3f18600 x27: dfff800000000000 [ 131.090792][ T4357] x26: ffff800020bb7800 x25: ffff0000d035a0a8 x24: 1ffff0000252d934 [ 131.092916][ T4357] x23: dfff800000000000 x22: ffff0000d50ba068 x21: ffff0000d50ba008 [ 131.095003][ T4357] x20: ffff0000dec13910 x19: ffff80001296c980 x18: 0000000000000000 [ 131.097196][ T4357] x17: 0000000000000000 x16: ffff8000082d1408 x15: 0000000000000000 [ 131.099308][ T4357] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 131.101450][ T4357] x11: ff00800008190bec x10: 0000000000000000 x9 : 5d14cbdb5f2e0100 [ 131.103547][ T4357] x8 : 5d14cbdb5f2e0100 x7 : 0000000000000001 x6 : 0000000000000001 [ 131.105642][ T4357] x5 : ffff800020bb71d8 x4 : ffff8000151546c0 x3 : ffff80000852d748 [ 131.107721][ T4357] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 131.109873][ T4357] Call trace: [ 131.110719][ T4357] sysfs_remove_group+0x174/0x288 [ 131.112009][ T4357] dpm_sysfs_remove+0xa4/0xd4 [ 131.113225][ T4357] device_del+0x258/0x96c [ 131.114304][ T4357] firmware_fallback_sysfs+0x5a0/0x864 [ 131.115623][ T4357] _request_firmware+0xce0/0xf84 [ 131.116889][ T4357] request_firmware_work_func+0xa8/0x19c [ 131.118290][ T4357] process_one_work+0x7f4/0x13a8 [ 131.119618][ T4357] worker_thread+0x8c8/0xfbc [ 131.120850][ T4357] kthread+0x250/0x2d8 [ 131.121929][ T4357] ret_from_fork+0x10/0x20 [ 131.123021][ T4357] irq event stamp: 59672 [ 131.124077][ T4357] hardirqs last enabled at (59671): [] __up_console_sem+0xb4/0x100 [ 131.126384][ T4357] hardirqs last disabled at (59672): [] el1_dbg+0x24/0x80 [ 131.128568][ T4357] softirqs last enabled at (59588): [] handle_softirqs+0xaf8/0xc6c [ 131.130994][ T4357] softirqs last disabled at (59579): [] __do_softirq+0x14/0x20 [ 131.133297][ T4357] ---[ end trace 0000000000000000 ]--- [ 131.144308][ T1515] usb 1-1: [UEAGLE-ATM] firmware is not available [ 131.150133][ T4357] usb 1-1: [UEAGLE-ATM] firmware is not available [ 132.337779][ T47] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 132.337795][ T4305] Bluetooth: hci5: command 0x1003 tx timeout