last executing test programs: 1.701991748s ago: executing program 0 (id=3676): r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r0, &(0x7f00000046c0)={0x2020}, 0x2020) 1.59858401s ago: executing program 0 (id=3679): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x16, 0x1, 0x2, "df7c0cc512ac4900000000000000002200", 0x52424752}) 1.516080752s ago: executing program 0 (id=3681): r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e22, 0x20, @dev={0xfe, 0x80, '\x00', 0x2}, 0xfffffffc}, 0x1b) 1.460468664s ago: executing program 0 (id=3684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x74}]}]}, 0x64}}, 0x0) 1.343539296s ago: executing program 0 (id=3687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 1.226332659s ago: executing program 0 (id=3690): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440b0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x6b, 0xa5, 0x5f, 0x40, 0x8fed, 0x88b3, 0xa475, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa0, 0x13, 0x80, 0x5, "", [{{0x9, 0x4, 0xc2, 0x8, 0x0, 0x8, 0x6, 0x62, 0x1}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 1.077440043s ago: executing program 2 (id=3695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) 1.077192423s ago: executing program 4 (id=3696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}, 0x1, 0x0, 0x0, 0x40901}, 0x0) 892.053857ms ago: executing program 4 (id=3700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)={0x14, 0x0, [{0x0, 0xa, 0x6, 0x67f, 0x5, 0x3cc8, 0x1}, {0x80000001, 0x4, 0x4, 0x6, 0x1, 0x80000c9a, 0x3}]}) 831.678979ms ago: executing program 2 (id=3702): ioprio_set$pid(0x2, 0x0, 0x2000) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 830.025929ms ago: executing program 4 (id=3703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 809.684919ms ago: executing program 1 (id=3704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x84) 728.270641ms ago: executing program 1 (id=3706): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") 711.923472ms ago: executing program 4 (id=3707): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 621.267174ms ago: executing program 2 (id=3708): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020400050a0000002cbd7000fcdbdf25030006000000000002004e21ac1414bb000000000000000002000100000000000000070300020000030005000000000002"], 0x50}, 0x1, 0x7}, 0x8014) 620.750344ms ago: executing program 4 (id=3709): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x10) 560.031066ms ago: executing program 3 (id=3710): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf1646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) 538.006996ms ago: executing program 2 (id=3711): syz_mount_image$hfs(&(0x7f0000000840), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB='codepage=iso8859-2,iocharset=default,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c008b1b7e1447e0e4a2b51ef3fa706f346ff1ad27d705714e14ad1eedf4bdc9b633cbb5e7e4ec4501004203bcdf6e085cdef4fad42c38b30ac586c0b83b4ecf0e63dd74069544e97b2df39fba32b0798b4e239cb15b208fbcc861d1d10fa47392d0129ecc276f358499856c9bcbf096294194a8152d8a658c832c39a2ef894567e2715ede536beb7d284b6266377eaab131e249a57dc708a1c168c993e57d67c7b3c4f22ece4ca07672f8ba37ff0cc7b9cd651895d0b0ad5641fbcd7aec4418bad435d5842ff5f655b1c6faec3604bbbffdeef04710000000ad94d2d39a"], 0x5, 0x2e9, &(0x7f0000006440)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 517.569047ms ago: executing program 4 (id=3712): ftruncate(0xffffffffffffffff, 0x81ff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xae, 0x68, 0x9d, 0x20, 0xe20, 0x101, 0xaf17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x6, 0x0, 0x6, "", [{{0x9, 0x4, 0xde, 0x3d, 0x0, 0x63, 0x79, 0xd0, 0x6}}]}}]}}, 0x0) 435.903489ms ago: executing program 3 (id=3713): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000006c80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8404, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private2, 0x4201f805}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000000000000290000000b00000000080000000000001400000000000000290000003400000008000000000000001400000000000000290000000b0000000000f487000000002400000000000000290000003200000000000000000012"], 0x70}}], 0x2, 0x4004000) 425.999529ms ago: executing program 1 (id=3714): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) 355.759011ms ago: executing program 2 (id=3715): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b80)={0x24, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str=':*b\xc3{\x00'}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, 0x24}], 0x1}, 0x0) 331.652661ms ago: executing program 3 (id=3716): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=[{0x408, 0x1, 0x1, "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"}], 0x408}, 0xc059) 331.081412ms ago: executing program 1 (id=3717): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) syz_clone3(&(0x7f00000000c0)={0x385200080, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 225.188994ms ago: executing program 3 (id=3718): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)=@userptr={0x81, 0xe, 0x4, 0xe000, 0x10000, {}, {0x2, 0x0, 0x6, 0x7, 0xb, 0x5, "f3b16e74"}, 0x4, 0x2, {0x0}, 0x953}) 132.043356ms ago: executing program 2 (id=3719): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x1f, 'hub\x00'}) 122.439317ms ago: executing program 1 (id=3720): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000440)={0x1, 0x20, 0x0, 0x9, 0x1, 0xfffffffe, 0x10, 0x0, 0x40, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0}) 106.769197ms ago: executing program 3 (id=3721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000010000104040000007e134fd0df0b808d", @ANYRES32=0x0, @ANYBLOB="38410000440b00002400128009000100626f6e640000000014000280050001000100000008000200", @ANYBLOB="f7"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 116.46µs ago: executing program 1 (id=3722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 0s ago: executing program 3 (id=3723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) kernel console output (not intermixed with test programs): Interface lo may have been left with an inconsistent configuration, please check. [ 131.672908][ T7923] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 131.724349][ T7923] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 131.748494][ T7970] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1661'. [ 131.759761][ T7923] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 131.806437][ T7923] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 131.858246][ T7923] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 131.890099][ T7923] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 131.948614][ T7923] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 131.996421][ T7923] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.020490][ T7923] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 132.057020][ T7923] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.093629][ T7923] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 132.121646][ T7923] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.138220][ T7923] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 132.155624][ T7923] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.190616][ T7923] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 132.201225][ T26] audit: type=1400 audit(1791254305.592:7): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8001 comm="syz.1.1677" [ 132.236312][ T7923] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.253567][ T7923] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 132.264086][ T7923] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.277388][ T8006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.300388][ T7923] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 132.359070][ T7923] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.407836][ T7923] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 132.426309][ T7923] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.451434][ T7923] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 132.486573][ T7923] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.507001][ T8027] netlink: 'syz.0.1686': attribute type 4 has an invalid length. [ 132.524127][ T26] audit: type=1800 audit(1791254305.922:8): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1637" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 132.602855][ T8032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1689'. [ 132.658215][ T26] audit: type=1400 audit(1791254306.062:9): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8035 comm="syz.0.1691" [ 132.671078][ T8038] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 132.725904][ T8038] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 132.928749][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.935162][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.049176][ T8060] xt_bpf: check failed: parse error [ 133.076102][ T8062] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1707'. [ 133.303106][ T8034] loop1: detected capacity change from 0 to 32768 [ 133.387938][ T4751] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 133.407815][ T8080] loop4: detected capacity change from 0 to 256 [ 133.758826][ T8102] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1726'. [ 133.802448][ T4751] usb 1-1: config 5 interface 0 altsetting 0 has an invalid endpoint with address 0x6D, skipping [ 133.834105][ T4751] usb 1-1: config 5 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 133.855947][ T4751] usb 1-1: config 5 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 133.952932][ T8117] netlink: 'syz.3.1731': attribute type 2 has an invalid length. [ 133.983428][ T8119] netlink: 'syz.1.1734': attribute type 2 has an invalid length. [ 134.002409][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1734'. [ 134.078444][ T4751] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 134.102584][ T4751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.111171][ T4751] usb 1-1: Product: syz [ 134.115367][ T4751] usb 1-1: Manufacturer: syz [ 134.124799][ T8131] tmpfs: Bad value for 'mpol' [ 134.129383][ T4751] usb 1-1: SerialNumber: syz [ 134.306376][ T1329] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 134.315679][ T8149] netlink: 'syz.2.1749': attribute type 1 has an invalid length. [ 134.324627][ T8149] netlink: 'syz.2.1749': attribute type 2 has an invalid length. [ 134.433149][ T4751] usb 1-1: Not enough endpoints found in device, aborting! [ 134.488601][ T8161] tmpfs: Bad value for 'mpol' [ 134.572840][ T8168] xt_bpf: check failed: parse error [ 134.573184][ T8169] netlink: 'syz.1.1759': attribute type 21 has an invalid length. [ 134.664400][ T13] usb 1-1: USB disconnect, device number 10 [ 134.676588][ T1329] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 134.685718][ T1329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.699017][ T8176] netlink: 'syz.1.1762': attribute type 1 has an invalid length. [ 134.727482][ T1329] usb 4-1: config 0 descriptor?? [ 134.733312][ T8176] netlink: 'syz.1.1762': attribute type 2 has an invalid length. [ 134.767685][ T1329] cp210x 4-1:0.0: cp210x converter detected [ 134.891779][ T8191] netlink: 'syz.4.1769': attribute type 2 has an invalid length. [ 134.902334][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1769'. [ 135.210654][ T1329] usb 4-1: cp210x converter now attached to ttyUSB0 [ 135.271213][ T1329] usb 4-1: USB disconnect, device number 9 [ 135.279763][ T8186] loop2: detected capacity change from 0 to 32768 [ 135.295028][ T1329] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 135.324115][ T1329] cp210x 4-1:0.0: device disconnected [ 135.904870][ T8242] syz.3.1793 uses obsolete (PF_INET,SOCK_PACKET) [ 135.947467][ T8245] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 135.964439][ T8202] loop4: detected capacity change from 0 to 40427 [ 135.993332][ T8245] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 136.040574][ T8251] loop2: detected capacity change from 0 to 2048 [ 136.057478][ T8202] F2FS-fs (loop4): invalid crc value [ 136.092277][ T8202] F2FS-fs (loop4): Found nat_bits in checkpoint [ 136.115560][ T8251] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 136.172413][ T8251] attempt to access beyond end of device [ 136.172413][ T8251] loop2: rw=524288, want=33554432, limit=2048 [ 136.185463][ T8259] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.255655][ T8251] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 136.286881][ T8202] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.301475][ T8251] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 136.345815][ T8251] Remounting filesystem read-only [ 136.377976][ T8251] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 136.402357][ T8251] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 136.436503][ T8251] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 136.473444][ T8251] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 136.494378][ T8251] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 136.505108][ T8251] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 136.534952][ T8251] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 136.562168][ T8251] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 136.595428][ T8251] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 136.614699][ T8251] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 136.630940][ T8251] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 136.644183][ T8251] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 136.658833][ T8251] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 136.673241][ T8251] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 136.690454][ T8251] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 136.701550][ T8251] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 136.712069][ T8251] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 136.729701][ T8251] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 136.777868][ T8251] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 136.815187][ T8251] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 136.852711][ T8251] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 136.876195][ T8251] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 136.909362][ T8251] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 136.931708][ T8251] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 136.953083][ T8251] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 136.994487][ T8251] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 137.023745][ T8251] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 137.037173][ T13] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 137.053266][ T8251] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 137.091971][ T8251] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 137.119018][ T8251] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 137.134219][ T8309] loop4: detected capacity change from 0 to 2048 [ 137.141009][ T26] audit: type=1800 audit(1791254310.542:10): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1799" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 137.221848][ T8309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.316489][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 137.394242][ T8320] netlink: 'syz.1.1836': attribute type 3 has an invalid length. [ 137.436661][ T13] usb 4-1: New USB device found, idVendor=2040, idProduct=c604, bcdDevice= 1.8e [ 137.475887][ T8323] [U] v3f"S/4:XTzWtlW= [ 137.482424][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.503715][ T13] usb 4-1: config 0 descriptor?? [ 137.522780][ T8323] [U] J"e:" [ 137.542401][ T8327] loop1: detected capacity change from 0 to 512 [ 137.548492][ T13] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx DVBT' in warm state [ 137.586996][ T13] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 137.611322][ T13] dvbdev: DVB: registering new adapter (Hauppauge 126xxx DVBT) [ 137.636332][ T13] usb 4-1: media controller created [ 137.657771][ T8327] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 137.663520][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.665722][ T8327] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 137.665788][ T8327] System zones: [ 137.685612][ T13] usb 4-1: selecting invalid altsetting 2 [ 137.695110][ T13] set interface failed [ 137.695488][ T13] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 137.706630][ T13] error writing reg: 0xff, val: 0x00 [ 137.733187][ T13] dvb_usb_mxl111sf: probe of 4-1:0.0 failed with error -22 [ 137.759455][ T13] usb 4-1: USB disconnect, device number 10 [ 137.771983][ T8327] 0-1, 15-15, 18-18, 34-34 [ 137.777696][ T8327] EXT4-fs (loop1): orphan cleanup on readonly fs [ 137.784788][ T8327] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 137.794288][ T8327] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 137.811094][ T8327] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 137.826450][ T8327] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.1829: bad orphan inode 16 [ 137.840597][ T8327] ext4_test_bit(bit=15, block=18) = 1 [ 137.846030][ T8327] is_bad_inode(inode)=0 [ 137.850531][ T8327] NEXT_ORPHAN(inode)=0 [ 137.856334][ T8327] max_ino=32 [ 137.859569][ T8327] i_nlink=2 [ 137.886591][ T8327] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 137.967023][ T8327] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 138.011468][ T8343] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1837'. [ 138.014250][ T8306] loop0: detected capacity change from 0 to 32768 [ 138.085074][ T8306] [ 138.085074][ T8306] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.085074][ T8306] [ 138.256509][ T244] [ 138.256509][ T244] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.256509][ T244] [ 138.284319][ T244] [ 138.284319][ T244] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.284319][ T244] [ 138.314309][ T277] [ 138.314309][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.314309][ T277] [ 138.331716][ T4186] [ 138.331716][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.331716][ T4186] [ 138.353453][ T4186] [ 138.353453][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.353453][ T4186] [ 138.415110][ T8366] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1850'. [ 138.440443][ T8371] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.579084][ T13] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 138.682483][ T8388] netlink: 'syz.3.1859': attribute type 3 has an invalid length. [ 138.784060][ T8395] loop3: detected capacity change from 0 to 2048 [ 138.847109][ T8395] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.956399][ T13] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 138.975095][ T13] usb 5-1: config 0 has no interface number 0 [ 138.989107][ T13] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 139.176705][ T13] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 139.195946][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.224575][ T13] usb 5-1: Product: syz [ 139.230951][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1877'. [ 139.234704][ T13] usb 5-1: Manufacturer: syz [ 139.266350][ T13] usb 5-1: SerialNumber: syz [ 139.273473][ T13] usb 5-1: config 0 descriptor?? [ 139.337209][ T13] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 139.344774][ T13] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 139.387776][ T8425] loop2: detected capacity change from 0 to 4096 [ 139.467128][ T8431] loop3: detected capacity change from 0 to 256 [ 139.477122][ T4751] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 139.486007][ T8399] loop1: detected capacity change from 0 to 32768 [ 139.556471][ T13] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 139.589750][ T8399] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1864 (8399) [ 139.673922][ T8399] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 139.690758][ T8399] BTRFS info (device loop1): using free space tree [ 139.699563][ T8399] BTRFS info (device loop1): has skinny extents [ 139.766629][ T13] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71) [ 139.810393][ T13] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 139.835282][ T13] usb 5-1: USB disconnect, device number 11 [ 139.856510][ T4751] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.875930][ T4751] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 139.892991][ T13] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 139.900519][ T4751] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 139.923649][ T8459] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 139.938766][ T4751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.954055][ T5845] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 139.985382][ T8399] BTRFS info (device loop1): enabling ssd optimizations [ 140.035537][ T4751] usb 1-1: config 0 descriptor?? [ 140.406499][ T5845] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 140.425256][ T5845] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 140.494736][ T4751] Bluetooth: Can't get state to change to load ram patch err [ 140.506024][ T4751] Bluetooth: Loading patch file failed [ 140.518547][ T4751] ath3k: probe of 1-1:0.0 failed with error -71 [ 140.542371][ T4751] usb 1-1: USB disconnect, device number 11 [ 140.646479][ T5845] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 140.669263][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.699827][ T5845] usb 4-1: Product: syz [ 140.707096][ T5845] usb 4-1: Manufacturer: syz [ 140.711955][ T5845] usb 4-1: SerialNumber: syz [ 140.729212][ T5845] usb 4-1: config 0 descriptor?? [ 140.778473][ T5845] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 140.996399][ T5845] gspca_sunplus: reg_r err -71 [ 141.001434][ T5845] sunplus: probe of 4-1:0.0 failed with error -71 [ 141.034998][ T5845] usb 4-1: USB disconnect, device number 11 [ 141.093548][ T8494] loop4: detected capacity change from 0 to 1024 [ 141.202597][ T8494] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.228950][ T8486] loop1: detected capacity change from 0 to 32768 [ 141.311910][ T8486] JBD2: Ignoring recovery information on journal [ 141.399070][ T8486] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 141.565781][ T8519] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 141.709687][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 141.787671][ T8537] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 142.012182][ T8553] loop4: detected capacity change from 0 to 256 [ 142.125625][ T8547] loop3: detected capacity change from 0 to 4096 [ 142.552756][ T8569] loop2: detected capacity change from 0 to 4096 [ 142.621592][ T264] block nbd3: Attempted send on invalid socket [ 142.628679][ T264] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.644415][ T264] block nbd3: Attempted send on invalid socket [ 142.651897][ T264] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.653812][ T8569] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 142.672321][ T150] block nbd3: Attempted send on invalid socket [ 142.678576][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.698603][ T150] block nbd3: Attempted send on invalid socket [ 142.704949][ T150] blk_update_request: I/O error, dev nbd3, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.717105][ T150] block nbd3: Attempted send on invalid socket [ 142.719932][ T8549] loop0: detected capacity change from 0 to 32768 [ 142.723339][ T150] blk_update_request: I/O error, dev nbd3, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.742613][ T150] block nbd3: Attempted send on invalid socket [ 142.748915][ T150] blk_update_request: I/O error, dev nbd3, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.764371][ T8581] VFS: unable to find oldfs superblock on device nbd3 [ 142.861028][ T8569] ntfs3: loop2: mft corrupted [ 142.865844][ T8569] ntfs3: loop2: Failed to load $Extend. [ 142.882919][ T8549] JBD2: Ignoring recovery information on journal [ 143.103209][ T8575] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1937 (8575) [ 143.180545][ T8575] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 143.185641][ T8549] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 143.246515][ T8575] BTRFS info (device loop4): using free space tree [ 143.272209][ T8575] BTRFS info (device loop4): has skinny extents [ 143.506564][ T8575] BTRFS info (device loop4): enabling ssd optimizations [ 143.519968][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 144.266371][ T1329] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 144.310755][ T8657] xt_hashlimit: size too large, truncated to 1048576 [ 144.435324][ T8632] set_capacity_and_notify: 1 callbacks suppressed [ 144.435340][ T8632] loop3: detected capacity change from 0 to 32768 [ 144.470057][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1969'. [ 144.573207][ T8632] XFS (loop3): Mounting V5 Filesystem [ 144.646557][ T1329] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.666318][ T1329] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 144.683703][ T1329] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.684086][ T8632] XFS (loop3): Ending clean mount [ 144.695094][ T1329] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 144.739912][ T8680] loop0: detected capacity change from 0 to 2048 [ 144.747899][ T8653] loop2: detected capacity change from 0 to 32768 [ 144.778143][ T8677] loop4: detected capacity change from 0 to 4096 [ 144.796569][ T1329] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.803909][ T8653] JBD2: Ignoring recovery information on journal [ 144.839724][ T4198] XFS (loop3): Unmounting Filesystem [ 144.845951][ T8677] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 144.891730][ T1329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.903974][ T1329] usb 2-1: SerialNumber: syz [ 144.907250][ T8653] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 145.074256][ T8677] ntfs3: loop4: mft corrupted [ 145.123393][ T8677] ntfs3: loop4: Failed to load $Extend. [ 145.213820][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 145.551136][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 145.605023][ T8706] netlink: 'syz.2.1986': attribute type 11 has an invalid length. [ 145.649152][ T8709] xt_hashlimit: size too large, truncated to 1048576 [ 145.706168][ T1329] usb 2-1: USB disconnect, device number 10 [ 145.779088][ T8719] capability: warning: `syz.1.1992' uses 32-bit capabilities (legacy support in use) [ 145.907173][ T8727] lo speed is unknown, defaulting to 1000 [ 145.928802][ T7] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 145.929189][ T8727] lo speed is unknown, defaulting to 1000 [ 145.948886][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 145.949892][ T8727] lo speed is unknown, defaulting to 1000 [ 146.130578][ T7] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 146.146471][ T4229] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 146.150609][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.161779][ T4752] lo speed is unknown, defaulting to 1000 [ 146.176334][ T8727] infiniband syz1: set down [ 146.181421][ T8727] infiniband syz1: added lo [ 146.182622][ T7] usb 1-1: Product: syz [ 146.200066][ T8711] loop3: detected capacity change from 0 to 32768 [ 146.216920][ T7] usb 1-1: Manufacturer: syz [ 146.225680][ T7] usb 1-1: SerialNumber: syz [ 146.257705][ T8727] RDS/IB: syz1: added [ 146.267854][ T8711] JBD2: Ignoring recovery information on journal [ 146.272422][ T8727] smc: adding ib device syz1 with port count 1 [ 146.294192][ T8727] smc: ib device syz1 port 1 has pnetid [ 146.304762][ T21] lo speed is unknown, defaulting to 1000 [ 146.321254][ T7] usb 1-1: config 0 descriptor?? [ 146.333428][ T8727] lo speed is unknown, defaulting to 1000 [ 146.343317][ T8711] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 146.368727][ T7] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 146.474608][ T8727] lo speed is unknown, defaulting to 1000 [ 146.481224][ T8742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2002'. [ 146.576752][ T4229] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 146.581548][ T4198] ocfs2: Unmounting device (7,3) on (node local) [ 146.591828][ T4229] usb 3-1: config 0 has no interface number 0 [ 146.594809][ T7] gspca_sunplus: reg_r err -71 [ 146.605443][ T4229] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 146.606821][ T7] sunplus: probe of 1-1:0.0 failed with error -71 [ 146.685050][ T7] usb 1-1: USB disconnect, device number 12 [ 146.757306][ T8727] lo speed is unknown, defaulting to 1000 [ 146.837415][ T4229] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 146.856345][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.887296][ T4229] usb 3-1: Product: syz [ 146.896924][ T4229] usb 3-1: Manufacturer: syz [ 146.918213][ T4229] usb 3-1: SerialNumber: syz [ 146.937893][ T4229] usb 3-1: config 0 descriptor?? [ 146.980229][ T4229] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 147.006656][ T4229] radio-si470x: probe of 3-1:0.35 failed with error -5 [ 147.101656][ T8727] lo speed is unknown, defaulting to 1000 [ 147.196633][ T4229] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 147.352713][ T8727] lo speed is unknown, defaulting to 1000 [ 147.426405][ T4229] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 147.440649][ T4229] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 147.468858][ T4229] usb 3-1: USB disconnect, device number 7 [ 147.489653][ T4229] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 147.518372][ T8783] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 147.885613][ T8793] block device autoloading is deprecated and will be removed. [ 148.198192][ T8817] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 148.337107][ T8831] netlink: 'syz.0.2044': attribute type 5 has an invalid length. [ 148.344912][ T8831] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2044'. [ 148.543915][ T8839] virt_wifi0 speed is unknown, defaulting to 1000 [ 148.598320][ T8839] lo speed is unknown, defaulting to 1000 [ 148.836374][ T5845] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 148.847997][ T8859] loop3: detected capacity change from 0 to 256 [ 149.171137][ T8864] loop2: detected capacity change from 0 to 1024 [ 149.346531][ T5845] usb 5-1: unable to get BOS descriptor or descriptor too short [ 149.446430][ T5845] usb 5-1: config 0 has an invalid interface number: 86 but max is 0 [ 149.455878][ T5845] usb 5-1: config 0 has no interface number 0 [ 149.463480][ T5845] usb 5-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 149.485092][ T5845] usb 5-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 149.511479][ T5845] usb 5-1: config 0 interface 86 has no altsetting 0 [ 149.672035][ T8878] netlink: 'syz.0.2069': attribute type 49 has an invalid length. [ 149.726726][ T5845] usb 5-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 149.779853][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.806466][ T5845] usb 5-1: Product: syz [ 149.814155][ T5845] usb 5-1: Manufacturer: syz [ 149.822932][ T5845] usb 5-1: SerialNumber: syz [ 149.861566][ T5845] usb 5-1: config 0 descriptor?? [ 149.896733][ T8848] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 149.904028][ T8848] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 150.035202][ T8901] loop1: detected capacity change from 0 to 1024 [ 150.099490][ T8901] attempt to access beyond end of device [ 150.099490][ T8901] loop1: rw=0, want=5780, limit=1024 [ 150.135305][ T8911] x_tables: unsorted entry at hook 2 [ 150.205694][ T8915] x_tables: unsorted underflow at hook 3 [ 150.258672][ T5845] omninet 5-1:0.86: ZyXEL - omni.net usb converter detected [ 150.291444][ T5845] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 150.336736][ T5845] usb 5-1: USB disconnect, device number 12 [ 150.437612][ T5845] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 150.457067][ T5845] omninet 5-1:0.86: device disconnected [ 150.754277][ T8949] netlink: 'syz.1.2104': attribute type 49 has an invalid length. [ 150.916554][ T4752] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 151.017774][ T8970] rdma_rxe: rxe_register_device failed with error -23 [ 151.029409][ T8972] nftables ruleset with unbound chain [ 151.048658][ T8970] rdma_rxe: failed to add lo [ 151.166453][ T8978] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 151.316610][ T4752] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.327146][ T8994] xt_connbytes: Forcing CT accounting to be enabled [ 151.346088][ T4752] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 151.374830][ T4752] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.406460][ T4752] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 151.465049][ T9004] vers=1.0 (cifs) not permitted when mounting with smb3 [ 151.465049][ T9004] [ 151.503461][ T9004] CIFS: VFS: vers=1.0 (cifs) not permitted when mounting with smb3 [ 151.536543][ T4752] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.556382][ T4752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.564465][ T4752] usb 1-1: SerialNumber: syz [ 151.669734][ T9020] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2139'. [ 151.803461][ T9030] netlink: 'syz.2.2144': attribute type 3 has an invalid length. [ 151.897682][ T9034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.928917][ T9037] rdma_rxe: rxe_register_device failed with error -23 [ 151.943897][ T9037] rdma_rxe: failed to add lo [ 151.948536][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.248828][ T7] kernel write not supported for file /input/mice (pid: 7 comm: kworker/0:0) [ 152.375804][ T7] usb 1-1: USB disconnect, device number 13 [ 152.390136][ T9064] netlink: 'syz.2.2161': attribute type 3 has an invalid length. [ 152.575371][ T9076] loop2: detected capacity change from 0 to 24 [ 152.636970][ T9076] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 152.699124][ T9076] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 152.881645][ T5845] kernel write not supported for file /input/mice (pid: 5845 comm: kworker/1:18) [ 153.065767][ T9054] loop4: detected capacity change from 0 to 32768 [ 153.067047][ T9100] loop3: detected capacity change from 0 to 64 [ 153.170713][ T9100] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 153.213187][ T9054] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 153.338782][ T9110] xt_connbytes: Forcing CT accounting to be enabled [ 153.400468][ T9054] syz.4.2156 (9054) used greatest stack depth: 17216 bytes left [ 153.469250][ T9104] loop2: detected capacity change from 0 to 8192 [ 153.559628][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.583335][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 153.625243][ T9118] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.743959][ T9117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2188'. [ 153.774363][ T9117] netlink: 'syz.1.2188': attribute type 2 has an invalid length. [ 153.876952][ T9125] netlink: 'syz.2.2191': attribute type 21 has an invalid length. [ 153.884874][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'. [ 154.172786][ T9145] device gretap0 entered promiscuous mode [ 154.350716][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 154.396367][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 154.404947][ T9157] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2206'. [ 154.471252][ T9167] loop1: detected capacity change from 0 to 128 [ 154.479507][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2210'. [ 154.509282][ T9172] loop0: detected capacity change from 0 to 64 [ 154.569449][ T9172] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 154.724413][ T9178] loop1: detected capacity change from 0 to 24 [ 154.757877][ T9178] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 154.789573][ T9178] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 154.816552][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.920227][ T7] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 154.934986][ T7] usb 3-1: config 0 has no interface number 0 [ 154.943895][ T7] usb 3-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 155.011157][ T7] usb 3-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 155.040966][ T7] usb 3-1: config 0 interface 86 has no altsetting 0 [ 155.072527][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 155.084269][ T9202] loop3: detected capacity change from 0 to 128 [ 155.194281][ T9206] loop4: detected capacity change from 0 to 2048 [ 155.206585][ T7] usb 3-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 155.215680][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.244928][ T7] usb 3-1: Product: syz [ 155.269420][ T9206] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 155.289386][ T7] usb 3-1: Manufacturer: syz [ 155.294041][ T7] usb 3-1: SerialNumber: syz [ 155.318065][ T9206] NILFS (loop4): unrecognized mount option "syz" [ 155.329901][ T7] usb 3-1: config 0 descriptor?? [ 155.346938][ T9141] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 155.354525][ T9141] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 155.494538][ T26] audit: type=1400 audit(1791254328.892:11): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=9219 comm="syz.0.2237" [ 155.580645][ T9224] virt_wifi0 speed is unknown, defaulting to 1000 [ 155.598383][ T9224] lo speed is unknown, defaulting to 1000 [ 155.643036][ T7] omninet 3-1:0.86: ZyXEL - omni.net usb converter detected [ 155.657370][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2243'. [ 155.678388][ T7] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 155.682542][ T9230] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2243'. [ 155.714849][ T7] usb 3-1: USB disconnect, device number 8 [ 155.742695][ T7] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 155.768832][ T7] omninet 3-1:0.86: device disconnected [ 155.910137][ T9245] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 156.171197][ T9252] netlink: 'syz.0.2263': attribute type 1 has an invalid length. [ 156.248599][ T9252] netlink: 'syz.0.2263': attribute type 9 has an invalid length. [ 156.265038][ T9256] netlink: 'syz.4.2255': attribute type 21 has an invalid length. [ 156.294381][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'. [ 156.609663][ T9276] device ip6gretap1 entered promiscuous mode [ 156.615828][ T9246] loop1: detected capacity change from 0 to 32768 [ 156.714913][ T9246] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 156.896365][ T4229] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 156.974258][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 157.040288][ T9271] loop2: detected capacity change from 0 to 32768 [ 157.232107][ T9271] XFS (loop2): Mounting V5 Filesystem [ 157.336546][ T4229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 157.425858][ T9271] XFS (loop2): Ending clean mount [ 157.431509][ T4229] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [ 157.456720][ T4229] usb 1-1: config 0 has no interface number 0 [ 157.462894][ T4229] usb 1-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 157.512544][ T4229] usb 1-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 157.530124][ T4229] usb 1-1: config 0 interface 86 has no altsetting 0 [ 157.550880][ T9271] XFS (loop2): Quotacheck needed: Please wait. [ 157.672568][ T9271] XFS (loop2): Quotacheck: Done. [ 157.716638][ T4229] usb 1-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 157.725776][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.756401][ T4229] usb 1-1: Product: syz [ 157.773755][ T4229] usb 1-1: Manufacturer: syz [ 157.789139][ T4229] usb 1-1: SerialNumber: syz [ 157.823818][ T4229] usb 1-1: config 0 descriptor?? [ 157.851657][ T4192] XFS (loop2): Unmounting Filesystem [ 157.866716][ T9275] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 157.908225][ T9275] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 158.237490][ T4229] omninet 1-1:0.86: ZyXEL - omni.net usb converter detected [ 158.268074][ T4229] usb 1-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 158.316477][ T4229] usb 1-1: USB disconnect, device number 14 [ 158.352494][ T13] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 158.357014][ T4229] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 158.377847][ T4229] omninet 1-1:0.86: device disconnected [ 158.716585][ T13] usb 2-1: config 0 has an invalid interface number: 3 but max is 2 [ 158.725598][ T13] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 158.756428][ T9364] netlink: 'syz.4.2305': attribute type 1 has an invalid length. [ 158.761772][ T13] usb 2-1: config 0 has no interface number 1 [ 158.764215][ T9364] __nla_validate_parse: 1 callbacks suppressed [ 158.764227][ T9364] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2305'. [ 158.790746][ T13] usb 2-1: config 0 has no interface number 2 [ 158.821194][ T13] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 158.851583][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.883441][ T13] usb 2-1: config 0 descriptor?? [ 159.104760][ T9356] loop3: detected capacity change from 0 to 32768 [ 159.144507][ T9378] loop2: detected capacity change from 0 to 8 [ 159.150887][ T13] qcserial 2-1:0.3: Qualcomm USB modem converter detected [ 159.252613][ T9356] XFS (loop3): Mounting V5 Filesystem [ 159.381882][ T4752] usb 2-1: USB disconnect, device number 11 [ 159.399045][ T4752] qcserial 2-1:0.3: device disconnected [ 159.483019][ T9356] XFS (loop3): Ending clean mount [ 159.533312][ T9356] XFS (loop3): Quotacheck needed: Please wait. [ 159.550333][ T9402] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2319'. [ 159.637902][ T9356] XFS (loop3): Quotacheck: Done. [ 159.785661][ T4198] XFS (loop3): Unmounting Filesystem [ 160.005153][ T9419] loop4: detected capacity change from 0 to 1024 [ 160.547635][ T9452] loop2: detected capacity change from 0 to 1024 [ 160.572275][ T4752] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 160.921496][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2359'. [ 160.986535][ T4752] usb 5-1: config 15 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 161.116554][ T4752] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 161.125652][ T4752] usb 5-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 161.153543][ T4752] usb 5-1: Product: syz [ 161.186568][ T9432] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.208842][ T4752] usbhid 5-1:15.0: fixing wrong optional hid class descriptors count [ 161.229470][ T4752] usbhid 5-1:15.0: can't add hid device: -22 [ 161.246809][ T4752] usbhid: probe of 5-1:15.0 failed with error -22 [ 161.306955][ T9512] loop0: detected capacity change from 0 to 64 [ 161.395706][ T9515] loop2: detected capacity change from 0 to 1024 [ 161.423781][ T4752] usb 5-1: USB disconnect, device number 13 [ 161.493958][ T9515] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 161.545070][ T9515] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.2375: lblock 2 mapped to illegal pblock 2 (length 1) [ 161.703073][ T9515] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 161.743398][ T9515] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.2375: lblock 0 mapped to illegal pblock 48 (length 1) [ 161.792876][ T9515] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 161.813595][ T9503] loop1: detected capacity change from 0 to 32768 [ 161.820959][ T9515] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.2375: Failed to acquire dquot type 0 [ 161.848431][ T9503] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2369 (9503) [ 161.862909][ T9515] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 161.914770][ T9503] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 161.958968][ T9503] BTRFS info (device loop1): using free space tree [ 161.959325][ T9515] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.2375: mark_inode_dirty error [ 161.965934][ T9503] BTRFS info (device loop1): has skinny extents [ 162.018150][ T9515] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 162.051067][ T9515] EXT4-fs (loop2): 1 orphan inode deleted [ 162.071031][ T5144] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 162.076151][ T9515] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,resuid=0x0000000000000000,norecovery,nodiscard,nodioread_nolock,nomblk_io_submit,,errors=continue. Quota mode: none. [ 162.138927][ T5144] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 162.175986][ T5144] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0 [ 162.178696][ T9565] openvswitch: netlink: Actions may not be safe on all matching packets [ 162.246956][ T244] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 162.301951][ T244] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 162.352600][ T244] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 162.364872][ T9503] BTRFS info (device loop1): enabling ssd optimizations [ 162.381593][ T4192] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 162.404127][ T4192] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 162.416412][ T21] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 162.426437][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'. [ 162.446527][ T4192] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 162.841894][ T4752] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 162.870557][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.891198][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.926648][ T21] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.945519][ T21] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 162.955069][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.018474][ T21] ims_pcu 4-1:1.0: Missing CDC union descriptor [ 163.035039][ T21] ims_pcu: probe of 4-1:1.0 failed with error -22 [ 163.204237][ T9649] openvswitch: netlink: Actions may not be safe on all matching packets [ 163.247931][ T9652] loop4: detected capacity change from 0 to 2048 [ 163.266506][ T4752] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.289937][ T4752] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 163.305874][ T9652] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.328801][ T4752] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 163.339154][ T9655] befs: (loop2): No write support. Marking filesystem read-only [ 163.349199][ T9655] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 163.361870][ T4752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.419569][ T4752] usb 1-1: config 0 descriptor?? [ 163.427303][ T9655] befs: (loop2): unable to read superblock [ 163.696331][ T9635] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 163.900972][ T4752] Bluetooth: Can't get version to change to load ram patch err [ 163.916235][ T4752] Bluetooth: Loading patch file failed [ 163.921759][ T4752] ath3k: probe of 1-1:0.0 failed with error -71 [ 163.939068][ T4752] usb 1-1: USB disconnect, device number 15 [ 164.068891][ T9635] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.241584][ T9635] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 164.255991][ T9635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.271303][ T9635] usb 2-1: Product: syz [ 164.275816][ T9635] usb 2-1: Manufacturer: syz [ 164.292119][ T9635] usb 2-1: SerialNumber: syz [ 164.576589][ T9635] snd-usb-6fire 2-1:1.0: unable to receive device firmware state. [ 164.591257][ T9635] snd-usb-6fire: probe of 2-1:1.0 failed with error -121 [ 164.716972][ T9705] overlayfs: missing 'lowerdir' [ 164.805777][ T9635] usb 2-1: USB disconnect, device number 12 [ 164.814666][ T9713] loop0: detected capacity change from 0 to 256 [ 164.843019][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'. [ 165.034280][ T9727] usb usb8: usbfs: process 9727 (syz.4.2462) did not claim interface 0 before use [ 165.106683][ T9635] usb 4-1: USB disconnect, device number 12 [ 165.174516][ T9737] netlink: 'syz.3.2467': attribute type 1 has an invalid length. [ 165.189541][ T9737] netlink: 'syz.3.2467': attribute type 3 has an invalid length. [ 165.207654][ T9737] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2467'. [ 165.226662][ T9737] NCSI netlink: No device for ifindex 55159 [ 165.273554][ T9747] befs: (loop0): No write support. Marking filesystem read-only [ 165.282229][ T9747] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.298181][ T9747] befs: (loop0): unable to read superblock [ 165.324989][ T9750] netlink: 'syz.2.2472': attribute type 10 has an invalid length. [ 165.361880][ T9753] usb usb8: usbfs: process 9753 (syz.0.2475) did not claim interface 0 before use [ 165.450758][ T9759] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2476'. [ 165.475074][ T9750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.512138][ T9750] team0: Port device bond0 added [ 165.588305][ T9771] netlink: 'syz.2.2485': attribute type 1 has an invalid length. [ 165.598523][ T9771] netlink: 'syz.2.2485': attribute type 3 has an invalid length. [ 165.610169][ T9771] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2485'. [ 165.615291][ T9773] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 165.619712][ T9771] NCSI netlink: No device for ifindex 55159 [ 165.736918][ T4751] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 165.776529][ T21] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 165.836526][ T9787] netlink: 'syz.2.2492': attribute type 1 has an invalid length. [ 165.844304][ T9787] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2492'. [ 166.006409][ T9635] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 166.024116][ T9781] loop1: detected capacity change from 0 to 32768 [ 166.030733][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 166.093945][ T9781] ERROR: (device loop1): diAllocBit: iag inconsistent [ 166.093945][ T9781] [ 166.107986][ T9781] ialloc: diAlloc returned -5! [ 166.116686][ T4751] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.136299][ T4751] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 166.151013][ T4751] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.166376][ T4751] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 166.179465][ T21] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 166.191255][ T4751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.199946][ T21] usb 4-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config [ 166.211463][ T21] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 166.222392][ T21] usb 4-1: config 1 has no interface number 1 [ 166.235748][ T21] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 166.269193][ T21] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x89 has an invalid bInterval 201, changing to 7 [ 166.283252][ T4751] ims_pcu 1-1:1.0: Missing CDC union descriptor [ 166.296442][ T4751] ims_pcu: probe of 1-1:1.0 failed with error -22 [ 166.366724][ T9635] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.389112][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2498'. [ 166.395881][ T9798] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.417538][ T9798] FAT-fs (loop3): unable to read boot sector [ 166.486677][ T21] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.506502][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.514547][ T21] usb 4-1: Product: syz [ 166.519773][ T21] usb 4-1: Manufacturer: syz [ 166.524403][ T21] usb 4-1: SerialNumber: syz [ 166.560621][ T9635] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 166.578714][ T9635] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.593397][ T9635] usb 5-1: Product: syz [ 166.600072][ T9635] usb 5-1: Manufacturer: syz [ 166.605165][ T9635] usb 5-1: SerialNumber: syz [ 166.624715][ T9813] netlink: 'syz.2.2503': attribute type 21 has an invalid length. [ 166.693391][ T9820] loop2: detected capacity change from 0 to 1756 [ 166.722971][ T9820] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 166.731188][ T9820] UDF-fs: Scanning with blocksize 512 failed [ 166.753240][ T9820] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 166.761304][ T9820] UDF-fs: Scanning with blocksize 1024 failed [ 166.783253][ T9820] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000) [ 166.876396][ T9635] snd-usb-6fire 5-1:1.0: unable to receive device firmware state. [ 166.886672][ T21] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 166.894253][ T9635] snd-usb-6fire: probe of 5-1:1.0 failed with error -121 [ 166.895309][ T21] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 166.909368][ T21] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 166.936448][ T13] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 166.980977][ T21] usb 4-1: USB disconnect, device number 13 [ 167.054058][ T9827] SET target dimension over the limit! [ 167.091042][ T9829] loop2: detected capacity change from 0 to 256 [ 167.092532][ T4752] usb 5-1: USB disconnect, device number 14 [ 167.192466][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 167.316352][ T13] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 167.324570][ T13] usb 2-1: config 0 has no interface number 0 [ 167.475079][ T9840] netlink: 'syz.3.2514': attribute type 1 has an invalid length. [ 167.484534][ T9840] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2514'. [ 167.497783][ T13] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 167.507016][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.515387][ T13] usb 2-1: Product: syz [ 167.519686][ T13] usb 2-1: Manufacturer: syz [ 167.524287][ T13] usb 2-1: SerialNumber: syz [ 167.530688][ T13] usb 2-1: config 0 descriptor?? [ 167.577590][ T13] smsc95xx v2.0.0 [ 167.655456][ T9852] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.680976][ T9852] FAT-fs (loop9): unable to read boot sector [ 167.786426][ T13] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 167.804528][ T13] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 167.837555][ T13] usb 2-1: USB disconnect, device number 13 [ 168.132109][ T9894] netlink: 'syz.3.2541': attribute type 10 has an invalid length. [ 168.169640][ T9894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.205894][ T9894] team0: Port device bond0 added [ 168.398961][ T9915] xt_l2tp: wrong L2TP version: 0 [ 168.474478][ T21] usb 1-1: USB disconnect, device number 16 [ 168.474534][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'. [ 168.485758][ T9917] loop3: detected capacity change from 0 to 2048 [ 168.525421][ T9925] netlink: 'syz.0.2557': attribute type 10 has an invalid length. [ 168.587305][ T9925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.617731][ T9925] team0: Port device bond0 added [ 168.648075][ T9930] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.702518][ T9917] attempt to access beyond end of device [ 168.702518][ T9917] loop3: rw=0, want=60129542216, limit=2048 [ 168.746504][ T9917] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 168.749042][ T9938] loop1: detected capacity change from 0 to 128 [ 168.776472][ T4229] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 168.804322][ T9944] xt_l2tp: wrong L2TP version: 0 [ 169.056399][ T4229] usb 5-1: Using ep0 maxpacket: 32 [ 169.057017][ T26] audit: type=1107 audit(1791254342.452:12): pid=9957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 169.057017][ T26] ,' [ 169.079418][ T9635] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 169.110067][ T9620] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.236443][ T4229] usb 5-1: unable to get BOS descriptor or descriptor too short [ 169.336358][ T9635] usb 1-1: Using ep0 maxpacket: 8 [ 169.356523][ T4229] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.376264][ T4229] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x9C, skipping [ 169.396256][ T4229] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 169.406424][ T4751] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 169.476649][ T9620] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.492735][ T9620] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 169.505375][ T9620] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.525404][ T9620] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 169.534840][ T9620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.586491][ T4229] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 169.598423][ T9620] ims_pcu 3-1:1.0: Missing CDC union descriptor [ 169.604724][ T9620] ims_pcu: probe of 3-1:1.0 failed with error -22 [ 169.605936][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 169.626236][ T4229] usb 5-1: Product: syz [ 169.626663][ T9635] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 169.636255][ T4229] usb 5-1: Manufacturer: syz [ 169.646697][ T4229] usb 5-1: SerialNumber: syz [ 169.647968][ T9635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.667936][ T9635] usb 1-1: Product: syz [ 169.672814][ T9635] usb 1-1: Manufacturer: syz [ 169.682572][ T9635] usb 1-1: SerialNumber: syz [ 169.686277][ T4751] usb 2-1: Using ep0 maxpacket: 8 [ 169.818851][ T4751] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 169.836232][ T4751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.890341][ T4751] pvrusb2: Hardware description: Terratec Grabster AV400 [ 169.906224][ T4751] pvrusb2: ********** [ 169.910419][ T4751] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 169.936408][ T4751] pvrusb2: Important functionality might not be entirely working. [ 169.946397][ T4751] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 169.976602][ T4229] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 169.983683][ T4751] pvrusb2: ********** [ 170.007846][ T4229] snd-usb-audio: probe of 5-1:1.1 failed with error -71 [ 170.056491][ T4229] snd-usb-audio: probe of 5-1:1.2 failed with error -71 [ 170.078534][ T4229] usb 5-1: USB disconnect, device number 15 [ 170.098920][ T2424] pvrusb2: Invalid write control endpoint [ 170.120104][ T4751] usb 2-1: USB disconnect, device number 14 [ 170.163691][ T2424] pvrusb2: Invalid write control endpoint [ 170.174884][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 170.186496][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 170.191643][ T9635] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 170.194185][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 170.213516][ T2424] pvrusb2: Device being rendered inoperable [ 170.222052][ T9635] mxuport: probe of 1-1:254.0 failed with error -5 [ 170.223999][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 170.237190][ T9635] usb 1-1: USB disconnect, device number 17 [ 170.244930][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 170.261655][ T2424] pvrusb2: Attached sub-driver cx25840 [ 170.267591][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 170.278478][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 170.855791][T10003] netlink: 'syz.3.2595': attribute type 12 has an invalid length. [ 170.866519][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2596'. [ 170.938090][ T4751] nvmet: connect request for invalid subsystem testsubsys! [ 170.963746][T10002] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 170.968939][T10012] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2599'. [ 171.186932][T10029] netlink: 'syz.4.2608': attribute type 10 has an invalid length. [ 171.275145][T10036] devtmpfs: Unknown parameter 'debug' [ 171.510287][T10052] loop4: detected capacity change from 0 to 2048 [ 171.798780][T10076] netlink: 'syz.1.2630': attribute type 10 has an invalid length. [ 171.868814][ T9620] usb 3-1: USB disconnect, device number 9 [ 171.937884][T10085] loop3: detected capacity change from 0 to 256 [ 172.227912][T10103] loop3: detected capacity change from 0 to 512 [ 172.308434][T10111] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2647'. [ 172.352597][T10103] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2642: bg 0: block 5: invalid block bitmap [ 172.385175][T10103] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 172.405352][T10103] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2642: invalid indirect mapped block 3 (level 2) [ 172.406769][T10117] loop1: detected capacity change from 0 to 256 [ 172.435183][T10103] EXT4-fs (loop3): 1 orphan inode deleted [ 172.445116][T10103] EXT4-fs (loop3): 1 truncate cleaned up [ 172.455702][T10103] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 172.624021][T10127] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.2655'. [ 172.828157][T10145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2662'. [ 172.871329][T10145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2662'. [ 172.894545][T10145] device xfrm0 entered promiscuous mode [ 172.942295][T10145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2662'. [ 173.051410][T10153] loop2: detected capacity change from 0 to 8192 [ 173.099916][T10153] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 173.150290][T10170] loop3: detected capacity change from 0 to 256 [ 173.172704][T10153] REISERFS (device loop2): using ordered data mode [ 173.227066][T10153] reiserfs: using flush barriers [ 173.286339][T10153] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 173.335142][T10153] REISERFS (device loop2): checking transaction log (loop2) [ 173.383164][T10153] REISERFS (device loop2): Using r5 hash to sort names [ 173.395661][T10153] REISERFS (device loop2): using 3.5.x disk format [ 173.408491][T10153] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 173.673530][T10167] loop0: detected capacity change from 0 to 32768 [ 173.724129][T10197] netlink: 'syz.1.2689': attribute type 30 has an invalid length. [ 173.766402][ T4229] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 173.808699][T10167] (syz.0.2673,10167,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 173.862116][T10167] (syz.0.2673,10167,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 173.962909][T10167] JBD2: Ignoring recovery information on journal [ 174.051764][T10167] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 174.062290][ T4229] usb 4-1: Using ep0 maxpacket: 32 [ 174.113233][T10224] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 174.129115][T10227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2702'. [ 174.149789][T10227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2702'. [ 174.159069][T10167] (syz.0.2673,10167,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 174.174563][T10227] device xfrm0 entered promiscuous mode [ 174.186326][T10224] CIFS mount error: No usable UNC path provided in device string! [ 174.186326][T10224] [ 174.216365][T10227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2702'. [ 174.225906][T10224] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 174.274857][T10230] netlink: 'syz.2.2703': attribute type 30 has an invalid length. [ 174.286737][ T4229] usb 4-1: unable to get BOS descriptor or descriptor too short [ 174.295659][T10167] (syz.0.2673,10167,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 174.378389][ T4229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.394279][T10167] (syz.0.2673,10167,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 174.405714][ T4229] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x9C, skipping [ 174.418959][T10240] loop1: detected capacity change from 0 to 256 [ 174.425512][T10167] (syz.0.2673,10167,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 174.440263][ T4229] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 174.458008][T10167] (syz.0.2673,10167,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 174.468654][T10167] (syz.0.2673,10167,1):ocfs2_quota_read:201 ERROR: status = -5 [ 174.478948][T10167] Quota error (device loop0): find_block_dqentry: Can't read quota tree block 6 [ 174.490543][T10167] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 174.522479][T10167] (syz.0.2673,10167,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 174.537554][T10167] (syz.0.2673,10167,0):ocfs2_mknod:315 ERROR: status = -5 [ 174.582722][T10167] (syz.0.2673,10167,0):ocfs2_mknod:504 ERROR: status = -5 [ 174.617777][T10167] (syz.0.2673,10167,0):ocfs2_mkdir:661 ERROR: status = -5 [ 174.653718][ T4229] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 174.684746][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 174.693089][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 174.706784][ T4229] usb 4-1: Product: syz [ 174.710990][ T4229] usb 4-1: Manufacturer: syz [ 174.715743][ T4229] usb 4-1: SerialNumber: syz [ 174.892542][ T4751] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 175.006442][ T4229] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 175.040768][T10248] loop2: detected capacity change from 0 to 32768 [ 175.051301][ T4229] snd-usb-audio: probe of 4-1:1.1 failed with error -71 [ 175.086434][ T4229] snd-usb-audio: probe of 4-1:1.2 failed with error -71 [ 175.116500][ T4229] usb 4-1: USB disconnect, device number 14 [ 175.151513][T10273] loop0: detected capacity change from 0 to 512 [ 175.206585][T10248] XFS (loop2): Mounting V5 Filesystem [ 175.240245][T10273] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2722: bg 0: block 5: invalid block bitmap [ 175.271677][T10273] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 175.281199][T10273] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2722: invalid indirect mapped block 3 (level 2) [ 175.296713][ T4751] usb 5-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 175.304002][T10273] EXT4-fs (loop0): 1 orphan inode deleted [ 175.312818][T10273] EXT4-fs (loop0): 1 truncate cleaned up [ 175.319326][T10248] XFS (loop2): Ending clean mount [ 175.324346][T10273] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 175.331315][T10248] attempt to access beyond end of device [ 175.331315][T10248] loop2: rw=4096, want=262148, limit=32768 [ 175.370384][ T4192] XFS (loop2): Unmounting Filesystem [ 175.526388][ T4751] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 175.535483][ T4751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.556280][ T4752] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 175.564393][ T4751] usb 5-1: Product: syz [ 175.576164][ T4751] usb 5-1: Manufacturer: syz [ 175.581316][ T4751] usb 5-1: SerialNumber: syz [ 175.649143][ T4751] bfusb: probe of 5-1:252.0 failed with error -5 [ 175.659779][T10291] netlink: 'syz.3.2730': attribute type 1 has an invalid length. [ 175.862562][ T13] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 175.873668][ T21] usb 5-1: USB disconnect, device number 16 [ 175.962617][T10317] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 175.964208][ T4752] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.982541][T10317] __nla_validate_parse: 4 callbacks suppressed [ 175.982556][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2740'. [ 175.991331][ T4751] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 176.014767][ T4752] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 176.023925][ T4752] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.116304][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 176.201552][ C0] sd 0:0:1:0: tag#2396 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 176.211507][ C0] sd 0:0:1:0: tag#2396 CDB: Test Unit Ready [ 176.216884][ T4752] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 176.217471][ C0] sd 0:0:1:0: tag#2396 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 176.235504][ C0] sd 0:0:1:0: tag#2396 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 176.236222][ T4752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.244589][ C0] sd 0:0:1:0: tag#2396 CDB[20]: 00 00 00 00 00 00 00 [ 176.256434][ T13] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 176.264814][ T4752] usb 2-1: Product: syz [ 176.272860][ T13] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 176.282224][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 176.286298][ T4752] usb 2-1: Manufacturer: syz [ 176.292144][ T13] usb 1-1: config 1 has no interface number 0 [ 176.302366][ T13] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.310334][ T4752] usb 2-1: SerialNumber: syz [ 176.312660][ T13] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 176.331694][ T13] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 176.341081][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.389666][ T13] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 176.391464][ T4752] usb 2-1: Found UVC 1.00 device syz (046d:0821) [ 176.423264][ T4752] usb 2-1: No valid video chain found. [ 176.440326][ T4751] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 176.455759][ T4751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.470202][ T4751] usb 3-1: config 0 descriptor?? [ 176.521109][ T4751] cp210x 3-1:0.0: cp210x converter detected [ 176.597684][ T13] snd_usb_pod 1-1:1.1: invalid control EP [ 176.603478][ T13] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 176.611306][T10349] loop3: detected capacity change from 0 to 8192 [ 176.621089][ T13] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 176.639993][ T13] snd_usb_pod: probe of 1-1:1.1 failed with error -22 [ 176.670062][T10349] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 176.687416][T10349] REISERFS (device loop3): using ordered data mode [ 176.694132][T10349] reiserfs: using flush barriers [ 176.745006][ T9620] usb 2-1: USB disconnect, device number 15 [ 176.757498][T10349] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.779537][T10349] REISERFS (device loop3): checking transaction log (loop3) [ 176.800017][T10349] REISERFS (device loop3): Using r5 hash to sort names [ 176.807205][T10349] REISERFS (device loop3): using 3.5.x disk format [ 176.814105][T10349] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 176.865111][ T21] usb 1-1: USB disconnect, device number 18 [ 176.876413][T10362] netlink: 'syz.4.2761': attribute type 1 has an invalid length. [ 176.946341][ T4751] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 176.956421][ T4751] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 176.976990][ T4751] usb 3-1: cp210x converter now attached to ttyUSB0 [ 176.989258][ T4751] usb 3-1: USB disconnect, device number 10 [ 177.001805][ T4751] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 177.015315][ T4751] cp210x 3-1:0.0: device disconnected [ 177.290842][T10372] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2765'. [ 177.326419][ C1] sd 0:0:1:0: tag#9339 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 177.336365][ C1] sd 0:0:1:0: tag#9339 CDB: Test Unit Ready [ 177.342316][ C1] sd 0:0:1:0: tag#9339 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 177.351410][ C1] sd 0:0:1:0: tag#9339 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 177.360488][ C1] sd 0:0:1:0: tag#9339 CDB[20]: 00 00 00 00 00 00 00 [ 177.656547][ C1] sd 0:0:1:0: tag#9340 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 177.660644][T10402] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 177.666478][ C1] sd 0:0:1:0: tag#9340 CDB: Test Unit Ready [ 177.690583][ C1] sd 0:0:1:0: tag#9340 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 177.699654][ C1] sd 0:0:1:0: tag#9340 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 177.708743][ C1] sd 0:0:1:0: tag#9340 CDB[20]: 00 00 00 00 00 00 00 [ 177.743406][T10405] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.797009][T10408] device gretap1 entered promiscuous mode [ 177.999798][T10421] loop4: detected capacity change from 0 to 64 [ 178.115388][T10428] netlink: 'syz.1.2794': attribute type 9 has an invalid length. [ 178.138679][T10428] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2794'. [ 178.172351][ T4751] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 178.206731][T10431] netlink: 'syz.0.2795': attribute type 1 has an invalid length. [ 178.305363][T10435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2797'. [ 178.336237][T10435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2797'. [ 178.364126][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2797'. [ 178.455828][T10441] loop0: detected capacity change from 0 to 512 [ 178.455986][ T4751] usb 4-1: Using ep0 maxpacket: 32 [ 178.489144][T10445] netlink: 'syz.1.2803': attribute type 2 has an invalid length. [ 178.512035][T10393] loop2: detected capacity change from 0 to 32768 [ 178.556368][T10441] EXT4-fs (loop0): Ignoring removed oldalloc option [ 178.568176][T10441] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 178.613965][T10449] sctp: [Deprecated]: syz.1.2805 (pid 10449) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.613965][T10449] Use struct sctp_sack_info instead [ 178.661709][T10441] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,grpjquota=./file1,noinit_itable,,errors=continue. Quota mode: writeback. [ 178.686590][ T4751] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 178.705211][ T4751] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 178.715340][ T4751] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 178.724164][T10441] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.735590][ T4751] usb 4-1: config 1 has no interface number 0 [ 178.741795][ T4751] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 178.772501][ T4751] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 178.796263][ T4751] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 178.805347][ T4751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.815598][T10454] loop4: detected capacity change from 0 to 64 [ 178.888993][ T4751] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 178.898130][T10454] attempt to access beyond end of device [ 178.898130][T10454] loop4: rw=0, want=3586, limit=64 [ 178.904720][T10441] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.2800: inode #327680: comm syz.0.2800: iget: illegal inode # [ 178.935098][T10441] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.2800: error while reading EA inode 327680 err=-117 [ 178.956572][T10454] Buffer I/O error on dev loop4, logical block 1792, async page read [ 178.965188][T10454] attempt to access beyond end of device [ 178.965188][T10454] loop4: rw=0, want=113154, limit=64 [ 178.988016][T10458] loop2: detected capacity change from 0 to 64 [ 179.021174][T10454] Buffer I/O error on dev loop4, logical block 56576, async page read [ 179.137061][ T4751] snd_usb_pod 4-1:1.1: invalid control EP [ 179.142844][ T4751] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 179.188108][ T4751] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 179.226496][ T4751] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 179.234724][T10464] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 179.466468][ T21] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 179.497169][ T4752] usb 4-1: USB disconnect, device number 15 [ 179.746437][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 179.865772][T10497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2825'. [ 180.072592][ T21] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 180.092158][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.119959][ T21] usb 2-1: Product: syz [ 180.134416][ T21] usb 2-1: Manufacturer: syz [ 180.148812][ T21] usb 2-1: SerialNumber: syz [ 180.337141][T10526] loop2: detected capacity change from 0 to 64 [ 180.443066][T10526] attempt to access beyond end of device [ 180.443066][T10526] loop2: rw=0, want=3586, limit=64 [ 180.479450][T10526] Buffer I/O error on dev loop2, logical block 1792, async page read [ 180.496620][T10526] attempt to access beyond end of device [ 180.496620][T10526] loop2: rw=0, want=113154, limit=64 [ 180.517963][T10526] Buffer I/O error on dev loop2, logical block 56576, async page read [ 180.566368][ T4229] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 180.696600][ T21] mxuport 2-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 180.715598][ T21] mxuport: probe of 2-1:254.0 failed with error -5 [ 180.727224][ T21] usb 2-1: USB disconnect, device number 16 [ 180.849657][T10533] loop2: detected capacity change from 0 to 4096 [ 180.915478][T10533] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 181.006387][ T4229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.026605][ T4229] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 181.045948][ T4229] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.088421][ T4752] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 181.180916][T10520] loop4: detected capacity change from 0 to 32768 [ 181.246701][ T4229] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 181.266091][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.268661][T10520] (syz.4.2836,10520,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 181.286361][ T4229] usb 1-1: Product: syz [ 181.291685][ T4229] usb 1-1: Manufacturer: syz [ 181.316449][T10540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2845'. [ 181.332844][ T4229] usb 1-1: SerialNumber: syz [ 181.376865][T10540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2845'. [ 181.398695][ T4229] usb 1-1: Found UVC 1.00 device syz (046d:0821) [ 181.399153][T10520] (syz.4.2836,10520,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 181.405176][ T4229] usb 1-1: No valid video chain found. [ 181.425560][T10540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2845'. [ 181.492633][ T4752] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 181.508870][ T4752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.552285][ T4752] usb 4-1: config 0 descriptor?? [ 181.572457][T10520] JBD2: Ignoring recovery information on journal [ 181.627451][ T4752] cp210x 4-1:0.0: cp210x converter detected [ 181.672105][T10520] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 181.712489][T10520] (syz.4.2836,10520,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 181.784006][ T13] usb 1-1: USB disconnect, device number 19 [ 181.873908][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'. [ 181.929613][T10520] (syz.4.2836,10520,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 182.001406][T10520] (syz.4.2836,10520,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 182.052990][T10520] (syz.4.2836,10520,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 182.100831][T10567] loop1: detected capacity change from 0 to 256 [ 182.102245][ T4752] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 182.115397][ T4752] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 182.140797][T10520] (syz.4.2836,10520,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 182.157125][ T4752] usb 4-1: cp210x converter now attached to ttyUSB0 [ 182.197708][ T4752] usb 4-1: USB disconnect, device number 16 [ 182.207148][T10520] (syz.4.2836,10520,1):ocfs2_quota_read:201 ERROR: status = -5 [ 182.224123][T10520] Quota error (device loop4): find_block_dqentry: Can't read quota tree block 6 [ 182.241203][ T4752] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 182.267516][ T4752] cp210x 4-1:0.0: device disconnected [ 182.273181][T10520] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 182.332647][T10520] (syz.4.2836,10520,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 182.353874][T10520] (syz.4.2836,10520,1):ocfs2_mknod:315 ERROR: status = -5 [ 182.386691][T10520] (syz.4.2836,10520,1):ocfs2_mknod:504 ERROR: status = -5 [ 182.437895][T10520] (syz.4.2836,10520,1):ocfs2_mkdir:661 ERROR: status = -5 [ 182.564329][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 182.568214][T10578] loop0: detected capacity change from 0 to 4096 [ 182.638701][T10578] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 182.743354][T10582] loop2: detected capacity change from 0 to 1024 [ 182.844643][T10582] EXT4-fs (loop2): Ignoring removed bh option [ 182.902614][T10582] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.2868: lblock 2 mapped to illegal pblock 2 (length 1) [ 182.946538][T10582] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 182.954690][T10582] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.2868: lblock 0 mapped to illegal pblock 48 (length 1) [ 183.075939][T10582] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 183.079526][T10603] loop1: detected capacity change from 0 to 4096 [ 183.118507][T10603] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 183.128407][T10582] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.2868: Failed to acquire dquot type 0 [ 183.174081][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2866'. [ 183.222446][T10582] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 183.234989][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'. [ 183.318961][T10582] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.2868: mark_inode_dirty error [ 183.376041][T10617] loop3: detected capacity change from 0 to 512 [ 183.386403][T10582] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 183.422645][T10582] EXT4-fs (loop2): 1 orphan inode deleted [ 183.443502][T10582] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noblock_validity,bh,nodiscard,nouid32,barrier,,errors=continue. Quota mode: none. [ 183.469809][ T4240] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 183.535460][T10617] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 183.539832][ T4240] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 183.556399][ T4240] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 183.577924][T10617] ext4 filesystem being mounted at /589/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.656854][T10626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2885'. [ 183.665975][T10626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2885'. [ 183.735328][T10617] EXT4-fs error (device loop3): ext4_add_entry:2488: inode #12: comm syz.3.2883: Directory hole found for htree leaf block 0 [ 183.759201][T10626] netlink: 'syz.4.2885': attribute type 6 has an invalid length. [ 183.776633][ T9] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 183.804450][ T9] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 183.841266][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:0: Failed to release dquot type 0 [ 183.886412][T10635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2901'. [ 183.905411][ T4192] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 183.919365][T10635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2901'. [ 183.931287][ T4192] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 183.943594][T10635] netlink: 'syz.0.2901': attribute type 6 has an invalid length. [ 183.943756][ T4192] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 184.265878][T10647] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 184.389279][T10657] loop3: detected capacity change from 0 to 1024 [ 184.438140][T10657] EXT4-fs (loop3): Ignoring removed bh option [ 184.549636][T10657] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.2899: lblock 2 mapped to illegal pblock 2 (length 1) [ 184.636059][T10657] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 184.638106][T10631] loop1: detected capacity change from 0 to 32768 [ 184.676385][T10657] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.2899: lblock 0 mapped to illegal pblock 48 (length 1) [ 184.702270][T10665] loop4: detected capacity change from 0 to 4096 [ 184.717207][T10657] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 184.729782][T10631] (syz.1.2898,10631,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 184.774161][T10657] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.2899: Failed to acquire dquot type 0 [ 184.796335][T10631] (syz.1.2898,10631,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 184.843273][T10657] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 184.920093][T10631] JBD2: Ignoring recovery information on journal [ 184.935928][T10657] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.2899: mark_inode_dirty error [ 184.998188][T10665] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 185.006697][T10657] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 185.017372][T10657] EXT4-fs (loop3): 1 orphan inode deleted [ 185.023891][T10657] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,noblock_validity,bh,nodiscard,nouid32,barrier,,errors=continue. Quota mode: none. [ 185.046597][ T3046] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.093768][ T3046] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 185.106349][ T3046] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0 [ 185.113613][T10631] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 185.159015][ T244] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.184456][T10631] (syz.1.2898,10631,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 185.226407][ T244] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 185.265580][ T244] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 185.305809][ T4198] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 185.321398][T10631] (syz.1.2898,10631,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 185.322639][ T4198] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 185.349692][ T4198] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 185.364445][T10631] (syz.1.2898,10631,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 185.379603][T10631] (syz.1.2898,10631,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 185.405073][T10631] (syz.1.2898,10631,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 185.414408][T10631] (syz.1.2898,10631,1):ocfs2_quota_read:201 ERROR: status = -5 [ 185.470111][T10696] loop2: detected capacity change from 0 to 8 [ 185.477031][T10631] (syz.1.2898,10631,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 185.485003][T10631] (syz.1.2898,10631,1):ocfs2_mknod:315 ERROR: status = -5 [ 185.495215][T10631] (syz.1.2898,10631,1):ocfs2_mknod:504 ERROR: status = -5 [ 185.502887][T10631] (syz.1.2898,10631,1):ocfs2_mkdir:661 ERROR: status = -5 [ 185.553535][T10696] Filesystem uses "unknown" compression. This is not supported [ 185.556560][ T9620] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 185.574264][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 185.936571][ T9620] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.954932][ T9620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.966324][ T9635] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 185.997101][ T9620] usb 1-1: config 0 descriptor?? [ 186.039998][T10730] loop1: detected capacity change from 0 to 512 [ 186.048036][ T9620] cp210x 1-1:0.0: cp210x converter detected [ 186.174334][T10730] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 186.187212][T10730] ext4 filesystem being mounted at /649/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.195548][T10740] netlink: 'syz.3.2940': attribute type 21 has an invalid length. [ 186.206359][ T4229] Bluetooth: hci1: command 0x0406 tx timeout [ 186.206591][ T9624] Bluetooth: hci3: command 0x0406 tx timeout [ 186.212626][ T4229] Bluetooth: hci4: command 0x0406 tx timeout [ 186.224700][ T4229] Bluetooth: hci2: command 0x0406 tx timeout [ 186.279363][T10730] EXT4-fs error (device loop1): ext4_add_entry:2488: inode #12: comm syz.1.2934: Directory hole found for htree leaf block 0 [ 186.296509][ T9635] usb 3-1: not running at top speed; connect to a high speed hub [ 186.386484][ T9635] usb 3-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 186.408809][ T9635] usb 3-1: config 1 interface 1 has no altsetting 0 [ 186.415488][ T9635] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 186.436270][ T9635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.476461][ T9620] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 186.497961][ T9620] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 186.518837][ T9635] usb 3-1: Found UVC 1.00 device (046d:0825) [ 186.525822][ T9635] usb 3-1: selecting invalid altsetting 0 [ 186.554767][ T9620] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 186.598563][ T9620] usb 1-1: cp210x converter now attached to ttyUSB0 [ 186.609201][ T9620] usb 1-1: USB disconnect, device number 20 [ 186.638361][ T9620] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 186.652556][ T9620] cp210x 1-1:0.0: device disconnected [ 186.736346][ T9635] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 186.766335][ T9635] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 186.782577][ T9635] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 186.803592][ T9635] usb 3-1: selecting invalid altsetting 0 [ 186.827420][ T9635] usb 3-1: selecting invalid altsetting 0 [ 186.837151][T10780] __nla_validate_parse: 2 callbacks suppressed [ 186.837167][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2957'. [ 186.853561][ T9635] usbtest: probe of 3-1:1.1 failed with error -22 [ 186.874862][ T9635] usb 3-1: USB disconnect, device number 11 [ 186.922369][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2959'. [ 187.182848][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2966'. [ 187.650285][T10828] loop2: detected capacity change from 0 to 64 [ 187.671226][ T4229] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 187.821537][T10841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2988'. [ 187.858213][T10844] loop4: detected capacity change from 0 to 256 [ 187.921687][T10844] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 187.956477][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2992'. [ 188.000093][T10844] exFAT-fs (loop4): failed to exfat_utf8_to_utf16 (estr:ENAMETOOLONG) nls len : 258, unilen : 257 > 255 [ 188.091104][T10856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2997'. [ 188.126635][ T4229] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.149116][ T4229] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 188.165542][T10863] netlink: 'syz.4.2998': attribute type 1 has an invalid length. [ 188.176477][ T4229] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 188.195427][T10865] netlink: 'syz.2.3001': attribute type 11 has an invalid length. [ 188.213600][T10867] loop1: detected capacity change from 0 to 64 [ 188.213932][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.345454][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3004'. [ 188.493069][T10887] loop2: detected capacity change from 0 to 128 [ 188.522370][ T4229] usb 4-1: USB disconnect, device number 17 [ 188.566905][T10887] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 188.626640][T10887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.042290][ T9635] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 189.177990][T10929] loop3: detected capacity change from 0 to 128 [ 189.212010][T10929] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 189.253308][T10929] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.306306][ T9635] usb 5-1: Using ep0 maxpacket: 32 [ 189.466412][ T9635] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.567072][ T9635] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 73, changing to 7 [ 189.766578][ T9635] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 189.803582][ T9635] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.822373][ T9635] usb 5-1: Product: syz [ 189.827009][ T9635] usb 5-1: Manufacturer: syz [ 189.832108][ T9635] usb 5-1: SerialNumber: syz [ 189.907770][ T5845] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 190.047511][T10980] loop2: detected capacity change from 0 to 256 [ 190.127211][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3060'. [ 190.184774][T10990] SET target dimension over the limit! [ 190.336650][ T5845] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 190.345784][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.358325][T10999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3065'. [ 190.366712][ T9635] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 190.384951][ T5845] usb 4-1: config 0 descriptor?? [ 190.448262][ T5845] cp210x 4-1:0.0: cp210x converter detected [ 190.455576][ T9635] usb 5-1: USB disconnect, device number 17 [ 190.527539][ T7272] udevd[7272]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.609380][T11016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3072'. [ 190.785697][T11030] loop1: detected capacity change from 0 to 256 [ 190.888395][ T5845] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 190.956082][ T5845] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 190.956139][ T5845] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 190.960541][ T5845] usb 4-1: cp210x converter now attached to ttyUSB0 [ 190.963162][ T5845] usb 4-1: USB disconnect, device number 18 [ 190.967679][ T5845] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 190.968816][ T5845] cp210x 4-1:0.0: device disconnected [ 191.176145][T11048] No source specified [ 191.770885][T11104] netlink: 'syz.4.3118': attribute type 1 has an invalid length. [ 191.791769][T11104] netlink: 'syz.4.3118': attribute type 3 has an invalid length. [ 191.811461][T11104] NCSI netlink: No device for ifindex 2986344450 [ 191.888621][T11106] __nla_validate_parse: 5 callbacks suppressed [ 191.888639][T11106] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3119'. [ 192.334600][T11139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3136'. [ 192.362838][T11139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3136'. [ 192.373896][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3137'. [ 192.395054][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 192.397007][T11139] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3136'. [ 192.426275][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 192.568078][T11154] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3143'. [ 192.784783][T11172] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 193.232047][T11219] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 193.301577][T11219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.460580][T11241] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3186' sets config #0 [ 193.476324][ T9634] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 193.791160][T11270] ALSA: mixer_oss: invalid OSS volume ';ʸgԊ8\>Pxi9 h~' [ 193.813239][T11270] ALSA: mixer_oss: invalid OSS volume ' ȪUBFRнEV#d' [ 193.829607][T11270] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 193.840479][T11270] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 193.849670][T11270] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 193.858567][T11270] ALSA: mixer_oss: invalid OSS volume 'udFdsj@Jug0cd' [ 193.867506][T11270] ALSA: mixer_oss: invalid OSS volume 'NW֓YZS%fV' [ 193.876801][T11270] ALSA: mixer_oss: invalid OSS volume ''lȿDTBxN' [ 193.884011][T11270] ALSA: mixer_oss: invalid OSS volume 'y' [ 193.888349][ T9634] usb 4-1: unable to get BOS descriptor or descriptor too short [ 193.894444][ T5845] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 193.915143][T11270] ALSA: mixer_oss: invalid OSS volume '5y}9r~M+3' [ 193.924076][T11270] ALSA: mixer_oss: invalid OSS volume '϶*kC9d7띦2;"' [ 193.933886][T11270] ALSA: mixer_oss: invalid OSS volume '*ndV8mE5:4' [ 193.946628][T11270] ALSA: mixer_oss: invalid OSS volume 'PKڵ1} {N&Ia 8*ʇ' [ 193.967294][T11270] ALSA: mixer_oss: invalid OSS volume 'OC"['m/AO^G&-' [ 193.975679][T11270] ALSA: mixer_oss: invalid OSS volume '' [ 193.990391][T11270] ALSA: mixer_oss: invalid OSS volume '@HV-=f#o)U.N' [ 194.016558][ T9634] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 194.047351][ T9634] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 194.122912][T11293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3212'. [ 194.176415][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 194.270263][T11309] loop1: detected capacity change from 0 to 256 [ 194.316537][ T9634] usb 4-1: string descriptor 0 read error: -22 [ 194.323197][ T9634] usb 4-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 194.336633][ T5845] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 194.346025][T11309] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 194.351308][ T5845] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.373514][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.373566][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.391954][ T9634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.432031][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3223'. [ 194.445817][ T5845] usb 3-1: config 0 has no interface number 0 [ 194.487538][T11318] netlink: 'syz.0.3224': attribute type 1 has an invalid length. [ 194.637373][ T5845] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 194.656307][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.669198][ T5845] usb 3-1: Product: syz [ 194.681623][ T5845] usb 3-1: Manufacturer: syz [ 194.688903][ T5845] usb 3-1: SerialNumber: syz [ 194.706034][ T5845] usb 3-1: config 0 descriptor?? [ 194.774968][ T5845] uvcvideo 3-1:0.105: Found Unit with invalid ID 0 [ 194.787592][ T5845] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 194.794253][ T5845] usb 3-1: No valid video chain found. [ 194.961303][ T9634] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 195.028552][ T9634] usb 4-1: USB disconnect, device number 19 [ 195.044763][ T4786] udevd[4786]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.069637][ T4229] usb 3-1: USB disconnect, device number 12 [ 195.113013][T11320] loop4: detected capacity change from 0 to 32768 [ 195.225602][T11320] XFS (loop4): Mounting V5 Filesystem [ 195.345922][T11320] XFS (loop4): Ending clean mount [ 195.397792][ T4196] XFS (loop4): Unmounting Filesystem [ 195.554549][T11380] netlink: 'syz.0.3251': attribute type 11 has an invalid length. [ 195.562719][T11380] netlink: 'syz.0.3251': attribute type 5 has an invalid length. [ 195.722971][T11384] loop2: detected capacity change from 0 to 2048 [ 195.796376][ T4229] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 195.822687][T11384] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.056415][ T4229] usb 4-1: Using ep0 maxpacket: 16 [ 196.174414][T11416] xt_l2tp: v2 sid > 0xffff: 262144 [ 196.185116][T11420] loop4: detected capacity change from 0 to 256 [ 196.191850][ T4229] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 196.259246][T11420] FAT-fs (loop4): Directory bread(block 64) failed [ 196.287993][T11420] FAT-fs (loop4): Directory bread(block 65) failed [ 196.295025][T11420] FAT-fs (loop4): Directory bread(block 66) failed [ 196.314742][T11420] FAT-fs (loop4): Directory bread(block 67) failed [ 196.333834][T11420] FAT-fs (loop4): Directory bread(block 68) failed [ 196.352236][T11420] FAT-fs (loop4): Directory bread(block 69) failed [ 196.369119][T11420] FAT-fs (loop4): Directory bread(block 70) failed [ 196.395058][T11420] FAT-fs (loop4): Directory bread(block 71) failed [ 196.410091][T11420] FAT-fs (loop4): Directory bread(block 72) failed [ 196.417728][ T4229] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 196.434487][T11426] loop2: detected capacity change from 0 to 4096 [ 196.435258][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.456349][T11420] FAT-fs (loop4): Directory bread(block 73) failed [ 196.473938][ T4229] usb 4-1: Product: syz [ 196.485585][ T4229] usb 4-1: Manufacturer: syz [ 196.497843][ T4229] usb 4-1: SerialNumber: syz [ 196.522291][T11426] __ntfs_error: 2 callbacks suppressed [ 196.522310][T11426] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 196.530524][ T4229] r8152-cfgselector 4-1: config 0 descriptor?? [ 196.551721][T11426] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 196.585452][T11426] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 196.598175][T11420] attempt to access beyond end of device [ 196.598175][T11420] loop4: rw=0, want=1164, limit=256 [ 196.632850][T11426] ntfs: volume version 3.1. [ 196.726385][ T9635] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 196.821011][ T4192] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 197.004322][T11436] loop1: detected capacity change from 0 to 32768 [ 197.056621][ T4229] r8152-cfgselector 4-1: Unknown version 0x0000 [ 197.072486][ T4229] r8152-cfgselector 4-1: USB disconnect, device number 20 [ 197.106577][ T9635] usb 1-1: config index 0 descriptor too short (expected 45, got 25) [ 197.119255][ T9635] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 197.140027][ T9635] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.306853][ T5845] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 197.336809][ T9635] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 197.373265][ T9635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.406640][ T9635] usb 1-1: Product: syz [ 197.416092][ T9635] usb 1-1: Manufacturer: syz [ 197.421561][ T9635] usb 1-1: SerialNumber: syz [ 197.477455][ T9635] rtl8150 1-1:1.0: couldn't find required endpoints [ 197.491026][ T9635] rtl8150: probe of 1-1:1.0 failed with error -5 [ 197.543898][T11472] loop2: detected capacity change from 0 to 4096 [ 197.559448][T11474] __nla_validate_parse: 1 callbacks suppressed [ 197.559465][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3297'. [ 197.586420][ T5845] usb 5-1: Using ep0 maxpacket: 8 [ 197.592352][T11472] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 197.611508][T11472] NILFS (loop2): mounting unchecked fs [ 197.619473][T11472] NILFS (loop2): recovery required for readonly filesystem [ 197.632561][T11472] NILFS (loop2): write access will be enabled during recovery [ 197.682743][ T9635] usb 1-1: USB disconnect, device number 21 [ 197.710995][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop2 [ 197.722033][T11472] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 197.726667][ T5845] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 197.773241][ T5845] usb 5-1: config 179 has no interface number 0 [ 197.784829][ T5845] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 197.817097][ T5845] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 197.846260][ T5845] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 197.850271][T11487] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 197.904663][ T5845] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 197.936632][ T5845] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 197.970347][ T5845] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 197.996386][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.056769][T11447] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 198.343486][T11529] netlink: set zone limit has 8 unknown bytes [ 198.398028][T11532] device macsec0 entered promiscuous mode [ 198.429533][T11535] netlink: 'syz.1.3322': attribute type 1 has an invalid length. [ 198.564874][ T9635] usb 5-1: USB disconnect, device number 18 [ 198.586234][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 198.758825][T11559] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3332'. [ 198.903792][T11570] ip_tables: iptables: counters copy to user failed while replacing table [ 198.927531][T11568] deleting an unspecified loop device is not supported. [ 198.987602][T11565] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 199.038309][T11572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3340'. [ 199.076403][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3340'. [ 199.373077][ T26] audit: type=1400 audit(1791254372.772:13): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=11595 comm="syz.4.3352" [ 199.541858][T11612] trusted_key: encrypted_key: master key parameter is missing [ 199.655830][T11623] netlink: 'syz.0.3366': attribute type 10 has an invalid length. [ 199.674349][T11626] loop2: detected capacity change from 0 to 256 [ 199.697446][T11623] team0: Device nlmon0 is of different type [ 199.964967][T11642] kernel profiling enabled (shift: 63) [ 199.997254][T11642] profiling shift: 63 too large [ 200.078824][T11652] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3380'. [ 200.104933][T11657] xt_l2tp: v2 doesn't support IP mode [ 200.116648][T11652] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3380'. [ 200.142113][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3380'. [ 200.201456][T11666] kAFS: unable to lookup cell '(/' [ 200.284904][T11673] SET target dimension over the limit! [ 200.285635][T11676] netlink: 'syz.4.3392': attribute type 13 has an invalid length. [ 200.532515][T11696] CacheFiles: Empty tag specified [ 200.820616][T11725] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3417'. [ 200.841910][T11724] Cannot find add_set index 3 as target [ 200.847782][T11727] Cannot find del_set index 4 as target [ 200.890752][ T9624] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 201.156345][ T9624] usb 2-1: Using ep0 maxpacket: 16 [ 201.277770][ T9624] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.305259][ T9624] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.476600][ T9624] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.501220][ T9624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.527427][ T9624] usb 2-1: Product: syz [ 201.542826][ T9624] usb 2-1: Manufacturer: syz [ 201.546916][T11776] netlink: 'syz.4.3441': attribute type 10 has an invalid length. [ 201.555524][ T9624] usb 2-1: SerialNumber: syz [ 201.599117][T11776] team0: Device nlmon0 is of different type [ 201.693866][T11749] loop2: detected capacity change from 0 to 32768 [ 201.825174][T11749] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3427 (11749) [ 201.871395][T11749] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 201.884660][T11749] BTRFS info (device loop2): using free space tree [ 201.896496][ T9624] usb 2-1: 0:2 : does not exist [ 201.905054][T11749] BTRFS info (device loop2): has skinny extents [ 201.942998][ T9624] usb 2-1: USB disconnect, device number 17 [ 202.073018][T11809] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.3452'. [ 202.147333][T11749] BTRFS info (device loop2): enabling ssd optimizations [ 202.160607][T11823] xt_CONNSECMARK: invalid mode: 0 [ 202.239935][ T4786] udevd[4786]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.644234][ T4786] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (4786) [ 202.787918][T11852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3470'. [ 202.861374][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3470'. [ 202.872041][T11856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3471'. [ 202.906948][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3470'. [ 202.916411][T11856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3471'. [ 202.936835][T11856] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3471'. [ 203.203573][T11876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3491'. [ 203.383907][T11886] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3483'. [ 203.519010][T11894] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 203.604632][T11894] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.906714][T11916] device vlan0 entered promiscuous mode [ 203.948763][T11916] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 204.025751][T11925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3504'. [ 204.201493][T11939] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3512'. [ 204.294012][T11950] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 204.539917][ T9624] nvmet: connect request for invalid subsystem testsubsys! [ 204.562971][T11964] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 204.994299][T12015] xt_socket: unknown flags 0x50 [ 205.060825][T12012] loop4: detected capacity change from 0 to 4096 [ 205.197961][T12012] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 205.220357][T12012] NILFS (loop4): mounting unchecked fs [ 205.248418][T12012] NILFS (loop4): recovery required for readonly filesystem [ 205.255686][T12012] NILFS (loop4): write access will be enabled during recovery [ 205.281807][ T4786] udevd[4786]: incorrect nilfs2 checksum on /dev/loop4 [ 205.334507][T12012] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 205.455436][ T4786] udevd[4786]: incorrect nilfs2 checksum on /dev/loop4 [ 205.525841][T12044] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 205.728873][T12008] loop2: detected capacity change from 0 to 32768 [ 205.819848][T12067] xt_hashlimit: invalid interval [ 205.842573][T12008] XFS (loop2): Mounting V5 Filesystem [ 205.876423][ T4231] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 205.966304][ T9624] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 206.019020][T12008] XFS (loop2): Ending clean mount [ 206.080805][T12083] loop4: detected capacity change from 0 to 4096 [ 206.136514][ T4231] usb 1-1: Using ep0 maxpacket: 16 [ 206.154615][ T4192] XFS (loop2): Unmounting Filesystem [ 206.281718][T12091] xt_TPROXY: Can be used only with -p tcp or -p udp [ 206.300399][ T4231] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 206.324974][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.354981][ T4231] usb 1-1: config 0 has no interface number 0 [ 206.359806][ T9624] usb 2-1: config 202 has an invalid interface number: 137 but max is 0 [ 206.389813][ T9624] usb 2-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 206.390354][T12095] loop4: detected capacity change from 0 to 256 [ 206.416491][ T9624] usb 2-1: config 202 has no interface number 0 [ 206.430955][ T9624] usb 2-1: config 202 interface 137 altsetting 11 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.444133][ T9624] usb 2-1: config 202 interface 137 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 206.468042][ T9624] usb 2-1: config 202 interface 137 has no altsetting 0 [ 206.556481][ T4231] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 206.565588][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.575756][T12095] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x901ac400) [ 206.606978][T12095] exFAT-fs (loop4): invalid boot region [ 206.614211][T12095] exFAT-fs (loop4): failed to recognize exfat type [ 206.616139][ T4231] usb 1-1: Product: syz [ 206.633210][T12103] cgroup: Unknown subsys name 'noxattr' [ 206.633554][ T9624] usb 2-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=5b.ac [ 206.638992][ T4231] usb 1-1: Manufacturer: syz [ 206.662745][ T4231] usb 1-1: SerialNumber: syz [ 206.674629][ T9624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.684774][ T9624] usb 2-1: Product: syz [ 206.686876][ T4231] usb 1-1: config 0 descriptor?? [ 206.710811][ T9624] usb 2-1: Manufacturer: syz [ 206.719183][ T9624] usb 2-1: SerialNumber: syz [ 206.750066][ T4231] uvcvideo 1-1:0.105: Found Unit with invalid ID 0 [ 206.769520][ T4231] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 206.796864][ T4231] usb 1-1: No valid video chain found. [ 207.053668][ T4231] usb 1-1: USB disconnect, device number 22 [ 207.067462][ T9624] io_ti 2-1:202.137: required endpoints missing [ 207.105592][ T9624] usb 2-1: USB disconnect, device number 18 [ 207.391164][T12164] netlink: 'syz.3.3618': attribute type 4 has an invalid length. [ 207.500372][T12172] loop3: detected capacity change from 0 to 1024 [ 207.576612][T12172] hfsplus: invalid file type 0177755 for inode 17 [ 207.612005][T12178] usb usb9: usbfs: process 12178 (syz.1.3625) did not claim interface 0 before use [ 207.890199][T12196] syz.4.3634 uses old SIOCAX25GETINFO [ 207.983495][T12206] __nla_validate_parse: 5 callbacks suppressed [ 207.983515][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3639'. [ 208.166068][ T4231] nvmet: connect request for invalid subsystem testsubsys! [ 208.178123][T12216] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 208.581908][T12258] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3662'. [ 208.597782][T12260] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 208.626359][T12258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3662'. [ 208.656076][T12258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3662'. [ 208.685598][T12258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3662'. [ 208.794142][T12271] netlink: 'syz.4.3670': attribute type 75 has an invalid length. [ 208.959940][T12280] netlink: 'syz.3.3674': attribute type 1 has an invalid length. [ 208.994534][T12280] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3674'. [ 209.021178][T12289] loop2: detected capacity change from 0 to 256 [ 209.188510][T12289] FAT-fs (loop2): Directory bread(block 64) failed [ 209.195113][T12289] FAT-fs (loop2): Directory bread(block 65) failed [ 209.231177][T12289] FAT-fs (loop2): Directory bread(block 66) failed [ 209.240579][T12289] FAT-fs (loop2): Directory bread(block 67) failed [ 209.275055][T12289] FAT-fs (loop2): Directory bread(block 68) failed [ 209.319220][T12289] FAT-fs (loop2): Directory bread(block 69) failed [ 209.325909][T12289] FAT-fs (loop2): Directory bread(block 70) failed [ 209.359768][T12289] FAT-fs (loop2): Directory bread(block 71) failed [ 209.380725][T12289] FAT-fs (loop2): Directory bread(block 72) failed [ 209.393865][T12289] FAT-fs (loop2): Directory bread(block 73) failed [ 209.703400][T12329] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3698'. [ 209.776408][ T21] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 209.937408][T12343] netlink: 'syz.3.3705': attribute type 1 has an invalid length. [ 210.079102][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3710'. [ 210.139361][T12357] loop2: detected capacity change from 0 to 64 [ 210.206594][T12357] hfs: keylen 40 too large [ 210.236722][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.336435][ T21] usb 1-1: config 160 has an invalid interface number: 194 but max is 0 [ 210.344875][ T21] usb 1-1: config 160 has no interface number 0 [ 210.373853][ T21] usb 1-1: config 160 interface 194 has no altsetting 0 [ 210.466428][ T4229] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 210.607189][ T21] usb 1-1: New USB device found, idVendor=8fed, idProduct=88b3, bcdDevice=a4.75 [ 210.616854][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.629476][ T21] usb 1-1: Product: syz [ 210.634076][ T21] usb 1-1: Manufacturer: syz [ 210.640934][ T21] usb 1-1: SerialNumber: syz [ 210.698114][ T4231] ------------[ cut here ]------------ [ 210.704131][ T4231] WARNING: CPU: 1 PID: 4231 at net/netfilter/nft_set_pipapo.c:2355 nft_pipapo_destroy+0x8b0/0x960 [ 210.714966][ T4231] Modules linked in: [ 210.719070][ T4231] CPU: 1 PID: 4231 Comm: kworker/1:7 Not tainted syzkaller #0 [ 210.727392][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 210.737553][ T4231] Workqueue: events nf_tables_trans_destroy_work [ 210.743909][ T4231] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 210.749815][ T4229] usb 5-1: Using ep0 maxpacket: 32 [ 210.755002][ T4231] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 db e7 80 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 30 a2 3b f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 2d 8b 8d 80 e1 07 80 c1 03 38 c1 [ 210.775969][ T4231] RSP: 0018:ffffc9000321fa68 EFLAGS: 00010293 [ 210.782119][ T4231] RAX: ffffffff883d8130 RBX: ffff8880601270f0 RCX: ffff8880283a9dc0 [ 210.790381][ T4231] RDX: 0000000000000000 RSI: ffff888060127000 RDI: ffff888062dfce28 [ 210.798481][ T4231] RBP: ffffc9000321fc30 R08: ffff8880283a9dc0 R09: 0000000000000008 [ 210.806580][ T4231] R10: 0000000000000018 R11: 0000000000000000 R12: ffff8880601270c0 [ 210.814567][ T4231] R13: dffffc0000000000 R14: ffff888060127110 R15: dffffc0000000000 [ 210.822567][ T4231] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 210.832220][ T4231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.838904][ T4231] CR2: 00007f5e77d73ff8 CR3: 0000000075d42000 CR4: 00000000003506e0 [ 210.847074][ T4231] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 210.855068][ T4231] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 210.863087][ T4231] Call Trace: [ 210.866540][ T4229] usb 5-1: config 2 has an invalid interface number: 222 but max is 0 [ 210.874716][ T4229] usb 5-1: config 2 has no interface number 0 [ 210.880912][ T4231] [ 210.883866][ T4231] ? __lock_acquire+0x7d40/0x7d40 [ 210.888997][ T4231] ? do_raw_spin_lock+0x128/0x2f0 [ 210.894043][ T4231] nft_set_destroy+0x488/0xa30 [ 210.898889][ T4229] usb 5-1: config 2 interface 222 has no altsetting 0 [ 210.907051][ T4231] ? do_raw_spin_unlock+0x11d/0x230 [ 210.912287][ T4231] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 210.918438][ T4231] ? __lock_acquire+0x7d40/0x7d40 [ 210.923492][ T4231] ? nft_object_dump+0x1e0/0x1e0 [ 210.929341][ T4231] ? _raw_spin_unlock_irq+0x1f/0x40 [ 210.934581][ T4231] process_one_work+0x867/0xff0 [ 210.940120][ T4231] ? worker_detach_from_pool+0x240/0x240 [ 210.945782][ T4231] ? lockdep_hardirqs_off+0x70/0x100 [ 210.951301][ T4231] ? _raw_spin_lock_irq+0xb7/0xf0 [ 210.956607][ T4231] ? _raw_spin_lock_irqsave+0x100/0x100 [ 210.962190][ T4231] ? wq_worker_running+0x97/0x170 [ 210.967342][ T4231] worker_thread+0xe01/0x12a0 [ 210.972047][ T4231] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 210.985109][ T21] usb 1-1: USB disconnect, device number 23 [ 210.996217][ T4231] kthread+0x42e/0x520 [ 211.000336][ T4231] ? rcu_lock_release+0x20/0x20 [ 211.005219][ T4231] ? kthread_blkcg+0xd0/0xd0 [ 211.021751][ T4231] ret_from_fork+0x1f/0x30 [ 211.026978][ T4231] [ 211.030714][ T4231] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 211.038030][ T4231] CPU: 1 PID: 4231 Comm: kworker/1:7 Not tainted syzkaller #0 [ 211.045501][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 211.055563][ T4231] Workqueue: events nf_tables_trans_destroy_work [ 211.061917][ T4231] Call Trace: [ 211.065192][ T4231] [ 211.068122][ T4231] dump_stack_lvl+0x188/0x250 [ 211.072818][ T4231] ? show_regs_print_info+0x20/0x20 [ 211.078021][ T4231] ? load_image+0x410/0x410 [ 211.082559][ T4231] panic+0x2f8/0x850 [ 211.086470][ T4231] ? bpf_jit_dump+0xd0/0xd0 [ 211.091008][ T4231] ? ret_from_fork+0x1f/0x30 [ 211.095592][ T4231] ? nft_pipapo_destroy+0x8b0/0x960 [ 211.100794][ T4231] __warn+0x248/0x2b0 [ 211.104791][ T4231] ? nft_pipapo_destroy+0x8b0/0x960 [ 211.110001][ T4231] report_bug+0x1b9/0x2e0 [ 211.114339][ T4231] handle_bug+0x3a/0x70 [ 211.118520][ T4231] exc_invalid_op+0x16/0x40 [ 211.123053][ T4231] asm_exc_invalid_op+0x16/0x20 [ 211.127918][ T4231] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 211.133745][ T4231] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 db e7 80 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 30 a2 3b f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 2d 8b 8d 80 e1 07 80 c1 03 38 c1 [ 211.153356][ T4231] RSP: 0018:ffffc9000321fa68 EFLAGS: 00010293 [ 211.159427][ T4231] RAX: ffffffff883d8130 RBX: ffff8880601270f0 RCX: ffff8880283a9dc0 [ 211.167426][ T4231] RDX: 0000000000000000 RSI: ffff888060127000 RDI: ffff888062dfce28 [ 211.175420][ T4231] RBP: ffffc9000321fc30 R08: ffff8880283a9dc0 R09: 0000000000000008 [ 211.183386][ T4231] R10: 0000000000000018 R11: 0000000000000000 R12: ffff8880601270c0 [ 211.191352][ T4231] R13: dffffc0000000000 R14: ffff888060127110 R15: dffffc0000000000 [ 211.199336][ T4231] ? nft_pipapo_destroy+0x8b0/0x960 [ 211.204556][ T4231] ? nft_pipapo_destroy+0x8b0/0x960 [ 211.209756][ T4231] ? __lock_acquire+0x7d40/0x7d40 [ 211.214802][ T4231] ? do_raw_spin_lock+0x128/0x2f0 [ 211.219821][ T4231] nft_set_destroy+0x488/0xa30 [ 211.224587][ T4231] ? do_raw_spin_unlock+0x11d/0x230 [ 211.229787][ T4231] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 211.235707][ T4231] ? __lock_acquire+0x7d40/0x7d40 [ 211.240747][ T4231] ? nft_object_dump+0x1e0/0x1e0 [ 211.245686][ T4231] ? _raw_spin_unlock_irq+0x1f/0x40 [ 211.250904][ T4231] process_one_work+0x867/0xff0 [ 211.255764][ T4231] ? worker_detach_from_pool+0x240/0x240 [ 211.261418][ T4231] ? lockdep_hardirqs_off+0x70/0x100 [ 211.266722][ T4231] ? _raw_spin_lock_irq+0xb7/0xf0 [ 211.271757][ T4231] ? _raw_spin_lock_irqsave+0x100/0x100 [ 211.277314][ T4231] ? wq_worker_running+0x97/0x170 [ 211.282355][ T4231] worker_thread+0xe01/0x12a0 [ 211.287049][ T4231] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 211.292963][ T4231] kthread+0x42e/0x520 [ 211.297035][ T4231] ? rcu_lock_release+0x20/0x20 [ 211.301899][ T4231] ? kthread_blkcg+0xd0/0xd0 [ 211.306491][ T4231] ret_from_fork+0x1f/0x30 [ 211.310929][ T4231] [ 211.314031][ T4231] Kernel Offset: disabled [ 211.324435][ T4231] Rebooting in 86400 seconds..