last executing test programs: 5.391921019s ago: executing program 3 (id=17483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0x1, 0xf, 0x40, 0x1, 0x8000000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 5.224796474s ago: executing program 3 (id=17486): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.937906519s ago: executing program 3 (id=17491): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4.59898635s ago: executing program 3 (id=17496): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000027c0)=ANY=[@ANYBLOB="1201000000000010de280211000000000001090295c4010000000909040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200b0900000028b1fc2022"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.266534729s ago: executing program 0 (id=17500): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="500c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000002c0)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0}) 2.565710001s ago: executing program 3 (id=17519): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.276611417s ago: executing program 1 (id=17522): openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r0, &(0x7f00000000c0), 0x300, 0x0, 0x0) 2.187525775s ago: executing program 0 (id=17524): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 2.12919242s ago: executing program 1 (id=17525): syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000140)={[{@nodatacow}, {@clear_cache}, {@noacl}, {@skip_balance}, {@compress}, {@noautodefrag}, {@nobarrier}, {@datacow}, {@noflushoncommit}, {@enospc_debug}, {@flushoncommit}, {@nossd}, {@metadata_ratio={'metadata_ratio', 0x3d, 0xf}}]}, 0x1, 0x55a3, &(0x7f0000000280)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1.994208512s ago: executing program 0 (id=17527): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB=' rejected, failed to enable media [ 1216.938909][T21581] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1217.004771][T21581] @0: renamed from bond_slave_1 [ 1217.095846][ C1] vkms_vblank_simulate: vblank timer overrun [ 1217.371357][T21599] netlink: 'syz.3.16557': attribute type 5 has an invalid length. [ 1217.416179][T21601] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1217.791648][T21619] tipc: Enabling of bearer rejected, failed to enable media [ 1218.345513][T21651] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1218.454222][T27609] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1218.653488][T27609] usb 4-1: Using ep0 maxpacket: 8 [ 1218.664887][T27609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.688921][T27609] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1218.702898][T27609] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 1218.723231][T27609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.735276][T27609] usb 4-1: config 0 descriptor?? [ 1218.883298][ T9] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1219.087720][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1219.096838][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 6: 254, using maximum allowed: 30 [ 1219.120152][ T9] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1219.157978][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1219.182080][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1219.202219][T27609] kye 0003:0458:5014.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1219.219896][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.227444][T21685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16584'. [ 1219.232521][T27609] kye 0003:0458:5014.000E: unknown main item tag 0x0 [ 1219.252222][ T9] usb 1-1: config 0 descriptor?? [ 1219.260498][T27609] kye 0003:0458:5014.000E: unknown main item tag 0x0 [ 1219.289934][T27609] kye 0003:0458:5014.000E: unknown main item tag 0x0 [ 1219.309142][T27609] kye 0003:0458:5014.000E: unknown main item tag 0x0 [ 1219.329098][T27609] kye 0003:0458:5014.000E: unknown main item tag 0x0 [ 1219.351931][T27609] kye 0003:0458:5014.000E: hidraw0: USB HID v0.05 Device [HID 0458:5014] on usb-dummy_hcd.3-1/input0 [ 1219.371633][T27609] kye 0003:0458:5014.000E: tablet-enabling feature report not found [ 1219.389713][T27609] kye 0003:0458:5014.000E: tablet enabling failed [ 1219.444388][T27609] usb 4-1: USB disconnect, device number 98 [ 1219.544462][T21691] fido_id[21691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1219.741191][ T9] sony 0003:054C:0374.000F: hiddev0,hidraw0: USB HID v9.00 Device [HID 054c:0374] on usb-dummy_hcd.0-1/input0 [ 1219.780423][ T9] sony 0003:054C:0374.000F: failed to claim input [ 1219.964290][ T9] usb 1-1: USB disconnect, device number 96 [ 1220.869473][T21779] loop3: detected capacity change from 0 to 1024 [ 1220.895365][T21779] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1221.061810][T21779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1221.300768][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.483100][ T5799] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1221.683106][ T5799] usb 3-1: Using ep0 maxpacket: 32 [ 1221.690565][ T5799] usb 3-1: too many endpoints for config 0 interface 0 altsetting 6: 254, using maximum allowed: 30 [ 1221.711979][ T5799] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1221.749948][ T5799] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1221.777901][ T5799] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1221.783831][T21826] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1221.807310][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.836491][ T5799] usb 3-1: config 0 descriptor?? [ 1222.274293][ T5799] sony 0003:054C:0374.0010: hiddev0,hidraw0: USB HID v9.00 Device [HID 054c:0374] on usb-dummy_hcd.2-1/input0 [ 1222.296066][ T5799] sony 0003:054C:0374.0010: failed to claim input [ 1222.411709][T21824] loop3: detected capacity change from 0 to 32768 [ 1222.443170][ T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1222.443702][T21824] XFS (loop3): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 1222.499068][ T5799] usb 3-1: USB disconnect, device number 96 [ 1222.640358][T21824] XFS (loop3): Starting recovery (logdev: internal) [ 1222.647063][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1222.656667][ T9] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1222.664916][ T9] usb 2-1: config 0 has no interface number 0 [ 1222.675588][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1222.685537][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.693728][ T9] usb 2-1: Product: syz [ 1222.698106][ T9] usb 2-1: Manufacturer: syz [ 1222.702886][ T9] usb 2-1: SerialNumber: syz [ 1222.708772][T21824] XFS (loop3): Ending recovery (logdev: internal) [ 1222.717572][ T9] usb 2-1: config 0 descriptor?? [ 1222.735258][ T9] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 1222.763090][ T9] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 1222.818455][ T5772] XFS (loop3): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 1222.952669][ T9] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1223.185643][ T9] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 1223.310182][T21883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16624'. [ 1223.426984][ T5799] usb 2-1: USB disconnect, device number 91 [ 1223.443527][ T5799] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 1224.090079][T21934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16645'. [ 1225.359291][T21990] tipc: Started in network mode [ 1225.369387][T21990] tipc: Node identity , cluster identity 4711 [ 1225.514057][T21993] loop3: detected capacity change from 0 to 512 [ 1225.592947][T21993] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1225.604034][T21993] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.16659: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 1225.630608][T21993] EXT4-fs error (device loop3): ext4_quota_enable:7143: comm syz.3.16659: Bad quota inode: 4, type: 1 [ 1225.642385][T21993] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1225.663323][T21993] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 1225.703963][T21993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1225.728383][T22001] smc: net device bond0 applied user defined pnetid SYZ2 [ 1226.098182][T21993] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 1226.235792][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1226.345372][T22020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16666'. [ 1226.387307][T22020] tipc: Enabling of bearer rejected, failed to enable media [ 1226.604965][T22030] tipc: Started in network mode [ 1226.633505][T22030] tipc: Node identity ac141441, cluster identity 4711 [ 1226.642400][T22030] tipc: Enabled bearer , priority 10 [ 1227.185454][T22059] delete_channel: no stack [ 1227.370775][T22054] loop3: detected capacity change from 0 to 4096 [ 1227.757348][ T9] tipc: Node number set to 2886997057 [ 1228.584711][ T5799] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1228.793067][ T5799] usb 4-1: Using ep0 maxpacket: 32 [ 1228.828187][ T5799] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 1228.863591][ T5799] usb 4-1: config 0 has no interface number 0 [ 1228.869734][ T5799] usb 4-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 1228.933686][ T5799] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 1228.942764][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.983165][ T5799] usb 4-1: Product: syz [ 1228.987370][ T5799] usb 4-1: Manufacturer: syz [ 1229.003019][ T5799] usb 4-1: SerialNumber: syz [ 1229.020529][ T5799] usb 4-1: config 0 descriptor?? [ 1229.043919][T22096] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1229.108856][ T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1229.292494][T22096] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1229.309730][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1229.343032][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.370458][ T9] usb 3-1: config 0 descriptor?? [ 1229.396968][ T9] ums-realtek 3-1:0.0: USB Mass Storage device detected [ 1229.603792][ T5984] usb 3-1: USB disconnect, device number 97 [ 1229.703267][T21006] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1229.712881][ T5799] asix 4-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1229.743817][ T5799] asix 4-1:0.191 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1229.778285][ T5799] asix: probe of 4-1:0.191 failed with error -71 [ 1229.798086][ T5799] usb 4-1: USB disconnect, device number 99 [ 1229.915367][T21006] usb 2-1: Using ep0 maxpacket: 32 [ 1229.930642][T21006] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1229.940585][T21006] usb 2-1: config 0 has no interface number 0 [ 1229.950690][T21006] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1229.961579][T21006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.971553][T21006] usb 2-1: Product: syz [ 1229.977089][T21006] usb 2-1: Manufacturer: syz [ 1229.982233][T21006] usb 2-1: SerialNumber: syz [ 1229.989803][T21006] usb 2-1: config 0 descriptor?? [ 1229.997921][T21006] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1230.095246][T22166] comedi comedi3: dt2815: I/O port conflict (0x8001,2) [ 1230.238088][T21006] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1230.274139][T21006] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1230.444064][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1230.478569][T22184] netlink: 'syz.2.16707': attribute type 1 has an invalid length. [ 1230.644816][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1230.654962][T21006] usb 2-1: USB disconnect, device number 92 [ 1230.684634][T21006] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1230.740893][T21006] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1230.782773][T21006] quatech2 2-1:0.51: device disconnected [ 1231.193464][ T5984] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1231.364074][T21006] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1231.385286][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.402677][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.439526][ T5984] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1231.463063][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.497679][ T5984] usb 4-1: config 0 descriptor?? [ 1231.572834][T21006] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1231.585171][T21006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.600371][T21006] usb 3-1: Product: syz [ 1231.611312][T21006] usb 3-1: Manufacturer: syz [ 1231.623040][T21006] usb 3-1: SerialNumber: syz [ 1231.634723][T21006] usb 3-1: config 0 descriptor?? [ 1231.655981][T21006] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1231.674425][T21006] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1231.693848][T21006] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1231.713105][T21006] usb 3-1: media controller created [ 1231.765220][T21006] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1231.860372][T22228] dvb-usb: bulk message failed: -22 (7/0) [ 1231.870993][T21006] DVB: Unable to find symbol mt352_attach() [ 1231.953211][T21006] DVB: Unable to find symbol nxt6000_attach() [ 1231.961793][ T5984] zydacron 0003:13EC:0006.0011: unexpected long global item [ 1231.970178][T21006] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1231.981712][ T5984] zydacron 0003:13EC:0006.0011: parse failed [ 1231.991207][ T5984] zydacron: probe of 0003:13EC:0006.0011 failed with error -22 [ 1232.006219][T21006] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input86 [ 1232.044206][T21006] dvb-usb: schedule remote query interval to 1000 msecs. [ 1232.059678][T21006] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1232.080651][T21006] dvb-usb: bulk message failed: -22 (7/0) [ 1232.100873][T21006] dvb-usb: bulk message failed: -22 (7/0) [ 1232.122272][T21006] usb 3-1: USB disconnect, device number 98 [ 1232.191515][ T9] usb 4-1: USB disconnect, device number 100 [ 1232.271376][T21006] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1232.922281][T22328] loop3: detected capacity change from 0 to 512 [ 1232.984535][T22328] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1233.134369][T22328] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.16732: bg 0: block 104: invalid block bitmap [ 1233.213594][T22328] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 1233.238148][T22328] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.16732: invalid indirect mapped block 1 (level 1) [ 1233.285573][T22328] EXT4-fs (loop3): 1 truncate cleaned up [ 1233.312680][T22328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.525510][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.036283][T22400] loop3: detected capacity change from 0 to 2048 [ 1235.073096][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1235.283332][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1235.295365][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.309526][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.322174][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1235.331680][ T9] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1235.340394][ T9] usb 2-1: Product: syz [ 1235.345003][ T9] usb 2-1: Manufacturer: syz [ 1235.359924][ T9] hub 2-1:4.0: USB hub found [ 1235.383731][T21006] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1235.575261][T21006] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 1235.578080][ T9] hub 2-1:4.0: 2 ports detected [ 1235.623817][T21006] usb 4-1: config 0 has an invalid interface number: 255 but max is 1 [ 1235.632036][T21006] usb 4-1: config 0 has no interface number 0 [ 1235.667525][T21006] usb 4-1: config 0 has no interface number 1 [ 1235.684490][T21006] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1235.703459][T21006] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1235.730533][T21006] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1235.745834][T21006] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1235.763065][T21006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.779685][ T9] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1235.803055][ T9] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1235.808394][T21006] usb 4-1: Product: syz [ 1235.823868][T21006] usb 4-1: Manufacturer: syz [ 1235.828505][T21006] usb 4-1: SerialNumber: syz [ 1235.868031][T21006] usb 4-1: config 0 descriptor?? [ 1235.871489][ T9] usb 2-1: USB disconnect, device number 93 [ 1236.128598][T21006] usb 4-1: USB disconnect, device number 101 [ 1236.746232][T22477] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1236.771797][T22477] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1236.813497][T22477] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1236.820001][T22477] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1236.886571][T22477] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1236.933651][T22477] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 1236.946635][T22477] comedi comedi3: 8255: I/O port conflict (0x11,4) [ 1236.983239][T22477] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 1237.014443][T22477] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1237.053156][T22477] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1237.123256][T22477] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1237.131097][T22477] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1237.144056][T22477] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1237.150818][T22477] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1237.165567][T22477] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1237.172110][T22477] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 1237.206576][T22477] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1237.230465][T22477] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1237.248076][T22477] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 1237.274871][T22477] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1237.301689][T22477] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 1237.339305][T22477] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1237.346865][T22500] binder: 22499:22500 ioctl c0306201 200000000080 returned -22 [ 1237.362666][T22477] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1237.463566][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1237.584539][T22506] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.16777'. [ 1237.673084][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1237.708963][ T9] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 1237.731153][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.780810][ T9] usb 3-1: config 0 descriptor?? [ 1238.160208][T22523] loop3: detected capacity change from 0 to 4096 [ 1238.239935][ T9] cypress 0003:04B4:ED81.0012: unbalanced collection at end of report description [ 1238.265146][T22523] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1238.280949][ T9] cypress 0003:04B4:ED81.0012: parse failed [ 1238.299107][ T9] cypress: probe of 0003:04B4:ED81.0012 failed with error -22 [ 1238.454107][ T5772] ntfs3: loop3: ino=9, ntfs_sync_fs failed, -22. [ 1238.633886][T21006] usb 3-1: USB disconnect, device number 99 [ 1238.853451][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.969066][ T9] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1239.166770][ T9] usb 2-1: config 0 has an invalid interface number: 190 but max is 0 [ 1239.186359][ T9] usb 2-1: config 0 has no interface number 0 [ 1239.192517][ T9] usb 2-1: config 0 interface 190 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1239.630655][T22581] loop3: detected capacity change from 0 to 512 [ 1239.670788][T22581] EXT4-fs: Ignoring removed nobh option [ 1239.692384][T22581] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1239.773496][T22581] EXT4-fs (loop3): 1 truncate cleaned up [ 1239.811005][T22581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1240.067161][ T9] usb 2-1: New USB device found, idVendor=5df2, idProduct=8c36, bcdDevice=b8.d2 [ 1240.086761][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.133994][ T9] usb 2-1: config 0 descriptor?? [ 1240.140095][T22552] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1240.168679][ T9] usb 2-1: bad CDC descriptors [ 1240.223651][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.446064][T27609] usb 2-1: USB disconnect, device number 94 [ 1241.453422][T21006] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1241.492078][T22641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16810'. [ 1241.675425][T21006] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1241.685210][T21006] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.723458][T21006] usb 2-1: config 220 has no interface number 2 [ 1241.729816][T21006] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1241.775688][T22623] loop3: detected capacity change from 0 to 32768 [ 1241.781290][T21006] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1241.781317][T21006] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1241.781337][T21006] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1241.786473][T21006] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1241.786509][T21006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.786529][T21006] usb 2-1: Product: syz [ 1241.786544][T21006] usb 2-1: Manufacturer: syz [ 1241.786560][T21006] usb 2-1: SerialNumber: syz [ 1241.810548][T22623] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1241.866292][T22656] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 1241.983317][T22656] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 1242.015613][T21006] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1242.022005][T21006] usb 2-1: No valid video chain found. [ 1242.044498][T22623] XFS (loop3): Ending clean mount [ 1242.050807][T22656] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 1242.062454][T21006] usb 2-1: selecting invalid altsetting 0 [ 1242.068741][T22623] XFS (loop3): Quotacheck needed: Please wait. [ 1242.107000][T21006] usb 2-1: selecting invalid altsetting 0 [ 1242.112784][T21006] usbtest: probe of 2-1:220.1 failed with error -22 [ 1242.148611][T21006] usb 2-1: USB disconnect, device number 95 [ 1242.197860][T22623] XFS (loop3): Quotacheck: Done. [ 1242.375613][ T5772] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1242.604483][T22691] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16818'. [ 1243.418741][T22721] macsec1: entered allmulticast mode [ 1243.439235][T22721] macsec0: entered allmulticast mode [ 1243.453480][T21006] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1243.633904][T21006] usb 3-1: Using ep0 maxpacket: 8 [ 1243.644792][T21006] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1243.657691][T21006] usb 3-1: config 140 has an invalid interface number: 182 but max is 1 [ 1243.677105][T21006] usb 3-1: config 140 has no interface number 1 [ 1243.693591][T21006] usb 3-1: config 140 interface 182 has no altsetting 0 [ 1243.716104][T21006] usb 3-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 1243.744029][T21006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.772468][T21006] usb 3-1: Product: syz [ 1243.792742][T21006] usb 3-1: Manufacturer: syz [ 1243.813408][T21006] usb 3-1: SerialNumber: syz [ 1244.032309][T22747] macvlan2: entered promiscuous mode [ 1244.074954][T21006] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 1244.654591][T21006] usb 3-1: reset high-speed USB device number 100 using dummy_hcd [ 1244.898970][T21006] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1244.958483][T22770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16835'. [ 1244.959337][T21006] usb 3-1: device firmware changed [ 1245.017486][T21006] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1245.053075][T21006] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 1245.064197][ T5984] usb 3-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 1245.103625][ T5984] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 1245.122110][T21006] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 1245.171731][T21006] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1245.196354][T21006] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 1245.239471][T21006] usb 3-1: USB disconnect, device number 100 [ 1245.254733][T22776] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.16836'. [ 1245.255982][T21006] usb 3-1: [ueagle-atm] ADSL device removed [ 1245.323178][T22776] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1245.331510][T22776] openvswitch: netlink: Message has 1 unknown bytes. [ 1245.624474][T22793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16839'. [ 1245.864550][T22799] loop3: detected capacity change from 0 to 512 [ 1245.927136][T22799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1246.193665][T27609] IPVS: starting estimator thread 0... [ 1246.215141][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.303293][T22817] IPVS: using max 21 ests per chain, 50400 per kthread [ 1247.043287][T22848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16855'. [ 1247.073187][T22848] netlink: 'syz.0.16855': attribute type 1 has an invalid length. [ 1247.081042][T22848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16855'. [ 1247.363085][T27609] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1247.583455][T27609] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1247.601791][T27609] usb 2-1: config 0 has no interface number 0 [ 1247.634962][T27609] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1247.653275][T27609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.704688][T27609] usb 2-1: config 0 descriptor?? [ 1247.732937][T27609] usb 2-1: selecting invalid altsetting 1 [ 1247.762251][T27609] dvb_ttusb_budget: ttusb_init_controller: error [ 1247.792083][T27609] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1247.993141][T27609] DVB: Unable to find symbol cx22700_attach() [ 1248.152040][T27609] DVB: Unable to find symbol tda10046_attach() [ 1248.185135][T27609] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1248.208093][T27609] usb 2-1: USB disconnect, device number 96 [ 1248.479804][T22926] loop3: detected capacity change from 0 to 4096 [ 1248.602511][T22937] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1249.033589][T22959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16887'. [ 1249.063790][T22959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16887'. [ 1250.253447][T21006] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1250.461342][T21006] usb 4-1: Using ep0 maxpacket: 8 [ 1250.478620][T21006] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1250.523675][T21006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.531716][T21006] usb 4-1: Product: syz [ 1250.574978][T21006] usb 4-1: Manufacturer: syz [ 1250.579624][T21006] usb 4-1: SerialNumber: syz [ 1250.607685][T21006] usb 4-1: config 0 descriptor?? [ 1250.848763][T21006] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1251.251855][T21006] gspca_sunplus: reg_w_riv err -71 [ 1251.269479][T21006] sunplus: probe of 4-1:0.0 failed with error -71 [ 1251.288619][T21006] usb 4-1: USB disconnect, device number 102 [ 1251.511804][T23052] ipip0: entered promiscuous mode [ 1251.533068][T23052] ipip0: entered allmulticast mode [ 1251.551388][T23052] team0: Port device ipip0 added [ 1252.243267][T27609] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1252.314873][T23071] loop3: detected capacity change from 0 to 32768 [ 1252.446556][T27609] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.472436][T27609] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.520894][T27609] usb 1-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 1252.540507][T27609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.576254][T27609] usb 1-1: config 0 descriptor?? [ 1253.050115][T27609] hid-generic 0003:18D1:503C.0013: hidraw0: USB HID ve6.e6 Device [HID 18d1:503c] on usb-dummy_hcd.0-1/input0 [ 1253.301399][T27609] usb 1-1: USB disconnect, device number 97 [ 1254.365830][T23180] loop3: detected capacity change from 0 to 8 [ 1254.495053][T23186] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1254.501617][T23186] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1254.579651][T23186] vhci_hcd vhci_hcd.0: Device attached [ 1254.691670][T23189] usbip_core: unknown command [ 1254.697325][T23189] vhci_hcd: unknown pdu 0 [ 1254.728576][T23189] usbip_core: unknown command [ 1254.737797][ T12] vhci_hcd: stop threads [ 1254.742066][ T12] vhci_hcd: release socket [ 1254.755045][ T12] vhci_hcd: disconnect device [ 1254.793237][ T9] vhci_hcd: vhci_device speed not set [ 1254.803397][T27609] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1254.817218][T23204] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1254.823766][T23204] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1254.838887][T23204] vhci_hcd vhci_hcd.0: Device attached [ 1254.857346][T23205] vhci_hcd: connection closed [ 1254.857613][ T12] vhci_hcd: stop threads [ 1254.872348][ T12] vhci_hcd: release socket [ 1254.877228][ T12] vhci_hcd: disconnect device [ 1255.025035][T27609] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1255.040839][T27609] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.064629][T27609] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1255.086288][T27609] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1255.093502][T27609] usb 1-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1255.102603][T27609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.114245][T27609] usb 1-1: config 0 descriptor?? [ 1255.545130][T27609] apple 0003:05AC:027D.0014: ignoring exceeding usage max [ 1255.574968][T27609] apple 0003:05AC:027D.0014: hidraw0: USB HID v0.04 Device [HID 05ac:027d] on usb-dummy_hcd.0-1/input0 [ 1255.748622][T27609] usb 1-1: USB disconnect, device number 98 [ 1255.782915][T23253] fido_id[23253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1257.271382][T23300] loop3: detected capacity change from 0 to 32768 [ 1257.282518][T23300] (syz.3.16973,23300,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1257.303452][T23300] (syz.3.16973,23300,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1257.358473][T23300] JBD2: Ignoring recovery information on journal [ 1257.518124][T23300] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1257.808257][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 1258.298308][T23366] kAFS: unable to lookup cell 'sէKyy [ 1258.298308][T23366] [ 1258.298308][T23366] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qG jnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5 !G3{K,' [ 1258.534561][T23377] netlink: 312 bytes leftover after parsing attributes in process `syz.1.16998'. [ 1258.975475][T23400] loop3: detected capacity change from 0 to 2048 [ 1259.028358][T23400] NILFS (loop3): couldn't find nilfs on the device [ 1259.101659][ T5756] udevd[5756]: incorrect nilfs2 checksum on /dev/loop3 [ 1259.371386][T23416] mkiss: ax0: crc mode is auto. [ 1260.073074][ T5827] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1260.255153][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 1260.266117][ T5827] usb 4-1: config 0 has no interfaces? [ 1260.274526][ T5827] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1260.303367][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.327087][ T27] audit: type=1326 audit(2000000420.379:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23464 comm="syz.0.17026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9bb9c629 code=0x7ffc0000 [ 1260.358475][ T5827] usb 4-1: Product: syz [ 1260.373014][ T5827] usb 4-1: Manufacturer: syz [ 1260.387855][ T5827] usb 4-1: SerialNumber: syz [ 1260.412671][ T5827] usb 4-1: config 0 descriptor?? [ 1260.447396][ T27] audit: type=1326 audit(2000000420.379:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23464 comm="syz.0.17026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9bb9c629 code=0x7ffc0000 [ 1260.533410][ T27] audit: type=1326 audit(2000000420.409:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23464 comm="syz.0.17026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6e9bb9c629 code=0x7ffc0000 [ 1260.578857][ T27] audit: type=1326 audit(2000000420.409:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23464 comm="syz.0.17026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9bb9c629 code=0x7ffc0000 [ 1260.636926][ T27] audit: type=1326 audit(2000000420.409:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23464 comm="syz.0.17026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f6e9bb9c629 code=0x7ffc0000 [ 1260.693486][ T27] audit: type=1326 audit(2000000420.409:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23464 comm="syz.0.17026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9bb9c629 code=0x7ffc0000 [ 1260.720165][T27609] usb 4-1: USB disconnect, device number 103 [ 1260.727404][T20974] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1260.946578][T20974] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.968179][T20974] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1261.000372][T20974] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1261.024537][T20974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.054133][T20974] usb 2-1: config 0 descriptor?? [ 1261.680057][T20974] Bluetooth: Can't get version to change to load ram patch err [ 1261.693563][T20974] Bluetooth: Loading sysconfig file failed [ 1261.703107][ T5827] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1261.708111][T20974] ath3k: probe of 2-1:0.0 failed with error -71 [ 1261.753693][T20974] usb 2-1: USB disconnect, device number 97 [ 1261.813628][T23539] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 1261.893113][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 1261.904672][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.937016][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.978409][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1262.020653][ T5827] usb 1-1: New USB device found, idVendor=56f8, idProduct=07da, bcdDevice= 0.00 [ 1262.050188][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.079815][ T5827] usb 1-1: config 0 descriptor?? [ 1262.428572][T23570] netlink: 'syz.1.17055': attribute type 28 has an invalid length. [ 1262.429814][T23568] loop3: detected capacity change from 0 to 4096 [ 1262.453465][T23568] EXT4-fs: Ignoring removed bh option [ 1262.496000][T23568] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1262.516613][T23568] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1262.533101][T23568] System zones: 0-5 [ 1262.539597][ T5827] hid-multitouch 0003:56F8:07DA.0015: unknown main item tag 0x0 [ 1262.554050][ T5827] hid-multitouch 0003:56F8:07DA.0015: unknown main item tag 0x0 [ 1262.561914][ T5827] hid-multitouch 0003:56F8:07DA.0015: unknown main item tag 0x0 [ 1262.569830][ T5827] hid-multitouch 0003:56F8:07DA.0015: unknown main item tag 0x0 [ 1262.584571][T23568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1262.597305][ T5827] hid-multitouch 0003:56F8:07DA.0015: unknown main item tag 0x0 [ 1262.613049][ T5827] hid-multitouch 0003:56F8:07DA.0015: unknown main item tag 0x0 [ 1262.620873][ T5827] hid-multitouch 0003:56F8:07DA.0015: unknown main item tag 0x0 [ 1262.628939][ T5827] hid-multitouch 0003:56F8:07DA.0015: unknown main item tag 0x0 [ 1262.636817][ T5827] hid-multitouch 0003:56F8:07DA.0015: unknown main item tag 0x0 [ 1262.644636][ T5827] hid-multitouch 0003:56F8:07DA.0015: unknown main item tag 0x0 [ 1262.655290][ T5827] hid-multitouch 0003:56F8:07DA.0015: hidraw0: USB HID v0.00 Device [HID 56f8:07da] on usb-dummy_hcd.0-1/input0 [ 1262.727428][T23568] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1262.855397][ T5827] usb 1-1: USB disconnect, device number 99 [ 1262.924787][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1262.947038][T23580] fido_id[23580]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1263.093864][T23605] netlink: 104 bytes leftover after parsing attributes in process `syz.2.17060'. [ 1263.393154][T27609] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1263.613065][T27609] usb 4-1: Using ep0 maxpacket: 32 [ 1263.662555][T27609] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1263.685033][T27609] usb 4-1: config 0 has no interface number 0 [ 1263.691215][T27609] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1263.730725][T27609] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1263.754443][T27609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.762479][T27609] usb 4-1: Product: syz [ 1263.788414][T27609] usb 4-1: Manufacturer: syz [ 1263.810642][T27609] usb 4-1: SerialNumber: syz [ 1263.833353][T27609] usb 4-1: config 0 descriptor?? [ 1263.965888][T23647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17072'. [ 1264.014163][T23647] nbd: couldn't find a device at index 196608 [ 1264.497280][T27609] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1264.509452][T27609] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1264.523103][T27609] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1264.537774][T27609] f81534: probe of 4-1:0.12 failed with error -71 [ 1264.556404][T27609] usb 4-1: USB disconnect, device number 104 [ 1264.645150][T23678] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.17079'. [ 1265.199807][T23697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17086'. [ 1265.392082][T27609] kernel write not supported for file /sysvipc/msg (pid: 27609 comm: kworker/0:5) [ 1265.596416][T23714] loop3: detected capacity change from 0 to 256 [ 1265.665370][T23714] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010895, chksum : 0x9770887a, utbl_chksum : 0xe619d30d) [ 1265.715606][T23720] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.17094'. [ 1265.742623][T23720] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 1265.957471][T23728] netlink: 'syz.3.17096': attribute type 4 has an invalid length. [ 1265.980808][T23728] netlink: 17 bytes leftover after parsing attributes in process `syz.3.17096'. [ 1266.264361][T23738] netlink: 68 bytes leftover after parsing attributes in process `syz.3.17101'. [ 1266.293546][T23738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17101'. [ 1266.336278][T23738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17101'. [ 1266.903185][T27609] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1267.113067][T27609] usb 2-1: Using ep0 maxpacket: 8 [ 1267.131671][T27609] usb 2-1: config 6 has an invalid interface number: 51 but max is 1 [ 1267.153460][T27609] usb 2-1: config 6 has no interface number 1 [ 1267.159609][T27609] usb 2-1: config 6 interface 0 has no altsetting 0 [ 1267.193075][T27609] usb 2-1: config 6 interface 51 has no altsetting 0 [ 1267.215958][T27609] usb 2-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1267.243030][T27609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.263095][T27609] usb 2-1: Product: syz [ 1267.267298][T27609] usb 2-1: Manufacturer: syz [ 1267.292229][T27609] usb 2-1: SerialNumber: syz [ 1267.535860][T27609] xr_serial 2-1:6.51: xr_serial converter detected [ 1267.569273][T23749] loop3: detected capacity change from 0 to 40427 [ 1267.583353][T27609] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1267.593037][T27609] xr_serial: probe of ttyUSB0 failed with error -71 [ 1267.605469][T23749] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1267.615995][T27609] usb 2-1: USB disconnect, device number 98 [ 1267.631941][T23749] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1267.643794][T27609] xr_serial 2-1:6.0: device disconnected [ 1267.675075][T23749] F2FS-fs (loop3): invalid crc value [ 1267.739376][T23749] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1267.881982][T23749] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1267.898806][T23749] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1268.069692][ T27] audit: type=1800 audit(2000000428.129:3467): pid=23749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.17104" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1269.039769][T23822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17121'. [ 1269.594990][T23850] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.17130'. [ 1271.308885][T23882] loop3: detected capacity change from 0 to 32768 [ 1271.466549][T23882] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 1271.466549][T23882] [ 1271.520284][T23882] ERROR: (device loop3): remounting filesystem as read-only [ 1271.565585][T23882] ialloc: diAlloc returned -5! [ 1272.102930][T23935] use of bytesused == 0 is deprecated and will be removed in the future, [ 1272.112668][T23935] use the actual size instead. [ 1272.783482][T20974] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1273.005902][T20974] usb 4-1: config index 0 descriptor too short (expected 45, got 27) [ 1273.023449][T20974] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1273.079862][T20974] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.00 [ 1273.104713][T20974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.133419][T20974] usb 4-1: Product: syz [ 1273.157911][T20974] usb 4-1: Manufacturer: syz [ 1273.162540][T20974] usb 4-1: SerialNumber: syz [ 1273.318668][T23987] vivid-000: disconnect [ 1273.335670][T23981] vivid-000: reconnect [ 1273.720352][T21006] usb 4-1: USB disconnect, device number 105 [ 1274.053458][T20974] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1274.291093][T20974] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1274.312739][T20974] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1274.363406][T20974] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.389576][T20974] usb 3-1: config 220 has no interface number 2 [ 1274.404946][T20974] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1274.418605][T20974] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1274.426730][T20974] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1274.457124][T20974] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1274.531775][T20974] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1274.543663][T20974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.563619][T20974] usb 3-1: Product: syz [ 1274.573603][T20974] usb 3-1: Manufacturer: syz [ 1274.596514][T20974] usb 3-1: SerialNumber: syz [ 1274.853575][T20974] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1274.883645][T20974] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1274.890105][T20974] usb 3-1: No valid video chain found. [ 1274.917415][T20974] usb 3-1: selecting invalid altsetting 0 [ 1274.961739][T20974] usb 3-1: selecting invalid altsetting 0 [ 1274.991072][T20974] usbtest: probe of 3-1:220.1 failed with error -22 [ 1275.035773][T20974] usb 3-1: USB disconnect, device number 101 [ 1275.159596][T24075] loop3: detected capacity change from 0 to 256 [ 1275.185485][T24075] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1275.258081][T24075] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1275.517303][T24090] IPVS: Unknown mcast interface: bridge_slave_0 [ 1277.907239][T24190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17231'. [ 1278.830915][T24222] netlink: 332 bytes leftover after parsing attributes in process `syz.1.17243'. [ 1279.023461][T24233] netlink: 'syz.1.17246': attribute type 3 has an invalid length. [ 1279.372399][T24245] IPVS: Error connecting to the multicast addr [ 1279.673204][T21006] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1279.868052][T21006] usb 2-1: Using ep0 maxpacket: 8 [ 1279.893677][T21006] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.893706][T21006] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1279.893738][T21006] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.00 [ 1279.893761][T21006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.896073][T21006] usb 2-1: config 0 descriptor?? [ 1280.118732][T24269] loop3: detected capacity change from 0 to 8 [ 1280.211871][T24269] SQUASHFS error: Unable to read inode 0xe3 [ 1280.326650][T21006] apple 0003:05AC:0292.0016: hidraw0: USB HID v0.00 Device [HID 05ac:0292] on usb-dummy_hcd.1-1/input0 [ 1280.527472][T21006] usb 2-1: USB disconnect, device number 99 [ 1280.749699][T24309] netlink: 104 bytes leftover after parsing attributes in process `syz.3.17262'. [ 1281.226431][T24333] tipc: Started in network mode [ 1281.231351][T24333] tipc: Node identity e0000001, cluster identity 4711 [ 1281.255969][T24333] tipc: New replicast peer: 255.255.255.255 [ 1281.263821][T24333] tipc: Enabled bearer , priority 10 [ 1281.393434][T21006] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1281.588104][T21006] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1281.602872][T21006] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1281.624803][T21006] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1281.656440][T21006] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1281.669726][T21006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.698532][T21006] usb 3-1: Product: syz [ 1281.702725][T21006] usb 3-1: Manufacturer: syz [ 1281.743460][T21006] usb 3-1: SerialNumber: syz [ 1281.763597][T21006] hub 3-1:1.0: bad descriptor, ignoring hub [ 1281.769549][T21006] hub: probe of 3-1:1.0 failed with error -5 [ 1281.994062][T21006] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 102 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1282.249094][T21006] usb 3-1: reset high-speed USB device number 102 using dummy_hcd [ 1282.383471][T20974] tipc: Node number set to 3758096385 [ 1282.503875][T24382] netlink: 'syz.3.17284': attribute type 8 has an invalid length. [ 1282.934003][T21006] usb 3-1: USB disconnect, device number 102 [ 1282.955395][T21006] usblp0: removed [ 1283.009809][T24413] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17292'. [ 1283.373891][T27609] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1283.571577][T24439] loop3: detected capacity change from 0 to 2048 [ 1283.602392][T27609] usb 1-1: Using ep0 maxpacket: 16 [ 1283.621497][T27609] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.650336][T27609] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.667225][T27609] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1283.671180][T24439] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1283.676731][T27609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.714638][T27609] usb 1-1: config 0 descriptor?? [ 1283.851823][ T27] audit: type=1800 audit(2000000443.909:3468): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.17300" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 1284.073429][ T9] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1284.156300][T27609] hid-multitouch 0003:1FD2:6007.0017: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 1284.273428][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1284.289867][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.316835][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.333331][ T9] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1284.342547][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.373550][ T9] usb 3-1: config 0 descriptor?? [ 1284.412600][T27609] usb 1-1: USB disconnect, device number 100 [ 1284.487786][T24489] netlink: 100 bytes leftover after parsing attributes in process `syz.1.17307'. [ 1285.019041][ T9] usb 3-1: string descriptor 0 read error: -71 [ 1285.066128][ T9] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 1285.093500][ T9] letsketch: probe of 0003:6161:4D15.0018 failed with error -32 [ 1285.138450][ T9] usb 3-1: USB disconnect, device number 103 [ 1285.219846][T24518] loop3: detected capacity change from 0 to 4096 [ 1285.777150][T24552] loop3: detected capacity change from 0 to 2048 [ 1285.830482][T24552] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1285.911952][ T5756] udevd[5756]: incorrect nilfs2 checksum on /dev/loop3 [ 1285.919710][T24562] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1286.100322][T24552] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 262144 [ 1286.183436][T24552] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 1286.218354][T24552] Remounting filesystem read-only [ 1286.270963][T24552] NILFS (loop3): error -5 truncating bmap (ino=15) [ 1286.453672][ T5772] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 1286.462594][ T5772] NILFS (loop3): discard dirty page: offset=0, ino=2097152 [ 1286.503387][ T5772] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1286.510629][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1286.520889][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1286.530865][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1286.570051][ T5772] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 1286.591351][ T5772] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 1286.642991][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1286.651888][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1286.703377][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1286.713791][ T5772] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 1286.720504][ T5772] NILFS (loop3): discard dirty block: blocknr=3, size=1024 [ 1286.766642][ T5772] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 1286.783894][ T5772] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 1286.791356][ T5772] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 1286.813441][ T5772] NILFS (loop3): discard dirty page: offset=268697600, ino=6 [ 1286.825644][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1286.845469][ T5772] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1286.852691][ T5772] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1286.891186][ T5772] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1286.938273][ T5772] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 1286.973468][ T5772] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 1286.980807][ T5772] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 1287.030170][ T5772] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 1287.063547][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1287.072452][ T5772] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 1287.084096][T24594] devpts: called with bogus options [ 1287.129680][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1287.155857][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1287.171626][ T5772] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 1287.210576][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1287.234585][ T5772] NILFS (loop3): discard dirty page: offset=67371008, ino=3 [ 1287.244656][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1287.270560][ T5772] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1287.313447][ T5772] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1287.320679][ T5772] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1287.490169][T24610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17339'. [ 1287.531405][T24610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17339'. [ 1287.917332][T24622] netlink: 'syz.1.17344': attribute type 9 has an invalid length. [ 1287.965756][T24622] netlink: 399 bytes leftover after parsing attributes in process `syz.1.17344'. [ 1288.329662][T24642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17351'. [ 1289.390811][T24688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17368'. [ 1289.818671][T24666] loop3: detected capacity change from 0 to 40427 [ 1289.854676][T24666] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 1289.900352][T24666] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1289.928822][T24666] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 1289.957614][T24666] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 1289.987960][T24666] F2FS-fs (loop3): Image doesn't support compression [ 1290.006424][T24666] F2FS-fs (loop3): invalid crc value [ 1290.076605][T24666] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1290.263214][T24666] F2FS-fs (loop3): Start checkpoint disabled! [ 1290.324868][T24666] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1290.331939][T24666] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1290.523339][T24730] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1291.623162][T27609] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1291.853182][T27609] usb 4-1: Using ep0 maxpacket: 8 [ 1291.865671][T27609] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1291.898944][T27609] usb 4-1: config 0 has no interface number 0 [ 1291.927073][T27609] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1291.953530][T27609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.980931][T27609] usb 4-1: Product: syz [ 1292.006437][T27609] usb 4-1: Manufacturer: syz [ 1292.011063][T27609] usb 4-1: SerialNumber: syz [ 1292.055273][T27609] usb 4-1: config 0 descriptor?? [ 1292.300908][T27609] usb 4-1: USB disconnect, device number 106 [ 1293.059519][T24817] loop3: detected capacity change from 0 to 1024 [ 1293.086669][T24818] netlink: 256 bytes leftover after parsing attributes in process `syz.2.17402'. [ 1293.104139][T24817] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1293.113084][T24818] netlink: 64 bytes leftover after parsing attributes in process `syz.2.17402'. [ 1293.141376][T24817] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1293.216983][T24817] EXT4-fs (loop3): can't mount with commit=4, fs mounted w/o journal [ 1293.523266][T27609] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1293.714977][T27609] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1293.736283][T27609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.782458][T27609] usb 2-1: config 0 descriptor?? [ 1293.835674][T27609] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1294.044101][T27609] gspca_spca508: reg_read err -32 [ 1294.104753][T24857] loop3: detected capacity change from 0 to 2048 [ 1294.138470][T24857] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1294.176998][ T5756] udevd[5756]: incorrect nilfs2 checksum on /dev/loop3 [ 1294.186076][T24862] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1294.255583][T27609] gspca_spca508: reg_read err -71 [ 1294.283118][T27609] gspca_spca508: reg_read err -71 [ 1294.312149][T27609] gspca_spca508: reg_read err -71 [ 1294.328842][T27609] gspca_spca508: reg write: error -71 [ 1294.368395][T27609] spca508: probe of 2-1:0.0 failed with error -71 [ 1294.413190][T27609] usb 2-1: USB disconnect, device number 100 [ 1294.696998][T24889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17420'. [ 1294.726219][T24889] netlink: 43 bytes leftover after parsing attributes in process `syz.0.17420'. [ 1294.743053][T24889] netlink: 'syz.0.17420': attribute type 5 has an invalid length. [ 1294.750891][T24889] netlink: 43 bytes leftover after parsing attributes in process `syz.0.17420'. [ 1295.555891][T27609] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1295.732290][T24923] netlink: 'syz.2.17432': attribute type 15 has an invalid length. [ 1295.773523][T27609] usb 1-1: Using ep0 maxpacket: 16 [ 1295.782603][T24927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17433'. [ 1295.783156][T27609] usb 1-1: config 0 interface 0 altsetting 131 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.829321][T27609] usb 1-1: config 0 interface 0 altsetting 131 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1295.864390][T27609] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1295.871042][T27609] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1295.941828][T27609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.981064][T27609] usb 1-1: config 0 descriptor?? [ 1296.047027][T24938] loop3: detected capacity change from 0 to 1024 [ 1296.102724][T24945] netlink: 'syz.1.17439': attribute type 10 has an invalid length. [ 1296.141054][T24938] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 1296.144271][T24945] netlink: 'syz.1.17439': attribute type 10 has an invalid length. [ 1296.159135][T24945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17439'. [ 1296.168683][T24938] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1296.215992][T24938] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.17437: Failed to acquire dquot type 0 [ 1296.245661][T24950] netlink: 'syz.1.17440': attribute type 30 has an invalid length. [ 1296.276388][T24938] EXT4-fs error (device loop3): mb_free_blocks:1954: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 1296.304625][T24938] EXT4-fs (loop3): 1 truncate cleaned up [ 1296.311524][T24938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1296.416596][T27609] hid-picolcd 0003:04D8:C002.0019: unknown main item tag 0x2 [ 1296.492842][T24938] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 1296.506577][T24938] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1296.516350][T27609] hid-picolcd 0003:04D8:C002.0019: No report with id 0x11 found [ 1296.519217][T24938] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.17437: Failed to acquire dquot type 0 [ 1296.628652][T27609] usb 1-1: USB disconnect, device number 101 [ 1296.771886][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.058729][ T27] audit: type=1400 audit(2000000457.119:3469): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26F81648AA2A pid=24988 comm="syz.2.17450" [ 1298.027860][T24986] loop3: detected capacity change from 0 to 32768 [ 1298.094345][T24986] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1298.332301][T24986] XFS (loop3): Ending clean mount [ 1298.405550][T24986] XFS (loop3): Quotacheck needed: Please wait. [ 1298.546368][T24986] XFS (loop3): Quotacheck: Done. [ 1298.783544][T25046] netlink: 'syz.1.17468': attribute type 22 has an invalid length. [ 1298.812677][T25046] netlink: 'syz.1.17468': attribute type 22 has an invalid length. [ 1298.840510][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1298.865413][T25046] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17468'. [ 1300.144457][T25104] netlink: 336 bytes leftover after parsing attributes in process `syz.0.17487'. [ 1300.277340][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.480674][T27609] kernel write not supported for file /uhid (pid: 27609 comm: kworker/0:5) [ 1301.003391][T27609] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1301.213185][T27609] usb 4-1: Using ep0 maxpacket: 16 [ 1301.234994][T27609] usb 4-1: config index 0 descriptor too short (expected 50325, got 36) [ 1301.263580][T27609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.296725][T27609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.323365][T27609] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1301.333473][ T9] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1301.353329][T27609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.387899][T27609] usb 4-1: config 0 descriptor?? [ 1301.555201][ T9] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1301.563981][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.593028][ T9] usb 1-1: config 0 has no interface number 0 [ 1301.603299][ T9] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1301.633377][ T9] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1301.677872][ T9] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1301.693156][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.711194][ T9] usb 1-1: Product: syz [ 1301.726226][ T9] usb 1-1: Manufacturer: syz [ 1301.730888][ T9] usb 1-1: SerialNumber: syz [ 1301.773116][ T9] usb 1-1: config 0 descriptor?? [ 1301.847175][T27609] hid-steam 0003:28DE:1102.001A: unknown main item tag 0x2 [ 1301.873069][T27609] hid-steam 0003:28DE:1102.001A: item fetching failed at offset 4/5 [ 1301.904967][T27609] hid-steam 0003:28DE:1102.001A: steam_probe:parse of hid interface failed [ 1301.933052][T27609] hid-steam: probe of 0003:28DE:1102.001A failed with error -22 [ 1302.105371][T27609] usb 4-1: USB disconnect, device number 107 [ 1302.437662][T25200] [U] [ 1302.485314][T27609] usb 1-1: USB disconnect, device number 102 [ 1303.033065][T27609] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1303.244486][T27609] usb 4-1: Using ep0 maxpacket: 16 [ 1303.275187][T27609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.314309][T27609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.343039][T27609] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1303.393926][T27609] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1303.433024][T27609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.462203][T27609] usb 4-1: config 0 descriptor?? [ 1303.945739][T27609] megaworld 0003:07B5:0312.001B: unknown main item tag 0x0 [ 1303.973771][T27609] megaworld 0003:07B5:0312.001B: unknown main item tag 0x0 [ 1303.991915][T27609] megaworld 0003:07B5:0312.001B: unknown main item tag 0x0 [ 1304.001190][T27609] megaworld 0003:07B5:0312.001B: unknown main item tag 0x0 [ 1304.009340][T27609] megaworld 0003:07B5:0312.001B: unknown main item tag 0x0 [ 1304.018166][T27609] megaworld 0003:07B5:0312.001B: unknown main item tag 0x0 [ 1304.033453][T27609] megaworld 0003:07B5:0312.001B: unknown main item tag 0x0 [ 1304.071941][T27609] megaworld 0003:07B5:0312.001B: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.3-1/input0 [ 1304.096855][T27609] megaworld 0003:07B5:0312.001B: no inputs found [ 1304.154075][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1304.198085][T27609] usb 4-1: USB disconnect, device number 108 [ 1304.300727][T25275] fido_id[25275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1304.363653][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1304.371942][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.400475][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1304.418600][ T9] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1304.438306][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.459355][ T9] usb 1-1: config 0 descriptor?? [ 1304.772333][T25300] netlink: 92 bytes leftover after parsing attributes in process `syz.2.17539'. [ 1304.911355][ T9] hid-multitouch 0003:1FD2:6007.001C: unknown main item tag 0x0 [ 1304.938825][ T9] hid-multitouch 0003:1FD2:6007.001C: unknown main item tag 0x0 [ 1304.967151][ T9] hid-multitouch 0003:1FD2:6007.001C: unknown main item tag 0x0 [ 1305.011247][ T9] hid-multitouch 0003:1FD2:6007.001C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 1305.088699][T25304] loop3: detected capacity change from 0 to 4096 [ 1305.170660][ T9] usb 1-1: USB disconnect, device number 103 [ 1305.179657][T25304] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1305.233344][T25304] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1305.267744][T25315] fido_id[25315]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1305.293280][T25304] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1305.329435][T25304] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1305.357398][T25304] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1305.376215][T25304] ntfs: volume version 3.1. [ 1305.397542][T25304] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1305.408833][ T5799] usb 3-1: [UEAGLE-ATM] firmware is not available [ 1305.416392][T25304] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1305.416869][ T5984] ------------[ cut here ]------------ [ 1305.437104][ T5984] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw' [ 1305.473866][ T5984] WARNING: CPU: 1 PID: 5984 at fs/sysfs/group.c:284 sysfs_remove_group+0x178/0x2a0 [ 1305.483652][ T5984] Modules linked in: [ 1305.487580][ T5984] CPU: 1 PID: 5984 Comm: kworker/1:7 Not tainted syzkaller #0 [ 1305.495630][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1305.506246][ T5984] Workqueue: events request_firmware_work_func [ 1305.512436][ T5984] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 1305.518727][ T5984] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 7a 21 c9 ff 49 8b 17 48 c7 c7 80 b6 da 8a 48 89 de e8 68 b3 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c2 f1 70 ff [ 1305.538552][ T5984] RSP: 0018:ffffc90003307800 EFLAGS: 00010246 [ 1305.544877][ T5984] RAX: 9f84a0da41f71900 RBX: ffffffff8b41ad40 RCX: ffff88805ae4da00 [ 1305.552867][ T5984] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1305.560906][ T5984] RBP: dffffc0000000000 R08: ffffc90003307407 R09: 1ffff92000660e80 [ 1305.569350][ T5984] R10: dffffc0000000000 R11: fffff52000660e81 R12: 1ffffffff16835ac [ 1305.577816][ T5984] R13: 0000000000000001 R14: ffff88807a5745d0 R15: ffff88802f612008 [ 1305.586407][ T5984] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1305.596065][ T5984] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1305.602673][ T5984] CR2: 00007f2dbd99f000 CR3: 0000000018adb000 CR4: 00000000003506e0 [ 1305.611154][ T5984] Call Trace: [ 1305.614950][ T5984] [ 1305.617899][ T5984] ? sysfs_unmerge_group+0x10d/0x130 [ 1305.623662][ T5984] device_del+0x251/0x910 [ 1305.628032][ T5984] ? kill_device+0x160/0x160 [ 1305.632643][ T5984] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1305.639109][ T5984] ? _raw_spin_unlock+0x40/0x40 [ 1305.644423][ T5984] ? complete_all+0xd0/0x1d0 [ 1305.649047][ T5984] firmware_fallback_sysfs+0x682/0x930 [ 1305.655016][ T5984] _request_firmware+0xf27/0x1510 [ 1305.660088][ T5984] ? request_firmware+0x50/0x50 [ 1305.665589][ T5984] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1305.671604][ T5984] ? read_lock_is_recursive+0x20/0x20 [ 1305.676301][T25304] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1305.677454][ T5984] request_firmware_work_func+0xb0/0x1b0 [ 1305.690537][T25304] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1305.694501][ T5984] ? process_scheduled_works+0x96f/0x15d0 [ 1305.711532][ T5984] process_scheduled_works+0xa5d/0x15d0 [ 1305.717864][ T5984] ? assign_work+0x430/0x430 [ 1305.722490][ T5984] ? assign_work+0x3d0/0x430 [ 1305.727596][ T5984] worker_thread+0xa55/0xfc0 [ 1305.732234][ T5984] kthread+0x2fa/0x390 [ 1305.736781][ T5984] ? pr_cont_work+0x560/0x560 [ 1305.741486][ T5984] ? kthread_blkcg+0xd0/0xd0 [ 1305.746551][ T5984] ret_from_fork+0x48/0x80 [ 1305.750808][T25304] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1305.750978][ T5984] ? kthread_blkcg+0xd0/0xd0 [ 1305.770734][ T5984] ret_from_fork_asm+0x11/0x20 [ 1305.776001][ T5984] [ 1305.779044][ T5984] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1305.786330][ T5984] CPU: 1 PID: 5984 Comm: kworker/1:7 Not tainted syzkaller #0 [ 1305.793794][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1305.803856][ T5984] Workqueue: events request_firmware_work_func [ 1305.810036][ T5984] Call Trace: [ 1305.813322][ T5984] [ 1305.816263][ T5984] dump_stack_lvl+0x18c/0x250 [ 1305.820963][ T5984] ? show_regs_print_info+0x20/0x20 [ 1305.826182][ T5984] ? load_image+0x400/0x400 [ 1305.830723][ T5984] panic+0x2dc/0x730 [ 1305.834644][ T5984] ? bpf_jit_dump+0xd0/0xd0 [ 1305.839158][ T5984] ? ret_from_fork_asm+0x11/0x20 [ 1305.844100][ T5984] __warn+0x2e0/0x470 [ 1305.848071][ T5984] ? sysfs_remove_group+0x178/0x2a0 [ 1305.853256][ T5984] ? sysfs_remove_group+0x178/0x2a0 [ 1305.858444][ T5984] report_bug+0x2be/0x4f0 [ 1305.862768][ T5984] ? sysfs_remove_group+0x178/0x2a0 [ 1305.867958][ T5984] ? sysfs_remove_group+0x178/0x2a0 [ 1305.873142][ T5984] ? sysfs_remove_group+0x17a/0x2a0 [ 1305.878329][ T5984] handle_bug+0xcf/0x120 [ 1305.882565][ T5984] exc_invalid_op+0x1a/0x50 [ 1305.887063][ T5984] asm_exc_invalid_op+0x1a/0x20 [ 1305.891908][ T5984] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 1305.897709][ T5984] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 7a 21 c9 ff 49 8b 17 48 c7 c7 80 b6 da 8a 48 89 de e8 68 b3 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c2 f1 70 ff [ 1305.917308][ T5984] RSP: 0018:ffffc90003307800 EFLAGS: 00010246 [ 1305.923365][ T5984] RAX: 9f84a0da41f71900 RBX: ffffffff8b41ad40 RCX: ffff88805ae4da00 [ 1305.931324][ T5984] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1305.939283][ T5984] RBP: dffffc0000000000 R08: ffffc90003307407 R09: 1ffff92000660e80 [ 1305.947241][ T5984] R10: dffffc0000000000 R11: fffff52000660e81 R12: 1ffffffff16835ac [ 1305.955198][ T5984] R13: 0000000000000001 R14: ffff88807a5745d0 R15: ffff88802f612008 [ 1305.963171][ T5984] ? sysfs_unmerge_group+0x10d/0x130 [ 1305.968447][ T5984] device_del+0x251/0x910 [ 1305.972773][ T5984] ? kill_device+0x160/0x160 [ 1305.977348][ T5984] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1305.983316][ T5984] ? _raw_spin_unlock+0x40/0x40 [ 1305.988153][ T5984] ? complete_all+0xd0/0x1d0 [ 1305.992732][ T5984] firmware_fallback_sysfs+0x682/0x930 [ 1305.998192][ T5984] _request_firmware+0xf27/0x1510 [ 1306.003220][ T5984] ? request_firmware+0x50/0x50 [ 1306.008062][ T5984] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1306.014031][ T5984] ? read_lock_is_recursive+0x20/0x20 [ 1306.019390][ T5984] request_firmware_work_func+0xb0/0x1b0 [ 1306.025018][ T5984] ? process_scheduled_works+0x96f/0x15d0 [ 1306.030728][ T5984] process_scheduled_works+0xa5d/0x15d0 [ 1306.036281][ T5984] ? assign_work+0x430/0x430 [ 1306.040880][ T5984] ? assign_work+0x3d0/0x430 [ 1306.045473][ T5984] worker_thread+0xa55/0xfc0 [ 1306.050075][ T5984] kthread+0x2fa/0x390 [ 1306.054134][ T5984] ? pr_cont_work+0x560/0x560 [ 1306.058805][ T5984] ? kthread_blkcg+0xd0/0xd0 [ 1306.063386][ T5984] ret_from_fork+0x48/0x80 [ 1306.067799][ T5984] ? kthread_blkcg+0xd0/0xd0 [ 1306.072377][ T5984] ret_from_fork_asm+0x11/0x20 [ 1306.077141][ T5984] [ 1306.080462][ T5984] Kernel Offset: disabled [ 1306.084902][ T5984] Rebooting in 86400 seconds..