last executing test programs: 4.312258355s ago: executing program 4 (id=1622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) 4.112075111s ago: executing program 4 (id=1625): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@gettaction={0x18, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 3.944448976s ago: executing program 4 (id=1628): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f0000001080)) 3.918305397s ago: executing program 4 (id=1629): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000404e040c12000000000001090224000100005000090400fefd0300000009210400080122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@global=@item_012={0x1, 0x1, 0x1, "ed"}, @main=@item_4={0x3, 0x0, 0x8, "0c00c1ed"}, @global=@item_012={0x0, 0x1, 0xa}]}}, 0x0}, 0x0) 2.513486011s ago: executing program 1 (id=1650): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0xffff}], 0x1, &(0x7f0000000040)) 2.351181586s ago: executing program 2 (id=1652): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2000844, &(0x7f0000000080)={[{@dots}, {@nodots}, {@dots}, {@fat=@nocase}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@fat=@errors_remount}, {@fat=@debug}, {@fat=@gid}, {}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffb1d}}, {@fat=@sys_immutable}, {@dots}, {@fat=@discard}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 2.350973996s ago: executing program 1 (id=1653): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x103482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x2c, "fee8090078fc179fd1f8a0e91ddaac9ebd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) 2.285902428s ago: executing program 1 (id=1654): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e00)={[{@hide}, {@nojoliet}, {@map_normal}, {@nocompress}, {@showassoc}, {@map_acorn}, {@map_normal}, {@unhide}, {@utf8}, {@map_off}, {@dmode={'dmode', 0x3d, 0x9fbc}}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x2, 0xa1a, &(0x7f00000001c0)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6a, &(0x7f0000000000)={0x200d, 0x1, 0x12, 0x20, 0x200f, 0x0}) 2.171119712s ago: executing program 2 (id=1655): socket$kcm(0x2, 0x5, 0x84) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8005, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x1, 0x1, 0x3, "9adf66552fb8af2b9f14f35681de96a590d25f2744e043cc1e70c317fd81ee00", 0x32314d56}) 2.076515984s ago: executing program 1 (id=1657): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1.985191927s ago: executing program 2 (id=1659): syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000001900)='./file1\x00', 0x14090, &(0x7f0000001800)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES32], 0xfd, 0x1512, &(0x7f0000005080)="$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") openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x62) mount$9p_fd(0x0, 0x0, 0x0, 0x1004, 0x0) 1.916052829s ago: executing program 1 (id=1662): syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804, &(0x7f0000000000)=ANY=[@ANYBLOB='iocharset=macinuit,umask=00000000000000000000011,errors=continue,namecase=1,allow_utime=00000000000000000051165,errors=remount-ro,fmask=00000000000000000000004,allow_utime=00000000000000000000011,namecase=1,fmask=000000000000000000001,\x00\x00\x00'], 0x3, 0x1513, &(0x7f00000006c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000bc0)='./cgroup\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) removexattr(&(0x7f0000000200)='./cgroup\x00', 0x0) 1.878510781s ago: executing program 3 (id=1663): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.680906347s ago: executing program 4 (id=1665): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f00000008c0)=ANY=[@ANYBLOB="646973636172642c696f636861727365743d63703835352c6572726f72733d72656d6f756e742d726f2c696e746567726974792c6e6f646973636172642c646973636172643d3078303030303030303030303030303030382c6572726f72733d636f6e74696e7565006969736f383835392d342c756d61736b3d3078303030303030303030303030303038312c696f6368617257fd743d6d6163677265656b2c71756f74612c6572726f1729def7e35bcb756e742d726f2c726573697a653d3078303030303030303030181829303030303030312c756d61736b3d3078303030303030303030303032303034352c66736d616769633d307830dcb1c47cb87a74ac1a3030303030303030303030303030392c646566636f6e746578743d726f6f742c66736e616d653d757d407d587d5b2d292b2c000d1c13f7c892c8615d265c6376539175380511bac765713e83a65e4fdf011c705fc6838005120385ac61b970f45d1492a0612eb8000000000000808fc76f91b7b9a5ce77887858ea333961d1ef1e4eabd4c87181dbf575c47e9b8eea9d6806fa159e0525146f6312b4931cffed0000", @ANYRES8, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a65b310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25510952b43a773f9cd35d70e03d69b2af2ead1c39ef1c55be4e5afc92674e57e227951a9706cec7b734dec89e0ed0de44f23a3de29cee4de42e117c71af53f785eb2feb89"], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), 0x2000) 1.680764047s ago: executing program 3 (id=1666): unshare(0x2c020400) r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000500)={0x1d, 0x0, 0x1, {0x0, 0xf0}, 0xfe}, 0x18) 1.604354569s ago: executing program 1 (id=1667): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x2904c, 0x83, 0x10003, '\x00', [{0x0, 0x2, 0x401, 0x80000001, 0xffff, 0x1000}, {0xffffffff, 0xfffffffd, 0x9, 0xd, 0x2, 0x77}]}) 1.58236829s ago: executing program 0 (id=1668): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) unshare(0x22020600) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) 1.504488032s ago: executing program 3 (id=1669): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x6005}) 1.440144964s ago: executing program 3 (id=1670): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@RTA_IP_PROTO={0x5}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) 1.336054098s ago: executing program 0 (id=1671): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 1.291869489s ago: executing program 3 (id=1672): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="0000006526bbecefcae8f4ff93be00000000000000004c53be5b27001f925c5f", 0x20) 1.192408292s ago: executing program 0 (id=1673): r0 = socket$inet(0x2, 0x6, 0x0) listen(r0, 0x314e) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.192186912s ago: executing program 3 (id=1674): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f00000004c0)=ANY=[]) 641.644629ms ago: executing program 2 (id=1675): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000040), 0xfd, 0x269, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81) ioctl$FITRIM(r0, 0x40086604, &(0x7f00000000c0)={0x3, 0x3, 0x3}) 513.007863ms ago: executing program 4 (id=1676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000006700000008001c01"], 0x1c}}, 0x0) 272.530581ms ago: executing program 0 (id=1677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 219.140453ms ago: executing program 2 (id=1678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080003401300000005000200000000000800044000000000080007400000000008000640000000010900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 99.819276ms ago: executing program 0 (id=1679): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x20000040) 330.6µs ago: executing program 2 (id=1680): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000075e40)={0x1, &(0x7f0000075dc0)=[{0x8000001, 0x0, 0x0, 0x0, 0xffffffff}]}) dup(0xffffffffffffffff) 0s ago: executing program 0 (id=1681): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x11, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd76, 0x0, 0x10000, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0x37b6b0e1, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x4000000, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x0, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) kernel console output (not intermixed with test programs): ta cause=failed(directio) comm="syz.1.420" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 100.393269][ T5264] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 100.412816][ T5264] REISERFS (device loop0): using ordered data mode [ 100.428021][ T5264] reiserfs: using flush barriers [ 100.435621][ T5264] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.452501][ T5264] REISERFS (device loop0): checking transaction log (loop0) [ 100.547618][ T5264] REISERFS (device loop0): Using tea hash to sort names [ 100.576982][ T5264] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 100.768691][ T4563] hfsplus: b-tree write err: -5, ino 25 [ 100.798467][ T4563] hfsplus: b-tree write err: -5, ino 4 [ 100.819709][ T5283] usb usb7: usbfs: process 5283 (syz.4.426) did not claim interface 4 before use [ 100.829022][ T4563] hfsplus: b-tree write err: -5, ino 2 [ 101.020543][ T5286] loop3: detected capacity change from 0 to 2048 [ 101.107805][ T5286] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.394852][ T4379] kernel write not supported for file /amidi2 (pid: 4379 comm: kworker/1:14) [ 101.488657][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 101.512064][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 101.554884][ T5305] device macsec2 entered promiscuous mode [ 101.795417][ T5317] loop3: detected capacity change from 0 to 256 [ 101.813712][ T5320] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.441'. [ 101.846756][ T5320] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 101.921926][ T5317] FAT-fs (loop3): Directory bread(block 64) failed [ 101.958144][ T5317] FAT-fs (loop3): Directory bread(block 65) failed [ 101.980363][ T5317] FAT-fs (loop3): Directory bread(block 66) failed [ 102.019814][ T5317] FAT-fs (loop3): Directory bread(block 67) failed [ 102.031535][ T5317] FAT-fs (loop3): Directory bread(block 68) failed [ 102.038112][ T5317] FAT-fs (loop3): Directory bread(block 69) failed [ 102.090650][ T5317] FAT-fs (loop3): Directory bread(block 70) failed [ 102.147115][ T5317] FAT-fs (loop3): Directory bread(block 71) failed [ 102.201661][ T5317] FAT-fs (loop3): Directory bread(block 72) failed [ 102.208922][ T5317] FAT-fs (loop3): Directory bread(block 73) failed [ 102.340525][ T5338] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.353482][ T5340] loop0: detected capacity change from 0 to 256 [ 102.485705][ T1336] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.494816][ T5340] FAT-fs (loop0): Directory bread(block 64) failed [ 102.519549][ T5340] FAT-fs (loop0): Directory bread(block 65) failed [ 102.548127][ T5340] FAT-fs (loop0): Directory bread(block 66) failed [ 102.574578][ T5340] FAT-fs (loop0): Directory bread(block 67) failed [ 102.598232][ T5340] FAT-fs (loop0): Directory bread(block 68) failed [ 102.616850][ T5340] FAT-fs (loop0): Directory bread(block 69) failed [ 102.660339][ T5340] FAT-fs (loop0): Directory bread(block 70) failed [ 102.666937][ T5340] FAT-fs (loop0): Directory bread(block 71) failed [ 102.683260][ T5348] mmap: syz.3.453 (5348) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 102.702350][ T5340] FAT-fs (loop0): Directory bread(block 72) failed [ 102.734940][ T5340] FAT-fs (loop0): Directory bread(block 73) failed [ 102.759666][ T1336] usb 5-1: Using ep0 maxpacket: 8 [ 102.899873][ T1336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.915834][ T1336] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.927624][ T5340] attempt to access beyond end of device [ 102.927624][ T5340] loop0: rw=524288, want=1164, limit=256 [ 102.950145][ T1336] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 102.964899][ T1336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.983767][ T1336] usb 5-1: config 0 descriptor?? [ 102.990457][ T5340] attempt to access beyond end of device [ 102.990457][ T5340] loop0: rw=0, want=1164, limit=256 [ 103.004040][ T26] audit: type=1800 audit(24951530.510:7): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.451" name="file0" dev="loop0" ino=1048671 res=0 errno=0 [ 103.289028][ T4563] attempt to access beyond end of device [ 103.289028][ T4563] loop1: rw=1, want=162, limit=64 [ 103.303551][ T5364] loop3: detected capacity change from 0 to 4096 [ 103.307176][ T4563] buffer_io_error: 102 callbacks suppressed [ 103.307189][ T4563] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 103.324702][ T4563] attempt to access beyond end of device [ 103.324702][ T4563] loop1: rw=1, want=163, limit=64 [ 103.335390][ T4563] Buffer I/O error on dev loop1, logical block 162, lost async page write [ 103.344751][ T4563] attempt to access beyond end of device [ 103.344751][ T4563] loop1: rw=1, want=164, limit=64 [ 103.356222][ T4563] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 103.359839][ T5364] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 103.364878][ T4563] attempt to access beyond end of device [ 103.364878][ T4563] loop1: rw=1, want=168, limit=64 [ 103.392324][ T4563] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 103.403582][ T4563] attempt to access beyond end of device [ 103.403582][ T4563] loop1: rw=1, want=170, limit=64 [ 103.422053][ T4563] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 103.434551][ T4563] attempt to access beyond end of device [ 103.434551][ T4563] loop1: rw=1, want=172, limit=64 [ 103.452425][ T1336] kye 0003:0458:5019.0006: unknown main item tag 0x2 [ 103.453078][ T4563] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 103.459314][ T4234] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.468879][ T4563] attempt to access beyond end of device [ 103.468879][ T4563] loop1: rw=1, want=173, limit=64 [ 103.481324][ T1336] kye 0003:0458:5019.0006: unknown main item tag 0x0 [ 103.494741][ T1336] kye 0003:0458:5019.0006: unknown main item tag 0x0 [ 103.503692][ T4563] Buffer I/O error on dev loop1, logical block 172, lost async page write [ 103.515736][ T1336] kye 0003:0458:5019.0006: unknown main item tag 0x0 [ 103.515775][ T4563] attempt to access beyond end of device [ 103.515775][ T4563] loop1: rw=1, want=174, limit=64 [ 103.534800][ T1336] kye 0003:0458:5019.0006: unknown main item tag 0x0 [ 103.541072][ T4563] Buffer I/O error on dev loop1, logical block 173, lost async page write [ 103.546388][ T1336] kye 0003:0458:5019.0006: unknown main item tag 0x0 [ 103.556974][ T4563] Buffer I/O error on dev loop1, logical block 174, lost async page write [ 103.557051][ T4563] Buffer I/O error on dev loop1, logical block 175, lost async page write [ 103.600615][ T1336] kye 0003:0458:5019.0006: hidraw0: USB HID v0.04 Device [HID 0458:5019] on usb-dummy_hcd.4-1/input0 [ 103.624106][ T1336] kye 0003:0458:5019.0006: tablet-enabling feature report not found [ 103.644431][ T1336] kye 0003:0458:5019.0006: tablet enabling failed [ 103.698139][ T1336] usb 5-1: USB disconnect, device number 3 [ 103.750015][ T4234] usb 1-1: Using ep0 maxpacket: 16 [ 103.863972][ T5368] fido_id[5368]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 103.890743][ T4234] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.921300][ T4234] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.145384][ T4234] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.164893][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.194474][ T4234] usb 1-1: Product: syz [ 104.198682][ T4234] usb 1-1: Manufacturer: syz [ 104.249038][ T4234] usb 1-1: SerialNumber: syz [ 104.262408][ T5378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 104.289799][ T5378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 104.327251][ T5378] device macsec1 entered promiscuous mode [ 104.467821][ T5372] loop3: detected capacity change from 0 to 32768 [ 104.614897][ T5372] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 104.624853][ T4234] usb 1-1: 0:2 : does not exist [ 104.693435][ T4234] usb 1-1: USB disconnect, device number 5 [ 104.775927][ T5388] loop2: detected capacity change from 0 to 8192 [ 104.785829][ T4195] ocfs2: Unmounting device (7,3) on (node local) [ 104.850520][ T5388] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 104.891327][ T5388] REISERFS (device loop2): using ordered data mode [ 104.915267][ T5388] reiserfs: using flush barriers [ 104.948312][ T5388] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.984345][ T5194] udevd[5194]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.994784][ T5399] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.120061][ T5388] REISERFS (device loop2): checking transaction log (loop2) [ 105.169767][ T5388] REISERFS (device loop2): Using r5 hash to sort names [ 105.183413][ T5388] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 105.960528][ T5422] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.970226][ T5402] loop3: detected capacity change from 0 to 32768 [ 106.097135][ T5430] loop0: detected capacity change from 0 to 1024 [ 106.689085][ T5455] loop0: detected capacity change from 0 to 128 [ 106.967586][ T5466] loop3: detected capacity change from 0 to 2048 [ 107.174367][ T13] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 107.207388][ T5444] syz.2.499 (5444): drop_caches: 2 [ 107.211092][ T5455] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.290289][ T5467] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.705469][ T5477] loop2: detected capacity change from 0 to 512 [ 107.780395][ T13] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 107.796690][ T13] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 107.825527][ T13] usb 5-1: Product: syz [ 107.831444][ T13] usb 5-1: Manufacturer: syz [ 107.846323][ T13] usb 5-1: SerialNumber: syz [ 107.879711][ T4239] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.889331][ T5469] loop1: detected capacity change from 0 to 32768 [ 107.909230][ T5477] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,lazytime,,errors=continue. Quota mode: writeback. [ 107.925357][ T13] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 107.975797][ T5486] loop3: detected capacity change from 0 to 64 [ 108.159480][ T4239] usb 1-1: Using ep0 maxpacket: 32 [ 108.299654][ T4239] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 108.316590][ T4239] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 108.366503][ T5492] loop2: detected capacity change from 0 to 8192 [ 108.379945][ T13] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 108.399470][ T13] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 108.428713][ T5492] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.538957][ T5492] exFAT-fs (loop2): invalid fs_name [ 108.544337][ T5492] exFAT-fs (loop2): failed to read boot sector [ 108.549708][ T4239] usb 1-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 108.557997][ T5492] exFAT-fs (loop2): failed to recognize exfat type [ 108.567327][ T4239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.598997][ T4239] usb 1-1: Product: syz [ 108.607450][ T4239] usb 1-1: Manufacturer: syz [ 108.612666][ T4239] usb 1-1: SerialNumber: syz [ 108.621233][ T13] usb 5-1: USB disconnect, device number 4 [ 108.658557][ T5475] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 108.701498][ T5499] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 108.799159][ T4197] sysv_free_block: flc_count > flc_size [ 108.820158][ T4197] sysv_free_block: flc_count > flc_size [ 108.825756][ T4197] sysv_free_block: flc_count > flc_size [ 108.851174][ T5491] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.518 (5491) [ 108.873976][ T4197] sysv_free_block: flc_count > flc_size [ 108.884590][ T4197] sysv_free_block: flc_count > flc_size [ 108.898751][ T5491] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 108.908210][ T4197] sysv_free_block: flc_count > flc_size [ 108.914436][ T4197] sysv_free_block: flc_count > flc_size [ 108.920485][ T5491] BTRFS info (device loop1): using free space tree [ 108.932759][ T5491] BTRFS info (device loop1): has skinny extents [ 108.939145][ T4197] sysv_free_block: flc_count > flc_size [ 108.955654][ T4197] sysv_free_block: flc_count > flc_size [ 108.961317][ T4197] sysv_free_block: flc_count > flc_size [ 108.968498][ T4197] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 109.016117][ T5491] BTRFS info (device loop1): enabling ssd optimizations [ 109.108236][ T4239] usb 1-1: USB disconnect, device number 6 [ 109.831922][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.305482][ T5523] set_capacity_and_notify: 2 callbacks suppressed [ 110.305499][ T5523] loop2: detected capacity change from 0 to 32768 [ 110.328521][ T5555] loop1: detected capacity change from 0 to 2048 [ 110.448951][ T5559] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.493561][ T5561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 110.705418][ T5528] loop4: detected capacity change from 0 to 32768 [ 110.887189][ T5528] XFS (loop4): Mounting V5 Filesystem [ 110.966139][ T5528] XFS (loop4): Ending clean mount [ 111.057922][ T5528] XFS (loop4): Quotacheck needed: Please wait. [ 111.210581][ T5528] XFS (loop4): Quotacheck: Done. [ 111.320315][ T4192] XFS (loop4): Unmounting Filesystem [ 111.427605][ T5606] device team_slave_0 entered promiscuous mode [ 111.434353][ T5606] device team_slave_1 entered promiscuous mode [ 111.441846][ T5606] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.663775][ T5616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.563'. [ 111.962486][ T5627] loop2: detected capacity change from 0 to 1024 [ 112.275312][ T5638] program syz.4.571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.501028][ T5644] netlink: 'syz.0.574': attribute type 6 has an invalid length. [ 112.531295][ T5612] loop1: detected capacity change from 0 to 32768 [ 112.765728][ T5627] hfsplus: unable to parse mount options [ 112.852378][ T5627] kAFS: unable to lookup cell '°ÇÈsYSÝ‹ñ½øAœ‹Ù¸ë±?Š¥hÆrÌF5=‰XŠ$jÕÎÓ‹Zçîñ^îÛº2Ûéí׳Hªq=V²ØÎÇÕJt›dçŽùzÏh¬D ŒøAšä[¹st­ç÷õëü¹L®ýâˆ}ŽZvæ“݌̥¹Ï³ñÒðÜy Ž4¥î3¨“Û£¤›ƒ#9ÿá89?‘¯Ó\ÿ¢?çmÌGiƒ™XˆR~õE¼ÚŸó[_¼÷rã/ÿó¯Wn”ÖnÞ¸¾qîOéPM…ÁLÔ{2ñÚð«/ÏD#ÍDkôLLî˜~‚ó8@•<ÙT4âlùݬ´oô\‚ïŵXŽ‹1óq)æâ±õ¾+ìT_^ËõÕþœd÷ZiçüVü™/õTúå>•Vš——zòÚ;ÓÕ²cùžË¿Š¹ž,½<üêû¯@' [ 113.013825][ T5660] netlink: 'syz.0.582': attribute type 1 has an invalid length. [ 113.303973][ T5672] loop0: detected capacity change from 0 to 64 [ 113.384195][ T5626] syz.3.567 (5626): drop_caches: 2 [ 113.385860][ T5674] device bridge0 entered promiscuous mode [ 113.404427][ T5674] device macvlan2 entered promiscuous mode [ 113.768009][ T5688] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 113.779774][ T5688] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 113.789836][ T5688] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 113.825599][ T5696] loop0: detected capacity change from 0 to 256 [ 113.927371][ T5704] loop3: detected capacity change from 0 to 64 [ 114.063268][ T5712] loop2: detected capacity change from 0 to 1024 [ 114.084121][ T5714] loop0: detected capacity change from 0 to 512 [ 114.118176][ T5716] tipc: Enabling of bearer rejected, failed to enable media [ 114.124803][ T5714] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 114.140898][ T4374] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.177530][ T5714] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 114.186951][ T5712] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 114.244896][ T5714] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 114.255772][ T5714] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 114.265866][ T5714] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 114.285666][ T5714] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,noblock_validity,resgid=0x0000000000000000,nobarrier,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 114.307777][ T5723] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 114.375407][ T4374] usb 2-1: Using ep0 maxpacket: 8 [ 114.506121][ T5723] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.613: bad orphan inode 15 [ 114.597461][ T5723] ext4_test_bit(bit=14, block=18) = 1 [ 114.626365][ T5723] is_bad_inode(inode)=0 [ 114.643167][ T5723] NEXT_ORPHAN(inode)=1023 [ 114.649501][ T4374] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 114.654384][ T5723] max_ino=32 [ 114.658590][ T4374] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 114.658618][ T4374] usb 2-1: Product: syz [ 114.658634][ T4374] usb 2-1: Manufacturer: syz [ 114.658650][ T4374] usb 2-1: SerialNumber: syz [ 114.676777][ T4374] usb 2-1: config 0 descriptor?? [ 114.695368][ T5723] i_nlink=0 [ 114.708409][ T5723] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.613: bg 0: block 161: padding at end of block bitmap is not set [ 114.778618][ T4374] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 114.799664][ T5723] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 114.834292][ T5723] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,init_itable,,errors=continue. Quota mode: none. [ 114.947618][ T5723] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.613: deleted inode referenced: 15 [ 115.412055][ T4374] gspca_zc3xx: reg_w_i err -71 [ 115.416920][ T4374] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 115.418666][ T5767] set_capacity_and_notify: 1 callbacks suppressed [ 115.418678][ T5767] loop2: detected capacity change from 0 to 256 [ 115.436092][ T4374] usb 2-1: USB disconnect, device number 3 [ 115.470973][ T26] audit: type=1326 audit(24951543.123:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1149dfde59 code=0x7ffc0000 [ 115.508697][ T5772] loop0: detected capacity change from 0 to 256 [ 115.523242][ T26] audit: type=1326 audit(24951543.133:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1149dfde59 code=0x7ffc0000 [ 115.561799][ T26] audit: type=1326 audit(24951543.133:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1149dfde59 code=0x7ffc0000 [ 115.597704][ T5772] exfat: Deprecated parameter 'namecase' [ 115.603463][ T5772] exfat: Deprecated parameter 'namecase' [ 115.622800][ T5772] exfat: Deprecated parameter 'namecase' [ 115.635061][ T26] audit: type=1326 audit(24951543.143:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f1149dfde59 code=0x7ffc0000 [ 115.673007][ T26] audit: type=1326 audit(24951543.143:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1149dfde59 code=0x7ffc0000 [ 115.676795][ T5775] loop4: detected capacity change from 0 to 1024 [ 115.703106][ T26] audit: type=1326 audit(24951543.143:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1149dfde59 code=0x7ffc0000 [ 115.735243][ T26] audit: type=1326 audit(24951543.143:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1149dfde59 code=0x7ffc0000 [ 115.771373][ T26] audit: type=1326 audit(24951543.143:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1149dfde59 code=0x7ffc0000 [ 115.772655][ T5772] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 116.188331][ T5798] loop0: detected capacity change from 0 to 1024 [ 116.308246][ T5812] tmpfs: Bad value for 'mpol' [ 116.344089][ T5798] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,acl,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 116.388031][ T5819] loop3: detected capacity change from 0 to 256 [ 116.414085][ T5821] netlink: 104 bytes leftover after parsing attributes in process `syz.2.656'. [ 116.437327][ T5798] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz.0.648: path /146/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 116.465118][ T5819] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.531799][ T5798] EXT4-fs (loop0): Remounting filesystem read-only [ 116.626010][ T5828] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 116.642058][ T5831] loop2: detected capacity change from 0 to 512 [ 116.655067][ T5828] FAT-fs (loop3): Filesystem has been set read-only [ 116.821074][ T5831] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.996090][ T5831] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #2: comm syz.2.663: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 117.277943][ T5848] openvswitch: netlink: Actions may not be safe on all matching packets [ 117.286677][ T26] audit: type=1800 audit(24951544.980:16): pid=5819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.657" name="file1" dev="loop3" ino=1048673 res=0 errno=0 [ 117.322974][ T5850] loop4: detected capacity change from 0 to 128 [ 117.422792][ T5850] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.465772][ T5855] tipc: Started in network mode [ 117.497866][ T5855] tipc: Node identity 2, cluster identity 4711 [ 117.526935][ T5855] tipc: Node number set to 2 [ 117.614328][ T5857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 118.261615][ T5889] loop2: detected capacity change from 0 to 164 [ 118.593438][ T5902] loop2: detected capacity change from 0 to 2048 [ 118.651999][ T5902] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,data_err=abort,,errors=continue. Quota mode: writeback. [ 118.752028][ T5902] EXT4-fs (loop2): resizing filesystem from 256 to 0 blocks [ 118.815260][ T5902] EXT4-fs warning (device loop2): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 118.849570][ T5907] loop1: detected capacity change from 0 to 4096 [ 118.983328][ T5908] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.278401][ T5894] XFS (loop3): Mounting V5 Filesystem [ 119.497968][ T5894] XFS (loop3): Ending clean mount [ 119.569228][ T5936] device ip6_vti0 entered promiscuous mode [ 119.645827][ T5905] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.694 (5905) [ 119.658223][ T4195] XFS (loop3): Unmounting Filesystem [ 119.750309][ T5905] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 119.780824][ T5905] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 119.859587][ T5905] BTRFS info (device loop4): force lzo compression, level 0 [ 119.898974][ T5905] BTRFS info (device loop4): max_inline at 4096 [ 119.905288][ T5905] BTRFS info (device loop4): allowing degraded mounts [ 119.913111][ T5905] BTRFS info (device loop4): using free space tree [ 119.930570][ T5905] BTRFS info (device loop4): has skinny extents [ 120.090466][ T5905] BTRFS info (device loop4): enabling ssd optimizations [ 120.251595][ T4375] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 120.273800][ T5932] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 120.314925][ T5932] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 120.353184][ T5932] F2FS-fs (loop2): invalid crc value [ 120.409694][ T5968] device netdevsim0 entered promiscuous mode [ 120.440135][ T5932] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.638613][ T5932] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.672804][ T4375] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.728969][ T5979] set_capacity_and_notify: 3 callbacks suppressed [ 120.728985][ T5979] loop0: detected capacity change from 0 to 256 [ 120.742715][ T4375] usb 2-1: not running at top speed; connect to a high speed hub [ 120.773896][ T5978] loop4: detected capacity change from 0 to 512 [ 120.832680][ T4375] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.846915][ T5978] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 120.872858][ T4375] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.912959][ T5979] exfat: Deprecated parameter 'utf8' [ 120.918377][ T5979] exfat: Deprecated parameter 'namecase' [ 120.961068][ T5979] exfat: Deprecated parameter 'namecase' [ 121.018479][ T5979] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc3758327, utbl_chksum : 0xe619d30d) [ 121.049550][ T4375] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 121.058654][ T4375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.110621][ T4375] usb 2-1: Product: syz [ 121.114845][ T4375] usb 2-1: Manufacturer: syz [ 121.158032][ T4375] usb 2-1: SerialNumber: syz [ 121.167783][ T5987] loop3: detected capacity change from 0 to 512 [ 121.367646][ T5987] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.431217][ T5987] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:106: comm syz.3.719: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 121.473912][ T5997] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 121.571942][ T4375] usb 2-1: USB disconnect, device number 4 [ 121.791319][ T6016] device bond_slave_0 entered promiscuous mode [ 121.798008][ T6016] device bond_slave_1 entered promiscuous mode [ 121.821175][ T6018] loop0: detected capacity change from 0 to 256 [ 121.828846][ T5194] udevd[5194]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.849132][ T6016] device vlan2 entered promiscuous mode [ 121.873694][ T6016] device bond0 entered promiscuous mode [ 121.940032][ T6018] FAT-fs (loop0): Directory bread(block 64) failed [ 121.983376][ T6018] FAT-fs (loop0): Directory bread(block 65) failed [ 121.994487][ T6018] FAT-fs (loop0): Directory bread(block 66) failed [ 122.023958][ T6018] FAT-fs (loop0): Directory bread(block 67) failed [ 122.050414][ T6031] loop1: detected capacity change from 0 to 512 [ 122.070583][ T6018] FAT-fs (loop0): Directory bread(block 68) failed [ 122.093925][ T6018] FAT-fs (loop0): Directory bread(block 69) failed [ 122.100581][ T6018] FAT-fs (loop0): Directory bread(block 70) failed [ 122.128625][ T6018] FAT-fs (loop0): Directory bread(block 71) failed [ 122.162265][ T6018] FAT-fs (loop0): Directory bread(block 72) failed [ 122.182702][ T1336] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.191573][ T6018] FAT-fs (loop0): Directory bread(block 73) failed [ 122.198636][ T6031] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.198660][ T6031] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 122.226710][ T6031] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e02c, mo2=0006] [ 122.256110][ T6031] System zones: 0-2, 18-18, 34-35 [ 122.282270][ T6031] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 122.381824][ T6048] loop3: detected capacity change from 0 to 128 [ 122.423990][ T6048] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.458295][ T1336] usb 5-1: Using ep0 maxpacket: 16 [ 122.597176][ T1336] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.631258][ T1336] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.668796][ T6062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.745'. [ 122.708801][ T6062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.745'. [ 122.824349][ T1336] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.833490][ T1336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.875335][ T1336] usb 5-1: Product: syz [ 122.905797][ T1336] usb 5-1: Manufacturer: syz [ 122.910493][ T1336] usb 5-1: SerialNumber: syz [ 122.934904][ T6078] loop3: detected capacity change from 0 to 1024 [ 122.940343][ T6080] loop2: detected capacity change from 0 to 256 [ 123.024606][ T6078] EXT4-fs (loop3): Ignoring removed bh option [ 123.092314][ T6078] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 123.152945][ T6078] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz.3.751: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 123.175659][ T6093] loop0: detected capacity change from 0 to 8 [ 123.186731][ T6078] EXT4-fs (loop3): Remounting filesystem read-only [ 123.195116][ T6078] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 123.289537][ T1336] usb 5-1: 0:2 : does not exist [ 123.325872][ T1336] usb 5-1: USB disconnect, device number 5 [ 124.157015][ T6076] loop1: detected capacity change from 0 to 32768 [ 124.199993][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.339384][ T6076] JFS: metapage_get_blocks failed [ 124.365894][ T6076] ERROR: (device loop1): release_metapage: write_one_page() failed [ 124.365894][ T6076] [ 124.403518][ T6076] ERROR: (device loop1): remounting filesystem as read-only [ 124.449908][ T6139] FAT-fs (loop3): Directory bread(block 64) failed [ 124.502957][ T6139] FAT-fs (loop3): Directory bread(block 65) failed [ 124.509626][ T6139] FAT-fs (loop3): Directory bread(block 66) failed [ 124.536882][ T6139] FAT-fs (loop3): Directory bread(block 67) failed [ 124.540162][ T277] ERROR: (device loop1): diUpdatePMap: the iag is outside the map [ 124.540162][ T277] [ 124.553828][ T4370] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 124.563503][ T6139] FAT-fs (loop3): Directory bread(block 68) failed [ 124.579298][ T6139] FAT-fs (loop3): Directory bread(block 69) failed [ 124.598825][ T6139] FAT-fs (loop3): Directory bread(block 70) failed [ 124.620218][ T6139] FAT-fs (loop3): Directory bread(block 71) failed [ 124.644254][ T6139] FAT-fs (loop3): Directory bread(block 72) failed [ 124.651493][ T4239] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.680019][ T6139] FAT-fs (loop3): Directory bread(block 73) failed [ 124.789903][ T4370] usb 1-1: Using ep0 maxpacket: 32 [ 124.908293][ T4370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.941267][ T4370] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 125.001808][ T4370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.056528][ T4370] usb 1-1: config 0 descriptor?? [ 125.428893][ T156] tipc: Subscription rejected, illegal request [ 125.527091][ T4370] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0007/input/input7 [ 125.596026][ T6186] netlink: 596 bytes leftover after parsing attributes in process `syz.2.791'. [ 125.643876][ T4370] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0007/input/input8 [ 125.669747][ T6184] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.789: invalid indirect mapped block 4294967295 (level 1) [ 125.689452][ T4370] uclogic 0003:5543:0042.0007: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.0-1/input0 [ 125.705691][ T6184] EXT4-fs (loop1): Remounting filesystem read-only [ 125.714296][ T6184] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.789: invalid indirect mapped block 4294967295 (level 1) [ 125.731516][ T6184] EXT4-fs (loop1): Remounting filesystem read-only [ 125.740142][ T4370] usb 1-1: USB disconnect, device number 7 [ 125.744341][ T6184] EXT4-fs (loop1): 2 truncates cleaned up [ 125.785113][ T6184] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 125.857662][ T6184] EXT4-fs error (device loop1): empty_inline_dir:1873: inode #12: block 7: comm syz.1.789: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 125.909068][ T6184] EXT4-fs (loop1): Remounting filesystem read-only [ 125.926245][ T6184] EXT4-fs warning (device loop1): empty_inline_dir:1880: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 126.109598][ T6198] fido_id[6198]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 126.199621][ T6210] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.798'. [ 126.241588][ T6210] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 126.343618][ T6213] set_capacity_and_notify: 2 callbacks suppressed [ 126.343636][ T6213] loop3: detected capacity change from 0 to 256 [ 126.377271][ T6216] loop2: detected capacity change from 0 to 1024 [ 126.634490][ T6235] loop1: detected capacity change from 0 to 512 [ 126.699059][ T1336] Bluetooth: hci0: command 0x0406 tx timeout [ 126.739426][ T6235] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.801693][ T6235] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 126.833651][ T6235] EXT4-fs (loop1): orphan cleanup on readonly fs [ 126.884599][ T6235] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.812: Allocating blocks 41-42 which overlap fs metadata [ 126.927371][ T6235] EXT4-fs (loop1): Remounting filesystem read-only [ 127.005388][ T6235] Quota error (device loop1): write_blk: dquota write failed [ 127.015870][ T6235] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 127.100086][ T6235] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.812: Failed to acquire dquot type 0 [ 127.165153][ T6235] EXT4-fs (loop1): Remounting filesystem read-only [ 127.206558][ T6235] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 127.243963][ T6256] loop0: detected capacity change from 0 to 4096 [ 127.250663][ T6235] EXT4-fs (loop1): Remounting filesystem read-only [ 127.257694][ T6235] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.812: corrupted inode contents [ 127.270094][ T6235] EXT4-fs (loop1): Remounting filesystem read-only [ 127.279247][ T6235] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #12: comm syz.1.812: mark_inode_dirty error [ 127.291245][ T6235] EXT4-fs (loop1): Remounting filesystem read-only [ 127.297895][ T6235] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.812: corrupted inode contents [ 127.310220][ T6235] EXT4-fs (loop1): Remounting filesystem read-only [ 127.348254][ T6235] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.812: mark_inode_dirty error [ 127.410053][ T6235] EXT4-fs (loop1): Remounting filesystem read-only [ 127.416894][ T6235] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.812: corrupted inode contents [ 127.465961][ T6235] EXT4-fs (loop1): Remounting filesystem read-only [ 127.493802][ T6235] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 127.559488][ T6235] EXT4-fs (loop1): Remounting filesystem read-only [ 127.566069][ T6235] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.812: corrupted inode contents [ 127.567731][ T6256] EXT4-fs (loop0): Test dummy encryption mode enabled [ 127.630051][ T6235] EXT4-fs (loop1): Remounting filesystem read-only [ 127.636621][ T6235] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.812: mark_inode_dirty error [ 127.668930][ T6251] loop2: detected capacity change from 0 to 32768 [ 127.675704][ T6256] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,nobarrier,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 127.707745][ T6235] EXT4-fs (loop1): Remounting filesystem read-only [ 127.721670][ T6235] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 127.746868][ T6235] EXT4-fs (loop1): Remounting filesystem read-only [ 127.774238][ T6235] EXT4-fs (loop1): 1 truncate cleaned up [ 127.863449][ T6235] EXT4-fs (loop1): pa ffff888073d97b60: logic 1, phys. 41, len 23 [ 127.871931][ T6235] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 127.885515][ T6235] EXT4-fs (loop1): Remounting filesystem read-only [ 127.936255][ T6235] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2. Quota mode: writeback. [ 127.987989][ T6275] loop4: detected capacity change from 0 to 256 [ 128.093237][ T6275] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 128.150713][ T6281] loop3: detected capacity change from 0 to 64 [ 128.219406][ T6275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.824'. [ 128.479939][ T6290] loop4: detected capacity change from 0 to 64 [ 128.530258][ T6285] loop0: detected capacity change from 0 to 4096 [ 128.587541][ T26] audit: type=1800 audit(24951556.434:17): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.830" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 128.868774][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 128.872745][ T4188] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 128.901992][ T4188] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 129.236625][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.332225][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.845'. [ 129.391737][ T6319] netlink: 212 bytes leftover after parsing attributes in process `syz.1.845'. [ 129.435549][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.845'. [ 129.620705][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.639752][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.667642][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 129.682508][ T6328] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 129.708333][ T13] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 129.737708][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.779738][ T13] usb 4-1: config 0 descriptor?? [ 130.007228][ T6340] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 130.045020][ T6340] netlink: 128 bytes leftover after parsing attributes in process `syz.1.855'. [ 130.194242][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'. [ 130.258722][ T13] steelseries_srws1 0003:1038:1410.0008: unknown main item tag 0x1 [ 130.272234][ T13] steelseries_srws1 0003:1038:1410.0008: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 130.430418][ T6355] loop0: detected capacity change from 0 to 2048 [ 130.483447][ T4239] usb 4-1: USB disconnect, device number 4 [ 130.500612][ T6355] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 130.535725][ T5194] udevd[5194]: incorrect nilfs2 checksum on /dev/loop0 [ 130.547929][ T6355] NILFS (loop0): mounting unchecked fs [ 130.580838][ T6355] NILFS (loop0): recovery complete [ 130.602259][ T6360] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.671721][ T6361] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.948810][ T6369] netlink: 'syz.0.868': attribute type 3 has an invalid length. [ 130.956748][ T6369] netlink: 44 bytes leftover after parsing attributes in process `syz.0.868'. [ 131.077658][ T6367] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 131.484765][ T6359] set_capacity_and_notify: 2 callbacks suppressed [ 131.484785][ T6359] loop1: detected capacity change from 0 to 32768 [ 131.542403][ T156] handle_bad_sector: 247 callbacks suppressed [ 131.542423][ T156] attempt to access beyond end of device [ 131.542423][ T156] loop4: rw=1, want=162, limit=64 [ 131.569682][ T156] buffer_io_error: 214 callbacks suppressed [ 131.569699][ T156] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 131.589364][ T6389] loop0: detected capacity change from 0 to 64 [ 131.592083][ T156] attempt to access beyond end of device [ 131.592083][ T156] loop4: rw=1, want=163, limit=64 [ 131.613256][ T156] Buffer I/O error on dev loop4, logical block 162, lost async page write [ 131.688483][ T156] attempt to access beyond end of device [ 131.688483][ T156] loop4: rw=1, want=164, limit=64 [ 131.698196][ T6359] XFS (loop1): Mounting V5 Filesystem [ 131.767505][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 131.793039][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.821048][ T156] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 131.827777][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 131.835131][ T6359] XFS (loop1): Ending clean mount [ 131.851004][ T156] attempt to access beyond end of device [ 131.851004][ T156] loop4: rw=1, want=168, limit=64 [ 131.901605][ T156] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 131.924612][ T156] attempt to access beyond end of device [ 131.924612][ T156] loop4: rw=1, want=170, limit=64 [ 131.928770][ T6381] loop3: detected capacity change from 0 to 32768 [ 131.935757][ T4234] Bluetooth: hci4: command 0x0405 tx timeout [ 131.960480][ T4194] XFS (loop1): Unmounting Filesystem [ 131.974367][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 131.980823][ T156] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 131.994959][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 132.034078][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 132.041716][ T156] attempt to access beyond end of device [ 132.041716][ T156] loop4: rw=1, want=172, limit=64 [ 132.079086][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 132.087308][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 132.090680][ T156] Buffer I/O error on dev loop4, logical block 171, lost async page write [ 132.113569][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 132.126316][ T6381] [ 132.126316][ T6381] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.126316][ T6381] [ 132.139181][ T156] attempt to access beyond end of device [ 132.139181][ T156] loop4: rw=1, want=173, limit=64 [ 132.179967][ T156] Buffer I/O error on dev loop4, logical block 172, lost async page write [ 132.182224][ T6381] ERROR: (device loop3): diWrite: ixpxd invalid [ 132.182224][ T6381] [ 132.198326][ T156] attempt to access beyond end of device [ 132.198326][ T156] loop4: rw=1, want=174, limit=64 [ 132.206228][ T6381] ERROR: (device loop3): txCommit: [ 132.206228][ T6381] [ 132.229441][ T156] Buffer I/O error on dev loop4, logical block 173, lost async page write [ 132.239913][ T13] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 132.268210][ T156] attempt to access beyond end of device [ 132.268210][ T156] loop4: rw=1, want=175, limit=64 [ 132.285277][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.308376][ T13] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 132.319005][ T156] Buffer I/O error on dev loop4, logical block 174, lost async page write [ 132.325626][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.327591][ T156] attempt to access beyond end of device [ 132.327591][ T156] loop4: rw=1, want=176, limit=64 [ 132.385357][ T13] usb 3-1: config 0 descriptor?? [ 132.402172][ T156] Buffer I/O error on dev loop4, logical block 175, lost async page write [ 132.414825][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.430298][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.436234][ T4195] [ 132.436234][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.436234][ T4195] [ 132.500020][ T4195] [ 132.500020][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.500020][ T4195] [ 132.746389][ T6410] loop1: detected capacity change from 0 to 1024 [ 132.824248][ T6410] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 132.899503][ T13] waltop 0003:172F:0037.0009: unknown main item tag 0x2 [ 132.926798][ T13] waltop 0003:172F:0037.0009: unknown main item tag 0x6 [ 132.933849][ T13] waltop 0003:172F:0037.0009: ignoring exceeding usage max [ 133.024942][ T13] waltop 0003:172F:0037.0009: hidraw0: USB HID v0.81 Device [HID 172f:0037] on usb-dummy_hcd.2-1/input0 [ 133.101535][ T13] usb 3-1: USB disconnect, device number 5 [ 133.202481][ T6413] fido_id[6413]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 133.291240][ T6406] loop0: detected capacity change from 0 to 32768 [ 133.484217][ T6408] loop3: detected capacity change from 0 to 32768 [ 133.580998][ T6408] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.882 (6408) [ 133.629378][ T6408] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 133.676779][ T6408] BTRFS info (device loop3): setting nodatacow, compression disabled [ 133.714983][ T6408] BTRFS info (device loop3): turning on flush-on-commit [ 133.759338][ T6408] BTRFS info (device loop3): using free space tree [ 133.765912][ T6408] BTRFS info (device loop3): has skinny extents [ 133.866313][ T6439] loop2: detected capacity change from 0 to 4096 [ 133.959887][ T6447] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.099500][ T6462] openvswitch: netlink: Actions may not be safe on all matching packets [ 134.108030][ T6408] BTRFS info (device loop3): enabling ssd optimizations [ 134.545819][ T6479] loop0: detected capacity change from 0 to 64 [ 134.752267][ T26] audit: type=1800 audit(24951562.651:18): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.888" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 135.256108][ T6448] loop4: detected capacity change from 0 to 32768 [ 135.326363][ T6448] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.896 (6448) [ 135.424141][ T6448] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 135.464126][ T6448] BTRFS info (device loop4): using free space tree [ 135.499458][ T6448] BTRFS info (device loop4): has skinny extents [ 135.540483][ T6514] loop2: detected capacity change from 0 to 256 [ 135.685533][ T6514] FAT-fs (loop2): Directory bread(block 64) failed [ 135.693633][ T6511] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.738654][ T6514] FAT-fs (loop2): Directory bread(block 65) failed [ 135.755590][ T6514] FAT-fs (loop2): Directory bread(block 66) failed [ 135.758929][ T6511] fs-verity (loop1, inode 18): Unknown hash algorithm number: 0 [ 135.836377][ T6514] FAT-fs (loop2): Directory bread(block 67) failed [ 135.843086][ T6514] FAT-fs (loop2): Directory bread(block 68) failed [ 135.925939][ T6514] FAT-fs (loop2): Directory bread(block 69) failed [ 135.943401][ T6514] FAT-fs (loop2): Directory bread(block 70) failed [ 135.992808][ T6514] FAT-fs (loop2): Directory bread(block 71) failed [ 136.005463][ T6514] FAT-fs (loop2): Directory bread(block 72) failed [ 136.067697][ T6448] BTRFS info (device loop4): enabling ssd optimizations [ 136.101668][ T6514] FAT-fs (loop2): Directory bread(block 73) failed [ 136.103013][ T6535] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 136.369420][ T6448] syz.4.896 (6448) used greatest stack depth: 21016 bytes left [ 136.469143][ T6550] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 136.729085][ T6556] set_capacity_and_notify: 2 callbacks suppressed [ 136.729105][ T6556] loop2: detected capacity change from 0 to 256 [ 136.872866][ T6556] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 137.133228][ T6578] loop1: detected capacity change from 0 to 64 [ 137.859908][ T156] handle_bad_sector: 121 callbacks suppressed [ 137.859930][ T156] attempt to access beyond end of device [ 137.859930][ T156] loop0: rw=1, want=162, limit=64 [ 137.916786][ T156] buffer_io_error: 102 callbacks suppressed [ 137.916805][ T156] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 137.932221][ T156] attempt to access beyond end of device [ 137.932221][ T156] loop0: rw=1, want=163, limit=64 [ 137.943037][ T156] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 137.952830][ T156] attempt to access beyond end of device [ 137.952830][ T156] loop0: rw=1, want=164, limit=64 [ 137.979594][ T156] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 137.997575][ T156] attempt to access beyond end of device [ 137.997575][ T156] loop0: rw=1, want=168, limit=64 [ 138.013548][ T156] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 138.023901][ T156] attempt to access beyond end of device [ 138.023901][ T156] loop0: rw=1, want=170, limit=64 [ 138.048588][ T156] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 138.066666][ T156] attempt to access beyond end of device [ 138.066666][ T156] loop0: rw=1, want=172, limit=64 [ 138.097037][ T156] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 138.121135][ T156] attempt to access beyond end of device [ 138.121135][ T156] loop0: rw=1, want=173, limit=64 [ 138.138493][ T156] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 138.157531][ T156] attempt to access beyond end of device [ 138.157531][ T156] loop0: rw=1, want=174, limit=64 [ 138.168600][ T156] Buffer I/O error on dev loop0, logical block 173, lost async page write [ 138.177520][ T156] attempt to access beyond end of device [ 138.177520][ T156] loop0: rw=1, want=175, limit=64 [ 138.245958][ T156] Buffer I/O error on dev loop0, logical block 174, lost async page write [ 138.257881][ T156] attempt to access beyond end of device [ 138.257881][ T156] loop0: rw=1, want=176, limit=64 [ 138.291833][ T156] Buffer I/O error on dev loop0, logical block 175, lost async page write [ 138.355920][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 138.356514][ T6624] loop3: detected capacity change from 0 to 64 [ 138.420320][ T6626] loop4: detected capacity change from 0 to 256 [ 138.464605][ T26] audit: type=1800 audit(24951566.381:19): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.956" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 138.610216][ T6626] FAT-fs (loop4): Directory bread(block 64) failed [ 138.653705][ T6626] FAT-fs (loop4): Directory bread(block 65) failed [ 138.695925][ T6626] FAT-fs (loop4): Directory bread(block 66) failed [ 138.740813][ T6626] FAT-fs (loop4): Directory bread(block 67) failed [ 138.767172][ T6626] FAT-fs (loop4): Directory bread(block 68) failed [ 138.784361][ T6626] FAT-fs (loop4): Directory bread(block 69) failed [ 138.804596][ T6626] FAT-fs (loop4): Directory bread(block 70) failed [ 138.847993][ T6626] FAT-fs (loop4): Directory bread(block 71) failed [ 138.889655][ T6626] FAT-fs (loop4): Directory bread(block 72) failed [ 138.925428][ T6626] FAT-fs (loop4): Directory bread(block 73) failed [ 139.456823][ T6654] loop4: detected capacity change from 0 to 1024 [ 139.497612][ T4375] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 139.567960][ T6654] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 139.572431][ T6658] tipc: Enabled bearer , priority 10 [ 139.598353][ T6660] loop0: detected capacity change from 0 to 512 [ 139.738163][ T6660] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 139.747057][ T4375] usb 3-1: Using ep0 maxpacket: 8 [ 139.774245][ T6660] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.974: invalid indirect mapped block 256 (level 1) [ 139.866231][ T6660] EXT4-fs (loop0): Remounting filesystem read-only [ 139.872801][ T6660] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.974: invalid indirect mapped block 2683928664 (level 1) [ 139.905929][ T4375] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.982477][ T6660] EXT4-fs (loop0): Remounting filesystem read-only [ 140.012977][ T6660] EXT4-fs (loop0): 1 truncate cleaned up [ 140.039101][ T6660] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,nodioread_nolock,noquota,nodioread_nolock,discard,usrjquota=.nomblk_io_submit,errors=remount-ro,jqfmt=vfsv0,auto_da_alloc,,. Quota mode: writeback. [ 140.122220][ T6660] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.974: Invalid block bitmap block 3 in block_group 0 [ 140.144920][ T4375] usb 3-1: New USB device found, idVendor=0582, idProduct=002f, bcdDevice= 0.40 [ 140.149111][ T6660] EXT4-fs (loop0): Remounting filesystem read-only [ 140.154006][ T4375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.190399][ T4375] usb 3-1: Product: syz [ 140.195469][ T4375] usb 3-1: Manufacturer: syz [ 140.200182][ T4375] usb 3-1: SerialNumber: syz [ 140.528619][ T4375] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 140.572941][ T4375] usb 3-1: USB disconnect, device number 6 [ 140.749946][ T6694] netlink: 'syz.0.990': attribute type 9 has an invalid length. [ 140.801505][ T5194] udevd[5194]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.959306][ T6668] loop4: detected capacity change from 0 to 32768 [ 141.731104][ T6725] netlink: 'syz.2.1005': attribute type 4 has an invalid length. [ 141.748091][ T6725] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1005'. [ 142.170458][ T6744] loop1: detected capacity change from 0 to 64 [ 142.265822][ T26] audit: type=1800 audit(24951570.198:20): pid=6744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1013" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 142.535105][ T4375] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 142.634654][ T6490] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 142.900059][ T4375] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.908406][ T4375] usb 4-1: config 0 has no interface number 0 [ 142.914988][ T6490] usb 1-1: Using ep0 maxpacket: 32 [ 142.924313][ T4375] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.943918][ T4375] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.954181][ T4375] usb 4-1: config 0 interface 1 has no altsetting 0 [ 142.960828][ T4375] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 142.970094][ T4375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.994529][ T4375] usb 4-1: config 0 descriptor?? [ 143.043380][ T6490] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 143.067144][ T6490] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.090449][ T6490] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.107693][ T6490] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 143.129783][ T6490] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.175047][ T6490] usb 1-1: config 0 descriptor?? [ 143.661737][ T6490] hid (null): unknown global tag 0xc [ 143.679886][ T6490] glorious 0003:258A:0036.000B: unknown main item tag 0x2 [ 143.691134][ T4375] uclogic 0003:2179:0053.000A: failed retrieving string descriptor #100: -71 [ 143.696959][ T6490] glorious 0003:258A:0036.000B: unknown global tag 0xc [ 143.699967][ T4375] uclogic 0003:2179:0053.000A: failed retrieving pen parameters: -71 [ 143.699991][ T4375] uclogic 0003:2179:0053.000A: pen probing failed: -71 [ 143.700008][ T4375] uclogic 0003:2179:0053.000A: failed probing parameters: -71 [ 143.717460][ T6490] glorious 0003:258A:0036.000B: item 0 2 1 12 parsing failed [ 143.760680][ T4375] uclogic: probe of 0003:2179:0053.000A failed with error -71 [ 143.779086][ T6490] glorious: probe of 0003:258A:0036.000B failed with error -22 [ 143.822383][ T4375] usb 4-1: USB disconnect, device number 5 [ 143.877279][ T6490] usb 1-1: USB disconnect, device number 8 [ 144.031551][ T6785] loop4: detected capacity change from 0 to 2048 [ 144.096888][ T5196] loop4: p3 p4 < > [ 144.107535][ T5196] loop4: p3 start 4284289 is beyond EOD, truncated [ 144.157363][ T6785] loop4: p3 p4 < > [ 144.165359][ T6785] loop4: p3 start 4284289 is beyond EOD, truncated [ 144.354687][ T5194] udevd[5194]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 144.386681][ T5194] udevd[5194]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 144.644682][ T6490] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 144.929679][ T6490] usb 5-1: Using ep0 maxpacket: 16 [ 144.951309][ T6819] loop2: detected capacity change from 0 to 1024 [ 145.056922][ T6490] usb 5-1: config index 0 descriptor too short (expected 52, got 36) [ 145.069707][ T6490] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 145.099833][ T6490] usb 5-1: config 0 has no interface number 0 [ 145.106781][ T6490] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 145.124957][ T6490] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 145.135642][ T6826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1052'. [ 145.136695][ T6744] hfs: request for non-existent node 8 in B*Tree [ 145.147010][ T6826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1052'. [ 145.179811][ T6744] hfs: request for non-existent node 8 in B*Tree [ 145.220048][ T156] handle_bad_sector: 250 callbacks suppressed [ 145.220063][ T156] attempt to access beyond end of device [ 145.220063][ T156] loop1: rw=1, want=162, limit=64 [ 145.237802][ T156] buffer_io_error: 214 callbacks suppressed [ 145.237816][ T156] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 145.252365][ T156] attempt to access beyond end of device [ 145.252365][ T156] loop1: rw=1, want=163, limit=64 [ 145.286093][ T6828] IPVS: Unknown mcast interface: pimreg0 [ 145.300760][ T156] Buffer I/O error on dev loop1, logical block 162, lost async page write [ 145.319957][ T6490] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 145.326107][ T156] attempt to access beyond end of device [ 145.326107][ T156] loop1: rw=1, want=164, limit=64 [ 145.337174][ T6490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.347658][ T156] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 145.347730][ T156] attempt to access beyond end of device [ 145.347730][ T156] loop1: rw=1, want=168, limit=64 [ 145.347752][ T156] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 145.347794][ T156] attempt to access beyond end of device [ 145.347794][ T156] loop1: rw=1, want=170, limit=64 [ 145.384016][ T6490] usb 5-1: Product: syz [ 145.420612][ T6490] usb 5-1: Manufacturer: syz [ 145.430689][ T6490] usb 5-1: SerialNumber: syz [ 145.457481][ T6490] usb 5-1: config 0 descriptor?? [ 145.475882][ T6795] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.483008][ T6795] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.490667][ T156] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 145.537329][ T156] attempt to access beyond end of device [ 145.537329][ T156] loop1: rw=1, want=172, limit=64 [ 145.577821][ T6838] loop2: detected capacity change from 0 to 2048 [ 145.584625][ T156] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 145.594759][ T156] attempt to access beyond end of device [ 145.594759][ T156] loop1: rw=1, want=173, limit=64 [ 145.615482][ T156] Buffer I/O error on dev loop1, logical block 172, lost async page write [ 145.624080][ T156] attempt to access beyond end of device [ 145.624080][ T156] loop1: rw=1, want=174, limit=64 [ 145.642575][ T156] Buffer I/O error on dev loop1, logical block 173, lost async page write [ 145.652281][ T156] attempt to access beyond end of device [ 145.652281][ T156] loop1: rw=1, want=175, limit=64 [ 145.669488][ T156] Buffer I/O error on dev loop1, logical block 174, lost async page write [ 145.678874][ T156] attempt to access beyond end of device [ 145.678874][ T156] loop1: rw=1, want=176, limit=64 [ 145.700359][ T6838] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 145.718758][ T156] Buffer I/O error on dev loop1, logical block 175, lost async page write [ 145.728364][ T6795] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.729905][ T6838] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.764499][ T6795] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.889728][ T6847] netlink: 'syz.0.1063': attribute type 1 has an invalid length. [ 146.006406][ T6849] loop0: detected capacity change from 0 to 64 [ 146.115914][ T26] audit: type=1800 audit(24951574.071:21): pid=6849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1065" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 146.232936][ T6490] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 146.273539][ T6490] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 146.322523][ T6490] asix: probe of 5-1:0.251 failed with error -71 [ 146.370758][ T6490] usb 5-1: USB disconnect, device number 6 [ 146.446275][ T6858] damon: kdamond (6858) starts [ 146.466384][ T6858] damon-va: Failed to get three regions of target 18446612684005103168 [ 146.616996][ T6843] loop3: detected capacity change from 0 to 32768 [ 146.737447][ T6843] XFS (loop3): Mounting V5 Filesystem [ 146.886651][ T6843] XFS (loop3): Ending clean mount [ 146.904876][ T6872] loop2: detected capacity change from 0 to 256 [ 146.945731][ T6843] XFS (loop3): Quotacheck needed: Please wait. [ 147.023524][ T6872] exfat: Deprecated parameter 'utf8' [ 147.028932][ T6872] exfat: Deprecated parameter 'namecase' [ 147.080778][ T6877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1073'. [ 147.092506][ T6843] XFS (loop3): Quotacheck: Done. [ 147.168272][ T6872] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 147.248722][ T4195] XFS (loop3): Unmounting Filesystem [ 147.466091][ T6888] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1078'. [ 147.654539][ T6894] loop2: detected capacity change from 0 to 256 [ 147.682938][ T6896] loop4: detected capacity change from 0 to 1024 [ 147.729743][ T6892] loop1: detected capacity change from 0 to 8192 [ 147.754067][ T6894] FAT-fs (loop2): Directory bread(block 64) failed [ 147.804805][ T6896] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 147.821308][ T6892] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 147.843985][ T6894] FAT-fs (loop2): Directory bread(block 65) failed [ 147.928994][ T6892] REISERFS (device loop1): using ordered data mode [ 147.949322][ T6894] FAT-fs (loop2): Directory bread(block 66) failed [ 147.955916][ T6894] FAT-fs (loop2): Directory bread(block 67) failed [ 147.963748][ T6892] reiserfs: using flush barriers [ 148.009633][ T6892] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.044924][ T6894] FAT-fs (loop2): Directory bread(block 68) failed [ 148.055254][ T6894] FAT-fs (loop2): Directory bread(block 69) failed [ 148.071304][ T6894] FAT-fs (loop2): Directory bread(block 70) failed [ 148.108243][ T6892] REISERFS (device loop1): checking transaction log (loop1) [ 148.119915][ T6894] FAT-fs (loop2): Directory bread(block 71) failed [ 148.164678][ T6894] FAT-fs (loop2): Directory bread(block 72) failed [ 148.197665][ T6894] FAT-fs (loop2): Directory bread(block 73) failed [ 148.496786][ T6892] REISERFS (device loop1): Using tea hash to sort names [ 148.504738][ T6892] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 148.623246][ T6913] loop4: detected capacity change from 0 to 1024 [ 148.715450][ T6913] EXT4-fs (loop4): Ignoring removed orlov option [ 148.733509][ T6913] EXT4-fs (loop4): Invalid want_extra_isize 9 [ 148.970604][ T6921] loop4: detected capacity change from 0 to 1024 [ 148.989612][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 149.018392][ T6923] device veth3 entered promiscuous mode [ 149.047360][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'. [ 149.059627][ T6923] syz.2.1094 (6923) used greatest stack depth: 20976 bytes left [ 149.110158][ T6921] EXT4-fs (loop4): Ignoring removed bh option [ 149.193235][ T6921] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 149.670717][ T6949] loop4: detected capacity change from 0 to 16 [ 149.701708][ T6951] loop1: detected capacity change from 0 to 64 [ 149.734938][ T6949] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 149.792608][ T26] audit: type=1800 audit(24951577.750:22): pid=6951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1106" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 150.161254][ T6971] loop2: detected capacity change from 0 to 256 [ 150.228198][ T6974] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 151.394370][ T6977] loop3: detected capacity change from 0 to 32768 [ 151.440051][ T6490] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 151.584390][ T6977] XFS (loop3): Mounting V5 Filesystem [ 151.773172][ T6977] XFS (loop3): Ending clean mount [ 151.806715][ T4195] XFS (loop3): Unmounting Filesystem [ 151.849629][ T6490] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.864440][ T6490] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.039747][ T7036] loop0: detected capacity change from 0 to 128 [ 152.078693][ T6490] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.090569][ T6490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.099303][ T6490] usb 5-1: Product: syz [ 152.104847][ T6490] usb 5-1: Manufacturer: syz [ 152.110304][ T6490] usb 5-1: SerialNumber: syz [ 152.126222][ T26] audit: type=1800 audit(24951580.085:23): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1144" name="file2" dev="loop0" ino=1048720 res=0 errno=0 [ 152.141496][ T7036] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 152.211906][ T7036] FAT-fs (loop0): Filesystem has been set read-only [ 152.230612][ T7036] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 152.249214][ T7036] handle_bad_sector: 952 callbacks suppressed [ 152.249235][ T7036] attempt to access beyond end of device [ 152.249235][ T7036] loop0: rw=2049, want=2073, limit=128 [ 152.637709][ T6490] usb 5-1: cannot find UAC_HEADER [ 152.752958][ T6490] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 152.800811][ T1245] attempt to access beyond end of device [ 152.800811][ T1245] loop1: rw=1, want=162, limit=64 [ 152.813711][ T7058] loop0: detected capacity change from 0 to 64 [ 152.847309][ T1245] buffer_io_error: 870 callbacks suppressed [ 152.847324][ T1245] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 152.849395][ T6490] usb 5-1: USB disconnect, device number 7 [ 152.869613][ T1245] attempt to access beyond end of device [ 152.869613][ T1245] loop1: rw=1, want=163, limit=64 [ 152.926947][ T7062] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1157'. [ 152.954832][ T1245] Buffer I/O error on dev loop1, logical block 162, lost async page write [ 152.995798][ T1245] attempt to access beyond end of device [ 152.995798][ T1245] loop1: rw=1, want=164, limit=64 [ 153.022552][ T1245] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 153.067677][ T1245] attempt to access beyond end of device [ 153.067677][ T1245] loop1: rw=1, want=168, limit=64 [ 153.106372][ T1245] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 153.108794][ T5194] udevd[5194]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.115350][ T1245] attempt to access beyond end of device [ 153.115350][ T1245] loop1: rw=1, want=170, limit=64 [ 153.154974][ T7068] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1159'. [ 153.203737][ T1245] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 153.242416][ T1245] attempt to access beyond end of device [ 153.242416][ T1245] loop1: rw=1, want=172, limit=64 [ 153.304101][ T1245] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 153.333644][ T1245] attempt to access beyond end of device [ 153.333644][ T1245] loop1: rw=1, want=173, limit=64 [ 153.354867][ T1245] Buffer I/O error on dev loop1, logical block 172, lost async page write [ 153.379537][ T1245] attempt to access beyond end of device [ 153.379537][ T1245] loop1: rw=1, want=174, limit=64 [ 153.387783][ T7074] loop2: detected capacity change from 0 to 128 [ 153.396017][ T1245] Buffer I/O error on dev loop1, logical block 173, lost async page write [ 153.413820][ T1245] attempt to access beyond end of device [ 153.413820][ T1245] loop1: rw=1, want=175, limit=64 [ 153.454314][ T1245] Buffer I/O error on dev loop1, logical block 174, lost async page write [ 153.495195][ T1245] Buffer I/O error on dev loop1, logical block 175, lost async page write [ 153.511162][ T7080] loop0: detected capacity change from 0 to 64 [ 153.624398][ T26] audit: type=1800 audit(24951581.588:24): pid=7080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1166" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 153.831866][ T7064] loop3: detected capacity change from 0 to 32768 [ 154.004544][ T7064] XFS (loop3): Mounting V5 Filesystem [ 154.166469][ T7064] XFS (loop3): Ending clean mount [ 154.202555][ T7064] XFS (loop3): Quotacheck needed: Please wait. [ 154.315338][ T7064] XFS (loop3): Quotacheck: Done. [ 154.354323][ T4229] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 154.412334][ T4195] XFS (loop3): Unmounting Filesystem [ 154.537666][ T7078] loop4: detected capacity change from 0 to 32768 [ 154.734997][ T7078] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1165 (7078) [ 154.744300][ T7100] loop1: detected capacity change from 0 to 4096 [ 154.764466][ T4229] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.787718][ T7078] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 154.819349][ T7078] BTRFS info (device loop4): using free space tree [ 154.833646][ T7101] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.845321][ T4229] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 154.911763][ T7078] BTRFS info (device loop4): has skinny extents [ 155.044031][ T4229] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 155.104431][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.112473][ T4229] usb 3-1: Product: syz [ 155.151613][ T4229] usb 3-1: Manufacturer: syz [ 155.156869][ T4229] usb 3-1: SerialNumber: syz [ 155.387885][ T7078] BTRFS info (device loop4): enabling ssd optimizations [ 156.171536][ T4229] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 156.322987][ T7164] loop3: detected capacity change from 0 to 164 [ 156.540838][ T4229] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.650700][ T4229] usb 3-1: device firmware changed [ 156.691654][ T4229] usb 3-1: USB disconnect, device number 7 [ 156.712497][ T7180] loop4: detected capacity change from 0 to 512 [ 156.724713][ T7178] loop3: detected capacity change from 0 to 1024 [ 156.870773][ T7180] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.1193: bad orphan inode 14 [ 156.887948][ T7180] ext4_test_bit(bit=13, block=18) = 1 [ 156.899830][ T7180] is_bad_inode(inode)=0 [ 156.904778][ T7180] NEXT_ORPHAN(inode)=0 [ 156.908883][ T7180] max_ino=32 [ 156.912565][ T7180] i_nlink=1 [ 156.915759][ T7180] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 157.199800][ T6567] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 157.288541][ T7200] loop2: detected capacity change from 0 to 4096 [ 157.436646][ T7213] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.449480][ T6567] usb 5-1: Using ep0 maxpacket: 8 [ 157.484084][ T26] audit: type=1800 audit(24951585.454:25): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1202" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 157.542741][ T7200] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 157.617042][ T7200] Remounting filesystem read-only [ 157.649551][ T6567] usb 5-1: unable to get BOS descriptor or descriptor too short [ 157.739210][ T6567] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 157.755772][ T6567] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 157.775400][ T6567] usb 5-1: too many endpoints for config 1 interface 1 altsetting 87: 139, using maximum allowed: 30 [ 157.797635][ T7217] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 157.831033][ T6567] usb 5-1: config 1 interface 1 altsetting 87 has 0 endpoint descriptors, different from the interface descriptor's value: 139 [ 157.887943][ T6567] usb 5-1: config 1 interface 1 has no altsetting 0 [ 157.907991][ T4197] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 158.096975][ T7221] set_capacity_and_notify: 3 callbacks suppressed [ 158.096993][ T7221] loop1: detected capacity change from 0 to 512 [ 158.108792][ T6567] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 158.139236][ T6567] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.145843][ T7221] EXT4-fs (loop1): Ignoring removed orlov option [ 158.175844][ T7221] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 158.177704][ T6567] usb 5-1: Product: syz [ 158.205837][ T6567] usb 5-1: Manufacturer: syz [ 158.215078][ T6567] usb 5-1: SerialNumber: syz [ 158.258977][ T7221] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #16: comm syz.1.1206: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 158.290069][ T7221] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1206: couldn't read orphan inode 16 (err -117) [ 158.309794][ T7221] EXT4-fs (loop1): 1 orphan inode deleted [ 158.315666][ T7221] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none. [ 158.378185][ T4229] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 158.432524][ T7221] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.1.1206: path (unknown): bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 158.528065][ T6567] usb 5-1: selecting invalid altsetting 0 [ 158.672042][ T7225] loop0: detected capacity change from 0 to 32768 [ 158.737865][ T4229] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 158.765947][ T4229] usb 3-1: config 0 has no interface number 0 [ 158.805779][ T7225] XFS (loop0): Mounting V5 Filesystem [ 158.811106][ T6567] usb 5-1: 0:2 : does not exist [ 158.927596][ T4229] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 158.943315][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.947170][ T6567] usb 5-1: USB disconnect, device number 8 [ 158.957903][ T4229] usb 3-1: Product: syz [ 158.971242][ T4229] usb 3-1: Manufacturer: syz [ 158.986968][ T4229] usb 3-1: SerialNumber: syz [ 158.996898][ T4229] usb 3-1: config 0 descriptor?? [ 159.041557][ T7225] XFS (loop0): Ending clean mount [ 159.164561][ T4188] XFS (loop0): Unmounting Filesystem [ 159.366980][ T4229] uvcvideo 3-1:0.64: Found Unit with invalid ID 0 [ 159.417148][ T4229] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 159.424034][ T4229] usb 3-1: No valid video chain found. [ 159.452010][ T4229] usb 3-1: USB disconnect, device number 8 [ 160.042760][ T7271] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1223'. [ 160.057886][ T7272] loop2: detected capacity change from 0 to 8 [ 160.065119][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 160.156012][ T5971] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 160.460610][ T4563] handle_bad_sector: 252 callbacks suppressed [ 160.460628][ T4563] attempt to access beyond end of device [ 160.460628][ T4563] loop3: rw=1, want=162, limit=64 [ 160.470588][ T7286] sp0: Synchronizing with TNC [ 160.491230][ T7285] [U] è [ 160.531139][ T7288] loop4: detected capacity change from 0 to 4096 [ 160.538899][ T4563] buffer_io_error: 214 callbacks suppressed [ 160.538914][ T4563] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 160.572536][ T4563] attempt to access beyond end of device [ 160.572536][ T4563] loop3: rw=1, want=163, limit=64 [ 160.589880][ T4563] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 160.597390][ T7288] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 160.626092][ T4563] attempt to access beyond end of device [ 160.626092][ T4563] loop3: rw=1, want=164, limit=64 [ 160.658914][ T4563] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 160.683468][ T4563] attempt to access beyond end of device [ 160.683468][ T4563] loop3: rw=1, want=168, limit=64 [ 160.685428][ T5971] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 160.707351][ T7288] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 160.731414][ T4563] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 160.756817][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 160.787277][ T5971] usb 1-1: Product: syz [ 160.790964][ T4563] attempt to access beyond end of device [ 160.790964][ T4563] loop3: rw=1, want=170, limit=64 [ 160.791491][ T5971] usb 1-1: Manufacturer: syz [ 160.805639][ T4563] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 160.860254][ T5971] usb 1-1: SerialNumber: syz [ 160.877499][ T4563] attempt to access beyond end of device [ 160.877499][ T4563] loop3: rw=1, want=172, limit=64 [ 160.878413][ T7301] loop2: detected capacity change from 0 to 512 [ 160.910659][ T4563] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 160.941331][ T5971] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 160.962321][ T7301] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.978960][ T4563] attempt to access beyond end of device [ 160.978960][ T4563] loop3: rw=1, want=173, limit=64 [ 161.048685][ T4563] Buffer I/O error on dev loop3, logical block 172, lost async page write [ 161.105972][ T4563] attempt to access beyond end of device [ 161.105972][ T4563] loop3: rw=1, want=174, limit=64 [ 161.120856][ T4563] Buffer I/O error on dev loop3, logical block 173, lost async page write [ 161.130665][ T4563] attempt to access beyond end of device [ 161.130665][ T4563] loop3: rw=1, want=175, limit=64 [ 161.156195][ T7310] device veth0_to_team entered promiscuous mode [ 161.164969][ T4563] Buffer I/O error on dev loop3, logical block 174, lost async page write [ 161.175524][ T4563] attempt to access beyond end of device [ 161.175524][ T4563] loop3: rw=1, want=176, limit=64 [ 161.186803][ T4563] Buffer I/O error on dev loop3, logical block 175, lost async page write [ 161.331270][ T7318] netlink: 520 bytes leftover after parsing attributes in process `syz.1.1246'. [ 161.354703][ T5971] vp7045: USB control message 'in' went wrong. [ 161.364559][ T5971] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 161.395655][ T7318] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1246'. [ 161.399312][ T5971] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 161.460937][ T5971] usb 1-1: USB disconnect, device number 9 [ 161.681290][ T7329] loop1: detected capacity change from 0 to 164 [ 162.173979][ T7344] syz.2.1258 (7344): /proc/7342/oom_adj is deprecated, please use /proc/7342/oom_score_adj instead. [ 162.417474][ T7359] loop1: detected capacity change from 0 to 512 [ 162.679492][ T7369] loop1: detected capacity change from 0 to 512 [ 162.832733][ T7379] tipc: Started in network mode [ 162.834901][ T7382] loop4: detected capacity change from 0 to 64 [ 162.847465][ T7379] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 162.876532][ T7379] tipc: Enabled bearer , priority 10 [ 163.072328][ T7389] netlink: 'syz.1.1279': attribute type 4 has an invalid length. [ 163.258885][ T7398] netlink: 'syz.4.1283': attribute type 4 has an invalid length. [ 163.535818][ T7407] loop2: detected capacity change from 0 to 64 [ 163.685098][ T7413] loop0: detected capacity change from 0 to 256 [ 163.875236][ T6567] tipc: Node number set to 4269801491 [ 164.061598][ T7423] loop2: detected capacity change from 0 to 4096 [ 164.180407][ T7435] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.366106][ T7438] loop4: detected capacity change from 0 to 4096 [ 164.371738][ T4229] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 164.381047][ T7438] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 164.401524][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.449059][ T7438] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 164.477588][ T7438] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 164.520089][ T7438] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 164.538260][ T7438] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 164.569113][ T7438] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 164.598690][ T7438] ntfs: volume version 3.1. [ 164.615747][ T7438] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 164.631397][ T4229] usb 2-1: Using ep0 maxpacket: 8 [ 164.646030][ T7452] netlink: 'syz.2.1308': attribute type 2 has an invalid length. [ 164.658364][ T7438] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 164.674410][ T7452] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1308'. [ 164.679525][ T7454] loop0: detected capacity change from 0 to 512 [ 164.690841][ T7438] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 164.709681][ T7438] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 164.751412][ T4229] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 164.765453][ T7454] EXT4-fs (loop0): Ignoring removed bh option [ 164.798342][ T7456] loop2: detected capacity change from 0 to 1024 [ 164.840214][ T7454] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 164.941231][ T4229] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 164.950322][ T4229] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 165.027539][ T4229] usb 2-1: Product: syz [ 165.039588][ T4229] usb 2-1: Manufacturer: syz [ 165.046551][ T4229] usb 2-1: SerialNumber: syz [ 165.057130][ T7465] loop4: detected capacity change from 0 to 256 [ 165.102854][ T7465] exfat: Deprecated parameter 'utf8' [ 165.224724][ T1325] Bluetooth: hci2: command 0x0401 tx timeout [ 165.235178][ T7465] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 165.340785][ T4229] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 165.369560][ T4229] usb 2-1: Handspring Visor / Palm OS: port 47, is for unknown use [ 165.379597][ T4229] usb 2-1: Handspring Visor / Palm OS: port 118, is for unknown use [ 165.415558][ T4229] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 165.560624][ T4229] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 165.580160][ T4229] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 165.621749][ T4229] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 165.660957][ T7481] loop2: detected capacity change from 0 to 4096 [ 165.701002][ T7158] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 165.766150][ T6567] usb 2-1: USB disconnect, device number 5 [ 165.816579][ T6567] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 165.864242][ T6567] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 165.893858][ T7481] ntfs: volume version 3.1. [ 165.926798][ T6567] visor 2-1:1.0: device disconnected [ 165.984808][ T7492] loop3: detected capacity change from 0 to 4096 [ 166.080197][ T7158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.109338][ T7499] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.116937][ T7158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.191171][ T7496] loop4: detected capacity change from 0 to 4096 [ 166.202460][ T7158] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 166.230254][ T7158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.254396][ T7496] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 166.270857][ T7158] usb 1-1: config 0 descriptor?? [ 166.577708][ T7512] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 166.596859][ T7512] sysv_free_block: flc_count > flc_size [ 166.659592][ T7512] sysv_free_block: flc_count > flc_size [ 166.675540][ T7512] sysv_free_block: flc_count > flc_size [ 166.690898][ T7512] sysv_free_block: flc_count > flc_size [ 166.696635][ T7512] sysv_free_block: flc_count > flc_size [ 166.702676][ T7512] sysv_free_block: flc_count > flc_size [ 166.706609][ T7514] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.708559][ T7512] sysv_free_block: flc_count > flc_size [ 166.717766][ T7514] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.723954][ T7512] sysv_free_block: flc_count > flc_size [ 166.732167][ T7514] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.738229][ T7512] sysv_free_block: flc_count > flc_size [ 166.746445][ T7514] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.754426][ T7512] sysv_free_block: flc_count > flc_size [ 166.770668][ T7512] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 166.771359][ T7158] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x3 [ 166.811914][ T7158] arvo 0003:1E7D:30D4.000C: item fetching failed at offset 5/7 [ 166.839968][ T7158] arvo 0003:1E7D:30D4.000C: parse failed [ 166.845662][ T7158] arvo: probe of 0003:1E7D:30D4.000C failed with error -22 [ 167.154547][ T1325] usb 1-1: USB disconnect, device number 10 [ 167.489447][ T7505] JBD2: Ignoring recovery information on journal [ 167.562145][ T7505] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 167.805872][ T4195] ocfs2: Unmounting device (7,3) on (node local) [ 167.935379][ T7546] device macsec1 entered promiscuous mode [ 168.028610][ T7160] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 168.135943][ T7550] comedi comedi3: rti800: I/O port conflict (0x100,16) [ 168.574272][ T7160] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 168.594018][ T7160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.606400][ T7558] set_capacity_and_notify: 4 callbacks suppressed [ 168.606415][ T7558] loop0: detected capacity change from 0 to 4096 [ 168.644629][ T7160] usb 3-1: Product: syz [ 168.645380][ T7538] loop4: detected capacity change from 0 to 32768 [ 168.648976][ T7160] usb 3-1: Manufacturer: syz [ 168.648997][ T7160] usb 3-1: SerialNumber: syz [ 168.692757][ T7558] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 168.707018][ T7160] usb 3-1: config 0 descriptor?? [ 168.730970][ T7538] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1343 (7538) [ 168.793339][ T7538] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 168.838035][ T7538] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 168.891059][ T7538] BTRFS info (device loop4): use zstd compression, level 3 [ 168.929563][ T7538] BTRFS info (device loop4): using free space tree [ 168.936788][ T7538] BTRFS info (device loop4): has skinny extents [ 168.963177][ T6490] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 169.004400][ T7538] BTRFS info (device loop4): enabling ssd optimizations [ 169.009192][ T7160] usb 3-1: USB disconnect, device number 9 [ 169.062207][ T7538] BTRFS warning (device loop4): can't clear the compat:0 feature bit while mounted [ 169.217748][ T6490] usb 4-1: Using ep0 maxpacket: 16 [ 169.356090][ T7554] loop1: detected capacity change from 0 to 32768 [ 169.398017][ T6490] usb 4-1: unable to get BOS descriptor or descriptor too short [ 169.507759][ T6490] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 169.697642][ T7554] XFS (loop1): Mounting V5 Filesystem [ 169.727817][ T6490] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 169.737187][ T6490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.745798][ T6490] usb 4-1: Product: syz [ 169.750442][ T6490] usb 4-1: Manufacturer: syz [ 169.755138][ T6490] usb 4-1: SerialNumber: syz [ 169.787650][ T7554] XFS (loop1): Ending clean mount [ 169.841332][ T4194] XFS (loop1): Unmounting Filesystem [ 169.889217][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'. [ 169.987562][ T6567] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 170.041689][ T6490] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 170.062658][ T6490] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 170.102635][ T7619] netlink: 'syz.2.1371': attribute type 4 has an invalid length. [ 170.267099][ T6567] usb 5-1: Using ep0 maxpacket: 16 [ 170.311835][ T7625] vivid-004: disconnect [ 170.347799][ T7624] vivid-004: reconnect [ 170.406732][ T7629] usb usb8: usbfs: process 7629 (syz.2.1377) did not claim interface 0 before use [ 170.416754][ T6567] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 170.431348][ T6567] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 170.447349][ T6567] usb 5-1: config 1 has no interface number 1 [ 170.463827][ T6567] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 170.481886][ T6567] usb 5-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.516404][ T6490] usb 4-1: USB disconnect, device number 6 [ 170.538971][ T6567] usb 5-1: config 1 interface 105 has no altsetting 0 [ 170.654837][ T7639] loop0: detected capacity change from 0 to 64 [ 170.737149][ T6567] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 170.752135][ T6567] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.765006][ T6567] usb 5-1: Product: syz [ 170.771494][ T6567] usb 5-1: Manufacturer: syz [ 170.776530][ T6567] usb 5-1: SerialNumber: syz [ 170.804987][ T5194] udevd[5194]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.827045][ T7604] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.980519][ T7651] binder: 7650:7651 unknown command 0 [ 171.002475][ T7651] binder: 7650:7651 ioctl c0306201 200000000080 returned -22 [ 171.087252][ T6567] aqc111: probe of 5-1:1.105 failed with error -22 [ 171.316728][ T5531] usb 5-1: USB disconnect, device number 9 [ 171.714115][ T7682] loop0: detected capacity change from 0 to 4096 [ 172.005469][ T7691] team0: Device vxcan3 is up. Set it down before adding it as a team port [ 172.027709][ T7678] loop2: detected capacity change from 0 to 16384 [ 172.126322][ T7692] loop4: detected capacity change from 0 to 4096 [ 172.129675][ T7693] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.209068][ T7665] loop1: detected capacity change from 0 to 32768 [ 172.240233][ T7692] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 172.270976][ T7692] EXT4-fs (loop4): inline encryption not supported [ 172.326027][ T7692] EXT4-fs (loop4): Test dummy encryption mode enabled [ 172.429420][ T7692] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c019, mo2=0003] [ 172.508480][ T7692] System zones: 0-5 [ 172.618970][ T7692] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,dioread_nolock,test_dummy_encryption=v1,errors=continue,delalloc,nombcache,grpquota,,errors=continue. Quota mode: writeback. [ 172.891851][ T7715] loop1: detected capacity change from 0 to 256 [ 172.956665][ T7718] hsr0: VLAN not yet supported [ 173.080881][ T7723] loop2: detected capacity change from 0 to 16 [ 173.505683][ T7743] netem: change failed [ 173.606361][ T7746] set_capacity_and_notify: 1 callbacks suppressed [ 173.606378][ T7746] loop4: detected capacity change from 0 to 512 [ 173.690974][ T7750] loop1: detected capacity change from 0 to 736 [ 173.847536][ T7750] rock: directory entry would overflow storage [ 173.854314][ T7750] rock: sig=0x3b10, size=4, remaining=3 [ 173.911302][ T7753] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 174.055817][ T7755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1428'. [ 174.273061][ T7764] loop4: detected capacity change from 0 to 512 [ 174.539046][ T7733] loop3: detected capacity change from 0 to 32768 [ 174.590530][ T7764] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 174.824928][ T7733] XFS (loop3): Mounting V5 Filesystem [ 174.938193][ T7733] XFS (loop3): Ending clean mount [ 174.959511][ T7733] XFS (loop3): Quotacheck needed: Please wait. [ 175.014619][ T5531] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 175.177873][ T7733] XFS (loop3): Quotacheck: Done. [ 175.310221][ T4195] XFS (loop3): Unmounting Filesystem [ 175.322398][ T7761] loop0: detected capacity change from 0 to 32768 [ 175.404701][ T5531] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.415785][ T5531] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.00 [ 175.465497][ T5531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.537135][ T5531] usb 2-1: config 0 descriptor?? [ 176.034550][ T7816] loop4: detected capacity change from 0 to 64 [ 176.045820][ T5531] apple 0003:05AC:030A.000D: unknown main item tag 0x2 [ 176.060239][ T5531] apple 0003:05AC:030A.000D: unknown main item tag 0xe [ 176.103370][ T5531] apple 0003:05AC:030A.000D: unknown main item tag 0x7 [ 176.120389][ T5531] apple 0003:05AC:030A.000D: unknown main item tag 0x0 [ 176.154463][ T5531] apple 0003:05AC:030A.000D: hidraw0: USB HID v0.20 Device [HID 05ac:030a] on usb-dummy_hcd.1-1/input0 [ 176.249054][ T6566] usb 2-1: USB disconnect, device number 6 [ 176.371437][ T7825] fido_id[7825]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 176.386832][ T6490] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 176.433100][ T4192] hfs: node 4:3 still has 1 user(s)! [ 176.867459][ T7847] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1472'. [ 176.901681][ T7847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1472'. [ 177.000032][ T6490] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 177.019405][ T6490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.060745][ T6490] usb 1-1: Product: syz [ 177.070547][ T6490] usb 1-1: Manufacturer: syz [ 177.081893][ T6490] usb 1-1: SerialNumber: syz [ 177.125030][ T6490] usb 1-1: config 0 descriptor?? [ 177.182221][ T6490] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 177.197747][ T7859] loop2: detected capacity change from 0 to 512 [ 177.259256][ T7859] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 177.314276][ T7863] sp0: Synchronizing with TNC [ 177.355295][ T7859] EXT4-fs (loop2): 1 truncate cleaned up [ 177.361008][ T7859] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.417621][ T7870] loop3: detected capacity change from 0 to 512 [ 177.561211][ T7870] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 177.633478][ T6490] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 177.634350][ T7870] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 177.650899][ T6490] sq905c 1-1:0.0: Reading version command failed [ 177.662833][ T6490] sq905c: probe of 1-1:0.0 failed with error -71 [ 177.671290][ T6490] usb 1-1: USB disconnect, device number 11 [ 177.683241][ T5194] udevd[5194]: setting mode of /dev/bus/usb/001/011 to 020664 failed: No such file or directory [ 177.733821][ T7870] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #13: comm syz.3.1483: iget: bad i_size value: 12154757448730 [ 177.753597][ T5194] udevd[5194]: setting owner of /dev/bus/usb/001/011 to uid=0, gid=0 failed: No such file or directory [ 177.765912][ T7870] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1483: couldn't read orphan inode 13 (err -117) [ 177.795189][ T7870] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,stripe=0x0000000000000002,sysvgroups,jqfmt=vfsold,nouid32,grpjquota=.grpquota,nolazytime,,errors=continue. Quota mode: writeback. [ 177.815061][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.861210][ T7878] loop4: detected capacity change from 0 to 1024 [ 177.946021][ T7878] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 178.043783][ T7882] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 178.051441][ T7882] ALSA: mixer_oss: invalid index 1374389 [ 178.640382][ T7872] loop1: detected capacity change from 0 to 32768 [ 178.768339][ T7872] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1484 (7872) [ 178.836810][ T7872] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 178.893150][ T7872] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 178.903143][ T7872] BTRFS info (device loop1): use zstd compression, level 3 [ 178.923026][ T7872] BTRFS info (device loop1): using free space tree [ 178.929591][ T7872] BTRFS info (device loop1): has skinny extents [ 179.200765][ T7872] BTRFS info (device loop1): enabling ssd optimizations [ 179.357941][ T7933] loop0: detected capacity change from 0 to 256 [ 179.413398][ T7933] exfat: Deprecated parameter 'utf8' [ 179.442802][ T7933] exfat: Deprecated parameter 'utf8' [ 179.482216][ T7933] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 179.518810][ T7893] loop2: detected capacity change from 0 to 32768 [ 179.649864][ T7902] loop3: detected capacity change from 0 to 32768 [ 179.702074][ T5194] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 11 /dev/loop1 scanned by udevd (5194) [ 179.852084][ T7893] XFS (loop2): Mounting V5 Filesystem [ 179.922639][ T7902] JBD2: Ignoring recovery information on journal [ 179.966042][ T7894] loop4: detected capacity change from 0 to 32768 [ 180.050524][ T7894] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1491 (7894) [ 180.074259][ T7902] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 180.133731][ T7893] XFS (loop2): Ending clean mount [ 180.153115][ T7893] XFS (loop2): Quotacheck needed: Please wait. [ 180.197461][ T7894] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 180.297012][ T7894] BTRFS info (device loop4): using free space tree [ 180.307817][ T7893] XFS (loop2): Quotacheck: Done. [ 180.356421][ T7894] BTRFS info (device loop4): has skinny extents [ 180.380178][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 180.380197][ T26] audit: type=1800 audit(24951608.361:26): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1498" name="file1" dev="loop3" ino=30722 res=0 errno=0 [ 180.409664][ T4197] XFS (loop2): Unmounting Filesystem [ 180.511574][ T4195] ocfs2: Unmounting device (7,3) on (node local) [ 180.755040][ T7894] BTRFS info (device loop4): enabling ssd optimizations [ 181.086813][ T7976] loop3: detected capacity change from 0 to 4096 [ 181.183059][ T7984] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.285661][ T7987] loop0: detected capacity change from 0 to 64 [ 181.778044][ T8000] loop2: detected capacity change from 0 to 2048 [ 181.953709][ T8000] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.509781][ T8017] loop2: detected capacity change from 0 to 4096 [ 182.642836][ T8017] NILFS (loop2): invalid segment: Checksum error in segment payload [ 182.650905][ T8017] NILFS (loop2): trying rollback from an earlier position [ 182.773587][ T8017] NILFS (loop2): recovery complete [ 183.119546][ T8053] loop4: detected capacity change from 0 to 512 [ 183.272340][ T4375] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 183.390823][ T8053] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.444696][ T8053] EXT4-fs error (device loop4): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.4.1545: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 183.511711][ T4375] usb 2-1: Using ep0 maxpacket: 8 [ 183.553482][ T8053] EXT4-fs error (device loop4): ext4_get_first_dir_block:3608: inode #12: comm syz.4.1545: directory missing '.' [ 183.631772][ T4375] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.651874][ T4375] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.672007][ T4375] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 183.706417][ T8044] set_capacity_and_notify: 1 callbacks suppressed [ 183.706435][ T8044] loop3: detected capacity change from 0 to 32768 [ 183.713296][ T4375] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.739062][ T8068] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 183.806385][ T8068] EXT4-fs warning (device loop2): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 183.851723][ T4375] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 183.902830][ T4375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.969771][ T4375] usb 2-1: config 0 descriptor?? [ 183.979983][ T8044] XFS (loop3): Mounting V5 Filesystem [ 184.039092][ T8063] loop0: detected capacity change from 0 to 32768 [ 184.117607][ T8044] XFS (loop3): Ending clean mount [ 184.156030][ T4195] XFS (loop3): Unmounting Filesystem [ 184.169228][ T8063] XFS (loop0): Mounting V5 Filesystem [ 184.315240][ T8063] XFS (loop0): Ending clean mount [ 184.396213][ T8063] XFS (loop0): Quotacheck needed: Please wait. [ 184.436597][ T8063] XFS (loop0): Quotacheck: Done. [ 184.453712][ T4375] sony 0003:054C:024B.000E: unknown main item tag 0x3 [ 184.460868][ T4375] sony 0003:054C:024B.000E: unknown main item tag 0x0 [ 184.477119][ T4375] sony 0003:054C:024B.000E: unknown main item tag 0x0 [ 184.526892][ T4375] sony 0003:054C:024B.000E: unknown main item tag 0x0 [ 184.551846][ T4375] sony 0003:054C:024B.000E: unknown main item tag 0x0 [ 184.569067][ T4375] sony 0003:054C:024B.000E: unknown main item tag 0x0 [ 184.589555][ T4375] sony 0003:054C:024B.000E: unknown main item tag 0x0 [ 184.613944][ T4375] sony 0003:054C:024B.000E: unknown global tag 0xd [ 184.628188][ T4375] sony 0003:054C:024B.000E: item 0 4 1 13 parsing failed [ 184.644378][ T4375] sony 0003:054C:024B.000E: parse failed [ 184.660332][ T4375] sony: probe of 0003:054C:024B.000E failed with error -22 [ 184.679748][ T4375] usb 2-1: USB disconnect, device number 7 [ 184.693419][ T8102] loop4: detected capacity change from 0 to 512 [ 184.706451][ T4188] XFS (loop0): Unmounting Filesystem [ 184.848495][ T8102] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.1560: Directory hole found for htree index block 0 [ 184.877849][ T8102] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 184.906012][ T8102] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000009,jqfmt=vfsold,nolazytime,grpjquota=.journal_async_commit,resuid=0x0000000000000000,barrier=0x0000000000000000,grpid,,,errors=continue. Quota mode: writeback. [ 184.932569][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.473911][ T8121] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1568'. [ 185.581243][ T6566] Bluetooth: hci1: command 0x0406 tx timeout [ 185.581283][ T4368] Bluetooth: hci3: command 0x0406 tx timeout [ 185.621074][ T4368] Bluetooth: hci2: command 0x0406 tx timeout [ 185.644100][ T8104] loop3: detected capacity change from 0 to 32768 [ 185.784119][ T8104] XFS (loop3): Mounting V5 Filesystem [ 185.956802][ T8104] XFS (loop3): Ending clean mount [ 186.076869][ T4195] XFS (loop3): Unmounting Filesystem [ 186.204770][ T8159] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 186.253151][ T8113] loop1: detected capacity change from 0 to 32768 [ 186.316633][ T8113] XFS: attr2 mount option is deprecated. [ 186.454256][ T8113] XFS (loop1): Mounting V5 Filesystem [ 186.603328][ T8113] XFS (loop1): Ending clean mount [ 186.617896][ T8113] XFS (loop1): Quotacheck needed: Please wait. [ 186.634316][ T8176] loop4: detected capacity change from 0 to 4096 [ 186.686727][ T8176] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 186.716611][ T8113] XFS (loop1): Quotacheck: Done. [ 186.720958][ T8176] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 186.811336][ T8176] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 186.839492][ T4194] XFS (loop1): Unmounting Filesystem [ 186.864446][ T8185] loop0: detected capacity change from 0 to 4096 [ 186.886795][ T8176] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 186.901144][ T8176] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 186.920930][ T4368] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 187.006121][ T8176] ntfs: volume version 3.1. [ 187.033598][ T8176] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 187.071772][ T8176] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 187.111295][ T8176] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 187.111675][ T8189] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1594'. [ 187.161620][ T8176] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 187.199212][ T8176] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 187.460961][ T4368] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 187.460997][ T4368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.461021][ T4368] usb 3-1: Product: syz [ 187.461038][ T4368] usb 3-1: Manufacturer: syz [ 187.461054][ T4368] usb 3-1: SerialNumber: syz [ 187.463076][ T4368] usb 3-1: config 0 descriptor?? [ 187.502575][ T4368] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 187.532178][ T4368] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.556414][ T4368] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 187.629866][ T4368] usb 3-1: media controller created [ 187.669905][ T4368] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.712159][ T8182] dvb-usb: bulk message failed: -22 (7/0) [ 187.761861][ T8207] loop3: detected capacity change from 0 to 512 [ 187.825884][ T4368] DVB: Unable to find symbol mt352_attach() [ 187.881750][ T8207] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #11: comm syz.3.1602: unexpected EA_INODE flag [ 187.902847][ T4368] DVB: Unable to find symbol nxt6000_attach() [ 187.905770][ T8207] EXT4-fs (loop3): Remounting filesystem read-only [ 187.908991][ T4368] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 187.926769][ T8207] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1602: couldn't read orphan inode 11 (err -117) [ 187.939753][ T8207] EXT4-fs (loop3): Remounting filesystem read-only [ 187.941722][ T4368] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 187.947458][ T8207] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none. [ 187.998380][ T8220] syz.0.1606 uses obsolete (PF_INET,SOCK_PACKET) [ 188.072336][ T4368] dvb-usb: schedule remote query interval to 1000 msecs. [ 188.072934][ T8224] loop4: detected capacity change from 0 to 8 [ 188.079476][ T4368] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 188.079497][ T4368] dvb-usb: bulk message failed: -22 (7/0) [ 188.179922][ T4368] dvb-usb: bulk message failed: -22 (7/0) [ 188.194506][ T4368] usb 3-1: USB disconnect, device number 10 [ 188.200451][ T8224] SQUASHFS error: xz decompression failed, data probably corrupt [ 188.201830][ T8224] SQUASHFS error: Failed to read block 0x108: -5 [ 188.245618][ T8224] SQUASHFS error: Unable to read metadata cache entry [106] [ 188.264940][ T8224] SQUASHFS error: Unable to read inode 0x11f [ 188.419360][ T4368] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 188.435525][ T8234] loop3: detected capacity change from 0 to 16 [ 188.491877][ T8234] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 188.537819][ T8234] erofs: (device loop3): mounted with root inode @ nid 36. [ 188.570475][ T8234] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 188.630489][ T8234] CIFS mount error: No usable UNC path provided in device string! [ 188.630489][ T8234] [ 188.669454][ T8234] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 188.740203][ T8246] loop0: detected capacity change from 0 to 1024 [ 188.804845][ T8246] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 188.810375][ T4368] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 188.819500][ T8246] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.961455][ T8246] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,noblock_validity,jqfmt=vfsold,dioread_nolock,,errors=continue. Quota mode: none. [ 189.110317][ T4368] usb 3-1: Using ep0 maxpacket: 8 [ 189.133868][ T8263] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 189.230358][ T4368] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 189.259849][ T4368] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 189.292655][ T4368] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 189.319348][ T4368] usb 3-1: config 1 interface 0 has no altsetting 1 [ 189.405379][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1630'. [ 189.421711][ T8272] netlink: 'syz.3.1630': attribute type 22 has an invalid length. [ 189.429785][ T8272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1630'. [ 189.452723][ T8250] loop1: detected capacity change from 0 to 32768 [ 189.480737][ T4368] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.489837][ T4368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.528913][ T4368] usb 3-1: Product: syz [ 189.538454][ T4368] usb 3-1: Manufacturer: syz [ 189.552567][ T8277] loop0: detected capacity change from 0 to 16 [ 189.559227][ T4368] usb 3-1: SerialNumber: syz [ 189.568342][ T8250] JBD2: Ignoring recovery information on journal [ 189.610295][ T4375] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 189.645387][ T4368] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 189.670824][ T8250] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 189.698031][ T8277] erofs: (device loop0): mounted with root inode @ nid 36. [ 189.912026][ T4194] ocfs2: Unmounting device (7,1) on (node local) [ 189.926886][ T5972] usb 3-1: USB disconnect, device number 11 [ 189.970305][ T4375] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 189.994792][ T4375] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.030444][ T4375] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.055030][ T4375] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 190.076510][ T4375] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.083779][ T4375] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 190.111931][ T4375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.156124][ T4375] usb 5-1: config 0 descriptor?? [ 190.304234][ T8295] device team_slave_0 left promiscuous mode [ 190.304371][ T8295] device team_slave_1 left promiscuous mode [ 190.327742][ T8295] team0: Cannot enslave team device to itself [ 190.350604][ T8295] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 190.374156][ T8302] ubi8: attaching mtd0 [ 190.386366][ T8295] syz.3.1639 (8295) used greatest stack depth: 20656 bytes left [ 190.399682][ T8302] ubi8: scanning is finished [ 190.399701][ T8302] ubi8: empty MTD device detected [ 190.399787][ T8302] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 190.524548][ T8302] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 190.680275][ T4375] hid-alps 0003:044E:120C.000F: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.4-1/input0 [ 190.732895][ T8312] loop3: detected capacity change from 0 to 4096 [ 190.802596][ T8320] loop2: detected capacity change from 0 to 512 [ 190.855107][ T8320] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 190.875755][ T6490] usb 5-1: USB disconnect, device number 10 [ 190.934500][ T8323] loop1: detected capacity change from 0 to 1764 [ 190.982414][ T8312] ntfs3: loop3: failed to convert "0080" to cp864 [ 191.214448][ T8333] loop2: detected capacity change from 0 to 256 [ 191.273728][ T8339] loop1: detected capacity change from 0 to 256 [ 191.318820][ T8333] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 191.336611][ T8343] loop0: detected capacity change from 0 to 256 [ 191.342663][ T8339] exfat: Deprecated parameter 'namecase' [ 191.369986][ T8339] exfat: Deprecated parameter 'namecase' [ 191.409334][ T8339] exFAT-fs (loop1): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 191.410268][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 191.453495][ T8333] exFAT-fs (loop2): Filesystem has been set read-only [ 191.468491][ T8333] exFAT-fs (loop2): error, failed to bmap (inode : ffff888057e80e60 iblock : 0, err : -5) [ 191.491155][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 191.497303][ T8333] exFAT-fs (loop2): error, failed to bmap (inode : ffff888057e80e60 iblock : 0, err : -5) [ 191.548841][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 191.578000][ T8333] exFAT-fs (loop2): error, failed to bmap (inode : ffff888057e80e60 iblock : 1, err : -5) [ 191.603554][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 191.611790][ T8333] exFAT-fs (loop2): error, failed to bmap (inode : ffff888057e80e60 iblock : 2, err : -5) [ 191.669943][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 191.676077][ T8333] exFAT-fs (loop2): error, failed to bmap (inode : ffff888057e80e60 iblock : 3, err : -5) [ 191.760044][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 191.779967][ T8333] exFAT-fs (loop2): error, failed to bmap (inode : ffff888057e80e60 iblock : 4, err : -5) [ 191.832258][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 191.886106][ T8333] exFAT-fs (loop2): error, failed to bmap (inode : ffff888057e80e60 iblock : 5, err : -5) [ 191.944285][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 191.989914][ T8333] exFAT-fs (loop2): error, failed to bmap (inode : ffff888057e80e60 iblock : 6, err : -5) [ 192.029057][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 192.066126][ T8333] exFAT-fs (loop2): error, failed to bmap (inode : ffff888057e80e60 iblock : 7, err : -5) [ 192.138504][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 192.179422][ T8333] exFAT-fs (loop2): error, failed to bmap (inode : ffff888057e80e60 iblock : 0, err : -5) [ 192.239144][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 192.269994][ T6566] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 192.296690][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 192.345029][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 192.371873][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 192.377962][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 192.429776][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 192.435823][ T8333] exFAT-fs (loop2): error, broken FAT chain. [ 192.466257][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 192.466275][ T26] audit: type=1800 audit(24951620.454:27): pid=8333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1659" name="file0" dev="loop2" ino=1048729 res=0 errno=0 [ 192.510344][ T8345] loop4: detected capacity change from 0 to 32768 [ 192.518648][ T8333] syz.2.1659 (8333) used greatest stack depth: 20536 bytes left [ 192.569678][ T6566] usb 4-1: Using ep0 maxpacket: 32 [ 192.700864][ T6566] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 192.736425][ T6566] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 192.742606][ T8366] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.749725][ T6566] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 192.766854][ T6566] usb 4-1: config 1 has no interface number 0 [ 192.775180][ T6566] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.786833][ T6566] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 192.802609][ T6566] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 192.823006][ T6566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.859126][ T8369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1677'. [ 192.872644][ T6566] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 193.046208][ T8352] XFS (loop1): Mounting V5 Filesystem [ 193.110615][ T6566] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 193.174956][ T277] ------------[ cut here ]------------ [ 193.180135][ T8383] comedi comedi4: bad chanlist[0]=0xffffffff chan=65535 range length=2 [ 193.189215][ T277] WARNING: CPU: 0 PID: 277 at fs/jfs/jfs_dmap.c:2943 dbAdjTree+0x448/0x4d0 [ 193.242853][ T277] Modules linked in: [ 193.246451][ T8352] XFS (loop1): Ending clean mount [ 193.246891][ T277] CPU: 1 PID: 277 Comm: jfsCommit Not tainted syzkaller #0 [ 193.262235][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.273124][ T277] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 193.278263][ T277] Code: e8 5d f9 ee fe e9 5a ff ff ff e8 b3 da a9 fe eb 05 e8 ac da a9 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 98 da a9 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 193.298230][ T277] RSP: 0018:ffffc9000266f668 EFLAGS: 00010293 [ 193.304414][ T277] RAX: ffffffff82cf5b78 RBX: ffff88801a9fd010 RCX: ffff88801ddd8000 [ 193.321683][ T277] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 193.333736][ T277] RBP: 0000000000020056 R08: ffffea00006a7f47 R09: 1ffffd40000d4fe8 [ 193.359560][ T277] R10: dffffc0000000000 R11: fffff940000d4fe9 R12: ffff88801a9fd018 [ 193.367593][ T277] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 193.412430][ T4194] XFS (loop1): Unmounting Filesystem [ 193.437743][ T277] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 193.467673][ T277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.477517][ T156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.483018][ T277] CR2: 00007f34389a5000 CR3: 0000000062f4a000 CR4: 00000000003506e0 [ 193.508277][ T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 193.542119][ T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 193.550544][ T277] Call Trace: [ 193.553948][ T277] [ 193.557931][ T277] ? __might_sleep+0xf0/0xf0 [ 193.562680][ T277] ? mark_page_accessed+0xce5/0x12b0 [ 193.568086][ T277] dbJoin+0x238/0x300 [ 193.572395][ T277] dbFreeBits+0x4e1/0xd80 [ 193.577519][ T277] dbFree+0x32e/0x640 [ 193.586773][ T277] txFreeMap+0x9e2/0xde0 [ 193.609680][ T277] ? do_raw_spin_unlock+0x11d/0x230 [ 193.615947][ T277] xtTruncate+0xcc0/0x2d10 [ 193.618416][ T156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.629663][ T277] ? xtInitRoot+0x160/0x160 [ 193.651192][ T277] ? invalidate_inode_page+0x360/0x360 [ 193.656884][ T277] ? __lock_acquire+0x7d10/0x7d10 [ 193.662750][ T277] ? do_raw_spin_lock+0x128/0x2f0 [ 193.667871][ T277] ? memset+0x1e/0x40 [ 193.672212][ T277] ? __dquot_initialize+0x213/0xcd0 [ 193.677485][ T277] jfs_free_zero_link+0x358/0x4b0 [ 193.683553][ T277] ? inode_wait_for_writeback+0x1df/0x220 [ 193.689310][ T277] ? jfs_write_failed+0x190/0x190 [ 193.694468][ T277] ? sb_clear_inode_writeback+0x360/0x360 [ 193.701577][ T277] ? do_raw_spin_lock+0x128/0x2f0 [ 193.707005][ T277] ? bit_waitqueue+0x30/0x30 [ 193.714213][ T156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.716441][ T277] jfs_evict_inode+0x359/0x430 [ 193.737236][ T277] ? evict+0x4c3/0x8d0 [ 193.757247][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.776792][ T277] ? jfs_write_inode+0x220/0x220 [ 193.783673][ T277] evict+0x4c9/0x8d0 [ 193.787711][ T277] ? proc_nr_inodes+0x320/0x320 [ 193.800445][ T277] ? do_raw_spin_unlock+0x11d/0x230 [ 193.805883][ T277] ? _raw_spin_unlock+0x24/0x40 [ 193.816066][ T277] ? iput+0x706/0x8a0 [ 193.821630][ T277] jfs_lazycommit+0x435/0xb40 [ 193.826445][ T277] ? txFreelock+0x5a0/0x5a0 [ 193.835996][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 193.844470][ T156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.845211][ T277] ? sched_dynamic_update+0x210/0x210 [ 193.866722][ T277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 193.873646][ T277] ? __kthread_parkme+0x157/0x1b0 [ 193.878815][ T277] kthread+0x436/0x520 [ 193.891550][ T277] ? txFreelock+0x5a0/0x5a0 [ 193.896190][ T277] ? kthread_blkcg+0xd0/0xd0 [ 193.906016][ T277] ret_from_fork+0x1f/0x30 [ 193.912104][ T277] [ 193.915184][ T277] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 193.922463][ T277] CPU: 1 PID: 277 Comm: jfsCommit Not tainted syzkaller #0 [ 193.929684][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.939762][ T277] Call Trace: [ 193.943039][ T277] [ 193.945965][ T277] dump_stack_lvl+0x188/0x250 [ 193.950639][ T277] ? show_regs_print_info+0x20/0x20 [ 193.955835][ T277] ? load_image+0x400/0x400 [ 193.960360][ T277] panic+0x2e5/0x810 [ 193.964252][ T277] ? bpf_jit_dump+0xd0/0xd0 [ 193.968752][ T277] ? ret_from_fork+0x1f/0x30 [ 193.973365][ T277] ? dbAdjTree+0x448/0x4d0 [ 193.977778][ T277] __warn+0x248/0x2b0 [ 193.981754][ T277] ? dbAdjTree+0x448/0x4d0 [ 193.986175][ T277] report_bug+0x1b7/0x2e0 [ 193.990527][ T277] handle_bug+0x3a/0x70 [ 193.994682][ T277] exc_invalid_op+0x16/0x40 [ 193.999177][ T277] asm_exc_invalid_op+0x16/0x20 [ 194.004023][ T277] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 194.009040][ T277] Code: e8 5d f9 ee fe e9 5a ff ff ff e8 b3 da a9 fe eb 05 e8 ac da a9 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 98 da a9 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 194.028639][ T277] RSP: 0018:ffffc9000266f668 EFLAGS: 00010293 [ 194.034704][ T277] RAX: ffffffff82cf5b78 RBX: ffff88801a9fd010 RCX: ffff88801ddd8000 [ 194.042667][ T277] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 194.050629][ T277] RBP: 0000000000020056 R08: ffffea00006a7f47 R09: 1ffffd40000d4fe8 [ 194.058592][ T277] R10: dffffc0000000000 R11: fffff940000d4fe9 R12: ffff88801a9fd018 [ 194.066575][ T277] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 194.074546][ T277] ? dbAdjTree+0x448/0x4d0 [ 194.078967][ T277] ? dbAdjTree+0x448/0x4d0 [ 194.083374][ T277] ? __might_sleep+0xf0/0xf0 [ 194.087963][ T277] ? mark_page_accessed+0xce5/0x12b0 [ 194.093370][ T277] dbJoin+0x238/0x300 [ 194.097352][ T277] dbFreeBits+0x4e1/0xd80 [ 194.101679][ T277] dbFree+0x32e/0x640 [ 194.105670][ T277] txFreeMap+0x9e2/0xde0 [ 194.109906][ T277] ? do_raw_spin_unlock+0x11d/0x230 [ 194.115099][ T277] xtTruncate+0xcc0/0x2d10 [ 194.119535][ T277] ? xtInitRoot+0x160/0x160 [ 194.124059][ T277] ? invalidate_inode_page+0x360/0x360 [ 194.129521][ T277] ? __lock_acquire+0x7d10/0x7d10 [ 194.134581][ T277] ? do_raw_spin_lock+0x128/0x2f0 [ 194.139651][ T277] ? memset+0x1e/0x40 [ 194.143665][ T277] ? __dquot_initialize+0x213/0xcd0 [ 194.148866][ T277] jfs_free_zero_link+0x358/0x4b0 [ 194.153892][ T277] ? inode_wait_for_writeback+0x1df/0x220 [ 194.159696][ T277] ? jfs_write_failed+0x190/0x190 [ 194.164721][ T277] ? sb_clear_inode_writeback+0x360/0x360 [ 194.170442][ T277] ? do_raw_spin_lock+0x128/0x2f0 [ 194.172754][ T6566] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 194.175502][ T277] ? bit_waitqueue+0x30/0x30 [ 194.175537][ T277] jfs_evict_inode+0x359/0x430 [ 194.175558][ T277] ? evict+0x4c3/0x8d0 [ 194.175580][ T277] ? jfs_write_inode+0x220/0x220 [ 194.203717][ T277] evict+0x4c9/0x8d0 [ 194.207617][ T277] ? proc_nr_inodes+0x320/0x320 [ 194.212467][ T277] ? do_raw_spin_unlock+0x11d/0x230 [ 194.217661][ T277] ? _raw_spin_unlock+0x24/0x40 [ 194.222516][ T277] ? iput+0x706/0x8a0 [ 194.226497][ T277] jfs_lazycommit+0x435/0xb40 [ 194.231171][ T277] ? txFreelock+0x5a0/0x5a0 [ 194.235664][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 194.241561][ T277] ? sched_dynamic_update+0x210/0x210 [ 194.246944][ T277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 194.252846][ T277] ? __kthread_parkme+0x157/0x1b0 [ 194.257870][ T277] kthread+0x436/0x520 [ 194.261959][ T277] ? txFreelock+0x5a0/0x5a0 [ 194.266455][ T277] ? kthread_blkcg+0xd0/0xd0 [ 194.271041][ T277] ret_from_fork+0x1f/0x30 [ 194.275460][ T277] [ 194.278584][ T277] Kernel Offset: disabled [ 194.283163][ T277] Rebooting in 86400 seconds..