last executing test programs:

1m35.423611362s ago: executing program 0 (id=551):
r0 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0)

1m34.445941606s ago: executing program 0 (id=557):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4881}, 0x20000000)

1m33.856552093s ago: executing program 0 (id=561):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10)

1m33.035379122s ago: executing program 0 (id=567):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000032, &(0x7f0000000200)=0x1, 0x2e)

1m32.117190357s ago: executing program 0 (id=571):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@jqfmt_vfsv0}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
socket(0x10, 0x3, 0x0)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0)

1m30.922025579s ago: executing program 0 (id=581):
r0 = socket$inet(0x2, 0x5, 0x0)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10000}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r0, 0x0, 0x0, 0x0, 0x80000, 0x1})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

1m15.596342735s ago: executing program 32 (id=581):
r0 = socket$inet(0x2, 0x5, 0x0)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10000}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r0, 0x0, 0x0, 0x0, 0x80000, 0x1})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

12.732921161s ago: executing program 5 (id=971):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000000240)=ANY=[@ANYBLOB='fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,acl,no_splitbrain_check,hash,uid=', @ANYRESDEC=0x0, @ANYRESOCT], 0x0, 0x58b4, &(0x7f0000005980)="$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")
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4020bc15, 0x0)

10.55945725s ago: executing program 5 (id=977):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000005640), 0x0, 0x55a3, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000580)={0x105, 0xf5, [0xa, 0x8000000000000000, 0x0, 0x80000001], 0x0})

5.939891538s ago: executing program 1 (id=993):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xdc3, 0x2000)
syz_usb_disconnect(r0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, 0x0)

5.733189837s ago: executing program 2 (id=995):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f00000001c0)=0xc, 0x4)

5.224118387s ago: executing program 2 (id=996):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = dup(r0)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})

3.811692793s ago: executing program 2 (id=999):
r0 = syz_io_uring_setup(0x180f, &(0x7f00000035c0)={0x0, 0x50ce, 0x10100}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}})
io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0)

3.727076992s ago: executing program 4 (id=1000):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x8, 0x10, 0x80000001, 0x1, 0x5}, 0x14)

3.56154923s ago: executing program 5 (id=1001):
r0 = io_uring_setup(0x77c, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendfile(r1, r1, 0x0, 0x40000f63c)
close_range(r0, 0xffffffffffffffff, 0x0)

3.55642628s ago: executing program 3 (id=1002):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x38, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x0, @private2}, @in6={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000280)={r1, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x1, 0x0, 0x8}, 0x9c)

3.342123512s ago: executing program 1 (id=1003):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x1018004, &(0x7f0000000100)={[{@shortname_win95}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@fat=@dos1xfloppy}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@shortname_winnt}, {@rodir}, {@shortname_win95}]}, 0x1, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000100))

3.219986016s ago: executing program 2 (id=1004):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
fstat(r0, &(0x7f0000000480))
syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0)

2.922016628s ago: executing program 4 (id=1005):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

2.788799308s ago: executing program 1 (id=1006):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0)
sendmsg$inet6(r0, &(0x7f0000004540)={0x0, 0x0, 0x0}, 0x18040811)

2.711981574s ago: executing program 3 (id=1007):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x923, 0x1, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x20000091)

2.241575688s ago: executing program 4 (id=1008):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14)

2.128840107s ago: executing program 3 (id=1009):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000002c0)={[{@keep_last_dots}, {@namecase}, {@gid}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@errors_continue}, {@gid}, {@sys_tz}, {@umask={'umask', 0x3d, 0x3ff}}, {@dmask}]}, 0x1, 0x1545, &(0x7f0000004d40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x185042, 0x1d8)
mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0)

1.783308839s ago: executing program 1 (id=1010):
syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000200)={[{@nodecompose}, {@umask={'umask', 0x3d, 0x4}}, {@barrier}, {@uid}, {@force}, {@type={'type', 0x3d, "05f2875e"}}, {@nls={'nls', 0x3d, 'cp950'}}]}, 0x3, 0x632, &(0x7f0000000800)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
linkat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f0000000640)='./bus\x00', 0x0)

1.396882583s ago: executing program 4 (id=1011):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x3})
fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x1, 0x2, 0x6, 0x7})
fcntl$lock(r0, 0x5, &(0x7f0000000140)={0x1, 0x2, 0x3c1, 0x3})

1.296820681s ago: executing program 3 (id=1012):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x1000, 0xfff5, 0x4, 0xa, 0x1, 0x7fff, 0x3, 0x7, r1}, &(0x7f0000000140)=0x20)

1.16182148s ago: executing program 5 (id=1013):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404)
write$sequencer(r0, &(0x7f0000000040)=[@t={0x81, 0x3, 0x0, 0x9}], 0x8)
ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404)

1.058857908s ago: executing program 2 (id=1014):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@errors_remount}]}, 0x4, 0x46b, &(0x7f00000009c0)="$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")
mkdir(&(0x7f0000000000)='./control\x00', 0x81)
r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8)

940.524771ms ago: executing program 1 (id=1015):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0)

880.585154ms ago: executing program 4 (id=1016):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x9, 0xbb5, 0x1, 0x80000000, 0x6, 0x0, 0x9, 0x610ee1c, 0x9, 0x2, 0x8, 0x7, 0xc8a0, 0xd, 0x4, 0x81, 0x7ff, 0x0, 0x5, 0x0, 0x0, 0xef, 0x1, 0x9, 0x7, 0xfffffffb, 0x9, 0x3ff, 0x100, 0xffffff84, 0xffffffff, 0x426, 0x5d50, 0xe, 0x3, 0x3ff, 0x4, 0x1, 0x0, 0x8, 0x1, 0x9, 0x9, 0xffff9709, 0x6, 0x585, 0x7, 0x10001, 0x8, 0x1ff, 0x4, 0x0, 0xfffff2a1, 0x6, 0x7ff, 0x9, 0xfffffff8, 0xff, 0x4, 0x2, 0x4, 0x3, 0xba2, 0x94, 0x0, 0x8, 0x7, 0x7, 0xff, 0x3, 0xc95, 0x3fe, 0x1e0, 0x9, 0x8000, 0x5, 0x100, 0x400, 0x400, 0x7f, 0x4, 0x401, 0x0, 0x2, 0x1, 0x7, 0x8001, 0x9, 0x0, 0x7, 0x400, 0xffffff3f, 0x6, 0xfff, 0x5, 0x0, 0x2c78, 0x7ff, 0x25, 0x3, 0x8, 0xfffffffc, 0xfffffffc, 0x2, 0x2, 0x4670d7c6, 0x4, 0x7, 0x5, 0x1, 0xffffffb3, 0x9, 0xb, 0xff, 0x9, 0x5, 0xe, 0x9c10, 0x0, 0x8, 0x7, 0x7, 0x3, 0xe4, 0xfffffffa, 0x6, 0x1, 0x1, 0x3, 0xd, 0x1e000000, 0x5, 0x1a1, 0x53a3, 0xfffffffd, 0x9a89, 0x4f, 0x8, 0x4, 0x9, 0x0, 0x5, 0x2, 0x4, 0x10001, 0x0, 0x6, 0x6, 0x40, 0x6, 0x6, 0x3, 0x4, 0xb8, 0x7, 0x5, 0x37, 0x5, 0xf, 0x9, 0xfff, 0x9, 0x6, 0x6, 0x1, 0x0, 0x2, 0x6e30cb6e, 0x6, 0x0, 0x3, 0xc, 0x5cd, 0x7f, 0xa7, 0x1, 0xffffffff, 0x8, 0x6, 0x5, 0x0, 0x517b, 0x3ff, 0xa, 0x2, 0x7, 0xfffffffa, 0x4388, 0x9, 0x9, 0x200000, 0x36, 0xf37c, 0x0, 0x80, 0x4, 0x2, 0x4, 0x4, 0x325000, 0x3, 0x10, 0x8b, 0xffff, 0x43f7, 0x2, 0x3, 0x6, 0x9, 0x9, 0xff97, 0x9, 0x8001, 0x22, 0x6, 0x3, 0x9, 0xb, 0x4, 0x2, 0x9, 0x40, 0x4, 0xbb8, 0x4, 0x1, 0x4, 0x8, 0x211c, 0x8, 0x7ff, 0x8, 0xfffffffd, 0x4, 0x4, 0x0, 0x7, 0x0, 0x31, 0x0, 0x6, 0x2, 0xc, 0xf8e, 0x101, 0x4808da74, 0xfffffffc, 0x8, 0x600000, 0x0, 0x7, 0x9, 0xbc, 0x1, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0x2, 0xb8, 0x78}, {0x8, 0x0, 0x1, 0x9, 0x6, 0x6}, 0x7fffffff, 0xfff, 0x1b76}}]}}]}, 0x45c}}, 0x0)

701.585205ms ago: executing program 3 (id=1017):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001700)=@ipv6_newnexthop={0x28, 0x68, 0x309, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x0)

580.980012ms ago: executing program 5 (id=1018):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x113}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0bea0", 0xbf}], 0x3}, 0x4008001)

307.938028ms ago: executing program 5 (id=1019):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x881, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000003440)="ff", 0x1}], 0x1, 0x22bd, 0x0, 0x2)
sendfile(r0, r1, 0x0, 0x20000000000)

280.862608ms ago: executing program 1 (id=1020):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
tee(r1, r0, 0x6, 0x5)

251.051565ms ago: executing program 4 (id=1021):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c40)=[{0x0, 0xf5}, {&(0x7f0000000800)="0981b705", 0x4}], 0x2, 0x0, 0x0, 0x240400c0}, 0x4004800)

141.137834ms ago: executing program 3 (id=1022):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x880)

0s ago: executing program 2 (id=1023):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x181)
io_setup(0x3, &(0x7f0000000180)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}])

kernel console output (not intermixed with test programs):

devsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.442020][ T5789] veth0_macvtap: entered promiscuous mode
[  262.531547][ T5789] veth1_macvtap: entered promiscuous mode
[  262.659241][ T5793] veth0_vlan: entered promiscuous mode
[  262.717120][ T5796] veth0_vlan: entered promiscuous mode
[  262.794012][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.836394][ T5796] veth1_vlan: entered promiscuous mode
[  262.895871][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.922550][ T5793] veth1_vlan: entered promiscuous mode
[  262.982207][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.991615][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.001244][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.011637][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.188626][ T5793] veth0_macvtap: entered promiscuous mode
[  263.299930][ T5793] veth1_macvtap: entered promiscuous mode
[  263.399179][ T5796] veth0_macvtap: entered promiscuous mode
[  263.475946][ T5796] veth1_macvtap: entered promiscuous mode
[  263.506396][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.632049][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.717239][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.727922][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.737173][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.746311][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.807628][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.899666][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.026539][ T5796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.035838][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.045156][ T5796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.054285][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.787326][ T5804] veth0_vlan: entered promiscuous mode
[  264.898317][ T5804] veth1_vlan: entered promiscuous mode
[  265.228612][ T5804] veth0_macvtap: entered promiscuous mode
[  265.322434][ T5804] veth1_macvtap: entered promiscuous mode
[  265.532594][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.628587][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.717646][ T5804] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.729320][ T5804] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.738988][ T5804] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.748181][ T5804] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.892880][ T3743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.901197][ T3743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.181288][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.190498][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.249032][ T3706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.257328][ T3706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.551377][ T3706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.560793][ T3706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.677405][ T5795] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  271.174703][ T3883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.182793][ T3883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.482268][ T3832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.490775][ T3832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.864967][ T3832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.873220][ T3832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.032417][ T5973] loop0: detected capacity change from 0 to 128
[  272.190565][ T3743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.199018][ T3743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.724733][ T5990] loop0: detected capacity change from 0 to 512
[  273.776924][ T3931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.785321][ T3931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.805343][ T5990] =======================================================
[  273.805343][ T5990] WARNING: The mand mount option has been deprecated and
[  273.805343][ T5990]          and is ignored by this kernel. Remove the mand
[  273.805343][ T5990]          option from the mount to silence this warning.
[  273.805343][ T5990] =======================================================
[  274.021523][ T3832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.029974][ T3832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.068565][ T5990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.082005][ T5990] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.379577][ T5990] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.11: corrupted inode contents
[  274.436655][ T5990] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.11: mark_inode_dirty error
[  274.566788][ T5990] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.11: corrupted inode contents
[  274.659775][ T5990] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.11: mark_inode_dirty error
[  274.813294][ T5990] EXT4-fs error (device loop0): ext4_lookup:1786: inode #18: comm syz.0.11: 'file0' linked to parent dir
[  275.323899][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.483497][ T6028] loop0: detected capacity change from 0 to 4096
[  277.710812][ T6028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.874448][   T30] audit: type=1800 audit(1747612440.632:2): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.25" name="file1" dev="loop0" ino=15 res=0 errno=0
[  278.345808][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.836094][ T6050] capability: warning: `syz.3.34' uses deprecated v2 capabilities in a way that may be insecure
[  278.849359][ T6047] process 'syz.0.32' launched '/dev/fd/3' with NULL argv: empty string added
[  279.327197][ T6055] loop1: detected capacity change from 0 to 64
[  280.837660][ T6069] loop1: detected capacity change from 0 to 2048
[  280.971393][ T6069] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  281.086776][ T6069] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  281.087961][ T6077] loop0: detected capacity change from 0 to 1024
[  281.722786][ T6085] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  281.747946][ T6083] Zero length message leads to an empty skb
[  282.314674][ T6088] sctp: [Deprecated]: syz.1.47 (pid 6088) Use of int in max_burst socket option deprecated.
[  282.314674][ T6088] Use struct sctp_assoc_value instead
[  282.719688][ T6094] loop0: detected capacity change from 0 to 1024
[  282.736703][ T6096] loop2: detected capacity change from 0 to 256
[  282.814322][ T6094] EXT4-fs: Ignoring removed orlov option
[  282.820498][ T6094] EXT4-fs: Ignoring removed nomblk_io_submit option
[  282.926648][ T6096] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  282.938006][ T6096] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  283.030749][ T6094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.169625][ T6096] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  283.400791][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.413271][ T6118] loop0: detected capacity change from 0 to 256
[  284.897472][ T6125] loop0: detected capacity change from 0 to 256
[  285.069358][ T6123] loop3: detected capacity change from 0 to 4096
[  285.080738][ T6125] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  285.209997][ T6129] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  285.226557][ T6122] loop4: detected capacity change from 0 to 4096
[  285.321919][ T6122] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  285.617105][ T6135] loop0: detected capacity change from 0 to 128
[  285.728263][ T6135] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  285.776012][ T6122] ntfs3(loop4): ino=19, mi_enum_attr
[  285.781707][ T6122] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  285.789981][ T6135] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  286.486015][ T6145] warning: `syz.2.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  286.691538][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  286.776042][ T6147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.71'.
[  287.392523][ T6155] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  288.107635][ T6167] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  288.238557][ T6163] loop1: detected capacity change from 0 to 1024
[  288.679788][   T70] hfsplus: b-tree write err: -5, ino 4
[  288.800037][ T6176] netlink: 'syz.3.82': attribute type 4 has an invalid length.
[  288.809369][ T6176] netlink: 72 bytes leftover after parsing attributes in process `syz.3.82'.
[  288.851269][ T6178] syz.0.83 uses obsolete (PF_INET,SOCK_PACKET)
[  289.195032][ T6185] netlink: 'syz.4.86': attribute type 1 has an invalid length.
[  289.203058][ T6185] netlink: 'syz.4.86': attribute type 2 has an invalid length.
[  289.259273][ T6187] netlink: 'syz.4.86': attribute type 1 has an invalid length.
[  289.267348][ T6187] netlink: 'syz.4.86': attribute type 2 has an invalid length.
[  290.067214][ T6199] netlink: 32 bytes leftover after parsing attributes in process `syz.4.91'.
[  290.079699][ T6199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.91'.
[  290.640073][ T6206] dlm: no local IP address has been set
[  290.646257][ T6206] dlm: cannot start dlm midcomms -107
[  290.970084][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  290.977244][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  291.047434][ T6208] loop1: detected capacity change from 0 to 4096
[  291.132160][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'.
[  291.996720][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'.
[  292.716041][ T6224] loop1: detected capacity change from 0 to 32768
[  292.728017][ T6224] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.102 (6224)
[  292.751870][ T6224] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  292.763810][ T6224] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  292.773865][ T6224] BTRFS info (device loop1): using free-space-tree
[  292.961578][ T6224] BTRFS info (device loop1): rebuilding free space tree
[  293.143201][ T5793] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  293.430309][ T6253] loop0: detected capacity change from 0 to 256
[  293.510810][ T6253] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  295.765224][ T6289] loop2: detected capacity change from 0 to 2048
[  295.787381][ T6289] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  295.837142][ T6289] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  296.521995][ T6297] netlink: 60 bytes leftover after parsing attributes in process `syz.0.128'.
[  296.559648][ T6296] netlink: 60 bytes leftover after parsing attributes in process `syz.0.128'.
[  296.994909][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  297.224305][   T24] usb 3-1: Using ep0 maxpacket: 8
[  297.253863][   T24] usb 3-1: config 0 has no interfaces?
[  297.259958][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  297.269488][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.350888][   T24] usb 3-1: config 0 descriptor??
[  297.670510][   T24] usb 3-1: USB disconnect, device number 2
[  298.642809][ T6333] loop3: detected capacity change from 0 to 512
[  298.857290][ T6333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.871159][ T6333] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.360869][ T6332] loop4: detected capacity change from 0 to 32768
[  299.539828][ T6332] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  299.585523][ T6332] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  299.585523][ T6332]   allowing incompatible features above 0.0: (unknown version)
[  299.615943][    C0] vkms_vblank_simulate: vblank timer overrun
[  299.631409][ T6332] bcachefs (loop4): initializing new filesystem
[  299.644949][ T6332] bcachefs (loop4): going read-write
[  299.647234][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.720466][ T6332] bcachefs (loop4): marking superblocks
[  299.787774][ T6332] bcachefs (loop4): initializing freespace
[  299.816578][ T6332] bcachefs (loop4): done initializing freespace
[  299.838974][ T6332] bcachefs (loop4): reading snapshots table
[  299.845656][ T6332] bcachefs (loop4): reading snapshots done
[  299.960215][ T6332] bcachefs (loop4): done starting filesystem
[  300.267598][ T6332] syz.4.145 (6332) used greatest stack depth: 960 bytes left
[  300.335114][ T5804] bcachefs (loop4): shutting down
[  300.340442][ T5804] bcachefs (loop4): going read-only
[  300.346161][ T5804] bcachefs (loop4): finished waiting for writes to stop
[  300.360720][ T5804] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  300.530676][ T5804] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  300.582520][ T5804] bcachefs (loop4): clean shutdown complete, journal seq 4
[  300.649741][ T5804] bcachefs (loop4): marking filesystem clean
[  300.868666][ T6369] loop2: detected capacity change from 0 to 16
[  300.892051][ T5804] bcachefs (loop4): shutdown complete
[  300.905261][ T6369] erofs (device loop2): mounted with root inode @ nid 36.
[  301.585036][ T6377] bridge: RTM_NEWNEIGH with invalid ether address
[  301.834464][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'.
[  302.276871][ T6387] program syz.0.167 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  303.101436][ T6392] loop1: detected capacity change from 0 to 4096
[  303.164483][ T6392] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  303.444699][   T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  303.504728][ T6392] ntfs3(loop1): Failed to load $Extend (-22).
[  303.511282][ T6392] ntfs3(loop1): Failed to initialize $Extend.
[  303.613514][   T30] audit: type=1800 audit(1747612466.392:3): pid=6392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.169" name="file0" dev="loop1" ino=0 res=0 errno=0
[  303.639523][   T24] usb 1-1: Using ep0 maxpacket: 8
[  303.683031][   T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  303.695505][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.703949][   T24] usb 1-1: Product: syz
[  303.709617][   T24] usb 1-1: Manufacturer: syz
[  303.714881][   T24] usb 1-1: SerialNumber: syz
[  303.786569][ T5848] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  303.799732][   T24] usb 1-1: config 0 descriptor??
[  304.028613][ T5848] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  304.038471][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.125699][   T24] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  304.127207][ T5848] usb 3-1: config 0 descriptor??
[  304.194907][ T5848] cp210x 3-1:0.0: cp210x converter detected
[  304.603711][ T5848] usb 3-1: cp210x converter now attached to ttyUSB0
[  304.764754][   T24] usb write operation failed. (-71)
[  304.787182][ T5849] usb 3-1: USB disconnect, device number 3
[  304.816312][   T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  304.833282][   T24] dvbdev: DVB: registering new adapter (Terratec H7)
[  304.841585][   T24] usb 1-1: media controller created
[  304.861143][ T5849] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  304.914446][ T5849] cp210x 3-1:0.0: device disconnected
[  304.938066][   T24] usb read operation failed. (-71)
[  304.969154][   T24] usb write operation failed. (-71)
[  304.998851][   T24] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  305.037872][   T24] usb 1-1: USB disconnect, device number 2
[  305.794947][ T6424] program syz.2.184 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  305.909054][ T6421] loop3: detected capacity change from 0 to 4096
[  306.012257][ T6421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.017885][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.186'.
[  306.073106][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.186'.
[  306.174576][   T30] audit: type=1800 audit(1747612468.922:4): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.182" name="file1" dev="loop3" ino=15 res=0 errno=0
[  306.365433][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.474802][ T6441] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  308.354329][   T24] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[  308.584791][   T24] usb 3-1: config 252 has an invalid interface number: 101 but max is 0
[  308.594879][   T24] usb 3-1: config 252 has no interface number 0
[  308.601556][   T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  308.614324][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.743308][   T24] pvrusb2: Hardware description: Terratec Grabster AV400
[  308.750788][   T24] pvrusb2: **********
[  308.755134][   T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  308.765524][   T24] pvrusb2: Important functionality might not be entirely working.
[  308.773551][   T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  308.785191][   T24] pvrusb2: **********
[  308.921975][ T6460] loop1: detected capacity change from 0 to 512
[  309.001204][ T2333] pvrusb2: Invalid write control endpoint
[  309.012268][ T6460] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  309.032752][ T6460] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  309.141340][ T6460] EXT4-fs (loop1): 1 truncate cleaned up
[  309.149997][ T6460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.248838][ T6460] EXT4-fs warning (device loop1): ext4_group_add:1736: No reserved GDT blocks, can't resize
[  309.252926][ T5848] usb 3-1: USB disconnect, device number 4
[  309.476926][ T2333] pvrusb2: Invalid write control endpoint
[  309.483030][ T2333] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  309.494861][ T2333] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  309.502640][ T2333] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  309.513135][ T2333] pvrusb2: Device being rendered inoperable
[  309.519633][ T2333] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  309.527179][ T2333] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  309.543631][ T2333] pvrusb2: Attached sub-driver cx25840
[  309.551364][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  309.561803][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  309.670060][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.919434][ T6477] loop0: detected capacity change from 0 to 512
[  310.082082][ T6477] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  310.090588][ T6477] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  310.156297][ T6477] System zones: 0-1, 15-15, 18-18, 34-34
[  310.163492][ T6477] EXT4-fs (loop0): orphan cleanup on readonly fs
[  310.170906][ T6477] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  310.180726][ T6477] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  310.196347][ T6477] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  310.304569][ T6477] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.207: bad orphan inode 16
[  310.364234][ T6477] ext4_test_bit(bit=15, block=18) = 1
[  310.369907][ T6477] is_bad_inode(inode)=0
[  310.374545][ T6477] NEXT_ORPHAN(inode)=0
[  310.378834][ T6477] max_ino=32
[  310.382231][ T6477] i_nlink=2
[  310.388043][ T6477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  310.482203][ T6484] loop4: detected capacity change from 0 to 4096
[  310.520289][ T6484] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  310.603784][ T6477] fscrypt (loop0, inode 16): Error -61 getting encryption context
[  310.651373][ T6491] fscrypt (loop0, inode 16): Error -61 getting encryption context
[  310.690598][ T6484] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  310.730872][ T6484] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  310.738983][ T6484] ntfs3(loop4): ino=5, mi_enum_attr
[  310.746177][ T6484] ntfs3(loop4): Failed to load root (-22).
[  311.034451][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.080081][ T6496] loop3: detected capacity change from 0 to 256
[  311.127464][ T6496] FAT-fs (loop3): bogus number of FAT sectors
[  311.133854][ T6496] FAT-fs (loop3): Can't find a valid FAT filesystem
[  312.310193][ T6502] loop4: detected capacity change from 0 to 32768
[  312.393673][ T6502] read_mapping_page failed!
[  312.402177][ T6502] ERROR: (device loop4): txAbort: 
[  312.402177][ T6502] 
[  314.135076][ T6525] program syz.0.229 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  314.409452][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.419422][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.299674][ T6531] loop4: detected capacity change from 0 to 32768
[  315.362948][ T6531] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  315.721157][ T6531] XFS (loop4): Ending clean mount
[  315.951262][ T5804] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  316.304638][ T6547] loop1: detected capacity change from 0 to 32768
[  316.499813][ T6547] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  316.556884][ T6547] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  316.556884][ T6547]   allowing incompatible features above 0.0: (unknown version)
[  316.589097][ T6547] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  316.607123][ T6547] bcachefs (loop1): Version upgrade required:
[  316.607123][ T6547] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete
[  316.607123][ T6547] Doing incompatible version upgrade from 0.8: (unknown version) to 1.25: extent_flags
[  316.607123][ T6547]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  316.680974][ T6547] bcachefs (loop1): dropping and reconstructing all alloc info
[  316.711894][ T6547] bcachefs (loop1): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: 
[  316.712016][ T6547]     mode=100755
[  316.712078][ T6547]     flags=(15300000)
[  316.712143][ T6547]     journal_seq=4
[  316.712205][ T6547]     hash_seed=d483206f1ed95abf
[  316.712276][ T6547]     hash_type=siphash
[  316.712339][ T6547]     bi_size=100
[  316.712402][ T6547]     bi_sectors=8
[  316.712466][ T6547]     bi_version=1126999418470400
[  316.712534][ T6547]     bi_atime=0
[  316.712601][ T6547]     bi_ctime=0
[  316.712663][ T6547]     bi_mtime=0
[  316.712726][ T6547]     bi_otime=2780562352
[  316.712790][ T6547]     bi_uid=2780562352
[  316.712854][ T6547]     bi_gid=0
[  316.712917][ T6547]     bi_nlink=2780562352
[  316.712989][ T6547]     bi_generation=0
[  316.713054][ T6547]     bi_dev=0
[  316.713115][ T6547]     bi_data_checksum=0
[  316.713181][ T6547]     bi_compression=56
[  316.713245][ T6547]     bi_project=0
[  316.713309][ T6547]     bi_background_compression=0
[  316.713377][ T6547]     bi_data_replicas=0
[  316.713443][ T6547]     bi_promote_target=0
[  316.713510][ T6547]     bi_foreground_target=0
[  316.713577][ T6547]     bi_background_target=0
[  316.713643][ T6547]     bi_erasure_code=0
[  316.713707][ T6547]     bi_fields_set=0
[  316.713770][ T6547]     bi_dir=0
[  316.713831][ T6547]     bi_dir_offset=0
[  316.713893][ T6547]     bi_subvol=0
[  316.713961][ T6547]     bi_parent_subvol=0
[  316.714025][ T6547]     bi_nocow=0
[  316.714363][ T6547]     bi_depth=0
[  316.714427][ T6547]     bi_inodes_32bit=0
[  316.714491][ T6547]     bi_casefold=0
[  316.714554][ T6547]   invalid compression opt 55, deleting
[  316.928021][ T6547] bcachefs (loop1): accounting_read... done
[  316.942630][ T6547] bcachefs (loop1): alloc_read... done
[  316.949019][ T6547] bcachefs (loop1): snapshots_read... done
[  316.955808][ T6547] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[  316.969740][ T6547] bcachefs (loop1): done starting filesystem
[  317.419976][ T5793] bcachefs (loop1): shutting down
[  317.752616][ T6562] loop0: detected capacity change from 0 to 2048
[  317.904598][ T5793] bcachefs (loop1): shutdown complete
[  317.966271][ T6562] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  317.974595][ T6562] UDF-fs: Scanning with blocksize 512 failed
[  318.107278][ T6562] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  318.209168][ T6560] loop3: detected capacity change from 0 to 32768
[  318.267687][ T6560] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  318.276366][ T6560] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  318.385076][ T6560] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  318.622527][ T6560] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  320.066295][ T6573] loop4: detected capacity change from 0 to 4096
[  320.118442][ T6573] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  320.258719][ T6581] loop3: detected capacity change from 0 to 256
[  320.370201][ T6573] ntfs3(loop4): ino=19, mi_enum_attr
[  320.376212][ T6573] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  320.459765][ T6581] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  320.570854][ T6585] loop0: detected capacity change from 0 to 512
[  320.591214][ T6585] EXT4-fs: Ignoring removed nobh option
[  320.670528][   T30] audit: type=1800 audit(1747612483.442:5): pid=6581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.242" name="file1" dev="loop3" ino=1048607 res=0 errno=0
[  320.721046][ T6585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.876555][   T30] audit: type=1800 audit(1747612483.652:6): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.248" name="file1" dev="loop0" ino=15 res=0 errno=0
[  320.974351][   T30] audit: type=1800 audit(1747612483.722:7): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.248" name="file2" dev="loop0" ino=16 res=0 errno=0
[  321.365461][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.776082][ T6591] loop4: detected capacity change from 0 to 4096
[  321.844449][ T6591] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  321.912269][ T6599] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  322.209407][   T30] audit: type=1800 audit(1747612484.982:8): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.250" name="file1" dev="loop4" ino=30 res=0 errno=0
[  323.015266][ T6613] loop3: detected capacity change from 0 to 512
[  323.781933][ T6613] EXT4-fs (loop3): Test dummy encryption mode enabled
[  323.789284][ T6613] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  323.830193][ T6630] loop0: detected capacity change from 0 to 2048
[  323.919222][ T6633] loop2: detected capacity change from 0 to 512
[  323.961806][ T6633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  323.964376][ T6613] EXT4-fs (loop3): 1 truncate cleaned up
[  323.982585][ T6613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.040230][ T6630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  324.082268][ T6633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.095867][ T6633] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.319991][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.370057][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.664066][ T6649] loop1: detected capacity change from 0 to 32768
[  325.674396][ T6649] XFS: ikeep mount option is deprecated.
[  325.680306][ T6649] XFS: ikeep mount option is deprecated.
[  325.686427][ T6649] XFS: noikeep mount option is deprecated.
[  325.847844][ T6649] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  326.047072][   T30] audit: type=1326 audit(1747612488.812:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.2.279" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04fa78e969 code=0x0
[  326.366586][ T6649] XFS (loop1): Ending clean mount
[  326.403639][ T6649] XFS: ikeep mount option is deprecated.
[  326.409929][ T6649] XFS: ikeep mount option is deprecated.
[  326.554533][ T5793] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  326.925059][ T5794] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  326.934845][ T5794] Bluetooth: hci2: Injecting HCI hardware error event
[  326.950062][ T5794] Bluetooth: hci2: hardware error 0x00
[  327.382196][ T6688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.289'.
[  327.971075][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.292'.
[  328.159907][ T6699] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  329.019757][ T5794] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  329.411666][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'.
[  329.940790][ T6733] loop0: detected capacity change from 0 to 128
[  330.411759][ T6736] loop4: detected capacity change from 0 to 128
[  330.471378][ T6736] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  331.022047][ T6747] loop2: detected capacity change from 0 to 64
[  331.122406][   T30] audit: type=1800 audit(1747612493.882:10): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.316" name="file1" dev="loop2" ino=18 res=0 errno=0
[  332.616788][ T6760] loop4: detected capacity change from 0 to 32768
[  332.630534][ T6760] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.322 (6760)
[  332.682174][ T6760] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  332.697333][ T6760] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm
[  332.709102][ T6760] BTRFS info (device loop4): using free-space-tree
[  333.104870][ T5804] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  333.405694][ T6785] pimreg2: entered allmulticast mode
[  333.601821][ T5848] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  333.625956][ T6789] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.330'.
[  333.636261][ T6789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.821844][ T5848] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  333.831508][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.891563][ T5848] usb 2-1: config 0 descriptor??
[  333.948285][ T5848] cp210x 2-1:0.0: cp210x converter detected
[  334.527262][ T5848] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  334.577514][ T5848] usb 2-1: cp210x converter now attached to ttyUSB0
[  334.667390][ T6794] loop2: detected capacity change from 0 to 4096
[  334.802044][ T5848] usb 2-1: USB disconnect, device number 2
[  334.858216][ T5848] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  334.879850][ T5848] cp210x 2-1:0.0: device disconnected
[  335.756592][ T6808] loop1: detected capacity change from 0 to 256
[  336.160957][ T6816] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  336.167821][ T6816] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  336.176100][ T6816] vhci_hcd vhci_hcd.0: Device attached
[  336.221752][ T6817] vhci_hcd: connection closed
[  336.222959][ T3931] vhci_hcd: stop threads
[  336.232647][ T3931] vhci_hcd: release socket
[  336.237777][ T3931] vhci_hcd: disconnect device
[  337.002157][ T6827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.345'.
[  337.803379][ T6844] netlink: 'syz.4.352': attribute type 8 has an invalid length.
[  337.968436][ T6846] loop2: detected capacity change from 0 to 2048
[  338.031408][ T6848] program syz.1.355 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  338.158992][ T6843] loop0: detected capacity change from 0 to 4096
[  338.217107][ T6846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.333862][ T6846] EXT4-fs (loop2): shut down requested (2)
[  338.480052][ T6853] loop4: detected capacity change from 0 to 256
[  338.597133][ T6853] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  338.748719][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.302870][ T6870] netlink: 6 bytes leftover after parsing attributes in process `syz.2.364'.
[  340.495567][ T6870] netlink: 6 bytes leftover after parsing attributes in process `syz.2.364'.
[  340.595119][ T6868] loop0: detected capacity change from 0 to 32768
[  340.759390][ T6868] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  340.807890][ T6868] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid device 255,noinodes_use_key_cache,nocow
[  340.807890][ T6868]   allowing incompatible features above 0.0: (unknown version)
[  340.835667][ T6868] bcachefs (loop0): initializing new filesystem
[  340.848881][ T6868] bcachefs (loop0): going read-write
[  340.919149][ T6874] loop1: detected capacity change from 0 to 1024
[  340.939239][ T6868] bcachefs (loop0): marking superblocks
[  341.008284][ T6868] bcachefs (loop0): initializing freespace
[  341.025499][ T6868] bcachefs (loop0): done initializing freespace
[  341.046919][ T6868] bcachefs (loop0): reading snapshots table
[  341.053402][ T6868] bcachefs (loop0): reading snapshots done
[  341.142784][ T6868] bcachefs (loop0): done starting filesystem
[  341.148180][ T6874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.161957][ T6874] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  341.350910][   T30] audit: type=1800 audit(1747612504.122:11): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.365" name="file1" dev="loop1" ino=15 res=0 errno=0
[  341.405332][ T6891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.368'.
[  341.568551][ T5789] bcachefs (loop0): shutting down
[  341.573845][ T5789] bcachefs (loop0): going read-only
[  341.585924][ T5789] bcachefs (loop0): finished waiting for writes to stop
[  341.680914][ T5789] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  341.719726][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.918007][ T5789] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  341.952443][ T5789] bcachefs (loop0): clean shutdown complete, journal seq 4
[  342.006692][ T5789] bcachefs (loop0): marking filesystem clean
[  342.192823][ T6897] loop2: detected capacity change from 0 to 512
[  342.212426][ T5789] bcachefs (loop0): shutdown complete
[  342.255263][ T6897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  342.326976][ T6897] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[  343.893415][ T6922] netlink: 72 bytes leftover after parsing attributes in process `syz.1.381'.
[  344.202918][ T6927] loop3: detected capacity change from 0 to 512
[  344.229659][ T6927] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  344.399349][ T6927] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  344.435811][ T6927] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  344.523501][ T6927] EXT4-fs (loop3): 1 truncate cleaned up
[  344.531944][ T6927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.835544][ T5848] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  344.957594][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.009177][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.021544][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.031947][ T5848] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  345.041507][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.088629][ T5848] usb 3-1: config 0 descriptor??
[  346.253218][ T5848] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0
[  346.260692][ T5848] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0
[  346.268039][ T5848] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0
[  346.275427][ T5848] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0
[  346.282542][ T5848] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0
[  346.299576][ T5848] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0
[  346.309437][ T5848] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0
[  346.318499][ T6941] loop3: detected capacity change from 0 to 32768
[  346.341884][ T5848] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[  346.377114][ T6941] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  346.570299][ T5848] usb 3-1: USB disconnect, device number 5
[  346.920878][ T6941] XFS (loop3): Ending clean mount
[  347.125257][ T5795] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  347.529055][ T6956] loop4: detected capacity change from 0 to 32768
[  347.588718][ T6956] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  348.000990][ T6956] XFS (loop4): Ending clean mount
[  348.052983][ T6956] XFS (loop4): Quotacheck needed: Please wait.
[  348.128630][ T6956] XFS (loop4): Quotacheck: Done.
[  348.307153][ T6975] loop0: detected capacity change from 0 to 256
[  348.474667][ T5804] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  348.477125][ T6975] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0a42a509, utbl_chksum : 0xe619d30d)
[  348.497295][ T6975] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  348.718588][ T6979] loop2: detected capacity change from 0 to 1024
[  349.290144][ T3743] hfsplus: b-tree write err: -5, ino 4
[  349.380164][ T6988] netlink: 'syz.3.392': attribute type 10 has an invalid length.
[  349.388706][ T6988] team0: Device dummy0 is up. Set it down before adding it as a team port
[  350.767910][ T7011] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  351.252884][ T7017] loop1: detected capacity change from 0 to 1024
[  352.074027][ T7029] loop0: detected capacity change from 0 to 512
[  352.307130][ T7029] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  352.316011][ T7029] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  352.409052][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  352.416063][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  352.425942][ T7029] System zones: 0-1, 15-15, 18-18, 34-34
[  352.464464][ T7029] EXT4-fs (loop0): orphan cleanup on readonly fs
[  352.471297][ T7029] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  352.481328][ T7029] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  352.496365][ T7029] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  352.560227][ T7029] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.419: bg 0: block 40: padding at end of block bitmap is not set
[  352.604763][ T7029] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  352.688272][ T7029] EXT4-fs (loop0): 1 truncate cleaned up
[  352.696924][ T7029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  352.866641][ T7029] EXT4-fs (loop0): shut down requested (2)
[  353.226248][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.908420][ T7058] loop1: detected capacity change from 0 to 512
[  354.077539][ T7058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.090753][ T7058] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  354.319332][ T7058] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  354.495259][ T7058] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  354.610595][ T7074] loop0: detected capacity change from 0 to 128
[  354.723999][ T7072] loop4: detected capacity change from 0 to 2048
[  354.742135][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.745808][ T7074] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  354.845305][ T7074] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  354.880425][ T7072] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  355.218531][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  355.282952][ T7085] netlink: 140 bytes leftover after parsing attributes in process `syz.2.442'.
[  355.432038][ T7088] loop1: detected capacity change from 0 to 512
[  355.495730][ T7088] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  355.614254][ T7088] EXT4-fs (loop1): 1 truncate cleaned up
[  355.628831][ T7088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.766549][ T7088] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  355.777178][   T30] audit: type=1800 audit(1747612518.542:12): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.444" name="file1" dev="loop1" ino=16 res=0 errno=0
[  355.799223][ T7088] EXT4-fs (loop1): Remounting filesystem read-only
[  355.809061][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  355.970324][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.011967][   T24] usb 1-1: Using ep0 maxpacket: 32
[  356.078693][   T24] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  356.089557][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.152242][   T24] usb 1-1: config 0 descriptor??
[  356.410775][   T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  356.433787][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  356.451192][ T7103] loop2: detected capacity change from 0 to 8
[  356.468573][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  356.476293][   T24] usb 1-1: media controller created
[  356.495486][ T7103] SQUASHFS error: zlib decompression failed, data probably corrupt
[  356.504028][ T7103] SQUASHFS error: Failed to read block 0x9b: -5
[  356.510675][ T7103] SQUASHFS error: Unable to read metadata cache entry [99]
[  356.518375][ T7103] SQUASHFS error: Unable to read inode 0x127
[  356.586740][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  356.679544][   T24] az6027: usb out operation failed. (-71)
[  356.712101][   T24] az6027: usb out operation failed. (-71)
[  356.718339][   T24] stb0899_attach: Driver disabled by Kconfig
[  356.724732][   T24] az6027: no front-end attached
[  356.724732][   T24] 
[  356.744456][   T24] az6027: usb out operation failed. (-71)
[  356.750460][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  356.760863][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9
[  356.793478][   T24] dvb-usb: schedule remote query interval to 400 msecs.
[  356.801183][   T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  356.826639][   T24] usb 1-1: USB disconnect, device number 3
[  357.059863][   T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  357.280118][ T7110] loop2: detected capacity change from 0 to 256
[  357.314532][ T7110] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  357.325879][ T7110] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  357.423365][ T7110] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  357.604437][   T30] audit: type=1800 audit(1747612520.372:13): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.454" name="file1" dev="loop2" ino=1048611 res=0 errno=0
[  358.441276][ T7126] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  358.845126][ T7131] Driver unsupported XDP return value 0 on prog  (id 38) dev N/A, expect packet loss!
[  358.909304][ T7134] netlink: 44 bytes leftover after parsing attributes in process `syz.3.466'.
[  358.918876][ T7134] netlink: 'syz.3.466': attribute type 6 has an invalid length.
[  358.927042][ T7134] netlink: 'syz.3.466': attribute type 5 has an invalid length.
[  358.935050][ T7134] netlink: 'syz.3.466': attribute type 4 has an invalid length.
[  360.237342][ T7143] loop2: detected capacity change from 0 to 32768
[  360.248463][ T7143] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.470 (7143)
[  360.252070][ T7149] loop0: detected capacity change from 0 to 1024
[  360.281410][ T7143] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  360.292417][ T7143] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm
[  360.304409][ T7143] BTRFS info (device loop2): using free-space-tree
[  360.394867][ T7154] bridge0: entered promiscuous mode
[  360.408032][ T7154] bridge0: port 3(macsec1) entered blocking state
[  360.415320][ T7154] bridge0: port 3(macsec1) entered disabled state
[  360.432852][ T7154] macsec1: entered allmulticast mode
[  360.438709][ T7154] bridge0: entered allmulticast mode
[  360.449820][ T7154] macsec1: left allmulticast mode
[  360.455494][ T7154] bridge0: left allmulticast mode
[  360.467221][ T7154] bridge0: left promiscuous mode
[  360.839027][ T5796] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  361.264726][ T5848] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  361.454516][ T5848] usb 2-1: Using ep0 maxpacket: 16
[  361.499169][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.510793][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.521199][ T5848] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  361.530828][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.639248][ T5848] usb 2-1: config 0 descriptor??
[  362.148564][ T5848] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0
[  362.319192][ T5848] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error -71).
[  362.355867][ T5848] usb 2-1: USB disconnect, device number 3
[  362.636569][   T24] kernel write not supported for file /input/mice (pid: 24 comm: kworker/1:0)
[  363.635563][ T7186] loop3: detected capacity change from 0 to 32768
[  363.653620][ T7193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.486'.
[  363.670835][ T7186] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  363.679831][ T7186] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  363.730026][ T7186] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  363.923957][ T7186] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  364.090835][ T7199] loop2: detected capacity change from 0 to 256
[  364.100282][ T7199] exfat: Deprecated parameter 'utf8'
[  364.117227][ T7199] exfat: Deprecated parameter 'utf8'
[  364.123442][ T7199] exfat: Deprecated parameter 'utf8'
[  364.352393][ T7199] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  364.676330][ T7207] netlink: 'syz.0.493': attribute type 10 has an invalid length.
[  365.636125][ T7209] loop4: detected capacity change from 0 to 4096
[  365.701902][ T7209] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  366.492681][ T7219] loop1: detected capacity change from 0 to 32768
[  366.654667][ T7209] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  366.793827][ T7209] ntfs3(loop4): ino=1a, mi_enum_attr
[  366.801161][ T7209] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  366.836073][ T7219] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  366.891079][ T7219] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  366.891079][ T7219]   allowing incompatible features above 0.0: (unknown version)
[  366.922749][ T7219] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  366.932723][ T7219] bcachefs (loop1): Version upgrade required:
[  366.932723][ T7219] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete
[  366.932723][ T7219] Doing incompatible version upgrade from 0.8: (unknown version) to 1.25: extent_flags
[  366.932723][ T7219]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  367.012769][ T7219] bcachefs (loop1): dropping and reconstructing all alloc info
[  367.048361][ T7219] bcachefs (loop1): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: 
[  367.048476][ T7219]     mode=100755
[  367.048538][ T7219]     flags=(15300000)
[  367.048597][ T7219]     journal_seq=4
[  367.048652][ T7219]     hash_seed=d483206f1ed95abf
[  367.048723][ T7219]     hash_type=siphash
[  367.048786][ T7219]     bi_size=100
[  367.048849][ T7219]     bi_sectors=8
[  367.048913][ T7219]     bi_version=1126999418470400
[  367.048971][ T7219]     bi_atime=0
[  367.049029][ T7219]     bi_ctime=0
[  367.049091][ T7219]     bi_mtime=0
[  367.049154][ T7219]     bi_otime=2780562352
[  367.049227][ T7219]     bi_uid=2780562352
[  367.049291][ T7219]     bi_gid=0
[  367.049352][ T7219]     bi_nlink=2780562352
[  367.049419][ T7219]     bi_generation=0
[  367.049481][ T7219]     bi_dev=0
[  367.049541][ T7219]     bi_data_checksum=0
[  367.049606][ T7219]     bi_compression=56
[  367.049670][ T7219]     bi_project=0
[  367.049758][ T7219]     bi_background_compression=0
[  367.049827][ T7219]     bi_data_replicas=0
[  367.049893][ T7219]     bi_promote_target=0
[  367.049961][ T7219]     bi_foreground_target=0
[  367.050029][ T7219]     bi_background_target=0
[  367.050097][ T7219]     bi_erasure_code=0
[  367.050163][ T7219]     bi_fields_set=0
[  367.050227][ T7219]     bi_dir=0
[  367.050289][ T7219]     bi_dir_offset=0
[  367.050353][ T7219]     bi_subvol=0
[  367.050424][ T7219]     bi_parent_subvol=0
[  367.050489][ T7219]     bi_nocow=0
[  367.050552][ T7219]     bi_depth=0
[  367.050615][ T7219]     bi_inodes_32bit=0
[  367.050684][ T7219]     bi_casefold=0
[  367.050749][ T7219]   invalid compression opt 55, deleting
[  367.267682][ T7219] bcachefs (loop1): accounting_read... done
[  367.275675][ T7219] bcachefs (loop1): alloc_read... done
[  367.288105][ T7219] bcachefs (loop1): snapshots_read... done
[  367.297468][ T7219] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[  367.309213][ T7219] bcachefs (loop1): done starting filesystem
[  367.499797][ T5793] bcachefs (loop1): shutting down
[  367.677090][ T5793] bcachefs (loop1): shutdown complete
[  368.265602][ T7246] netlink: 'syz.4.505': attribute type 2 has an invalid length.
[  368.273536][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'.
[  368.687462][ T7249] loop3: detected capacity change from 0 to 2048
[  368.851101][ T7249] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  369.217266][ T7254] loop4: detected capacity change from 0 to 2048
[  369.364400][ T7254] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  369.374704][ T7254] NILFS (loop4): mounting unchecked fs
[  369.681398][ T7254] NILFS (loop4): recovery complete
[  369.767878][ T7259] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  369.812660][ T5794] Bluetooth: hci1: command 0x0406 tx timeout
[  369.826220][ T5794] Bluetooth: hci0: command 0x0406 tx timeout
[  369.905443][ T7256] loop2: detected capacity change from 0 to 32768
[  369.998063][ T7256] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  370.475461][ T7256] XFS (loop2): Ending clean mount
[  370.624595][ T5796] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  371.112164][ T7277] loop0: detected capacity change from 0 to 128
[  372.720538][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'.
[  372.826766][ T7297] use of bytesused == 0 is deprecated and will be removed in the future,
[  372.836678][ T7297] use the actual size instead.
[  373.271034][ T7308] loop4: detected capacity change from 0 to 256
[  373.334956][   T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  373.409245][ T7308] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  373.534706][   T24] usb 1-1: Using ep0 maxpacket: 8
[  373.601771][   T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  373.613672][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.622150][   T24] usb 1-1: Product: syz
[  373.626665][   T24] usb 1-1: Manufacturer: syz
[  373.634333][   T24] usb 1-1: SerialNumber: syz
[  373.727119][   T24] usb 1-1: config 0 descriptor??
[  373.933219][ T7315] loop3: detected capacity change from 0 to 164
[  373.994839][   T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  374.399581][   T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  374.436399][   T24] usb 1-1: USB disconnect, device number 4
[  374.676083][ T7328] loop3: detected capacity change from 0 to 1024
[  374.728241][ T7328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  374.924819][ T5084] Bluetooth: hci3: command 0x0406 tx timeout
[  376.632585][ T7360] bridge0: port 3(syz_tun) entered blocking state
[  376.640778][ T7360] bridge0: port 3(syz_tun) entered disabled state
[  376.648260][ T7360] syz_tun: entered allmulticast mode
[  376.657145][ T7360] syz_tun: entered promiscuous mode
[  376.664985][ T7360] bridge0: port 3(syz_tun) entered blocking state
[  376.671948][ T7360] bridge0: port 3(syz_tun) entered forwarding state
[  377.143551][ T7366] loop3: detected capacity change from 0 to 1024
[  377.175309][   T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  377.365383][   T24] usb 5-1: Using ep0 maxpacket: 16
[  377.406974][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  377.422410][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  377.511836][   T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  377.525067][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.535515][   T24] usb 5-1: Product: syz
[  377.539960][   T24] usb 5-1: Manufacturer: syz
[  377.545821][   T24] usb 5-1: SerialNumber: syz
[  377.597139][   T70] hfsplus: b-tree write err: -5, ino 4
[  377.618102][   T24] usb 5-1: config 0 descriptor??
[  377.686712][   T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  377.697447][   T24] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  378.290322][   T24] em28xx 5-1:0.0: chip ID is em28174
[  378.537785][   T24] usb 5-1: USB disconnect, device number 2
[  378.548807][   T24] em28xx 5-1:0.0: Disconnecting em28xx
[  378.572901][ T7386] loop2: detected capacity change from 0 to 128
[  378.621047][   T24] em28xx 5-1:0.0: Freeing device
[  379.021755][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'.
[  379.031121][ T7391] netlink: 52 bytes leftover after parsing attributes in process `syz.3.568'.
[  379.041231][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'.
[  379.492131][ T7397] loop0: detected capacity change from 0 to 512
[  379.520498][ T7397] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  379.629475][ T7397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.642863][ T7397] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  380.181393][ T7414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.577'.
[  380.195165][ T7414] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357164673)
[  380.205838][ T7414] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  380.312321][ T7413] loop1: detected capacity change from 0 to 512
[  380.335884][ T7413] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.578: iget: bogus i_mode (0)
[  380.353199][ T7413] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.578: couldn't read orphan inode 17 (err -117)
[  380.370378][ T7413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  380.406972][ T5789] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /126/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  380.461303][ T7413] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.578: bg 0: block 7: invalid block bitmap
[  380.620961][ T7419] loop4: detected capacity change from 0 to 128
[  380.816622][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.197258][   T30] audit: type=1326 audit(1747612543.962:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf7d8e969 code=0x7ffc0000
[  381.225961][   T30] audit: type=1326 audit(1747612543.982:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaf7d8e969 code=0x7ffc0000
[  381.251588][   T30] audit: type=1326 audit(1747612544.012:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf7d8e969 code=0x7ffc0000
[  381.252930][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'.
[  381.274442][   T30] audit: type=1326 audit(1747612544.012:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf7d8e969 code=0x7ffc0000
[  381.274675][   T30] audit: type=1326 audit(1747612544.012:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaf7d8e969 code=0x7ffc0000
[  381.383563][ T7430] overlayfs: upper fs does not support tmpfile.
[  381.468723][   T30] audit: type=1326 audit(1747612544.112:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf7d8e969 code=0x7ffc0000
[  381.491875][   T30] audit: type=1326 audit(1747612544.142:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcaf7d85927 code=0x7ffc0000
[  381.515281][   T30] audit: type=1326 audit(1747612544.142:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcaf7d2ab39 code=0x7ffc0000
[  381.543508][   T30] audit: type=1326 audit(1747612544.142:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcaf7d85927 code=0x7ffc0000
[  381.568234][   T30] audit: type=1326 audit(1747612544.142:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcaf7d2ab39 code=0x7ffc0000
[  381.874845][   T24] kernel read not supported for file /dsp1 (pid: 24 comm: kworker/1:0)
[  382.008648][ T7434] loop4: detected capacity change from 0 to 164
[  382.047375][ T7434] Unable to read rock-ridge attributes
[  382.080926][ T7434] Unable to read rock-ridge attributes
[  383.173555][ T7452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.595'.
[  384.189931][ T7466] input: syz1 as /devices/virtual/input/input11
[  384.267682][ T7462] loop3: detected capacity change from 0 to 2048
[  384.374540][ T7462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.416020][ T7462] EXT4-fs (loop3): shut down requested (2)
[  384.417922][ T7468] loop4: detected capacity change from 0 to 256
[  384.717446][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.575425][ T7483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.609'.
[  386.513729][ T7493] loop2: detected capacity change from 0 to 16
[  386.563454][ T7493] erofs (device loop2): mounted with root inode @ nid 36.
[  387.224415][ T7498] loop4: detected capacity change from 0 to 2048
[  387.271864][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'.
[  387.343280][ T5848] IPVS: starting estimator thread 0...
[  387.382775][ T7498] EXT4-fs (loop4): failed to initialize system zone (-117)
[  387.434542][ T7508] IPVS: using max 192 ests per chain, 9600 per kthread
[  387.464807][ T7498] EXT4-fs (loop4): mount failed
[  388.540074][ T7517] loop1: detected capacity change from 0 to 256
[  388.623916][ T7517] FAT-fs (loop1): bogus number of FAT sectors
[  388.630853][ T7517] FAT-fs (loop1): Can't find a valid FAT filesystem
[  389.287220][ T5848] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  389.375125][ T7528] loop3: detected capacity change from 0 to 256
[  389.481309][ T5848] usb 5-1: Using ep0 maxpacket: 8
[  389.547400][ T5848] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  389.560682][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.600493][ T7528] FAT-fs (loop3): Directory bread(block 64) failed
[  389.610680][ T7528] FAT-fs (loop3): Directory bread(block 65) failed
[  389.618600][ T7528] FAT-fs (loop3): Directory bread(block 66) failed
[  389.625549][ T7528] FAT-fs (loop3): Directory bread(block 67) failed
[  389.631685][ T5848] pvrusb2: Hardware description: Terratec Grabster AV400
[  389.632397][ T7528] FAT-fs (loop3): Directory bread(block 68) failed
[  389.639709][ T5848] pvrusb2: **********
[  389.646584][ T7528] FAT-fs (loop3): Directory bread(block 69) failed
[  389.650518][ T5848] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  389.657425][ T7528] FAT-fs (loop3): Directory bread(block 70) failed
[  389.657548][ T7528] FAT-fs (loop3): Directory bread(block 71) failed
[  389.657805][ T7528] FAT-fs (loop3): Directory bread(block 72) failed
[  389.668058][ T5848] pvrusb2: Important functionality might not be entirely working.
[  389.674706][ T7528] FAT-fs (loop3): Directory bread(block 73) failed
[  389.681393][ T5848] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  389.726817][ T5848] pvrusb2: **********
[  389.843555][ T2333] pvrusb2: Invalid write control endpoint
[  389.868924][ T7528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.628'.
[  390.142616][ T7522] pvrusb2: Killing an I2C write to 9 that is too large (desired=8192 limit=61)
[  390.236959][   T24] usb 5-1: USB disconnect, device number 3
[  390.287483][ T2333] pvrusb2: Invalid write control endpoint
[  390.293638][ T2333] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  390.303263][ T2333] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  390.311271][ T2333] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  390.325191][ T2333] pvrusb2: Device being rendered inoperable
[  390.331336][ T2333] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  390.339704][ T2333] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  390.348767][ T2333] pvrusb2: Attached sub-driver cx25840
[  390.354542][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  390.364984][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  390.827054][ T7533] loop1: detected capacity change from 0 to 32768
[  390.872384][ T7533] read_mapping_page failed!
[  390.877327][ T7533] ERROR: (device loop1): txAbort: 
[  390.877327][ T7533] 
[  392.123904][ T7541] netlink: 27 bytes leftover after parsing attributes in process `syz.4.635'.
[  392.862492][ T7549] loop2: detected capacity change from 0 to 2048
[  393.074352][ T7555] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  393.177226][ T7555] NILFS (loop2): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3)
[  393.196179][ T7555] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=2)
[  393.270799][ T7555] Remounting filesystem read-only
[  393.698985][ T5796] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  393.951154][ T7564] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  393.967590][ T7564] overlayfs: conflicting options: userxattr,redirect_dir=on
[  394.312514][ T7573] loop4: detected capacity change from 0 to 256
[  394.433679][ T7573] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d)
[  395.327311][ T7590] capability: warning: `syz.1.654' uses 32-bit capabilities (legacy support in use)
[  396.008275][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.657'.
[  396.170465][ T7603] loop4: detected capacity change from 0 to 512
[  396.359495][ T7603] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[  396.372960][ T7603] EXT4-fs (loop4): group descriptors corrupted!
[  396.841920][ T5084] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  396.852790][ T5084] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  396.887995][ T5084] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  396.924860][ T7609] ntfs3(nullb0): Primary boot signature is not NTFS.
[  396.949078][ T5084] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  396.975553][ T5084] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  397.026348][ T7609] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  397.437321][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  397.437403][   T30] audit: type=1326 audit(1747612560.152:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.3.665" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6eba78e969 code=0x0
[  397.465282][    C1] vkms_vblank_simulate: vblank timer overrun
[  398.675679][ T7610] chnl_net:caif_netlink_parms(): no params data found
[  399.094801][ T5084] Bluetooth: hci5: command tx timeout
[  399.271918][ T7640] loop1: detected capacity change from 0 to 1024
[  399.425620][ T7640] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  399.655116][ T7636] loop3: detected capacity change from 0 to 32768
[  399.673378][ T7640] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.673: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  399.705802][ T7636] ERROR: (device loop3): dbAlloc: the hint is outside the map
[  399.705802][ T7636] 
[  399.765298][ T7640] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.673: couldn't read orphan inode 11 (err -117)
[  399.823409][ T7640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.854646][ T3883] read_mapping_page failed!
[  399.859413][ T3883] ERROR: (device loop3): txAbort: 
[  399.859413][ T3883] 
[  399.867438][ T3883] jfs_write_inode: jfs_commit_inode failed!
[  400.078538][ T7640] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.673: Invalid block bitmap block 0 in block_group 0
[  400.137023][ T7640] Quota error (device loop1): write_blk: dquota write failed
[  400.145253][ T7640] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  400.162923][ T7640] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.673: Failed to acquire dquot type 0
[  400.251145][ T7649] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz.1.673: Invalid inode table block 8589934593 in block_group 0
[  400.521036][   T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.558208][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.877592][ T3931] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm kworker/u8:17: Invalid inode table block 8589934593 in block_group 0
[  400.938730][   T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.969367][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.019317][ T7610] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.027212][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.035221][ T7610] bridge_slave_0: entered allmulticast mode
[  401.044941][ T7610] bridge_slave_0: entered promiscuous mode
[  401.089362][ T7610] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.097386][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.105495][ T7610] bridge_slave_1: entered allmulticast mode
[  401.115664][ T7610] bridge_slave_1: entered promiscuous mode
[  401.169844][   T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.206355][ T5084] Bluetooth: hci5: command tx timeout
[  401.421016][   T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.844194][ T7610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  401.965398][   T14] bridge_slave_1: left allmulticast mode
[  401.971444][   T14] bridge_slave_1: left promiscuous mode
[  401.978391][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.055861][   T14] bridge_slave_0: left allmulticast mode
[  402.061808][   T14] bridge_slave_0: left promiscuous mode
[  402.068956][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.339515][ T7662] loop3: detected capacity change from 0 to 1024
[  402.706438][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  402.766779][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.783790][ T7668] loop2: detected capacity change from 0 to 64
[  402.828618][   T14] bond0 (unregistering): Released all slaves
[  402.893001][ T7610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  403.252441][ T5084] Bluetooth: hci5: command tx timeout
[  403.359516][ T7610] team0: Port device team_slave_0 added
[  403.586476][ T7610] team0: Port device team_slave_1 added
[  403.690802][ T7679] loop3: detected capacity change from 0 to 128
[  403.832404][ T7679] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  403.845074][ T7679] FAT-fs (loop3): Filesystem has been set read-only
[  403.852022][ T7679] syz.3.688: attempt to access beyond end of device
[  403.852022][ T7679] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  403.867377][ T7679] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  403.875673][ T7679] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  403.884382][   T30] audit: type=1800 audit(1747612566.612:34): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.688" name="file2" dev="loop3" ino=1048618 res=0 errno=0
[  403.935289][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.946123][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.973777][ T7610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  404.123282][   T14] hsr_slave_0: left promiscuous mode
[  404.135710][   T14] hsr_slave_1: left promiscuous mode
[  404.143814][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  404.156108][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[  404.224266][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  404.232055][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[  404.294349][   T14] veth1_macvtap: left promiscuous mode
[  404.300196][   T14] veth0_macvtap: left promiscuous mode
[  404.306677][   T14] veth1_vlan: left promiscuous mode
[  404.312281][   T14] veth0_vlan: left promiscuous mode
[  405.310759][   T14] team0 (unregistering): Port device team_slave_1 removed
[  405.325410][ T5084] Bluetooth: hci5: command tx timeout
[  405.350073][   T14] team0 (unregistering): Port device team_slave_0 removed
[  405.701076][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.710491][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.738343][ T7610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.789374][ T7684] netlink: 612 bytes leftover after parsing attributes in process `syz.2.691'.
[  406.242334][ T7610] hsr_slave_0: entered promiscuous mode
[  406.252955][ T7610] hsr_slave_1: entered promiscuous mode
[  406.262139][ T7610] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  406.270185][ T7610] Cannot create hsr debugfs directory
[  406.347873][ T7697] sctp: failed to load transform for md5: -2
[  406.451933][ T7709] loop4: detected capacity change from 0 to 16
[  406.519036][ T7709] erofs (device loop4): mounted with root inode @ nid 36.
[  406.595936][ T7709] overlayfs: failed to get redirect (-117)
[  406.884435][ T7714] random: crng reseeded on system resumption
[  407.678653][ T7725] loop2: detected capacity change from 0 to 256
[  407.775555][ T7610] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  407.816279][ T7610] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  407.852507][ T7725] exFAT-fs (loop2): start_clu is invalid cluster(0x400)
[  407.855748][ T7610] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  407.883072][ T7610] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  407.957197][ T7729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.708'.
[  409.088424][   T30] audit: type=1326 audit(1747612571.842:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eba78e969 code=0x7ffc0000
[  409.109344][ T7610] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.183474][   T30] audit: type=1326 audit(1747612571.902:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f6eba78e969 code=0x7ffc0000
[  409.209870][   T30] audit: type=1326 audit(1747612571.912:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eba78e969 code=0x7ffc0000
[  409.297640][   T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  409.328462][ T7610] 8021q: adding VLAN 0 to HW filter on device team0
[  409.415264][ T3883] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.423042][ T3883] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.465869][   T24] usb 5-1: Using ep0 maxpacket: 16
[  409.499030][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.511090][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  409.521324][   T24] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  409.530764][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.564893][ T3883] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.572646][ T3883] bridge0: port 2(bridge_slave_1) entered forwarding state
[  409.662341][   T24] usb 5-1: config 0 descriptor??
[  410.199197][ T7746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.211232][ T7746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.315896][   T24] hid (null): global environment stack underflow
[  410.322905][   T24] hid (null): global environment stack underflow
[  410.332665][   T24] hid (null): bogus close delimiter
[  410.421154][ T7762] loop1: detected capacity change from 0 to 64
[  410.554855][   T24] usb 5-1: string descriptor 0 read error: -71
[  410.600883][   T24] usb 5-1: Max retries (5) exceeded reading string descriptor 200
[  410.610888][   T24] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -32
[  410.680838][   T24] usb 5-1: USB disconnect, device number 4
[  411.690128][ T7610] 8021q: adding VLAN 0 to HW filter on device batadv0
[  412.251019][ T7787] loop1: detected capacity change from 0 to 256
[  412.297157][ T7787] exfat: Deprecated parameter 'utf8'
[  412.303512][ T7787] exfat: Bad value for 'dmask'
[  412.316156][ T7777] loop4: detected capacity change from 0 to 4096
[  412.945472][ T7785] loop3: detected capacity change from 0 to 32768
[  412.962197][ T7785] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.728 (7785)
[  412.998129][ T7785] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  413.008930][ T7785] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm
[  413.020671][ T7785] BTRFS info (device loop3): using free-space-tree
[  413.326185][ T7777] ntfs3(loop4): ino=1a, mi_enum_attr
[  413.331825][ T7777] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  413.461780][ T5795] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  413.868658][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  413.878027][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  414.361989][ T7820] loop1: detected capacity change from 0 to 2048
[  414.566893][ T7825] gretap0: entered promiscuous mode
[  414.572602][ T7825] vlan2: entered promiscuous mode
[  414.587386][ T7820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  414.713908][ T7820] EXT4-fs (loop1): shut down requested (2)
[  414.733257][ T7610] veth0_vlan: entered promiscuous mode
[  414.858547][ T7610] veth1_vlan: entered promiscuous mode
[  415.118631][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.153201][ T7610] veth0_macvtap: entered promiscuous mode
[  415.190370][ T7829] netlink: 14 bytes leftover after parsing attributes in process `syz.2.739'.
[  415.221122][ T7610] veth1_macvtap: entered promiscuous mode
[  415.360813][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.396165][ T7831] loop4: detected capacity change from 0 to 64
[  415.497360][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_1
[  415.552013][ T7610] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.562171][ T7610] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.572093][ T7610] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.581807][ T7610] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.029643][ T7840] loop3: detected capacity change from 0 to 256
[  416.097165][ T7840] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  416.109807][ T7840] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  416.273446][ T7840] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  416.502449][ T7849] loop1: detected capacity change from 0 to 164
[  416.615651][ T7849] rock: directory entry would overflow storage
[  416.622163][ T7849] rock: sig=0x4f50, size=4, remaining=3
[  416.629111][ T7849] iso9660: Corrupted directory entry in block 4 of inode 1792
[  418.601605][ T7885] loop1: detected capacity change from 0 to 1024
[  419.649205][ T7903] netlink: 'syz.3.765': attribute type 1 has an invalid length.
[  419.927622][ T7910] binder: 7908:7910 ioctl c018620c 200000000180 returned -1
[  420.456416][ T7909] loop1: detected capacity change from 0 to 4096
[  420.876590][ T7924] netlink: 208 bytes leftover after parsing attributes in process `syz.3.773'.
[  421.004460][ T5803] Bluetooth: hci4: command 0x0406 tx timeout
[  421.403396][ T7932] loop3: detected capacity change from 0 to 128
[  421.443229][ T7932] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  421.518015][ T7932] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  421.844631][ T3883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.852753][ T3883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.024513][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  422.032677][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.289029][ T7940] loop9: detected capacity change from 0 to 8
[  422.325401][ T7940]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  422.331156][ T7940] loop9: partition table partially beyond EOD, truncated
[  422.339266][ T7940] loop9: p1 size 81768186 extends beyond EOD, truncated
[  422.957681][ T7952] netlink: 32 bytes leftover after parsing attributes in process `syz.2.785'.
[  422.968558][ T7952] netlink: 7 bytes leftover after parsing attributes in process `syz.2.785'.
[  423.149600][ T7959] loop1: detected capacity change from 0 to 1024
[  423.418266][ T7959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  423.431883][ T7959] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  423.597977][ T7969] loop2: detected capacity change from 0 to 64
[  423.674632][   T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  423.894643][   T45] usb 4-1: Using ep0 maxpacket: 8
[  423.926121][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.942508][   T45] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  423.952011][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.100049][   T45] pvrusb2: Hardware description: Terratec Grabster AV400
[  424.107714][   T45] pvrusb2: **********
[  424.111889][   T45] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  424.127563][   T45] pvrusb2: Important functionality might not be entirely working.
[  424.137199][   T45] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  424.148806][   T45] pvrusb2: **********
[  424.375251][ T2333] pvrusb2: Invalid write control endpoint
[  424.501563][ T7974] blkio.reset_stats is deprecated
[  424.596197][   T45] usb 4-1: USB disconnect, device number 2
[  424.679533][ T2333] pvrusb2: Invalid write control endpoint
[  424.687404][ T2333] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  424.697276][ T2333] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  424.705117][ T2333] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  424.715391][ T2333] pvrusb2: Device being rendered inoperable
[  424.721680][ T2333] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  424.733451][ T2333] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  424.743607][ T2333] pvrusb2: Attached sub-driver cx25840
[  424.744804][   T11] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  424.749614][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  424.767389][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  425.127065][ T7980] loop1: detected capacity change from 0 to 256
[  425.235923][ T7980] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d)
[  425.575267][ T7978] loop2: detected capacity change from 0 to 32768
[  425.592036][ T7978] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.794 (7978)
[  425.622400][ T7978] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  425.633247][ T7978] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm
[  425.642802][ T7978] BTRFS info (device loop2): using free-space-tree
[  425.809470][   T11] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  425.819161][   T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.842000][   T11] usb 5-1: config 0 descriptor??
[  425.865737][   T11] cp210x 5-1:0.0: cp210x converter detected
[  426.201811][ T5796] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  426.335860][   T11] usb 5-1: cp210x converter now attached to ttyUSB0
[  426.584645][   T11] usb 5-1: USB disconnect, device number 5
[  426.619836][   T11] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  426.685487][   T11] cp210x 5-1:0.0: device disconnected
[  428.221032][ T8008] loop1: detected capacity change from 0 to 40427
[  428.241385][ T8008] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  428.250905][ T8008] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  428.282280][ T8008] F2FS-fs (loop1): invalid crc value
[  428.667406][ T8008] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  428.675007][ T8008] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  429.651170][ T8030] loop4: detected capacity change from 0 to 256
[  429.714890][ T8030] exfat: Deprecated parameter 'utf8'
[  429.720776][ T8030] exfat: Deprecated parameter 'namecase'
[  429.727700][ T8030] exfat: Deprecated parameter 'namecase'
[  429.733688][ T8030] exfat: Deprecated parameter 'utf8'
[  429.987072][ T8030] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  430.237484][ T8029] sctp: failed to load transform for md5: -2
[  432.440375][ T8075] bridge0: port 3(syz_tun) entered blocking state
[  432.447826][ T8075] bridge0: port 3(syz_tun) entered disabled state
[  432.455085][ T8075] syz_tun: entered allmulticast mode
[  432.463699][ T8075] syz_tun: entered promiscuous mode
[  432.471306][ T8075] bridge0: port 3(syz_tun) entered blocking state
[  432.478338][ T8075] bridge0: port 3(syz_tun) entered forwarding state
[  432.481155][ T8074] loop4: detected capacity change from 0 to 2048
[  432.652790][ T8074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  432.855622][ T8074] EXT4-fs (loop4): shut down requested (2)
[  432.895704][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'.
[  433.198397][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.470201][ T8114] sp0: Synchronizing with TNC
[  434.477210][ T8113] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  434.497901][ T8113] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  434.583390][ T8111] [U] è
[  434.957725][ T8118] loop4: detected capacity change from 0 to 512
[  434.974906][ T8121] loop5: detected capacity change from 0 to 16
[  435.017654][ T8121] erofs (device loop5): mounted with root inode @ nid 36.
[  435.056728][ T8118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  435.074997][ T8118] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  435.099589][ T8117] loop1: detected capacity change from 0 to 1024
[  435.110538][ T8122] loop2: detected capacity change from 0 to 512
[  435.135640][ T8121] erofs (device loop5): corrupted dir block 8200 @ nid 36
[  435.306492][ T8122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  435.320161][ T8122] ext4 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  435.397414][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.508829][ T8122] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.847: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  435.594761][ T8122] EXT4-fs (loop2): Remounting filesystem read-only
[  435.867776][ T8137] loop4: detected capacity change from 0 to 256
[  435.875780][   T35] hfsplus: b-tree write err: -5, ino 4
[  436.100922][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.122430][ T8137] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  436.394906][ T8135] loop3: detected capacity change from 0 to 8192
[  436.877059][ T8141] loop1: detected capacity change from 0 to 4096
[  436.937612][ T8141] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  437.395927][ T8141] ntfs3(loop1): ino=19, mi_enum_attr
[  437.401557][ T8141] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  438.258778][ T8168] loop5: detected capacity change from 0 to 512
[  438.317743][ T8168] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  438.328910][ T8168] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  438.370747][ T8168] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  438.388155][ T8168] System zones: 0-2, 18-18, 34-35
[  438.402390][ T8168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  438.492929][ T8168] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  438.557038][ T8168] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  438.577394][ T8168] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  438.639149][   T30] audit: type=1800 audit(1747612601.422:38): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.866" name="file1" dev="loop5" ino=15 res=0 errno=0
[  438.706356][ T8168] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.866: bg 0: block 353: padding at end of block bitmap is not set
[  438.882922][ T8175] loop3: detected capacity change from 0 to 512
[  438.999012][ T8175] EXT4-fs (loop3): orphan cleanup on readonly fs
[  439.048105][ T8175] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.868: bad orphan inode 13
[  439.103076][ T7610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.115208][ T8175] ext4_test_bit(bit=12, block=18) = 1
[  439.120882][ T8175] is_bad_inode(inode)=0
[  439.121326][ T8180] loop4: detected capacity change from 0 to 512
[  439.125553][ T8175] NEXT_ORPHAN(inode)=2130706432
[  439.139370][ T8175] max_ino=32
[  439.142781][ T8175] i_nlink=1
[  439.148778][ T8175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  439.195778][ T8180] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  439.234529][ T8175] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  439.277328][ T8180] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  439.302762][ T8180] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002]
[  439.333058][ T8175] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  439.377621][ T8180] System zones: 0-2, 18-18, 34-34
[  439.407130][ T8180] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  439.487199][ T8180] EXT4-fs (loop4): 1 truncate cleaned up
[  439.500282][ T8180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.533545][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.601867][   T30] audit: type=1800 audit(1747612602.382:39): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.870" name="file1" dev="loop4" ino=15 res=0 errno=0
[  439.879227][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.179800][   T11] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0
[  440.187963][   T11] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0
[  440.202807][   T11] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0
[  440.237000][ T8187] loop2: detected capacity change from 0 to 4096
[  440.376800][   T11] hid-generic 0000:0004:0000.0004: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz1
[  440.454395][ T8196] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  440.582494][   T30] audit: type=1800 audit(1747612603.302:40): pid=8187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.872" name="file1" dev="loop2" ino=15 res=0 errno=0
[  440.620994][ T8198] loop3: detected capacity change from 0 to 128
[  440.675854][ T8198] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  440.729144][ T8201] loop5: detected capacity change from 0 to 128
[  440.836865][ T8198] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  441.325563][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  442.004751][   T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  442.196971][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 94, changing to 10
[  442.208999][   T45] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00
[  442.219420][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.286972][   T45] usb 4-1: config 0 descriptor??
[  442.294860][ T8222] netlink: 'syz.1.887': attribute type 1 has an invalid length.
[  442.303045][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.887'.
[  442.339544][ T8220] loop5: detected capacity change from 0 to 1024
[  442.766523][   T45] stadia 0003:18D1:9400.0005: unknown main item tag 0x0
[  442.774330][   T45] stadia 0003:18D1:9400.0005: unknown main item tag 0x0
[  442.781894][   T45] stadia 0003:18D1:9400.0005: unknown main item tag 0x0
[  442.803822][ T4969] hfsplus: b-tree write err: -5, ino 4
[  442.913104][   T45] stadia 0003:18D1:9400.0005: hidraw0: USB HID v0.04 Device [HID 18d1:9400] on usb-dummy_hcd.3-1/input0
[  442.925155][   T45] stadia 0003:18D1:9400.0005: no inputs found
[  442.931635][   T45] stadia 0003:18D1:9400.0005: force feedback init failed
[  443.010352][   T45] usb 4-1: USB disconnect, device number 3
[  443.951388][ T8243] loop3: detected capacity change from 0 to 128
[  443.974993][ T8243] EXT4-fs: Ignoring removed nobh option
[  444.062587][ T8243] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  444.100113][ T8243] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  444.234682][ T8243] fscrypt (loop3, inode 12): Unsupported encryption flags (0x10)
[  444.302268][ T8248] loop1: detected capacity change from 0 to 128
[  444.460155][   T30] audit: type=1800 audit(1747612607.242:41): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.899" name="file1" dev="loop1" ino=1048631 res=0 errno=0
[  444.477488][ T8248] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  444.490545][ T8248] FAT-fs (loop1): Filesystem has been set read-only
[  444.626794][ T8248] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  444.675398][ T8248] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  444.758336][ T5795] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  444.773227][ T8254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  445.294360][ T8252] loop2: detected capacity change from 0 to 32768
[  445.316013][ T8252] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.901 (8252)
[  445.337095][ T8252] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  445.347699][ T8252] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm
[  445.359261][ T8252] BTRFS info (device loop2): using free-space-tree
[  445.737681][ T5796] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  446.350786][ T8275] loop1: detected capacity change from 0 to 32768
[  446.380398][ T8275] BTRFS: device /dev/loop1 (7:1) using temp-fsid 3714556b-7db4-443b-9951-ec8d2bff032b
[  446.390475][ T8275] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.905 (8275)
[  446.432419][ T8275] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  446.447046][ T8275] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[  446.460115][ T8275] BTRFS info (device loop1): using free-space-tree
[  446.881540][ T5793] BTRFS info (device loop1): last unmount of filesystem 3714556b-7db4-443b-9951-ec8d2bff032b
[  447.840055][ T8303] loop5: detected capacity change from 0 to 32768
[  448.042173][ T8303] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  448.109742][ T8303] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  448.109742][ T8303]   allowing incompatible features above 0.0: (unknown version)
[  448.147319][ T8303] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  448.157209][ T8303] bcachefs (loop5): Version upgrade required:
[  448.157209][ T8303] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  448.157209][ T8303] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags
[  448.157209][ T8303]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  448.267634][ T8303] bcachefs (loop5): dropping and reconstructing all alloc info
[  448.360335][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'.
[  448.369997][ T8316] netlink: 'syz.3.916': attribute type 21 has an invalid length.
[  448.424438][ T8303] bcachefs (loop5): accounting_read... done
[  448.450521][ T8303] bcachefs (loop5): alloc_read... done
[  448.456813][ T8303] bcachefs (loop5): snapshots_read... done
[  448.463238][ T8303] bcachefs (loop5): check_allocations... done
[  448.620723][ T8303] bcachefs (loop5): going read-write
[  448.672343][ T8303] bcachefs (loop5): done starting filesystem
[  448.863921][ T7610] bcachefs (loop5): shutting down
[  448.872427][ T7610] bcachefs (loop5): going read-only
[  448.878224][ T7610] bcachefs (loop5): finished waiting for writes to stop
[  448.955661][ T7610] bcachefs (loop5): flushing journal and stopping allocators, journal seq 10
[  448.989374][ T7610] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 10
[  449.043254][ T7610] bcachefs (loop5): unclean shutdown complete, journal seq 11
[  449.155500][ T7610] bcachefs (loop5): done going read-only, filesystem not clean
[  449.322437][ T7610] bcachefs (loop5): shutdown complete
[  451.074448][   T30] audit: type=1326 audit(1747612613.832:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf7d8e969 code=0x7ffc0000
[  451.097530][   T30] audit: type=1326 audit(1747612613.832:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf7d8e969 code=0x7ffc0000
[  451.120305][   T30] audit: type=1326 audit(1747612613.862:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcaf7d8e969 code=0x7ffc0000
[  451.143126][   T30] audit: type=1326 audit(1747612613.862:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcaf7d8e9a3 code=0x7ffc0000
[  451.172632][   T30] audit: type=1326 audit(1747612613.882:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcaf7d8d41f code=0x7ffc0000
[  451.196953][   T30] audit: type=1326 audit(1747612613.952:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcaf7d8e9f7 code=0x7ffc0000
[  451.217210][ T8352] loop4: detected capacity change from 0 to 1024
[  451.219957][   T30] audit: type=1326 audit(1747612613.982:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcaf7d8d2d0 code=0x7ffc0000
[  451.248610][   T30] audit: type=1326 audit(1747612613.982:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcaf7d8e56b code=0x7ffc0000
[  451.276062][   T30] audit: type=1326 audit(1747612614.062:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcaf7d8d5ca code=0x7ffc0000
[  451.300423][   T30] audit: type=1326 audit(1747612614.062:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcaf7d8d5ca code=0x7ffc0000
[  451.306960][ T8352] EXT4-fs: Ignoring removed oldalloc option
[  451.330133][ T8352] EXT4-fs: Ignoring removed bh option
[  451.646687][ T8352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  452.045568][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  452.573713][ T8365] loop4: detected capacity change from 0 to 512
[  452.717276][ T8363] loop3: detected capacity change from 0 to 4096
[  452.732433][ T8365] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.932: iget: bad extended attribute block 1
[  452.833732][ T8365] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.932: couldn't read orphan inode 15 (err -117)
[  452.871871][ T8365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.957222][ T8363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  452.986660][ T8365] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7951 vs 220 free clusters
[  453.148306][ T8363] EXT4-fs (loop3): Online defrag not supported with bigalloc
[  453.398341][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.547734][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.666369][ T8395] loop1: detected capacity change from 0 to 2048
[  454.754720][ T8395] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  455.235001][ T8407] sctp: [Deprecated]: syz.3.951 (pid 8407) Use of int in max_burst socket option deprecated.
[  455.235001][ T8407] Use struct sctp_assoc_value instead
[  455.622693][ T8415] loop4: detected capacity change from 0 to 256
[  456.215927][ T8416] loop3: detected capacity change from 0 to 4096
[  457.162291][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  457.162373][   T30] audit: type=1326 audit(1747612619.942:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79e78e969 code=0x7ffc0000
[  457.304796][   T30] audit: type=1326 audit(1747612620.022:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc79e78e969 code=0x7ffc0000
[  457.328031][   T30] audit: type=1326 audit(1747612620.072:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79e78e969 code=0x7ffc0000
[  457.350852][   T30] audit: type=1326 audit(1747612620.072:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79e78e969 code=0x7ffc0000
[  457.373953][   T30] audit: type=1326 audit(1747612620.072:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc79e78e969 code=0x7ffc0000
[  457.402105][   T30] audit: type=1326 audit(1747612620.072:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79e78e969 code=0x7ffc0000
[  457.685555][   T30] audit: type=1326 audit(1747612620.232:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc79e785927 code=0x7ffc0000
[  457.713305][   T30] audit: type=1326 audit(1747612620.232:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc79e72ab39 code=0x7ffc0000
[  457.741234][   T30] audit: type=1326 audit(1747612620.242:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc79e78e969 code=0x7ffc0000
[  457.766468][   T30] audit: type=1326 audit(1747612620.242:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc79e785927 code=0x7ffc0000
[  457.982775][ T8447] loop1: detected capacity change from 0 to 256
[  458.053055][ T8447] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  458.105779][ T8450] netlink: 'syz.3.968': attribute type 2 has an invalid length.
[  458.119754][ T8450] netlink: 132 bytes leftover after parsing attributes in process `syz.3.968'.
[  458.191451][ T8455] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  458.202635][ T8455] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  458.218694][ T8455] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  459.672807][ T8461] loop5: detected capacity change from 0 to 32768
[  460.007592][ T8462] loop4: detected capacity change from 0 to 40427
[  460.086114][ T8461] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  460.130948][ T8461] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  460.130948][ T8461]   allowing incompatible features above 0.0: (unknown version)
[  460.167884][ T8461] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  460.181475][ T8461] bcachefs (loop5): Version upgrade required:
[  460.181475][ T8461] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  460.181475][ T8461] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags
[  460.181475][ T8461]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  460.254529][ T8461] bcachefs (loop5): dropping and reconstructing all alloc info
[  460.297106][ T8462] F2FS-fs (loop4): invalid crc value
[  460.305554][ T8469] loop2: detected capacity change from 0 to 1024
[  460.347531][ T8469] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  460.360474][ T8461] bcachefs (loop5): accounting_read... done
[  460.374360][ T8461] bcachefs (loop5): alloc_read... done
[  460.380386][ T8461] bcachefs (loop5): snapshots_read... done
[  460.393306][ T8461] bcachefs (loop5): done starting filesystem
[  460.456685][ T8469] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  460.479117][ T8469] EXT4-fs (loop2): orphan cleanup on readonly fs
[  460.486367][ T8469] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.975: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0)
[  460.653837][ T7610] bcachefs (loop5): shutting down
[  460.737591][ T8469] EXT4-fs error (device loop2): ext4_quota_enable:7129: comm syz.2.975: Bad quota inode: 3, type: 0
[  460.790376][ T8480] loop3: detected capacity change from 0 to 512
[  460.797668][ T8462] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  460.819343][ T8469] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  460.828010][ T8480] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  460.836033][ T8469] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  460.842230][ T8480] UDF-fs: Scanning with blocksize 512 failed
[  460.855135][ T8469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  460.962541][ T8480] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  460.970497][ T8480] UDF-fs: Scanning with blocksize 1024 failed
[  461.002019][ T7610] bcachefs (loop5): shutdown complete
[  461.072754][ T8480] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  461.086994][ T8480] UDF-fs: Scanning with blocksize 2048 failed
[  461.141728][ T8480] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  461.175989][ T8469] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  461.250777][ T8480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  461.655698][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.935674][ T8486] syz.1.979 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  463.606342][ T8512] random: crng reseeded on system resumption
[  464.171585][ T8509] loop4: detected capacity change from 0 to 32768
[  464.206913][ T8509] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.988 (8509)
[  464.226071][ T8514] loop3: detected capacity change from 0 to 64
[  464.269863][ T8514] syz.3.990: attempt to access beyond end of device
[  464.269863][ T8514] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  464.284338][ T8514] Buffer I/O error on dev loop3, logical block 134217734, async page read
[  464.322127][ T8509] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  464.334836][ T8509] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm
[  464.346814][ T8509] BTRFS info (device loop4): using free-space-tree
[  464.449709][ T8513] Trying to free block not in datazone
[  464.799789][ T8509] BTRFS info (device loop4): checking UUID tree
[  464.911663][ T8532] loop3: detected capacity change from 0 to 128
[  465.034959][ T8532] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  465.132022][ T5804] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  465.143962][ T8532] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  465.501967][ T3832] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  465.864433][   T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  466.214663][   T24] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  466.224407][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.232690][   T24] usb 2-1: Product: syz
[  466.237764][   T24] usb 2-1: Manufacturer: syz
[  466.242612][   T24] usb 2-1: SerialNumber: syz
[  466.456634][   T24] usb 2-1: config 0 descriptor??
[  466.812860][   T24] usb 2-1: USB disconnect, device number 4
[  466.938120][ T8542] loop5: detected capacity change from 0 to 32768
[  466.949984][ T8542] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.977 (8542)
[  466.976201][ T8542] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  466.987018][ T8542] BTRFS info (device loop5): using sha256 (sha256-generic) checksum algorithm
[  466.998605][ T8542] BTRFS info (device loop5): using free-space-tree
[  467.645336][ T7610] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  468.097410][ T8574] loop1: detected capacity change from 0 to 256
[  468.270254][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  468.270358][   T30] audit: type=1326 audit(1747612631.052:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fa78e969 code=0x7ffc0000
[  468.299523][   T30] audit: type=1326 audit(1747612631.052:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fa78e969 code=0x7ffc0000
[  468.408105][   T30] audit: type=1326 audit(1747612631.152:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04fa78e969 code=0x7ffc0000
[  468.431670][   T30] audit: type=1326 audit(1747612631.152:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fa78e969 code=0x7ffc0000
[  468.466443][   T30] audit: type=1326 audit(1747612631.152:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fa78e969 code=0x7ffc0000
[  468.489526][   T30] audit: type=1326 audit(1747612631.162:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f04fa78e969 code=0x7ffc0000
[  468.512646][   T30] audit: type=1326 audit(1747612631.162:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04fa78e969 code=0x7ffc0000
[  468.540216][   T30] audit: type=1326 audit(1747612631.162:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04fa78d2d0 code=0x7ffc0000
[  468.568277][   T30] audit: type=1326 audit(1747612631.162:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04fa78e56b code=0x7ffc0000
[  468.594506][   T30] audit: type=1326 audit(1747612631.162:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04fa78e56b code=0x7ffc0000
[  468.656780][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  468.855394][   T24] usb 3-1: Using ep0 maxpacket: 8
[  468.909114][   T24] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  468.917738][   T24] usb 3-1: config 0 has no interface number 0
[  468.974649][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  468.984266][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.992538][   T24] usb 3-1: Product: syz
[  468.997071][   T24] usb 3-1: Manufacturer: syz
[  469.001929][   T24] usb 3-1: SerialNumber: syz
[  469.107900][   T24] usb 3-1: config 0 descriptor??
[  469.384202][   T24] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[  469.391143][   T24] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized!
[  469.400229][   T24] usb 3-1: Failed to create links for entity 5
[  469.407194][   T24] usb 3-1: Failed to register entities (-22).
[  469.421029][ T8587] loop3: detected capacity change from 0 to 256
[  469.438608][ T8587] exfat: Deprecated parameter 'namecase'
[  469.501055][   T24] usb 3-1: USB disconnect, device number 6
[  469.573973][ T8587] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68ba9255, utbl_chksum : 0xe619d30d)
[  469.807868][ T8591] loop1: detected capacity change from 0 to 1024
[  470.458259][ T8601] loop2: detected capacity change from 0 to 512
[  470.477774][ T8601] EXT4-fs: Ignoring removed orlov option
[  470.535190][ T8601] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  470.618012][ T8601] EXT4-fs (loop2): 1 orphan inode deleted
[  470.624410][ T8601] EXT4-fs (loop2): 1 truncate cleaned up
[  470.632580][ T8601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  470.725118][ T8606] sch_tbf: peakrate 6 is lower than or equals to rate 120 !
[  470.831493][ T8601] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  470.874251][ T8601] EXT4-fs (loop2): Remounting filesystem read-only
[  470.944698][ T8601] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 17, error -30)
[  471.260681][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.318935][ T3931] =====================================================
[  471.341487][ T3931] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0xfe/0x9a0
[  471.350241][ T3931]  n_tty_receive_buf_closing+0xfe/0x9a0
[  471.356932][ T3931]  n_tty_receive_buf_common+0x19d5/0x2540
[  471.363567][ T3931]  n_tty_receive_buf2+0x4c/0x60
[  471.369544][ T3931]  tty_ldisc_receive_buf+0xc6/0x2c0
[  471.375853][ T3931]  tty_port_default_receive_buf+0xd7/0x1a0
[  471.382984][ T3931]  flush_to_ldisc+0x44f/0xdb0
[  471.388880][ T3931]  process_scheduled_works+0xb9a/0x1d90
[  471.395363][ T3931]  worker_thread+0xedf/0x1590
[  471.400833][ T3931]  kthread+0xd5c/0xf00
[  471.405953][ T3931]  ret_from_fork+0x71/0x90
[  471.411274][ T3931]  ret_from_fork_asm+0x1a/0x30
[  471.417025][ T3931] 
[  471.420039][ T3931] Uninit was stored to memory at:
[  471.438993][ T3931]  n_tty_receive_buf_closing+0xf7/0x9a0
[  471.449675][ T3931]  n_tty_receive_buf_common+0x19d5/0x2540
[  471.456894][ T3931]  n_tty_receive_buf2+0x4c/0x60
[  471.462652][ T3931]  tty_ldisc_receive_buf+0xc6/0x2c0
[  471.468938][ T3931]  tty_port_default_receive_buf+0xd7/0x1a0
[  471.475878][ T3931]  flush_to_ldisc+0x44f/0xdb0
[  471.481402][ T3931]  process_scheduled_works+0xb9a/0x1d90
[  471.488035][ T3931]  worker_thread+0xedf/0x1590
[  471.493561][ T3931]  kthread+0xd5c/0xf00
[  471.498638][ T3931]  ret_from_fork+0x71/0x90
[  471.504226][ T3931]  ret_from_fork_asm+0x1a/0x30
[  471.509804][ T3931] 
[  471.512840][ T3931] Uninit was created at:
[  471.518897][ T3931]  __kmalloc_noprof+0x95f/0x1310
[  471.534818][ T3931]  __tty_buffer_request_room+0x3d4/0x7a0
[  471.545135][ T3931]  __tty_insert_flip_string_flags+0x157/0x6f0
[  471.552058][ T3931]  uart_insert_char+0x368/0x930
[  471.557920][ T3931]  serial8250_read_char+0x1ba/0x670
[  471.563984][ T3931]  serial8250_handle_irq+0x930/0x1110
[  471.570518][ T3931]  serial8250_default_handle_irq+0x116/0x2b0
[  471.577642][ T3931]  serial8250_interrupt+0xc8/0x400
[  471.583603][ T3931]  __handle_irq_event_percpu+0x11c/0xbf0
[  471.590337][ T3931]  handle_irq_event+0xe0/0x2a0
[  471.596161][ T3931]  handle_edge_irq+0x450/0xfd0
[  471.601875][ T3931]  __common_interrupt+0xa2/0x220
[  471.609325][ T3931]  common_interrupt+0x94/0xb0
[  471.614987][ T3931]  asm_common_interrupt+0x2b/0x40
[  471.620839][ T3931] 
[  471.624208][ T3931] CPU: 0 UID: 0 PID: 3931 Comm: kworker/u8:17 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) 
[  471.647181][ T3931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  471.661492][ T3931] Workqueue: events_unbound flush_to_ldisc
[  471.668539][ T3931] =====================================================
[  471.676392][ T3931] Disabling lock debugging due to kernel taint
[  471.683293][ T3931] Kernel panic - not syncing: kmsan.panic set ...
[  471.689880][ T3931] CPU: 0 UID: 0 PID: 3931 Comm: kworker/u8:17 Tainted: G    B               6.15.0-rc7-syzkaller #0 PREEMPT(undef) 
[  471.702314][ T3931] Tainted: [B]=BAD_PAGE
[  471.706597][ T3931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  471.716831][ T3931] Workqueue: events_unbound flush_to_ldisc
[  471.722908][ T3931] Call Trace:
[  471.726315][ T3931]  <TASK>
[  471.729369][ T3931]  __dump_stack+0x26/0x30
[  471.733936][ T3931]  dump_stack_lvl+0x53/0x270
[  471.738745][ T3931]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  471.744806][ T3931]  dump_stack+0x1e/0x25
[  471.749163][ T3931]  panic+0x4bd/0xd50
[  471.753310][ T3931]  kmsan_report+0x29d/0x2a0
[  471.758052][ T3931]  ? remove_rmap_item_from_tree+0x417/0x8e0
[  471.764148][ T3931]  ? __msan_warning+0x96/0x120
[  471.769114][ T3931]  ? n_tty_receive_buf_closing+0xfe/0x9a0
[  471.775077][ T3931]  ? n_tty_receive_buf_common+0x19d5/0x2540
[  471.781166][ T3931]  ? n_tty_receive_buf2+0x4c/0x60
[  471.786413][ T3931]  ? tty_ldisc_receive_buf+0xc6/0x2c0
[  471.791990][ T3931]  ? tty_port_default_receive_buf+0xd7/0x1a0
[  471.798191][ T3931]  ? flush_to_ldisc+0x44f/0xdb0
[  471.803240][ T3931]  ? process_scheduled_works+0xb9a/0x1d90
[  471.809191][ T3931]  ? worker_thread+0xedf/0x1590
[  471.814250][ T3931]  ? kthread+0xd5c/0xf00
[  471.818731][ T3931]  ? ret_from_fork+0x71/0x90
[  471.823542][ T3931]  ? ret_from_fork_asm+0x1a/0x30
[  471.828693][ T3931]  ? ret_from_fork_asm+0x1a/0x30
[  471.833860][ T3931]  ? __update_load_avg_cfs_rq+0xd7f/0x1010
[  471.839922][ T3931]  ? kmsan_get_metadata+0x105/0x1b0
[  471.845365][ T3931]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  471.851427][ T3931]  ? __rb_insert_augmented+0x80/0x11b0
[  471.857111][ T3931]  ? __pfx_min_vruntime_cb_rotate+0x10/0x10
[  471.863237][ T3931]  ? kmsan_get_metadata+0x105/0x1b0
[  471.868668][ T3931]  ? kmsan_get_metadata+0x105/0x1b0
[  471.874106][ T3931]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  471.880660][ T3931]  ? kmsan_get_metadata+0x105/0x1b0
[  471.886098][ T3931]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  471.892145][ T3931]  ? kmsan_get_metadata+0x105/0x1b0
[  471.897583][ T3931]  __msan_warning+0x96/0x120
[  471.902382][ T3931]  n_tty_receive_buf_closing+0xfe/0x9a0
[  471.908164][ T3931]  n_tty_receive_buf_common+0x19d5/0x2540
[  471.914085][ T3931]  ? kmsan_get_metadata+0x105/0x1b0
[  471.919537][ T3931]  ? check_preempt_wakeup_fair+0xd3/0x1c10
[  471.925636][ T3931]  n_tty_receive_buf2+0x4c/0x60
[  471.930726][ T3931]  ? __pfx_n_tty_receive_buf2+0x10/0x10
[  471.936519][ T3931]  tty_ldisc_receive_buf+0xc6/0x2c0
[  471.941981][ T3931]  tty_port_default_receive_buf+0xd7/0x1a0
[  471.948043][ T3931]  flush_to_ldisc+0x44f/0xdb0
[  471.952937][ T3931]  ? __pfx_tty_port_default_receive_buf+0x10/0x10
[  471.959608][ T3931]  ? __pfx_flush_to_ldisc+0x10/0x10
[  471.965041][ T3931]  process_scheduled_works+0xb9a/0x1d90
[  471.970862][ T3931]  worker_thread+0xedf/0x1590
[  471.975790][ T3931]  kthread+0xd5c/0xf00
[  471.980076][ T3931]  ? __pfx_worker_thread+0x10/0x10
[  471.985425][ T3931]  ? __pfx_kthread+0x10/0x10
[  471.990236][ T3931]  ret_from_fork+0x71/0x90
[  471.994875][ T3931]  ? __pfx_kthread+0x10/0x10
[  471.999684][ T3931]  ret_from_fork_asm+0x1a/0x30
[  472.004701][ T3931]  </TASK>
[  472.008185][ T3931] Kernel Offset: disabled
[  472.012650][ T3931] Rebooting in 86400 seconds..