last executing test programs:

27.46402436s ago: executing program 0 (id=512):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000a00)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x80000)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})

27.404196828s ago: executing program 0 (id=516):
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
acct(&(0x7f0000000040)='./file0\x00')
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)

27.182974023s ago: executing program 0 (id=524):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x5, 0x70b925, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x62850}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x28040010)

27.00406799s ago: executing program 0 (id=527):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
umount2(&(0x7f0000000140)='./file0/file0\x00', 0x8)

26.955044614s ago: executing program 0 (id=530):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='./file1\x00', 0xa00004, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uid}, {@gid}, {@dmode={'dmode', 0x3d, 0x10003}}, {@nostrict}, {@gid_ignore}, {@gid}, {}, {@longad}, {@umask={'umask', 0x3d, 0x57}}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@nostrict}]}, 0x5, 0xc87, &(0x7f0000001440)="$eJzs3U1sHNd9APD/G5LiSm5jJk4VJ42DTVukMmO5+oopW4W7qmm2AWRZCMXcAnAlUurCFEmQVCMbbsv00kMPAYqih5yItkKBFA2Mpgh6ZFoXSC4+FDn1RLSwERQ9sEWAAC3SDWb2rbiiSOuDEkXJv59N/Xdn3pt5H6sZiuB/XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/96ukjR9MWO/oeQmMAgF1xdvwrR45tdf8HAB5b57f79z8AAAAAAAAAAAAAALBXpCjiqUgxf3Y9TVbvO2pnWgNXr02Mjm1dbX+qavZV5cuv2tFjx0986YWRk914pjX7IfXvt8/E6+PnT9dfmbsyvzC9uDg9VZ+YbV2cm5q+4yPstP5mw9UA1K+8cXXq0qXF+rHnj9+0+9rQB4NPHBw6NfLs4We6ZSdGx8bGN4rUesv333NDOrbL8NgXRRyOFM9958epGRFF7Hwsars795vtrzoxXHViYnSs6shMqzm7VO481x2IIqLeU6nRHaOt5yL6B3a1D9trRCyXzS8bPFx2b3y+udC8MDNdP9dcWGotteZmz6VOa8v+1KOIkyliJSLWBm893EAU0R8pvvXkerqQn/pRjcMXq8Tg7dtRPMA+3oGynfWBiJXiEZizPWwwingtUvzk3UNxMV9nqmvNFyJeK+P3Iq6X8eWIVH4wTkS8v8XniEdTfxTxp+X8n1pPU9X1oHtdOfPV+pdnL831lO1eV+7y/nDLlWIX7g9/ucW2/Zvi7tjj16ZaFNGsrvjr6d6/2QEAAAAAAAAAAAAAAADgftsfRXw6Urz6r79f5RVHlZf+5KmR3xn6xd6c8advc5yy7PMRsVzcWU7uvpwYeC6dS+kh5xJ/lNWiiD/I+X/feNiNAQAAAAAAAAAAAAAAAAAA+Egr4keR4qX3DqWV6F1TvDV7uX6+eWGmsypsd+3f7prp7Xa7XU+d2MhxMsflHFdyXM1xLccocv0cGzlO5ric40onfqx7vrW8Pfpy/RwbOU7muJzjSo6rOa7lGP25fo6NHCdzXM5xJcfVHNdyjD2ydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOOkiCJ+Fim++fX1FCkiGhGT0Ymrgw+7dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAaTAV8d1IUf/dxo1t/RGRqv87DpV/nIjGvjJ+IhojZXw5GqdzbFaxv/GNh9B+dmYgFfHDSDFYe+fGhOf5H+i8u/ExiOtvb7z7TH8n9nV3Dn0w+MTBJ0+NjH3u6e1ep60aMJxi9uq1+sTo2Nh4z+b+fPZP9Gwbyuct7k/XiYjFN996ozkzM71w7y/Kj8A9Vu/O5A7OvpsvUv9Dbur/74FBuLsXsdyZ4b3Snrt7Ef0P7+wP++/FzdeJ2m5fmNgV5f3//UjxG+/9W/eG37n/1+IXOu9u3OHjp3+4cf9/afOB7vD+37+53vCZVnn/L+8EW93/n+rZ9lL+bmSgP6K2dGV+4GBEbfHNtw63rjQvT1+enj1x5MiLIyMvHj8ysC+idqk1M93z6r4MFwAAAAAAAAAAAAAAAMDuSUX8VqRo/nA91SPiWpWvNXRq5NnDz/RFX5VvdVPe9uvj50/XX5m7Mr8wvbg4PVWfmG1dnJuavtPT1ap0r4nRsQfSmdva/4Dbv7/2ytz8mwuty7+3tOX+A7XTFxaXFpoXt94d+6OIaPRuGa4aPDE6VjV6ptWcraqe2zKZ/u4NpCL+PVJcPFFPn8/bcv7/5gz/uP72izc+C8ubD3TP+f+d/L/e/P/PHdjI//t4T9HynCkV8dNI8et/9nR8vmrngbhlzHK5v44Uwyc/m8vFvrJctw2d5wp0MgPLsv8dKf7+ZzeX7eZDPrVR9uhdDe4joJz/JyPFd//k2/EredvNz3/onf+N8Tuw+UD3cf6jJ//zkz3bDtz0vIIdd508/4cjxctPvRO/Wm353w99/kf3iQ2HOoU3ns/xgOb/l3q2DeXz/tr96jwAAAAAAAAAAMAjbCAV8TeR4vtj/emFvO1Ofv9vavOBHtDvf32qZ9vU/Vmv6LYvdjyoAAAAALBHDKQifhQpLi+9cyOH+ub87578z9/cyP8cTZv2Vj/n+1j13ID7+fO/XkP5vJM77zYAAAAAAAAAAAAAAAAAAADsKSkV8UJeT32yyuef2nY99dVI8ep/PpfLpYNlue468EPVn7Wzc7OHT8/MzNViqXlhZro+Pt+8OF3W/WSkWP+rz+a6RbW+ene9+c4a7xtrsS9EirG/7ZbtrMXeXZu8sx54rd2OOFqW/Xik+I+/u7lsXpo6rx1dHfdYWfYvIsXX/nHrsgc3yh4vy347Uvzga/Vu2QNl2e7zUT+1Ufb5i3PFA5gVAAAAAAAAAAAAAAAAAAAAPmoGUhF/HCn+68rKjVz+vP7/QM/byvW3e9b73+Ratc7/ULX+/3av72X9/+q5AsvbnRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4K1LMn11Pq4Pl+47amdbs1WsTo2NbV9ufqpp9Vfnyq3b02PETX3ph5GQ3fnj9++3T8fr4+dP1V+auzC9MLy5OT9UnZlsX56am7/gIO62/2XA1APUrb1ydunRpsX7s+eM37b429MHgEweHTo08e/iZbtmJ0bGx8Z4y/QP3fPZbpG2274si/jxSPPedH6fvD0YUsfOxuM1n50HbX3ViuOrExOhY1ZGZVnN2qdx5rjsQRUS9p1KjO0a3nYv/a7fbu9WVLTQilsvmlw0eLrs3Pt9caF6Yma6fay4stZZac7PnUqe1ZX/qUcTJFLESEWuDtx5uIIp4I1J868n19E+DEX3dcfji2fGvHDm2fTuKB9jHO1C2sz4QsVLcyZyxncEo4h8ixU/ePRT/PBjRH52v+ELEa2X8XsT16Mx3Kj8YJyLe3+JzxKOpP4r4n3L+T62ndwfL60H3unLmq/Uvz16a6ynbva7s8P7Qbrf/qIwP7/6wm/b4takWRfyguuKvp3/x9xoAAAAAAAAAAAAAAABgDynilyPFS+8dSlV+8I2c4tbs5fr55oWZTlpfN/evmzPdbrfb9dSJjRwnc1zOcSXH1RzXcowi18+xUcZauz2Z3y/nuJLjao5rOUZfrt9XpSu2G/n9ZI7LOa7kuJrjWo7Rn+vn2MhxMsflHFdyXM1xLcfYI7l7AAAAAAAAAAAAAAAAAADA46Wo/kvxza+vp/ZgZ33pyejEVeuBPvZ+HgAA//9+4PKL")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080))

26.665193485s ago: executing program 0 (id=534):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000002640)={[{@usrquota}, {@coherency_full}, {@err_cont}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@grpquota}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")

26.607956152s ago: executing program 32 (id=534):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000002640)={[{@usrquota}, {@coherency_full}, {@err_cont}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@grpquota}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")

21.220765963s ago: executing program 3 (id=601):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x204280, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600))
r2 = dup(r1)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x220002, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r3)
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r2})

21.220567418s ago: executing program 3 (id=602):
bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000000100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0)

20.034465162s ago: executing program 3 (id=609):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x3d, 0x4c, 0x67, 0x0, 0x9, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4, "180f8f", 0x1, "fffb45"}, "9ff8916bec2274ffac64cbef3fd72ab09dc7e84ed556a5e7502bf433d67a96a211f558fcbdb2ab8f"}}}}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0xffc9)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x7c, {0x0, 0x0, 0x0, 0x0, 0x17b93, 0x7e09}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

19.693023282s ago: executing program 3 (id=610):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x13a)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x10b440, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x140)

19.692742586s ago: executing program 3 (id=611):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fcntl$setstatus(r0, 0x4, 0x40800)
syz_fuse_handle_req(r0, &(0x7f0000000d40)="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", 0x2000, &(0x7f0000003c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19.454821719s ago: executing program 3 (id=612):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}]}]}], {0x14, 0x10}}, 0x110}}, 0x0)

19.341422294s ago: executing program 33 (id=612):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}]}]}], {0x14, 0x10}}, 0x110}}, 0x0)

1.802850683s ago: executing program 1 (id=829):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000a80)='./file0\x00', 0x1010807, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f7265636f766572792c005385e3e531ae72a8acc92b4778292371dfb377968aace8a5c717c6a1b82e95d19e37f49bf33f5ac522609b6e5a82b135028ce62bafeae60fdc3cffe2cef0f0e6000023fa15a68bc81e4bd09a8cdc8492203a8f37d477", @ANYRESHEX=0x0], 0x2, 0xa1b, &(0x7f0000002080)="$eJzs3V+IXNUdAOBzZ3c2iYlmYpO61WjS2lb7x103Jq3WaiIGSikEn01fJMY0JKalEaniQ+pTX0RBzHMsfemL0paivpTgQ5GCUgpF6JOVvpUUhD4UQbdk95zZ2V9muDOb3Z2dne+Ds2fuPWfuOffunTt37r3nnASMrcbC34MHp6uUXnvn1aO3v/7ey1fnHG7naC38neyYaqaUqjw9GZb30cRi/NknL5zoFlfpwMLfMp2OXWm/d3tK6ULany6nVnrp+MXJD9869sEb6cyzjx19/+21Wfsl1VoXAAAAG8C/b/r0+J5//vW2XZ++eceRtKU9v5yf78jTO/J5/5F8olzOlxtp+XTVETpNhXyTOTRCvoku+TrLaYZ8kz3KnwrLbfbIt6Wm/ImOed3WG0ZZ2Y9bqWrMLJtuNGZmFn+Tp4Xf9VPVzLnTZ586P6SKAqvuv/tSSvsFQRjHML9z2EcggEXxfuE1Lqzunbr20ib7K//KI43u74dVsN77v/JHq/zf/NIRh9WzWfemsl7xPka8jxCfXxr081+WF+9HNPusZ6/7CKNyf6FXPSfWuR4r1av+cb/YrB7KcdkOD4f0zs9P/J+Oyv8Y6O5/rv8LwtiG+WEfgIANKz43N5+V9PhcX0zfUpO+tSZ9W036DTXp22vSYZz94ZmX0yvV0u/8+Jt+0Oth5TrbjTm+acD6xOuRg5Yfn/sd1PWWH58nhg1t+58v3v/k439bfP6/au//n+f9fX+ebuXP1uWcoVwvjNfV28/+t5YX0+iR7+ZQnRu75F94vXt5vmr30nJSx3HmmnpML3/fzl759i7P1wr5tuWwNdQ3np/cEN5Xzj/KcbVsr8mwvs2wHlOhHuW4sivHsR6wEmV/7PX8f9k/p1Ozeur02ZP35umyn7430dxydf7cOtcbuH79tv+ZTsvb/+xoz282Oo8LO5fmV53HhVaYf6DH/PvydPme+8nEtoX5Myd+evbJ1V55GHPnn3v+zBNnz578uRdeeOFF+8Wwj0zAWpt95umfzZ5/7vl7Tj/9xKmTp06emzs0d/8Dh+bmvvPA7MJ5/Wzn2T2wmSx96Q+7JgAAAAAAAAAAAEC/Tn08e+nv7373H4vt/5fa/5X2/+XJ39L+/1eh/X9sJ1/awZd2gLu6pC/kCR2sToV8zRy+EOq7O5SzJ7zvizluj+OX2/+X4mK/rqU+t4T5sf/eki90J3BNfylToQ+SOF7gV3L8Yo5/nWCIqm3dZ+e4rn/rsq+X/in0SzGayv+t7A2lH5PS/rtXv07l+L9rHerI6luP5oTDXkegu//o/1sQxjbMzxvFA9gYhjb+Xr6wUa57lvjcn3649Woo2a48svx4Gfsvheux0cefVP7mGv+zPf5d38e/MGJea2XlPvjij/7VUWy6td/y4/qXfqB3D1b+93P5ZW3uSv2VP/96KD/eEOrTQ6H8G/os/5r137uy8h/O5ZfNdved/Za/WOOqsbwe8bpxuf8XrxsXh8P6l749B17/FQ7UeCSXD+Msjn/a/W7g6BmV8X97ic9hHMrT5UBYnnOI450MWv/yfEX5HtgTll/VfL8Z/3e0fS/HdZ+HMv5v2R9bXaYbHdPNLtt2VMa0hnHxkft/gjC2YX5+fm0vaNUYauEMffsP+3fCsMsf9vavE8f/jefwcfzfmB7H/43pcfzfXtcjeqXH8X/j9ozj/8b0W8Jy4/jA0zXpX6pJv7Um/baa9L016bfXpH+5I31fR56SfkfN+/fVpN9ck35nTfpXa9K/VpP+9Zr0u2vSv1GTvtmV9ijjuv4wzmL7PJ9/GB/l/k+vz//umnRgdF18c+7Rx3//49Zi+/+p9vWQch/vSJ5u5t/Ov8jT8b53ucE+kdPezbM/DuVt9OsdME5i/xnx+/2umnRgdJXnvHy+YQxV3Xvs6bffql7n+YyWb+b4Wzn+do7vyfFMjmdzPJfjA+tUP9bGo7/744OvVEu/93eG9H6fJ4/tgWI/Uff1WZ94fWDQ59ljP36Dut7yV9gcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGgaC38PHpyuUnrtnVePXvrLD357dc7hdo7Wwt/Jjqlm+30p3ZvjiRxfyi8+++SFE53x5zmu0oFUpao9Px270i5pe0rpQtqfLqdWeun4xckP3zr2wRvpzLOPHX3/7aUab12DrZDSkTVZKgAAAGwM/w8AAP//o10DgQ==")

1.692270957s ago: executing program 1 (id=833):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/profiling', 0x149a82, 0x16e)
write$cgroup_int(r0, &(0x7f00000001c0)=0x100, 0x12)

1.602035871s ago: executing program 1 (id=836):
socket(0x400000000010, 0x3, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

1.601898377s ago: executing program 1 (id=837):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.537977168s ago: executing program 1 (id=839):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x21, 0x61b6, &(0x7f00000075c0)="$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")

1.340127117s ago: executing program 1 (id=844):
syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000001980)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x8, 0x90, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7f, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x71, 0x2, 0xb, {0x7, 0x25, 0x1, 0xc, 0xe, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x22, 0x0, 0x5, {0x7, 0x25, 0x1, 0xc, 0xad, 0x100}}}}}}}}]}}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0})

1.091866171s ago: executing program 2 (id=846):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x1033, r0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00')
read$eventfd(r2, &(0x7f00000001c0), 0x8)

1.031815157s ago: executing program 2 (id=847):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg(r1, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001740)=""/241, 0xf1}], 0x1}, 0x100)
sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="0ddac400000000000000bfb48c676fab22e2d076fb296526ae98655ee4c429d1f245f7b1cfa5447a76830be1d0cfd34ed8af4ddbcc0b787eb0619e69f27a", 0x3e}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3e}], 0x30, 0x88010}], 0x1, 0x20000010)

952.538576ms ago: executing program 2 (id=848):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x82)
fchdir(r1)
r2 = open(&(0x7f0000000240)='.\x00', 0x12000, 0x95)
flock(r2, 0x6)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

952.288472ms ago: executing program 2 (id=849):
sched_setscheduler(0x0, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x21)
write$P9_RGETATTR(r0, &(0x7f0000000300)={0xa0, 0x19, 0x1, {0x208, {0x40, 0x2, 0x3}, 0x71, 0x0, 0x0, 0x10000, 0x9, 0x5, 0x4, 0x2, 0x8000000000000001, 0xd, 0x9, 0x1, 0x0, 0x6, 0xffffffffffffffff, 0x1, 0x4, 0x1ff}}, 0xa0)

938.724476ms ago: executing program 2 (id=850):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24044004)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
r4 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
tkill(r4, 0xb)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x40000103, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

301.166313ms ago: executing program 4 (id=851):
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@gid}, {@gid}, {@nls={'nls', 0x3d, 'cp863'}}, {@force}]}, 0x1, 0x5e6, &(0x7f0000002f80)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x987452, 0x0, 0x0, 0x0, &(0x7f0000000040))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9)

221.255673ms ago: executing program 4 (id=852):
r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000080)={"dd7ff7bc", 0xf09b, 0x6, 0x7, 0x10001, 0x4, "785144b84ef7ebe60630484ac7b0c8", "02004900", "cd5ca376", "b4538793", ["1aff03000000000000a7e33f", "000000000000000000f58704", "11430600000800", "ffffd39271af6300"]})

141.338003ms ago: executing program 4 (id=853):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x1f, 0x1, 0x7, 0x6d5, 0xb, 0xbeff, 0x0})

141.16363ms ago: executing program 4 (id=854):
syz_emit_ethernet(0x6e, &(0x7f0000000180)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0xe, '\x00', {0xe, 0x6, "ea785a", 0x7fff, 0x2f, 0xff, @empty, @mcast2, [@srh={0x33, 0x0, 0x4, 0x0, 0x81, 0x0, 0xe}]}}}}}}}, 0x0)

72.267151ms ago: executing program 4 (id=855):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x0)

180.256µs ago: executing program 4 (id=856):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})

0s ago: executing program 2 (id=857):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x1}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={r2}, &(0x7f00000000c0)=0x8)

kernel console output (not intermixed with test programs):

690][ T1096]  ? queue_io+0x2d1/0x4a0
[   73.177708][ T1096]  ? __pfx_wb_writeback+0x10/0x10
[   73.177720][ T1096]  ? do_raw_spin_lock+0x12b/0x2f0
[   73.177749][ T1096]  wb_workfn+0x414/0xf50
[   73.177768][ T1096]  ? look_up_lock_class+0x57/0x110
[   73.177795][ T1096]  ? __pfx_wb_workfn+0x10/0x10
[   73.177815][ T1096]  ? do_raw_spin_lock+0x12b/0x2f0
[   73.177833][ T1096]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   73.177861][ T1096]  ? rcu_is_watching+0x15/0xb0
[   73.177907][ T1096]  ? process_scheduled_works+0x9bd/0x1470
[   73.177923][ T1096]  process_scheduled_works+0xa2f/0x1470
[   73.177957][ T1096]  ? __pfx_process_scheduled_works+0x10/0x10
[   73.177975][ T1096]  ? assign_work+0x3cf/0x5d0
[   73.177992][ T1096]  worker_thread+0xa44/0xfb0
[   73.178032][ T1096]  kthread+0x388/0x470
[   73.178049][ T1096]  ? __pfx_worker_thread+0x10/0x10
[   73.178061][ T1096]  ? __pfx_kthread+0x10/0x10
[   73.178078][ T1096]  ret_from_fork+0x51e/0xb90
[   73.178095][ T1096]  ? __pfx_ret_from_fork+0x10/0x10
[   73.178108][ T1096]  ? __switch_to+0xc7d/0x1450
[   73.178124][ T1096]  ? __pfx_kthread+0x10/0x10
[   73.178141][ T1096]  ret_from_fork_asm+0x1a/0x30
[   73.178169][ T1096]  </TASK>
[   73.178175][ T1096] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   73.205337][ T6354] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[   73.207286][ T6353] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[   73.304321][ T6353] EXT4-fs (loop1): 1 truncate cleaned up
[   73.307094][ T6353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.343697][ T6353] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.253: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[   73.375837][ T6353] EXT4-fs (loop1): Remounting filesystem read-only
[   73.409325][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.524780][ T6364] loop1: detected capacity change from 0 to 2048
[   73.537211][ T6364] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   73.548351][   T34] audit: type=1800 audit(1785565024.205:4): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.256" name="bus" dev="loop1" ino=1367 res=0 errno=0
[   73.743141][   T34] audit: type=1800 audit(1785565024.395:5): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.256" name=C023 dev="loop1" ino=1318 res=0 errno=0
[   74.425875][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   74.431818][ T5600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   74.437079][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   74.443212][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.457806][ T5600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.771616][ T6401] tmpfs: Bad value for 'grpquota_block_hardlimit'
[   74.856238][ T6406] loop0: detected capacity change from 0 to 2048
[   74.872600][ T6408] Cannot find set identified by id 0 to match
[   74.877476][ T6406] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   74.893251][   T34] audit: type=1800 audit(1785565025.545:6): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.269" name="file1" dev="loop0" ino=1367 res=0 errno=0
[   75.135706][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.137912][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.140178][ T6385] bridge_slave_0: entered allmulticast mode
[   75.151128][ T6385] bridge_slave_0: entered promiscuous mode
[   75.157023][ T6433] loop1: detected capacity change from 0 to 512
[   75.165198][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.171185][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.173759][ T6385] bridge_slave_1: entered allmulticast mode
[   75.177095][ T6385] bridge_slave_1: entered promiscuous mode
[   75.185514][ T6433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.190979][ T6433] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   75.202983][ T6385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.208848][ T6385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.227553][ T6385] team0: Port device team_slave_0 added
[   75.230656][ T6385] team0: Port device team_slave_1 added
[   75.244499][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.246684][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.254466][ T6385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.258451][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.260658][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.268983][ T6385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.293693][ T6385] hsr_slave_0: entered promiscuous mode
[   75.297684][ T6385] hsr_slave_1: entered promiscuous mode
[   75.299785][ T6385] debugfs: 'hsr0' already exists in 'hsr'
[   75.301598][ T6385] Cannot create hsr debugfs directory
[   75.464054][ T5664] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   75.624141][ T5664] usb 2-1: Using ep0 maxpacket: 16
[   75.627702][ T5664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.631079][ T5664] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   75.635148][ T5664] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   75.638176][ T5664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.642843][ T5664] usb 2-1: config 0 descriptor??
[   75.685011][ T6385] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.689868][ T6385] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.695909][ T6385] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.701153][ T6385] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.726290][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.728519][ T6385] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.730741][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.732811][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.782605][ T6385] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.796328][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.799269][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.809248][ T6385] 8021q: adding VLAN 0 to HW filter on device team0
[   75.815096][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.817511][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.824434][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.827231][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.060194][ T5664] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input6
[   76.087273][ T6385] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.106380][ T5664] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   76.155982][ T6385] veth0_vlan: entered promiscuous mode
[   76.163134][ T6385] veth1_vlan: entered promiscuous mode
[   76.197267][ T6385] veth0_macvtap: entered promiscuous mode
[   76.203082][ T6385] veth1_macvtap: entered promiscuous mode
[   76.216044][ T6385] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.227345][ T6385] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.243700][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.253575][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.263940][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.291608][ T5664] usb 2-1: USB disconnect, device number 6
[   76.306641][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.402729][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.405722][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.416346][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   76.420098][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   76.431247][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.433541][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.470779][ T6459] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   76.484632][ T6460] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   76.484632][ T6460] The task syz.0.281 (6460) triggered the difference, watch for misbehavior.
[   76.495845][ T4983] Bluetooth: hci2: command tx timeout
[   76.505764][ T6462] loop2: detected capacity change from 0 to 512
[   76.518068][ T6462] EXT4-fs (loop2): orphan cleanup on readonly fs
[   76.524811][ T6462] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[   76.530908][ T6462] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   76.532985][ T6462] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.282: bad orphan inode 768
[   76.538894][ T6462] loop2: lost filesystem error report for type 5 error -117
[   76.540612][ T6462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   76.559291][ T6385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.620786][ T6467] loop2: detected capacity change from 0 to 512
[   76.623218][ T6467] EXT4-fs: inline encryption not supported
[   76.626732][ T6467] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   76.630840][ T6467] EXT4-fs (loop2): orphan cleanup on readonly fs
[   76.633036][ T6467] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.284: inode #15: comm syz.2.284: iget: illegal inode #
[   76.639149][ T6467] loop2: lost filesystem error report for type 5 error -117
[   76.639354][ T6467] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.284: couldn't read orphan inode 15 (err -117)
[   76.645425][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   76.645439][    C0] EXT4-fs (loop2): initial error at time 1785565027: ext4_orphan_get:1391
[   76.645452][    C0] EXT4-fs (loop2): last error at time 1785565027: ext4_orphan_get:1391
[   76.653360][ T6467] loop2: lost filesystem error report for type 5 error -117
[   76.654788][ T6467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   76.665914][ T6467] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[   76.670916][ T6467] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   76.683349][ T6385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.835077][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.860391][ T6474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.209457][   T34] audit: type=1800 audit(1785565027.865:7): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.302" name="iface_name" dev="configfs" ino=10550 res=0 errno=0
[   77.258518][ T6510] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[   77.337282][ T6517] netlink: 56 bytes leftover after parsing attributes in process `syz.1.307'.
[   77.406013][ T6520] loop1: detected capacity change from 0 to 2048
[   77.460977][ T6514] geneve0: entered promiscuous mode
[   77.462293][ T6520]  loop1: p1 p3 p4
[   77.462293][ T6520]  p1: <minix: p5 p6 >
[   77.475883][ T6520] loop1: p1 size 67110656 extends beyond EOD, truncated
[   77.484562][ T6520] loop1: p3 size 134217728 extends beyond EOD, truncated
[   77.494200][ T6520] loop1: p4 size 4278190080 extends beyond EOD, truncated
[   77.502447][ T6520] loop1: p5 size 67110656 extends beyond EOD, truncated
[   77.517250][ T6520] loop1: p6 size 134217728 extends beyond EOD, truncated
[   77.635932][ T4983] Bluetooth: hci1: Unknown advertising packet type: 0x14
[   77.660618][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'.
[   77.671666][ T6534] netlink: 'syz.1.313': attribute type 2 has an invalid length.
[   77.860145][ T6555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.323'.
[   78.027524][ T6561] loop2: detected capacity change from 0 to 32768
[   78.155366][ T6571] bridge1: entered promiscuous mode
[   78.157653][ T6571] bridge1: entered allmulticast mode
[   78.203924][    T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   78.365656][    T9] usb 2-1: config 8 has an invalid interface number: 212 but max is 1
[   78.368182][    T9] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[   78.371319][    T9] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 2
[   78.374043][    T9] usb 2-1: config 8 has no interface number 0
[   78.375900][    T9] usb 2-1: config 8 interface 212 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   78.379704][    T9] usb 2-1: config 8 interface 212 has no altsetting 0
[   78.383613][    T9] usb 2-1: New USB device found, idVendor=19d2, idProduct=7fc1, bcdDevice=e8.57
[   78.386434][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.388768][    T9] usb 2-1: Product: syz
[   78.390034][    T9] usb 2-1: Manufacturer: syz
[   78.391397][    T9] usb 2-1: SerialNumber: syz
[   78.574005][ T4983] Bluetooth: hci2: command tx timeout
[   78.600450][    T9] usb 2-1: bad CDC descriptors
[   78.605395][    T9] usb 2-1: USB disconnect, device number 7
[   79.365206][ T6593] loop1: detected capacity change from 0 to 40427
[   79.369036][ T6593] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   79.372026][ T6593] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   79.422354][ T6593] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   79.429408][ T6593] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   79.432121][ T6593] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   79.434481][    T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   79.598371][    T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[   79.600747][    T9] usb 3-1: config 0 has no interface number 0
[   79.602555][    T9] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   79.606475][    T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   79.612607][    T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   79.617806][    T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   79.620465][    T9] usb 3-1: Product: syz
[   79.621735][    T9] usb 3-1: SerialNumber: syz
[   79.625953][    T9] usb 3-1: config 0 descriptor??
[   79.629939][    T9] usbhid 3-1:0.8: couldn't find an input interrupt endpoint
[   79.720735][ T6609] loop1: detected capacity change from 0 to 64
[   79.731274][ T6609] syz.1.345: attempt to access beyond end of device
[   79.731274][ T6609] loop1: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[   79.736512][ T6609] Buffer I/O error on dev loop1, logical block 512, async page read
[   79.739094][ T6609] syz.1.345: attempt to access beyond end of device
[   79.739094][ T6609] loop1: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[   79.746719][ T6609] Buffer I/O error on dev loop1, logical block 56576, async page read
[   79.826744][ T6613] loop1: detected capacity change from 0 to 8192
[   79.849363][ T5657] usb 3-1: USB disconnect, device number 4
[   80.140530][ T6623] loop1: detected capacity change from 0 to 40427
[   80.144533][ T6623] F2FS-fs (loop1): build fault injection rate: 174
[   80.146441][ T6623] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[   80.148976][ T6623] F2FS-fs (loop1): invalid crc value
[   80.178083][ T6623] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   80.181540][ T6623] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   80.201431][ T6623] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[   80.206457][ T6623] F2FS-fs (loop1): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c5/0xe90
[   80.210251][ T6623] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[   80.218368][ T6623] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[   80.225299][ T6623] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[   80.232129][ T6623] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[   80.239028][ T6623] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[   80.247204][ T6623] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[   80.254614][ T6623] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[   80.261393][ T6623] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[   80.268781][ T6623] CPU: 1 UID: 0 PID: 6623 Comm: syz.1.352 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   80.268795][ T6623] Tainted: [L]=SOFTLOCKUP
[   80.268797][ T6623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   80.268801][ T6623] Call Trace:
[   80.268804][ T6623]  <TASK>
[   80.268808][ T6623]  dump_stack_lvl+0xe8/0x150
[   80.268821][ T6623]  f2fs_handle_critical_error+0x36f/0x530
[   80.268834][ T6623]  ? f2fs_map_blocks+0x36e6/0x4350
[   80.268841][ T6623]  f2fs_balance_fs+0x349/0x860
[   80.268850][ T6623]  ? f2fs_map_blocks+0x36e6/0x4350
[   80.268856][ T6623]  ? __pfx_f2fs_balance_fs+0x10/0x10
[   80.268863][ T6623]  ? __up_read+0x28f/0x6c0
[   80.268875][ T6623]  ? __pfx___up_read+0x10/0x10
[   80.268884][ T6623]  ? trace_lock_elapsed_time_end+0xf1/0xbf0
[   80.268891][ T6623]  ? restore_priority+0x1af/0x480
[   80.268900][ T6623]  f2fs_map_blocks+0x36e6/0x4350
[   80.268918][ T6623]  ? __lock_acquire+0x683/0x2cd0
[   80.268929][ T6623]  ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[   80.268941][ T6623]  ? __pfx_f2fs_map_blocks+0x10/0x10
[   80.268947][ T6623]  ? lockdep_hardirqs_on+0x7a/0x110
[   80.268956][ T6623]  ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[   80.268966][ T6623]  ? seqcount_lockdep_reader_access+0xea/0x100
[   80.268975][ T6623]  ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0
[   80.268987][ T6623]  ? current_time+0x22f/0x380
[   80.268998][ T6623]  ? __pfx_current_time+0x10/0x10
[   80.269011][ T6623]  ? fault_in_iov_iter_readable+0x1d5/0x310
[   80.269022][ T6623]  f2fs_file_write_iter+0x18e7/0x2540
[   80.269038][ T6623]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[   80.269086][ T6623]  ? __asan_memset+0x22/0x50
[   80.269103][ T6623]  iter_file_splice_write+0xa31/0x1240
[   80.269121][ T6623]  ? __pfx_iter_file_splice_write+0x10/0x10
[   80.269136][ T6623]  ? __pfx_iter_file_splice_write+0x10/0x10
[   80.269144][ T6623]  direct_splice_actor+0x101/0x160
[   80.269156][ T6623]  splice_direct_to_actor+0x57b/0xcb0
[   80.269172][ T6623]  ? __pfx_direct_splice_actor+0x10/0x10
[   80.269180][ T6623]  ? __pfx_splice_direct_to_actor+0x10/0x10
[   80.269192][ T6623]  do_splice_direct+0x195/0x290
[   80.269202][ T6623]  ? __pfx_do_splice_direct+0x10/0x10
[   80.269211][ T6623]  ? __pfx_direct_file_splice_eof+0x10/0x10
[   80.269222][ T6623]  ? rw_verify_area+0x203/0x4c0
[   80.269234][ T6623]  do_sendfile+0x52e/0x7c0
[   80.269245][ T6623]  ? __pfx_do_sendfile+0x10/0x10
[   80.269255][ T6623]  ? __se_sys_futex+0x3a8/0x450
[   80.269264][ T6623]  __se_sys_sendfile64+0x144/0x1a0
[   80.269272][ T6623]  ? __pfx___se_sys_futex+0x10/0x10
[   80.269279][ T6623]  ? __pfx___se_sys_sendfile64+0x10/0x10
[   80.269289][ T6623]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.269297][ T6623]  do_syscall_64+0x170/0xf80
[   80.269305][ T6623]  ? trace_irq_disable+0x3b/0x150
[   80.269316][ T6623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.269323][ T6623] RIP: 0033:0x7f7da199e019
[   80.269331][ T6623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.269336][ T6623] RSP: 002b:00007f7da285b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   80.269345][ T6623] RAX: ffffffffffffffda RBX: 00007f7da1c25fa0 RCX: 00007f7da199e019
[   80.269350][ T6623] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007
[   80.269354][ T6623] RBP: 00007f7da1a3500c R08: 0000000000000000 R09: 0000000000000000
[   80.269358][ T6623] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000
[   80.269362][ T6623] R13: 00007f7da1c26038 R14: 00007f7da1c25fa0 R15: 00007ffc10767f58
[   80.269372][ T6623]  </TASK>
[   80.269375][ T6623] F2FS-fs (loop1): Stopped filesystem due to reason: 1
[   80.655187][ T4983] Bluetooth: hci2: command tx timeout
[   80.744922][   T32] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   80.761453][ T6637] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[   80.836495][ T6646] netlink: 144 bytes leftover after parsing attributes in process `syz.0.359'.
[   80.839445][ T6646] netlink: 73 bytes leftover after parsing attributes in process `syz.0.359'.
[   80.842681][ T6646] netlink: 73 bytes leftover after parsing attributes in process `syz.0.359'.
[   80.911273][   T32] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[   80.914700][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.921067][   T32] usb 3-1: Product: syz
[   80.922367][   T32] usb 3-1: Manufacturer: syz
[   80.923795][   T32] usb 3-1: SerialNumber: syz
[   80.936871][   T32] usb 3-1: config 0 descriptor??
[   80.951998][ T6654] loop1: detected capacity change from 0 to 256
[   80.955924][ T6654] exfat: Deprecated parameter 'utf8'
[   80.957662][ T6654] exfat: Deprecated parameter 'namecase'
[   80.979176][ T6654] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d)
[   81.054758][ T6660] netlink: 'syz.1.367': attribute type 11 has an invalid length.
[   81.145091][ T6667] usb usb8: usbfs: process 6667 (syz.0.370) did not claim interface 0 before use
[   81.299120][ T6675] loop0: detected capacity change from 0 to 512
[   81.303030][ T6675] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   81.311172][ T6675] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[   81.314329][ T6675] System zones: 1-12
[   81.318864][ T6675] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   81.327447][ T6675] EXT4-fs (loop0): 1 truncate cleaned up
[   81.330525][ T6675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.343229][   T32] usb 3-1: Firmware: major: 0, minor: 101, hardware type: UNKNOWN (114)
[   81.346107][ T5657] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   81.427844][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.496292][ T5657] usb 2-1: Using ep0 maxpacket: 32
[   81.503074][ T5657] usb 2-1: unable to get BOS descriptor or descriptor too short
[   81.507726][ T5657] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.510890][ T5657] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   81.518141][ T6681] loop0: detected capacity change from 0 to 16
[   81.522801][ T5657] usb 2-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40
[   81.527482][ T5657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.530175][ T5657] usb 2-1: Product: syz
[   81.531687][ T5657] usb 2-1: Manufacturer: syz
[   81.533542][ T5657] usb 2-1: SerialNumber: syz
[   81.538139][ T6681] erofs (device loop0): DAX unsupported by block device. Turning off DAX.
[   81.550882][ T6681] erofs (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[   81.559755][   T32] usb 3-1: Read permanent extended address 86:b5:b5:91:99:d4:9c:41 from device
[   81.563190][   T32] usb 3-1: atusb_probe: initialization failed, error = -524
[   81.568125][ T6681] erofs (device loop0): mounted with root inode @ nid 36.
[   81.581597][   T32] atusb 3-1:0.0: probe with driver atusb failed with error -524
[   81.586772][ T6681] erofs (device loop0): corrupted dir block 1490945 @ nid 36
[   81.641145][ T6683] netlink: 'syz.0.377': attribute type 83 has an invalid length.
[   81.675536][ T6685] befs: (nbd0): No write support. Marking filesystem read-only
[   81.679968][ T6685] befs: (nbd0): unable to read superblock
[   81.770991][ T5764] usb 3-1: USB disconnect, device number 5
[   81.787664][ T5657] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[   81.792773][ T5657] usb 2-1: USB disconnect, device number 8
[   81.810190][ T5702] udevd[5702]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   81.856755][ T6694] tipc: Started in network mode
[   81.858449][ T6694] tipc: Node identity ae8fa23a9ecc, cluster identity 4711
[   81.860835][ T6694] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.863410][ T6694] syzkaller0: entered promiscuous mode
[   81.865993][ T6694] syzkaller0: entered allmulticast mode
[   81.878605][ T6694] tipc: Resetting bearer <eth:syzkaller0>
[   81.882319][ T6693] tipc: Resetting bearer <eth:syzkaller0>
[   81.890620][ T6693] tipc: Disabling bearer <eth:syzkaller0>
[   82.357420][ T6702] <
[   82.437984][ T6714] tmpfs: Bad value for 'mpol'
[   82.703988][   T32] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   82.733973][ T4983] Bluetooth: hci2: command tx timeout
[   82.867528][   T32] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[   82.871258][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.875417][   T32] usb 3-1: Product: syz
[   82.877103][   T32] usb 3-1: Manufacturer: syz
[   82.878609][   T32] usb 3-1: SerialNumber: syz
[   82.881599][   T32] usb 3-1: config 0 descriptor??
[   82.887932][   T32] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[   82.891939][   T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   82.896307][   T32] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[   82.900683][   T32] usb 3-1: media controller created
[   82.909339][   T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   82.930067][   T32] DVB: Unable to find symbol mt352_attach()
[   82.951566][   T32] DVB: Unable to find symbol nxt6000_attach()
[   82.953638][   T32] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[   82.960935][   T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[   82.967051][   T32] dvb-usb: schedule remote query interval to 1000 msecs.
[   82.969248][   T32] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[   82.972459][   T32] dvb-usb: bulk message failed: -22 (7/0)
[   82.975857][   T32] dvb-usb: bulk message failed: -22 (7/0)
[   83.100639][ T5764] usb 3-1: USB disconnect, device number 6
[   83.125183][ T5764] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[   83.904668][ T5650] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   84.053939][ T5650] usb 3-1: Using ep0 maxpacket: 32
[   84.056921][ T5650] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   84.061772][ T5650] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   84.064863][ T5650] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   84.067568][ T5650] usb 3-1: Product: syz
[   84.068959][ T5650] usb 3-1: Manufacturer: syz
[   84.070523][ T5650] usb 3-1: SerialNumber: syz
[   84.073485][ T5650] usb 3-1: config 0 descriptor??
[   84.078497][ T6726] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   84.082490][ T5650] hub 3-1:0.0: bad descriptor, ignoring hub
[   84.085249][ T5650] hub 3-1:0.0: probe with driver hub failed with error -5
[   84.248417][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'.
[   84.394212][ T5664] usb 3-1: USB disconnect, device number 7
[   84.831112][ T6739] loop2: detected capacity change from 0 to 2048
[   84.834560][ T6739] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   84.837697][ T6739] NILFS (loop2): mounting unchecked fs
[   84.844790][ T6739] NILFS (loop2): recovery complete
[   84.847019][ T6740] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.848057][ T5702] udevd[5702]: incorrect nilfs2 checksum on /dev/loop2
[   85.157256][ T6762] loop1: detected capacity change from 0 to 8
[   85.169461][ T6762] SQUASHFS error: zstd decompression error: 10
[   85.177450][ T6762] SQUASHFS error: zstd decompression failed, data probably corrupt
[   85.180125][ T6762] SQUASHFS error: Failed to read block 0x60: -5
[   85.182570][ T6762] SQUASHFS error: zstd decompression error: 10
[   85.185163][ T6762] SQUASHFS error: zstd decompression failed, data probably corrupt
[   85.187597][ T6762] SQUASHFS error: Failed to read block 0x60: -5
[   85.189915][   T34] audit: type=1800 audit(1785565035.845:8): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.411" name="/" dev="loop1" ino=1 res=0 errno=0
[   85.217861][ T6764] loop0: detected capacity change from 0 to 512
[   85.239864][ T6764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.243728][ T6764] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.316050][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.661303][ T6779] loop0: detected capacity change from 0 to 4096
[   85.720692][ T6780] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.121213][ T6790] loop0: detected capacity change from 0 to 512
[   86.151346][ T6790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.176649][ T6790] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   86.236908][ T6790] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 3: comm syz.0.422: lblock 8 mapped to illegal pblock 3 (length 26)
[   86.281180][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.368520][ T6798] loop2: detected capacity change from 0 to 8
[   86.577557][ T6804] loop0: detected capacity change from 0 to 2048
[   86.593074][ T6804] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.670359][   T33] cfg80211: failed to load regulatory.db
[   86.822735][ T6810] loop0: detected capacity change from 0 to 32768
[   86.825576][ T6812] block nbd0: server does not support multiple connections per device.
[   86.832548][ T6812] block nbd0: shutting down sockets
[   86.865300][ T6810] ERROR: (device loop0): xtTruncate: xt_getpage: xtree page corrupt
[   86.865300][ T6810] 
[   86.867837][ T6820] (syz.1.436,6820,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[   86.872179][ T6810] ERROR: (device loop0): remounting filesystem as read-only
[   86.985360][ T6831] loop2: detected capacity change from 0 to 512
[   86.989159][ T6831] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   86.993744][ T6831] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.441: bad orphan inode 131083
[   86.997471][ T6831] loop2: lost filesystem error report for type 5 error -117
[   86.998310][ T6831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.012084][ T6831] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.441: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1
[   87.052395][ T6385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.074753][ T6838] loop2: detected capacity change from 0 to 164
[   87.088657][ T6838] isofs: isofs_export_get_parent(): child directory not normalized!
[   87.182739][ T6850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.450'.
[   87.194198][ T6850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.450'.
[   87.197568][ T6845] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   87.201364][ T6850] netlink: 'syz.2.450': attribute type 32 has an invalid length.
[   87.206084][ T6850] netlink: 500 bytes leftover after parsing attributes in process `syz.2.450'.
[   87.222736][ T6845] ntfs3(loop0): ino=19, mi_enum_attr
[   87.245038][ T6845] ntfs3(loop0): failed to convert "c46c" to koi8-u
[   87.251650][ T6845] ntfs3(loop0): ino=20, mi_enum_attr
[   87.797361][ T6889] fuse: Bad value for 'fd'
[   87.945327][ T6894] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   87.974197][ T6894] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   87.979061][ T6894] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   87.983558][ T6894] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   87.989372][ T6894] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   88.313953][ T5657] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   88.488277][ T5657] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[   88.492397][ T5657] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[   88.499954][ T5657] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   88.503707][ T5657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.507380][ T5657] usb 2-1: Product: syz
[   88.509246][ T5657] usb 2-1: Manufacturer: syz
[   88.511271][ T5657] usb 2-1: SerialNumber: syz
[   88.861450][ T5657] cdc_ncm 2-1:1.0: bind() failure
[   88.874973][ T5657] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   88.877889][ T5657] cdc_ncm 2-1:1.1: bind() failure
[   88.884249][ T5657] usb 2-1: USB disconnect, device number 9
[   89.436008][ T6907] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[   89.454401][ T6907] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[   89.465833][ T6907] ntfs3(loop1): ino=1e, mi_enum_attr
[   90.487330][ T6921] netlink: 48 bytes leftover after parsing attributes in process `syz.2.481'.
[   90.705306][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.488'.
[   91.057498][ T6959] set_capacity_and_notify: 4 callbacks suppressed
[   91.057508][ T6959] loop2: detected capacity change from 0 to 1024
[   91.062610][ T6959] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[   91.079913][ T6959] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.498: lblock 2 mapped to illegal pblock 2 (length 1)
[   91.088591][ T6959] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   91.089422][ T6959] Quota error (device loop2): qtree_write_dquot: dquota write failed
[   91.096131][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   91.096145][    C1] EXT4-fs (loop2): initial error at time 1785565041: ext4_map_blocks:776: inode 3: block 2
[   91.096169][    C1] EXT4-fs (loop2): last error at time 1785565041: ext4_map_blocks:776: inode 3: block 2
[   91.106410][ T6959] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 48: comm syz.2.498: lblock 0 mapped to illegal pblock 48 (length 1)
[   91.111079][ T6959] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   91.111236][ T6959] Quota error (device loop2): v2_write_file_info: Can't write info structure
[   91.118746][ T6959] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.498: Failed to acquire dquot type 0
[   91.122705][ T6959] loop2: lost filesystem error report for type 5 error -117
[   91.123034][ T6959] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem
[   91.130734][ T6959] loop2: lost filesystem error report for type 5 error -117
[   91.132063][ T6959] EXT4-fs error (device loop2): ext4_evict_inode:255: inode #11: comm syz.2.498: mark_inode_dirty error
[   91.150822][ T6959] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   91.151452][ T6959] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -117)
[   91.158207][ T6959] EXT4-fs (loop2): 1 orphan inode deleted
[   91.160738][ T6959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.170933][ T6965] evm: overlay not supported
[   91.174309][   T64] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u9:2: lblock 1 mapped to illegal pblock 1 (length 1)
[   91.187544][   T64] Quota error (device loop2): remove_tree: Can't read quota data block 1
[   91.193180][ T6959] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.498: Invalid inode table block 1 in block_group 0
[   91.199200][   T34] audit: type=1804 audit(1785565041.845:9): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.500" name="/newroot/212/bus/cpu.stat" dev="overlay" ino=51 res=1 errno=0
[   91.210653][   T64] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u9:2: Failed to release dquot type 0
[   91.246517][ T6959] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem
[   91.275276][ T6385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.283365][ T6385] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0
[   91.297900][ T6385] loop2: lost filesystem error report for type 5 error -117
[   91.300044][ T6385] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem
[   91.317266][ T6385] loop2: lost filesystem error report for type 5 error -117
[   91.317496][ T6385] EXT4-fs error (device loop2): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error
[   91.320388][ T6973] loop0: detected capacity change from 0 to 512
[   91.320500][ T6385] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   91.336005][ T6973] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c019, mo2=0002]
[   91.353350][ T6973] System zones: 1-12
[   91.362437][ T6973] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.505: ea_inode file size=0 entry size=6
[   91.376171][ T6973] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.505: iget: bad extra_isize 90 (inode size 256)
[   91.380402][ T6973] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   91.383948][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   91.389334][    C0] EXT4-fs (loop0): initial error at time 1785565042: ext4_xattr_inode_iget:441: inode 11
[   91.392419][    C0] EXT4-fs (loop0): last error at time 1785565042: ext4_xattr_inode_iget:441: inode 11
[   91.398653][ T6973] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.505: error while reading EA inode 11 err=-117
[   91.417235][ T6973] loop0: lost filesystem error report for type 5 error -117
[   91.418511][ T6973] EXT4-fs (loop0): 1 orphan inode deleted
[   91.428527][ T6973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.437022][ T6973] EXT4-fs error (device loop0): ext4_nfs_get_inode:1550: inode #11: comm syz.0.505: iget: bad extra_isize 90 (inode size 256)
[   91.455304][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.473785][ T6986] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   91.561112][ T6993] binder: 6991:6993 ioctl c0306201 200000000640 returned -22
[   91.573979][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'.
[   91.576656][ T6996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.514'.
[   91.732352][   T33] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   91.759818][   T33] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   91.835635][ T7017] loop1: detected capacity change from 0 to 4096
[   91.839620][ T7017] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   91.855932][ T7017] ntfs3(loop1): Failed to load $MFT (-22).
[   91.977937][ T7027] syz.1.526 (7027): drop_caches: 4
[   92.173574][ T7035] loop1: detected capacity change from 0 to 8192
[   92.224752][ T5702]  loop1: RDSK (0)
[   92.224752][ T5702]  AHDI p2 p3 p4
[   92.228306][ T5702] loop1: p2 start 4294967046 is beyond EOD, truncated
[   92.230901][ T5702] loop1: p3 size 67164644 extends beyond EOD, truncated
[   92.246748][ T7035]  loop1: RDSK (0)
[   92.246748][ T7035]  AHDI p2 p3 p4
[   92.249859][ T7035] loop1: p2 start 4294967046 is beyond EOD, truncated
[   92.252591][ T7035] loop1: p3 size 67164644 extends beyond EOD, truncated
[   92.333587][ T5702] udevd[5702]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   92.373407][ T5649] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.379996][ T5702] udevd[5702]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   92.454456][ T5657] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   92.470826][ T5649] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.477564][ T5600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.481073][ T5600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.494051][ T5600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.503266][ T5600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.512900][ T5600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.532323][ T7048] loop1: detected capacity change from 0 to 4096
[   92.566208][ T5649] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.574770][ T7048] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   92.582583][ T7048] ntfs3(loop1): Failed to load $Extend (-22).
[   92.586742][ T7048] ntfs3(loop1): Failed to initialize $Extend.
[   92.616183][ T5657] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   92.624800][ T5657] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   92.629136][ T5657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   92.632947][ T5657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   92.639756][ T5649] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.654490][ T5657] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   92.663222][ T5657] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[   92.684773][ T5657] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.688858][ T5657] usb 3-1: Product: syz
[   92.693322][ T5657] usb 3-1: Manufacturer: syz
[   92.701229][ T5657] usb 3-1: SerialNumber: syz
[   92.709073][ T5657] usb 3-1: config 0 descriptor??
[   92.718336][ T5657] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9
[   92.749466][ T5649] bridge_slave_1: left allmulticast mode
[   92.751421][ T5649] bridge_slave_1: left promiscuous mode
[   92.755444][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.791535][ T5649] bridge_slave_0: left allmulticast mode
[   92.796473][ T5649] bridge_slave_0: left promiscuous mode
[   92.798689][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.924718][   T33] usb 3-1: USB disconnect, device number 8
[   93.129675][ T5649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.135929][ T5649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.140580][ T5649] bond0 (unregistering): Released all slaves
[   93.226545][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'.
[   93.227472][ T5649] tipc: Left network mode
[   93.523908][ T5649] hsr_slave_0: left promiscuous mode
[   93.538370][ T5649] hsr_slave_1: left promiscuous mode
[   93.540645][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.542852][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.554915][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.558068][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.564814][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'.
[   93.572379][ T5649] veth1_macvtap: left promiscuous mode
[   93.576211][ T5649] veth1_vlan: left promiscuous mode
[   93.577824][ T5649] veth0_vlan: left promiscuous mode
[   93.725700][ T5649] team0 (unregistering): Port device team_slave_1 removed
[   93.733122][ T5649] team0 (unregistering): Port device team_slave_0 removed
[   93.816271][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'.
[   93.902561][ T7045] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.912703][ T7115] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[   93.915054][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.917532][ T7045] bridge_slave_0: entered allmulticast mode
[   93.929085][ T7045] bridge_slave_0: entered promiscuous mode
[   93.945409][ T7045] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.947972][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.949772][ T7115] /dev/nullb0: Can't open blockdev
[   93.954164][ T7045] bridge_slave_1: entered allmulticast mode
[   93.958092][ T7045] bridge_slave_1: entered promiscuous mode
[   93.994511][ T7045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.999481][ T7045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.052033][ T7045] team0: Port device team_slave_0 added
[   94.068319][ T7045] team0: Port device team_slave_1 added
[   94.103182][ T7132] loop2: detected capacity change from 0 to 8
[   94.108711][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.111126][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.122729][ T7132] SQUASHFS error: xz decompression failed, data probably corrupt
[   94.129027][ T7132] SQUASHFS error: Failed to read block 0x108: -5
[   94.141336][ T7132] SQUASHFS error: Unable to read metadata cache entry [106]
[   94.149832][ T7045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.154505][ T7132] SQUASHFS error: Unable to read inode 0x11f
[   94.159640][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.161916][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.189159][ T7045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.284878][ T7045] hsr_slave_0: entered promiscuous mode
[   94.287173][ T7045] hsr_slave_1: entered promiscuous mode
[   94.289231][ T7045] debugfs: 'hsr0' already exists in 'hsr'
[   94.290984][ T7045] Cannot create hsr debugfs directory
[   94.470139][ T7147] loop2: detected capacity change from 0 to 32768
[   94.477326][ T7147] (syz.2.565,7147,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   94.483485][ T7147] (syz.2.565,7147,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   94.510561][ T7147] JBD2: Ignoring recovery information on journal
[   94.537004][ T7147] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   94.583167][ T7045] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   94.589460][ T4983] Bluetooth: hci1: command tx timeout
[   94.600027][ T7045] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   94.610788][ T7045] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   94.625755][ T7045] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   94.669168][ T6385] ocfs2: Unmounting device (7,2) on (node local)
[   94.711495][ T7045] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.723158][ T7045] 8021q: adding VLAN 0 to HW filter on device team0
[   94.754809][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.757170][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.760580][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.762862][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.799802][ T7045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.837019][ T7165] loop2: detected capacity change from 0 to 256
[   94.904475][ T7150] loop1: detected capacity change from 0 to 40427
[   94.910036][ T7169] loop2: detected capacity change from 0 to 512
[   94.917319][ T7150] F2FS-fs (loop1): Image doesn't support compression
[   94.919584][ T7150] F2FS-fs (loop1): build fault injection rate: 690
[   94.921557][ T7150] F2FS-fs (loop1): build fault injection type: 0x4
[   94.930285][ T7169] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   94.935383][ T7150] F2FS-fs (loop1): invalid crc value
[   94.942728][ T7169] EXT4-fs (loop2): invalid journal inode
[   94.949696][ T7169] EXT4-fs (loop2): can't get journal size
[   94.959450][ T7169] EXT4-fs (loop2): 1 truncate cleaned up
[   94.963178][ T7169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.970041][ T7169] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.569: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=1040, size=1024 fake=0
[   95.017222][ T6385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.041989][ T7150] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   95.063462][ T7150] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   95.077280][ T7181] f2fs_ckpt-7:1: attempt to access beyond end of device
[   95.077280][ T7181] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   95.084849][ T7181] CPU: 1 UID: 0 PID: 7181 Comm: f2fs_ckpt-7:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   95.084862][ T7181] Tainted: [L]=SOFTLOCKUP
[   95.084864][ T7181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.084868][ T7181] Call Trace:
[   95.084871][ T7181]  <TASK>
[   95.084875][ T7181]  dump_stack_lvl+0xe8/0x150
[   95.084888][ T7181]  f2fs_handle_critical_error+0x36f/0x530
[   95.084902][ T7181]  f2fs_write_end_io+0xcfc/0x1030
[   95.084910][ T7181]  ? blkg_put+0x22/0x240
[   95.084925][ T7181]  __submit_merged_bio+0x258/0x700
[   95.084935][ T7181]  __submit_merged_write_cond+0x3c9/0x4e0
[   95.084948][ T7181]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   95.084966][ T7181]  f2fs_write_data_pages+0x2afc/0x37d0
[   95.084986][ T7181]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   95.085009][ T7181]  ? check_noncircular+0xda/0x150
[   95.085020][ T7181]  ? lockdep_unlock+0x5d/0xd0
[   95.085027][ T7181]  ? __lock_acquire+0x13e8/0x2cd0
[   95.085044][ T7181]  ? do_raw_spin_lock+0x12b/0x2f0
[   95.085057][ T7181]  ? do_raw_spin_unlock+0x4d/0x210
[   95.085066][ T7181]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   95.085074][ T7181]  do_writepages+0x338/0x560
[   95.085087][ T7181]  ? do_raw_spin_unlock+0x4d/0x210
[   95.085097][ T7181]  filemap_fdatawrite+0x1e9/0x2f0
[   95.085108][ T7181]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   95.085132][ T7181]  ? do_raw_spin_unlock+0x4d/0x210
[   95.085142][ T7181]  f2fs_sync_dirty_inodes+0x30e/0x860
[   95.085156][ T7181]  f2fs_write_checkpoint+0xa50/0x2810
[   95.085176][ T7181]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   95.085196][ T7181]  ? down_write+0x16d/0x200
[   95.085203][ T7181]  ? __pfx_down_write+0x10/0x10
[   95.085213][ T7181]  __write_checkpoint_sync+0x124/0x2b0
[   95.085221][ T7181]  ? __lock_acquire+0x683/0x2cd0
[   95.085230][ T7181]  ? __pfx___write_checkpoint_sync+0x10/0x10
[   95.085243][ T7181]  ? __pfx___schedule+0x10/0x10
[   95.085257][ T7181]  __checkpoint_and_complete_reqs+0x53/0x2d0
[   95.085268][ T7181]  issue_checkpoint_thread+0xd5/0x270
[   95.085278][ T7181]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[   95.085286][ T7181]  ? __pfx_autoremove_wake_function+0x10/0x10
[   95.085297][ T7181]  ? __kthread_parkme+0x71/0x1f0
[   95.085306][ T7181]  ? __kthread_parkme+0x196/0x1f0
[   95.085353][ T7181]  kthread+0x388/0x470
[   95.085364][ T7181]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[   95.085372][ T7181]  ? __pfx_kthread+0x10/0x10
[   95.085381][ T7181]  ret_from_fork+0x51e/0xb90
[   95.085391][ T7181]  ? __pfx_ret_from_fork+0x10/0x10
[   95.085398][ T7181]  ? __switch_to+0xc7d/0x1450
[   95.085407][ T7181]  ? __pfx_kthread+0x10/0x10
[   95.085416][ T7181]  ret_from_fork_asm+0x1a/0x30
[   95.085431][ T7181]  </TASK>
[   95.085434][ T7181] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   95.141596][ T7045] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.292024][ T7045] veth0_vlan: entered promiscuous mode
[   95.333731][ T7045] veth1_vlan: entered promiscuous mode
[   95.396702][ T7045] veth0_macvtap: entered promiscuous mode
[   95.420514][ T7045] veth1_macvtap: entered promiscuous mode
[   95.441723][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.468145][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.482710][ T5629] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.505375][ T5629] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.509014][ T5629] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.512413][ T5629] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.568487][ T7200] netlink: 'syz.2.576': attribute type 11 has an invalid length.
[   95.646126][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.649266][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.698164][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.706408][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.814996][ T7202] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.577 (7202)
[   95.867681][ T7202] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   95.874150][ T7202] BTRFS info (device loop1): using sha256 checksum algorithm
[   95.956887][ T7202] BTRFS info (device loop1): enabling ssd optimizations
[   95.961749][ T7202] BTRFS info (device loop1): turning on async discard
[   95.965463][ T7202] BTRFS info (device loop1): enabling free space tree
[   95.995669][ T5591] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   96.221725][ T7251] set_capacity_and_notify: 1 callbacks suppressed
[   96.221735][ T7251] loop1: detected capacity change from 0 to 512
[   96.227022][ T7251] EXT4-fs: Ignoring removed bh option
[   96.234579][ T7251] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.588: corrupted in-inode xattr: e_value size too large
[   96.238799][ T7251] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   96.240031][ T7251] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.588: couldn't read orphan inode 15 (err -117)
[   96.246763][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   96.246777][    C0] EXT4-fs (loop1): initial error at time 1785565046: ext4_iget_extra_inode:5025: inode 15
[   96.246797][    C0] EXT4-fs (loop1): last error at time 1785565046: ext4_iget_extra_inode:5025: inode 15
[   96.257030][ T7251] loop1: lost filesystem error report for type 5 error -117
[   96.257963][ T7251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.314035][ T5664] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   96.386747][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.469104][ T5664] usb 4-1: Using ep0 maxpacket: 32
[   96.479990][ T5664] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40
[   96.482732][ T5664] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.492015][ T5664] usb 4-1: Product: syz
[   96.493421][ T5664] usb 4-1: Manufacturer: syz
[   96.500345][ T5664] usb 4-1: SerialNumber: syz
[   96.654033][ T4983] Bluetooth: hci1: command tx timeout
[   96.715817][ T5664] usb 4-1: MBOX3: Invalid descriptor size=18.
[   96.725861][ T5664] usb 4-1: USB disconnect, device number 2
[   96.734322][   T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   96.883944][   T24] usb 2-1: Using ep0 maxpacket: 32
[   96.887366][   T24] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[   96.889818][   T24] usb 2-1: config 0 has no interface number 0
[   96.891664][   T24] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[   96.895994][   T24] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[   96.901642][   T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[   96.904764][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.907253][   T24] usb 2-1: Product: syz
[   96.908562][   T24] usb 2-1: Manufacturer: syz
[   96.910017][   T24] usb 2-1: SerialNumber: syz
[   96.912695][   T24] usb 2-1: config 0 descriptor??
[   96.974067][ T5657] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   97.121743][   T24] radio-si470x 2-1:0.35: this is not a si470x device.
[   97.124155][ T5657] usb 3-1: Using ep0 maxpacket: 32
[   97.127263][ T5657] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[   97.129821][ T5657] usb 3-1: config 0 has no interface number 0
[   97.131662][ T5657] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[   97.138010][ T5657] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[   97.141648][ T5657] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.144410][ T5657] usb 3-1: Product: syz
[   97.145860][ T5657] usb 3-1: Manufacturer: syz
[   97.147242][ T5657] usb 3-1: SerialNumber: syz
[   97.150275][ T5657] usb 3-1: config 0 descriptor??
[   97.152873][ T7264] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   97.315884][ T7271] syz.3.596: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[   97.321391][ T7271] CPU: 0 UID: 0 PID: 7271 Comm: syz.3.596 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   97.321405][ T7271] Tainted: [L]=SOFTLOCKUP
[   97.321408][ T7271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.321412][ T7271] Call Trace:
[   97.321417][ T7271]  <TASK>
[   97.321420][ T7271]  dump_stack_lvl+0xe8/0x150
[   97.321434][ T7271]  warn_alloc+0x249/0x340
[   97.321442][ T7271]  ? kfree+0x1c1/0x630
[   97.321475][ T7271]  ? look_up_lock_class+0x57/0x110
[   97.321486][ T7271]  ? __UNIQUE_ID_modinfo_13635+0x64cd2b5d/0xffffffffffecba13
[   97.321497][ T7271]  ? __pfx_warn_alloc+0x10/0x10
[   97.321510][ T7271]  ? __UNIQUE_ID_modinfo_13635+0x64cd2b5d/0xffffffffffecba13
[   97.321520][ T7271]  __vmalloc_node_range_noprof+0x12b/0x1830
[   97.321534][ T7271]  ? __mutex_trylock_common+0x15f/0x270
[   97.321544][ T7271]  ? __pfx___mutex_trylock_common+0x10/0x10
[   97.321555][ T7271]  ? trace_contention_end+0x3d/0x150
[   97.321564][ T7271]  ? __mutex_lock+0x313/0x12d0
[   97.321575][ T7271]  ? tomoyo_path_number_perm+0x219/0x5f0
[   97.321583][ T7271]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   97.321592][ T7271]  ? tomoyo_path_number_perm+0x219/0x5f0
[   97.321598][ T7271]  ? dvb_demux_do_ioctl+0x320/0x540
[   97.321609][ T7271]  ? __pfx___mutex_lock+0x10/0x10
[   97.321619][ T7271]  ? __UNIQUE_ID_modinfo_13635+0x64cd2b5d/0xffffffffffecba13
[   97.321628][ T7271]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[   97.321643][ T7271]  vmalloc_noprof+0xb2/0xe0
[   97.321652][ T7271]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[   97.321661][ T7271]  ? __UNIQUE_ID_modinfo_13635+0x64cd2b5d/0xffffffffffecba13
[   97.321669][ T7271]  dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[   97.321681][ T7271]  dvb_demux_do_ioctl+0x45d/0x540
[   97.321689][ T7271]  ? __UNIQUE_ID_modinfo_13635+0x64cd2b5d/0xffffffffffecba13
[   97.321699][ T7271]  ? __UNIQUE_ID_modinfo_13635+0x64cd2b5d/0xffffffffffecba13
[   97.321708][ T7271]  dvb_usercopy+0x199/0x2e0
[   97.321716][ T7271]  ? __UNIQUE_ID_modinfo_13635+0x64cd2b5d/0xffffffffffecba13
[   97.321725][ T7271]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[   97.321734][ T7271]  ? __pfx_dvb_usercopy+0x10/0x10
[   97.321748][ T7271]  ? __fget_files+0x3a2/0x420
[   97.321757][ T7271]  ? __fget_files+0x2a/0x420
[   97.321765][ T7271]  ? __UNIQUE_ID_modinfo_13635+0x64cd2b5d/0xffffffffffecba13
[   97.321774][ T7271]  ? __UNIQUE_ID_modinfo_13635+0x64cd2b5d/0xffffffffffecba13
[   97.321783][ T7271]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[   97.321790][ T7271]  ? __UNIQUE_ID_modinfo_13635+0x64cd2b5d/0xffffffffffecba13
[   97.321798][ T7271]  dvb_demux_ioctl+0x29/0x40
[   97.321807][ T7271]  __se_sys_ioctl+0xfc/0x170
[   97.321814][ T7271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.321821][ T7271]  do_syscall_64+0x170/0xf80
[   97.321830][ T7271]  ? trace_irq_disable+0x3b/0x150
[   97.321841][ T7271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.321848][ T7271] RIP: 0033:0x7fb98db9e019
[   97.321855][ T7271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.321860][ T7271] RSP: 002b:00007fb98e985028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   97.321868][ T7271] RAX: ffffffffffffffda RBX: 00007fb98de25fa0 RCX: 00007fb98db9e019
[   97.321873][ T7271] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000003
[   97.321877][ T7271] RBP: 00007fb98dc3500c R08: 0000000000000000 R09: 0000000000000000
[   97.321881][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.321885][ T7271] R13: 00007fb98de26038 R14: 00007fb98de25fa0 R15: 00007ffc4ea81128
[   97.321893][ T7271]  ? __UNIQUE_ID_modinfo_13635+0x64cd2b5d/0xffffffffffecba13
[   97.321904][ T7271]  </TASK>
[   97.321950][ T7271] Mem-Info:
[   97.344678][   T24] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[   97.351443][ T7271] active_anon:6797 inactive_anon:45 isolated_anon:0
[   97.351443][ T7271]  active_file:14352 inactive_file:38373 isolated_file:0
[   97.351443][ T7271]  unevictable:1768 dirty:147 writeback:0
[   97.351443][ T7271]  slab_reclaimable:10808 slab_unreclaimable:80955
[   97.351443][ T7271]  mapped:19013 shmem:2348 pagetables:1134
[   97.351443][ T7271]  sec_pagetables:0 bounce:0
[   97.351443][ T7271]  kernel_misc_reclaimable:0
[   97.351443][ T7271]  free:1119315 free_pcp:28188 free_cma:0
[   97.357794][   T24] usb 2-1: USB disconnect, device number 10
[   97.369460][ T7271] Node 0 active_anon:12068kB inactive_anon:40kB active_file:23648kB inactive_file:5920kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:51144kB dirty:12kB writeback:0kB shmem:4728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4624kB pagetables:2128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   97.374202][ T7264] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   97.486669][ T7271] Node 1 active_anon:15420kB inactive_anon:140kB active_file:33760kB inactive_file:147572kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24908kB dirty:576kB writeback:0kB shmem:4664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7512kB pagetables:2508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   97.498128][ T7271] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   97.508832][ T7271] lowmem_reserve[]: 0 1587 2118 2118 2118
[   97.510645][ T7271] Node 0 DMA32 free:1527984kB boost:0kB min:25032kB low:31288kB high:37544kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1084kB inactive_anon:0kB active_file:3496kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1625524kB mlocked:0kB bounce:0kB free_pcp:42396kB local_pcp:28284kB free_cma:0kB
[   97.520253][ T7271] lowmem_reserve[]: 0 0 530 530 530
[   97.521855][ T7271] Node 0 Normal free:37988kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10984kB inactive_anon:40kB active_file:20152kB inactive_file:5912kB unevictable:3536kB writepending:12kB zspages:0kB present:1572868kB managed:543380kB mlocked:0kB bounce:0kB free_pcp:24096kB local_pcp:24060kB free_cma:0kB
[   97.532058][ T7271] lowmem_reserve[]: 0 0 0 0 0
[   97.533538][ T7271] Node 1 Normal free:2895216kB boost:0kB min:56324kB low:70404kB high:84484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15320kB inactive_anon:140kB active_file:33760kB inactive_file:147572kB unevictable:3536kB writepending:576kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:46448kB local_pcp:27688kB free_cma:0kB
[   97.544731][ T7271] lowmem_reserve[]: 0 0 0 0 0
[   97.546220][ T7271] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   97.549996][ T7271] Node 0 DMA32: 14*4kB (UME) 7*8kB (U) 12*16kB (U) 0*32kB 0*64kB 7*128kB (UM) 8*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 370*4096kB (UM) = 1527984kB
[   97.555214][ T7271] Node 0 Normal: 869*4kB (U) 90*8kB (U) 16*16kB (U) 409*32kB (U) 142*64kB (U) 49*128kB (U) 12*256kB (U) 2*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 38020kB
[   97.559953][ T7271] Node 1 Normal: 2634*4kB (UME) 1777*8kB (UM) 476*16kB (UM) 252*32kB (UME) 65*64kB (UM) 97*128kB (UME) 34*256kB (UM) 18*512kB (UME) 14*1024kB (UME) 8*2048kB (ME) 681*4096kB (UM) = 2895024kB
[   97.565673][ T7271] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   97.568458][ T7271] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   97.571192][ T7271] 55058 total pagecache pages
[   97.572617][ T7271] 0 pages in swap cache
[   97.573999][ T7271] Free swap  = 124996kB
[   97.575290][ T7271] Total swap = 124996kB
[   97.576576][ T7271] 1834877 pages RAM
[   97.577752][ T7271] 0 pages HighMem/MovableOnly
[   97.579259][ T7271] 390139 pages reserved
[   97.580529][ T7271] 0 pages cma reserved
[   98.034002][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   98.185208][   T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   98.187888][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.191123][   T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   98.194316][   T24] usb 4-1: config 1 has no interface number 1
[   98.196199][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   98.202388][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   98.205305][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.208015][   T24] usb 4-1: Product: syz
[   98.209364][   T24] usb 4-1: Manufacturer: syz
[   98.210851][   T24] usb 4-1: SerialNumber: syz
[   98.429516][   T24] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[   98.432076][   T24] usb 4-1: MIDIStreaming interface descriptor not found
[   98.487821][   T24] usb 4-1: USB disconnect, device number 3
[   98.523312][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   98.734032][ T4983] Bluetooth: hci1: command tx timeout
[   98.985521][ T5657] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   98.989905][ T5657] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   98.993755][ T5657] asix 3-1:0.188: probe with driver asix failed with error -71
[   98.997918][ T5657] usb 3-1: USB disconnect, device number 9
[   99.078979][ T7305] geneve1: entered promiscuous mode
[   99.080960][ T7305] macsec1: entered allmulticast mode
[   99.082587][ T7305] geneve1: entered allmulticast mode
[   99.090565][ T7305] geneve1: left allmulticast mode
[   99.092325][ T7305] geneve1: left promiscuous mode
[   99.144508][ T5650] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[   99.295655][ T5650] usb 2-1: not running at top speed; connect to a high speed hub
[   99.304803][ T5650] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.308527][ T5650] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1212, setting to 64
[   99.314507][ T5650] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[   99.319561][ T5650] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[   99.323304][ T5650] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.333242][ T7302] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   99.356521][ T5650] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected
[   99.363337][ T5650] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84
[   99.367866][ T5650] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2
[   99.376234][ T5650] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   99.385579][ T5650] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88
[   99.388673][ T5650] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6
[   99.398608][ T5650] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   99.542371][ T5629] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.647086][ T5629] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.729414][ T5764] usb 2-1: USB disconnect, device number 11
[   99.735229][ T5629] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.742997][ T5764] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   99.756375][ T5764] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   99.762441][ T5764] keyspan 2-1:1.0: device disconnected
[   99.767083][ T7311] syzkaller0: entered promiscuous mode
[   99.768726][ T7311] syzkaller0: entered allmulticast mode
[   99.780967][ T5600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   99.786255][ T5600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   99.789890][ T5600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   99.800442][ T5600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   99.801429][ T5629] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.807213][ T5600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   99.915052][ T5629] bridge_slave_1: left allmulticast mode
[   99.916828][ T5629] bridge_slave_1: left promiscuous mode
[   99.918833][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.931494][ T5629] bridge_slave_0: left allmulticast mode
[   99.933260][ T5629] bridge_slave_0: left promiscuous mode
[   99.938351][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.035583][ T7320] loop2: detected capacity change from 0 to 32768
[  100.050207][ T7320] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  100.066971][ T7320] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 4294901792
[  100.073622][ T7320] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  100.078277][ T7320] OCFS2: File system is now read-only.
[  100.080455][ T7320] (syz.2.615,7320,1):ocfs2_search_chain:1888 ERROR: status = -30
[  100.083439][ T7320] (syz.2.615,7320,1):ocfs2_search_chain:2011 ERROR: status = -30
[  100.085861][ T7320] (syz.2.615,7320,1):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30
[  100.088662][ T7320] (syz.2.615,7320,1):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30
[  100.091968][ T7320] (syz.2.615,7320,1):__ocfs2_claim_clusters:2532 ERROR: status = -30
[  100.095757][ T7320] (syz.2.615,7320,1):__ocfs2_claim_clusters:2540 ERROR: status = -30
[  100.098948][ T7320] (syz.2.615,7320,1):ocfs2_block_group_alloc_contig:506 ERROR: status = -30
[  100.102310][ T7320] (syz.2.615,7320,1):ocfs2_block_group_alloc:780 ERROR: status = -30
[  100.105783][ T7320] (syz.2.615,7320,1):ocfs2_block_group_alloc:833 ERROR: status = -30
[  100.109170][ T7320] (syz.2.615,7320,1):ocfs2_reserve_suballoc_bits:908 ERROR: status = -30
[  100.113381][ T7320] (syz.2.615,7320,1):ocfs2_reserve_suballoc_bits:925 ERROR: status = -30
[  100.116897][ T7320] (syz.2.615,7320,1):ocfs2_reserve_new_metadata_blocks:1065 ERROR: status = -30
[  100.120459][ T7320] (syz.2.615,7320,1):ocfs2_reserve_new_metadata_blocks:1088 ERROR: status = -30
[  100.124790][ T7320] (syz.2.615,7320,1):ocfs2_expand_inline_dir:2867 ERROR: status = -30
[  100.128045][ T7320] (syz.2.615,7320,1):ocfs2_extend_dir:3231 ERROR: status = -30
[  100.130777][ T7320] (syz.2.615,7320,1):ocfs2_prepare_dir_for_insert:4349 ERROR: status = -30
[  100.133379][ T7320] (syz.2.615,7320,1):ocfs2_mknod:302 ERROR: status = -30
[  100.135637][ T7320] (syz.2.615,7320,1):ocfs2_mknod:506 ERROR: status = -30
[  100.137769][ T7320] (syz.2.615,7320,1):ocfs2_mkdir:662 ERROR: status = -30
[  100.173238][ T5629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.178133][ T6385] ocfs2: Unmounting device (7,2) on (node local)
[  100.189335][ T5629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.197854][ T5629] bond0 (unregistering): Released all slaves
[  100.348359][ T7339] loop1: detected capacity change from 0 to 4096
[  100.487976][ T5629] hsr_slave_0: left promiscuous mode
[  100.493486][ T5629] hsr_slave_1: left promiscuous mode
[  100.496167][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.498404][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.503776][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.511598][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.524213][ T5650] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  100.531613][ T5629] veth1_macvtap: left promiscuous mode
[  100.534776][ T5629] veth0_macvtap: left promiscuous mode
[  100.537067][ T5629] veth1_vlan: left promiscuous mode
[  100.538874][ T5629] veth0_vlan: left promiscuous mode
[  100.663310][ T7348] loop1: detected capacity change from 0 to 40427
[  100.666785][ T7348] F2FS-fs (loop1): Image doesn't support compression
[  100.680722][ T7348] F2FS-fs (loop1): build fault injection rate: 7
[  100.682975][ T7348] F2FS-fs (loop1): build fault injection type: 0x1da6
[  100.687119][ T5650] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  100.690595][ T5650] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.695255][ T5650] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  100.700067][    C1] f2fs_printk: 1 callbacks suppressed
[  100.700078][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57b/0xe30
[  100.707040][ T5650] usb 3-1: config 1 has no interface number 1
[  100.709473][ T5650] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  100.714004][ T7348] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of build_curseg+0x105c/0x30c0
[  100.720598][ T5629] team0 (unregistering): Port device team_slave_1 removed
[  100.727558][ T5650] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  100.731912][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57b/0xe30
[  100.736764][ T5629] team0 (unregistering): Port device team_slave_0 removed
[  100.738830][ T7348] F2FS-fs (loop1): inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x329a/0x4a80
[  100.742237][ T7348] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12)
[  100.753165][ T5650] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  100.756454][ T5650] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.759011][ T5650] usb 3-1: Product: syz
[  100.760330][ T5650] usb 3-1: Manufacturer: syz
[  100.767752][ T5650] usb 3-1: SerialNumber: syz
[  101.033118][ T5650] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  101.040063][ T5650] usb 3-1: MIDIStreaming interface descriptor not found
[  101.067719][ T7312] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.070493][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.080409][ T7312] bridge_slave_0: entered allmulticast mode
[  101.083009][ T7312] bridge_slave_0: entered promiscuous mode
[  101.086383][ T7312] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.088657][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.093319][ T7312] bridge_slave_1: entered allmulticast mode
[  101.096835][ T7312] bridge_slave_1: entered promiscuous mode
[  101.105927][ T5650] usb 3-1: USB disconnect, device number 10
[  101.149706][ T5595] udevd[5595]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  101.160121][ T7312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.174793][ T7312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.205884][ T7312] team0: Port device team_slave_0 added
[  101.209207][ T7312] team0: Port device team_slave_1 added
[  101.232213][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.239245][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.248351][ T7312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.252381][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.254739][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.263293][ T7312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.290932][ T7312] hsr_slave_0: entered promiscuous mode
[  101.293204][ T7312] hsr_slave_1: entered promiscuous mode
[  101.296135][ T7312] debugfs: 'hsr0' already exists in 'hsr'
[  101.297944][ T7312] Cannot create hsr debugfs directory
[  101.423489][ T7312] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  101.427910][ T7312] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  101.433478][ T7312] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  101.440109][ T7312] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  101.495756][ T7312] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.505290][ T7312] 8021q: adding VLAN 0 to HW filter on device team0
[  101.511789][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.514260][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.523075][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.525989][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.761592][ T7312] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.855076][ T5600] Bluetooth: hci1: command tx timeout
[  101.885091][ T7312] veth0_vlan: entered promiscuous mode
[  101.889859][ T7312] veth1_vlan: entered promiscuous mode
[  101.906278][ T7312] veth0_macvtap: entered promiscuous mode
[  101.916773][ T7312] veth1_macvtap: entered promiscuous mode
[  101.938303][ T7312] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.944116][ T7312] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.970879][ T5629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.974691][ T5629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.977733][ T5629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.004123][ T5629] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.034077][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.046522][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.074428][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.079996][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.166318][ T5650] kernel write not supported for file /vcsu (pid: 5650 comm: kworker/1:4)
[  102.281504][ T7428] loop4: detected capacity change from 0 to 8
[  102.537210][ T5650] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  102.750861][ T5650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  102.754559][ T5650] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  102.758238][ T5650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 161, changing to 7
[  102.762111][ T5650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33778, setting to 1024
[  102.766544][ T5650] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  102.769470][ T5650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.789674][ T5650] usb 5-1: config 0 descriptor??
[  102.810594][ T5650] em28xx 5-1:0.0: New device   @ 480 Mbps (2040:1605, interface 0, class 0)
[  102.813377][ T5650] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  103.085439][ T5650] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  103.087712][ T5650] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  103.090235][ T5650] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  103.092479][ T5650] em28xx 5-1:0.0: No AC97 audio processor
[  103.101821][ T5650] usb 5-1: USB disconnect, device number 2
[  103.106305][ T5650] em28xx 5-1:0.0: Disconnecting em28xx
[  103.116451][ T5650] em28xx 5-1:0.0: Freeing device
[  103.719186][ T7456] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  103.723690][ T7456] block device autoloading is deprecated and will be removed.
[  103.743949][   T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  103.908147][   T24] usb 3-1: Using ep0 maxpacket: 32
[  103.912127][   T24] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  103.914771][   T24] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  103.917377][   T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  103.923910][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  103.926839][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  103.929843][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  103.934421][ T5600] Bluetooth: hci1: command tx timeout
[  103.943950][   T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  103.947691][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.955325][   T24] usb 3-1: config 0 descriptor??
[  104.148882][ T7465] loop1: detected capacity change from 0 to 512
[  104.159199][ T7465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.163744][ T7465] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.170906][   T24] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  104.201516][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.228767][ T7470] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  104.231365][ T7470] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  104.321723][    C0] Unknown status report in ack skb
[  104.366898][ T7478] syzkaller0: entered promiscuous mode
[  104.368836][ T7478] syzkaller0: entered allmulticast mode
[  104.384039][   T24] usb 3-1: USB disconnect, device number 11
[  104.389049][   T24] usblp0: removed
[  104.713996][ T5664] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  104.867411][ T5664] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.871451][ T5664] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  104.875309][ T5664] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  104.880214][ T5664] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  104.883736][ T5664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.893986][ T5650] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  105.045830][ T5650] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  105.054553][ T5650] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 3
[  105.063065][ T5650] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95
[  105.069382][ T5650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.072487][ T5650] usb 5-1: Product: syz
[  105.075256][ T5650] usb 5-1: Manufacturer: syz
[  105.077191][ T5650] usb 5-1: SerialNumber: syz
[  105.102001][ T5664] cxacru 2-1:1.0: send of cm 0x90 failed (-71)
[  105.104753][ T5664] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[  105.114389][ T5664] cxacru 2-1:1.0: probe with driver cxacru failed with error -22
[  105.129799][ T5664] usb 2-1: USB disconnect, device number 12
[  105.258610][ T7508] futex_wake_op: syz.2.657 tries to shift op by 32; fix this program
[  105.296867][ T5650] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  105.299968][ T5650] dvb_usb_af9015 5-1:2.0: probe with driver dvb_usb_af9015 failed with error -22
[  105.303384][ T5650] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  105.308267][ T5650] dvb_usb_af9035 5-1:2.0: probe with driver dvb_usb_af9035 failed with error -22
[  105.314976][ T5650] usb 5-1: USB disconnect, device number 3
[  105.580253][ T7516] loop2: detected capacity change from 0 to 4096
[  105.585856][ T7516] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  105.603386][ T7516] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  105.857015][ T7532] loop4: detected capacity change from 0 to 16
[  105.863936][ T7532] erofs (device loop4): blkszbits 0 isn't supported
[  105.949245][ T7537] loop4: detected capacity change from 0 to 512
[  105.984473][ T7537] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.667: inode has both inline data and extents flags
[  105.988980][ T7537] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  105.991908][ T7537] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.667: couldn't read orphan inode 15 (err -117)
[  105.994973][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  105.994987][    C0] EXT4-fs (loop4): initial error at time 1785565056: ext4_orphan_get:1391: inode 15
[  105.995005][    C0] EXT4-fs (loop4): last error at time 1785565056: ext4_orphan_get:1391: inode 15
[  106.008422][ T7537] loop4: lost filesystem error report for type 5 error -117
[  106.010955][ T7537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.024109][ T5600] Bluetooth: hci1: command tx timeout
[  106.053395][ T7312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.068979][ T7542] loop1: detected capacity change from 0 to 4096
[  106.080288][ T7542] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  106.125946][ T7542] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  106.128526][ T7542] ntfs3(loop1): Inode r=b is not in use!
[  106.130637][ T7542] ntfs3(loop1): Failed to load $Extend (-116).
[  106.133001][ T7542] ntfs3(loop1): Failed to initialize $Extend.
[  106.196121][ T7540] loop2: detected capacity change from 0 to 32768
[  106.211277][   T34] audit: type=1800 audit(1785565056.865:10): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.668" name="bus" dev="loop2" ino=7 res=0 errno=0
[  106.328857][ T7548] loop1: detected capacity change from 0 to 128
[  106.347707][ T7548] FAT-fs (loop1): bogus number of reserved sectors
[  106.350521][ T7548] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors)
[  106.354246][ T5650] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  106.368047][ T7548] FAT-fs (loop1): Can't find a valid FAT filesystem
[  106.516098][ T5650] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  106.518705][ T5650] usb 5-1: config 0 has no interface number 0
[  106.521464][ T5650] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.525262][ T5650] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.533513][ T5650] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  106.537807][ T5650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.542427][ T5650] usb 5-1: config 0 descriptor??
[  106.613898][ T5657] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  106.774376][ T5657] usb 3-1: Using ep0 maxpacket: 16
[  106.777855][ T5657] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.781483][ T5657] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  106.788531][ T5657] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  106.791914][ T5657] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.794777][ T5657] usb 3-1: Product: syz
[  106.796339][ T5657] usb 3-1: Manufacturer: syz
[  106.797884][ T5657] usb 3-1: SerialNumber: syz
[  106.958126][ T5650] prodikeys 0003:041E:2801.0004: unbalanced collection at end of report description
[  106.963286][ T5650] prodikeys 0003:041E:2801.0004: hid parse failed
[  106.966636][ T5650] prodikeys 0003:041E:2801.0004: probe with driver prodikeys failed with error -22
[  107.015208][ T5657] usb 3-1: 0:1 : does not exist
[  107.017373][ T5657] usb 3-1: BAAD HEADPHONE p_chmask mismatch
[  107.039199][ T5657] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  107.044377][ T5657] usb 3-1: USB disconnect, device number 12
[  107.056395][ T5702] udevd[5702]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  107.158827][ T5650] usb 5-1: USB disconnect, device number 4
[  107.480176][ T7569] loop1: detected capacity change from 0 to 40427
[  107.491133][ T7569] F2FS-fs (loop1): invalid crc value
[  107.543424][ T7569] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  107.547235][ T7569] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  108.069177][ T7587] loop9: detected capacity change from 0 to 7
[  108.077888][ T7587] Dev loop9: unable to read RDB block 7
[  108.080101][ T7587]  loop9: unable to read partition table
[  108.081978][ T7587] loop9: partition table beyond EOD, truncated
[  108.087209][ T7587] loop_reread_partitions: partition scan of loop9 () failed (rc=-5)
[  108.104253][ T5600] Bluetooth: hci1: command tx timeout
[  108.312160][ T7592] loop4: detected capacity change from 0 to 32768
[  108.339376][ T7592] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  108.352127][ T7592] XFS (loop4): Ending clean mount
[  108.362535][   T34] audit: type=1800 audit(1785565059.015:11): pid=7592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.684" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  108.375653][ T7312] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  108.666040][ T7608] loop4: detected capacity change from 0 to 32768
[  108.669382][ T7609] loop2: detected capacity change from 0 to 32768
[  108.703161][ T7608] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  108.713467][ T7609] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  108.721794][ T7608] XFS (loop4): Ending clean mount
[  108.728689][ T7608] XFS (loop4): syz.4.686 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[  108.729031][ T7609] XFS (loop2): Ending clean mount
[  108.744644][ T7312] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  108.745012][   T34] audit: type=1800 audit(1785565059.405:12): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.688" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  108.780220][ T6385] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  108.978019][ T7627] loop4: detected capacity change from 0 to 32768
[  108.984652][ T7627] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  108.996597][ T7627] XFS (loop4): Ending clean mount
[  109.026013][ T7312] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  109.054311][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.153254][ T7631] loop2: detected capacity change from 0 to 40427
[  109.156308][ T7631] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  109.158325][ T7631] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  109.161402][ T7631] F2FS-fs (loop2): invalid crc_offset: 1
[  109.231832][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'.
[  109.293727][ T7631] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  109.297410][ T7631] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  109.299740][ T7631] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  109.328050][ T6385] syz-executor: attempt to access beyond end of device
[  109.328050][ T6385] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  109.335152][ T6385] CPU: 1 UID: 0 PID: 6385 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  109.335167][ T6385] Tainted: [L]=SOFTLOCKUP
[  109.335170][ T6385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.335174][ T6385] Call Trace:
[  109.335178][ T6385]  <TASK>
[  109.335182][ T6385]  dump_stack_lvl+0xe8/0x150
[  109.335197][ T6385]  f2fs_handle_critical_error+0x36f/0x530
[  109.335211][ T6385]  f2fs_write_end_io+0xcfc/0x1030
[  109.335219][ T6385]  ? blkg_put+0x22/0x240
[  109.335236][ T6385]  __submit_merged_bio+0x258/0x700
[  109.335246][ T6385]  __submit_merged_write_cond+0x3c9/0x4e0
[  109.335260][ T6385]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  109.335280][ T6385]  f2fs_write_data_pages+0x2afc/0x37d0
[  109.335328][ T6385]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.335342][ T6385]  ? do_raw_spin_lock+0x12b/0x2f0
[  109.335362][ T6385]  ? do_raw_spin_unlock+0x4d/0x210
[  109.335374][ T6385]  ? __lock_acquire+0x683/0x2cd0
[  109.335388][ T6385]  ? __lock_acquire+0x683/0x2cd0
[  109.335397][ T6385]  ? do_raw_spin_lock+0x12b/0x2f0
[  109.335411][ T6385]  ? do_raw_spin_unlock+0x4d/0x210
[  109.335426][ T6385]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.335434][ T6385]  do_writepages+0x338/0x560
[  109.335448][ T6385]  ? do_raw_spin_unlock+0x4d/0x210
[  109.335459][ T6385]  filemap_fdatawrite+0x1e9/0x2f0
[  109.335470][ T6385]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  109.335497][ T6385]  ? do_raw_spin_unlock+0x4d/0x210
[  109.335508][ T6385]  f2fs_sync_dirty_inodes+0x30e/0x860
[  109.335522][ T6385]  f2fs_write_checkpoint+0xa50/0x2810
[  109.335544][ T6385]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  109.335574][ T6385]  kill_f2fs_super+0x319/0x720
[  109.335585][ T6385]  ? __pfx_kill_f2fs_super+0x10/0x10
[  109.335598][ T6385]  ? call_rcu+0x64b/0x8b0
[  109.335606][ T6385]  ? lockdep_hardirqs_on+0x7a/0x110
[  109.335621][ T6385]  deactivate_locked_super+0xbc/0x130
[  109.335633][ T6385]  cleanup_mnt+0x3d3/0x460
[  109.335669][ T6385]  task_work_run+0x1d9/0x270
[  109.335681][ T6385]  ? __pfx_task_work_run+0x10/0x10
[  109.335694][ T6385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.335702][ T6385]  exit_to_user_mode_loop+0x18d/0x5e0
[  109.335708][ T6385]  ? rcu_is_watching+0x15/0xb0
[  109.335716][ T6385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.335724][ T6385]  do_syscall_64+0x357/0xf80
[  109.335733][ T6385]  ? trace_irq_disable+0x3b/0x150
[  109.335744][ T6385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.335751][ T6385] RIP: 0033:0x7f7bf039f257
[  109.335759][ T6385] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  109.335765][ T6385] RSP: 002b:00007ffc44b8f878 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  109.335774][ T6385] RAX: 0000000000000000 RBX: 00007f7bf043445c RCX: 00007f7bf039f257
[  109.335779][ T6385] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc44b8f930
[  109.335783][ T6385] RBP: 00007ffc44b8f930 R08: 00007ffc44b90930 R09: 00000000ffffffff
[  109.335787][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc44b909c0
[  109.335792][ T6385] R13: 00007f7bf043445c R14: 000000000001aa96 R15: 00007ffc44b90a00
[  109.335804][ T6385]  </TASK>
[  109.336437][ T6385] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  109.435800][   T34] audit: type=1800 audit(1785565059.975:13): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.691" name="file1" dev="loop2" ino=10 res=0 errno=0
[  109.612450][ T5600] Bluetooth: hci2: Invalid connection link type handle 0x00c9
[  109.652517][ T7654] loop2: detected capacity change from 0 to 7
[  109.658084][ T7654] Dev loop2: unable to read RDB block 7
[  109.659918][ T7654]  loop2: AHDI p1 p2 p3
[  109.661301][ T7654] loop2: partition table partially beyond EOD, truncated
[  109.664271][ T7654] loop2: p1 start 1818582900 is beyond EOD, truncated
[  109.666447][ T7654] loop2: p3 start 335544320 is beyond EOD, truncated
[  109.867028][ T7662] netlink: 'syz.2.700': attribute type 1 has an invalid length.
[  109.869508][ T7662] netlink: 'syz.2.700': attribute type 2 has an invalid length.
[  109.928037][ T7641] loop4: detected capacity change from 0 to 262144
[  109.931128][ T7641] F2FS-fs (loop4): Invalid segment/section count (8388607 != 27 * 2)
[  109.933693][ T7641] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  109.937023][ T7641] F2FS-fs (loop4): invalid crc value
[  109.971475][ T7641] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  109.975712][ T7641] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  109.977894][ T7641] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  110.115773][ T7669] loop2: detected capacity change from 0 to 32768
[  110.346802][ T7674] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  110.371476][ T7684] Zero length message leads to an empty skb
[  110.412790][ T5591] ocfs2: Unmounting device (7,1) on (node local)
[  110.558236][ T7692] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  110.864130][ T5657] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  110.911597][ T7700] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.717 (7700)
[  110.920347][ T7700] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.923536][ T7700] BTRFS info (device loop1): using sha256 checksum algorithm
[  110.944633][ T7700] BTRFS info (device loop1): enabling ssd optimizations
[  110.946884][ T7700] BTRFS info (device loop1): turning on async discard
[  110.950749][ T7700] BTRFS info (device loop1): enabling free space tree
[  110.963725][ T5591] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.017805][ T5657] usb 3-1: config 0 interface 0 has no altsetting 0
[  111.020267][ T5657] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  111.033710][ T5657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.043199][ T5657] usb 3-1: config 0 descriptor??
[  111.226282][ T7739] EXT4-fs: user quota file already specified
[  111.309292][ T7733] btrfs: Deprecated parameter 'usebackuproot'
[  111.311502][ T7733] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  111.318345][ T7733] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.724 (7733)
[  111.331642][ T7733] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  111.335493][ T7743] tmpfs: Cannot disable swap on remount
[  111.337557][ T7733] BTRFS info (device loop1): using crc32c checksum algorithm
[  111.389174][ T1096] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  111.393746][ T7733] BTRFS error (device loop1): failed to load root extent
[  111.395986][ T7733] BTRFS warning (device loop1): try to load backup roots slot 1
[  111.399869][   T41] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  111.407757][ T7733] BTRFS warning (device loop1): couldn't read tree root
[  111.410172][ T7733] BTRFS warning (device loop1): try to load backup roots slot 2
[  111.413196][   T41] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  111.421225][ T7733] BTRFS warning (device loop1): couldn't read tree root
[  111.424663][ T7733] BTRFS warning (device loop1): try to load backup roots slot 3
[  111.462163][ T5657] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x1
[  111.465872][ T5657] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x5
[  111.468464][ T5657] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x6
[  111.471060][ T5657] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0
[  111.473675][ T5657] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0
[  111.478479][ T5657] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0
[  111.481072][ T5657] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0
[  111.483647][ T5657] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0
[  111.486897][ T5657] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0
[  111.489499][ T5657] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0
[  111.526542][ T7733] BTRFS info (device loop1): rebuilding free space tree
[  111.532106][ T7758] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.731 (7758)
[  111.540316][ T7758] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.543964][ T7758] BTRFS info (device loop4): using sha256 checksum algorithm
[  111.560689][ T7733] BTRFS info (device loop1): checking UUID tree
[  111.570010][ T7733] BTRFS info (device loop1): setting nodatasum
[  111.572044][ T7733] BTRFS info (device loop1): setting nodatacow
[  111.575549][ T7733] BTRFS info (device loop1): enabling ssd optimizations
[  111.579265][ T7733] BTRFS info (device loop1): using spread ssd allocation scheme
[  111.581664][ T7733] BTRFS info (device loop1): turning on async discard
[  111.585705][ T7733] BTRFS info (device loop1): enabling free space tree
[  111.587799][ T7733] BTRFS info (device loop1): force clearing of disk cache
[  111.590074][ T7733] BTRFS info (device loop1): enabling auto defrag
[  111.592052][ T7733] BTRFS info (device loop1): trying to use backup root at mount time
[  111.709797][ T5591] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  111.719667][ T7758] BTRFS info (device loop4): enabling ssd optimizations
[  111.721725][ T7758] BTRFS info (device loop4): turning on sync discard
[  111.723736][ T7758] BTRFS info (device loop4): enabling free space tree
[  111.726019][ T7758] BTRFS info (device loop4): use zlib compression, level 3
[  111.814141][ T7312] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.910705][ T5657] hid-led 0003:0FC5:B080.0005: probe with driver hid-led failed with error -71
[  111.924015][ T5657] usb 3-1: USB disconnect, device number 13
[  112.126474][   T33] usb 2-1: new low-speed USB device number 13 using dummy_hcd
[  112.300406][   T33] usb 2-1: unable to get BOS descriptor or descriptor too short
[  112.303769][   T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[  112.307279][   T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  112.313094][   T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt
[  112.317918][   T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  112.320959][   T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  112.332435][   T33] usb 2-1: string descriptor 0 read error: -22
[  112.334803][   T33] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  112.337717][   T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.344988][   T33] usb 2-1: config 0 descriptor??
[  112.351603][ T7785] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  112.360583][   T33] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  112.386078][   T34] audit: type=1800 audit(1785565063.045:14): pid=7814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.743" name="file1" dev="loop4" ino=20 res=0 errno=0
[  112.581114][   T33] usb 2-1: USB disconnect, device number 13
[  112.602402][ T7822] set_capacity_and_notify: 9 callbacks suppressed
[  112.602412][ T7822] loop2: detected capacity change from 0 to 256
[  112.751627][ T7834] loop4: detected capacity change from 0 to 4096
[  112.757167][ T7834] EXT4-fs: Ignoring removed orlov option
[  112.762069][ T7834] EXT4-fs (loop4): Test dummy encryption mode enabled
[  112.769210][ T7834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.789189][ T7312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.829932][ T7837] ima: policy update failed
[  112.832628][   T34] audit: type=1802 audit(1785565063.485:15): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.750" res=0 errno=0
[  112.954062][   T33] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  113.116375][ T5657] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  113.122557][   T33] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.127934][   T33] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  113.134651][   T33] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  113.138453][   T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.142659][   T33] usb 3-1: Product: syz
[  113.144631][   T33] usb 3-1: Manufacturer: syz
[  113.146913][   T33] usb 3-1: SerialNumber: syz
[  113.156794][   T33] usb-storage 3-1:1.0: USB Mass Storage device detected
[  113.160479][   T33] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  113.163286][   T33] scsi host6: usb-storage 3-1:1.0
[  113.265622][ T5657] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.269035][ T5657] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7
[  113.272580][ T5657] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  113.276220][ T5657] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  113.279198][ T5657] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  113.284522][ T5657] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  113.287598][ T5657] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  113.290085][ T5657] usb 5-1: Manufacturer: syz
[  113.297519][ T5657] usb 5-1: config 0 descriptor??
[  113.356161][ T5664] usb 3-1: USB disconnect, device number 14
[  113.513690][   T33] usb 5-1: USB disconnect, device number 5
[  113.583972][ T5657] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  113.615661][ T5600] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  113.618898][ T5600] Bluetooth: hci2: Injecting HCI hardware error event
[  113.622450][ T5600] Bluetooth: hci2: hardware error 0x00
[  113.733918][ T5657] usb 2-1: Using ep0 maxpacket: 8
[  113.736777][ T5657] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.739893][ T5657] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  113.742632][ T5657] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  113.746189][ T5657] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10
[  113.749400][ T5657] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024
[  113.752685][ T5657] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  113.755514][ T5657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.762997][ T5657] hub 2-1:1.0: bad descriptor, ignoring hub
[  113.765566][ T5657] hub 2-1:1.0: probe with driver hub failed with error -5
[  113.768207][ T5657] cdc_wdm 2-1:1.0: skipping garbage
[  113.769854][ T5657] cdc_wdm 2-1:1.0: skipping garbage
[  113.771679][ T5657] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  113.946078][ T7858] loop2: detected capacity change from 0 to 512
[  113.967793][ T7858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.971861][ T7858] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  114.009881][ T6385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.076051][ T5768] usb 2-1: USB disconnect, device number 14
[  114.093672][   T34] audit: type=1326 audit(1785565064.745:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.2.760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf039e019 code=0x7ffc0000
[  114.102565][   T34] audit: type=1326 audit(1785565064.745:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.2.760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf039e019 code=0x7ffc0000
[  114.110692][   T34] audit: type=1326 audit(1785565064.775:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.2.760" exe="/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f7bf039e019 code=0x7ffc0000
[  114.117770][   T34] audit: type=1326 audit(1785565064.775:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.2.760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf039e019 code=0x7ffc0000
[  114.136954][   T34] audit: type=1326 audit(1785565064.775:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.2.760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf039e019 code=0x7ffc0000
[  114.186214][ T7876] loop2: detected capacity change from 0 to 4096
[  114.190831][ T7876] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  114.200718][ T7876] ntfs3(loop2): ino=b, mi_enum_attr
[  114.202419][ T7876] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  114.206187][ T7876] ntfs3(loop2): Failed to load $Extend (-22).
[  114.208189][ T7876] ntfs3(loop2): Failed to initialize $Extend.
[  114.261002][ T7880] loop2: detected capacity change from 0 to 1764
[  114.269695][ T7880] isofs_fill_super: get root inode failed
[  114.372404][ T7887] loop2: detected capacity change from 0 to 4096
[  114.379579][ T7887] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  114.400071][ T7887] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  114.403686][ T7887] ntfs3(loop2): Failed to load $Extend (-22).
[  114.409734][ T7887] ntfs3(loop2): Failed to initialize $Extend.
[  114.437082][   T33] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  114.499776][ T7893] loop1: detected capacity change from 0 to 16
[  114.507306][ T7893] erofs (device loop1): algorithm 1 isn't enabled on this kernel
[  114.578687][ T7898] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  114.584925][   T33] usb 5-1: Using ep0 maxpacket: 16
[  114.591899][   T33] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  114.602397][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.608529][   T33] usb 5-1: Product: syz
[  114.609814][   T33] usb 5-1: Manufacturer: syz
[  114.611237][   T33] usb 5-1: SerialNumber: syz
[  114.665373][ T7902] loop1: detected capacity change from 0 to 512
[  114.669994][ T7902] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  114.692633][ T7902] EXT4-fs (loop1): 1 truncate cleaned up
[  114.696707][ T7902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.770995][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.826902][   T33] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  114.830756][   T33] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  114.859731][   T33] usb 5-1: USB disconnect, device number 6
[  114.890037][ T5702] udevd[5702]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  115.002363][ T7911] loop1: detected capacity change from 0 to 256
[  115.073496][   T34] audit: type=1326 audit(1785565065.725:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.1.781" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da199e019 code=0x7ffc0000
[  115.082348][   T34] audit: type=1326 audit(1785565065.725:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.1.781" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da199e019 code=0x7ffc0000
[  115.091447][   T34] audit: type=1326 audit(1785565065.725:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.1.781" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da199e019 code=0x7ffc0000
[  115.405867][ T7926] loop2: detected capacity change from 0 to 256
[  115.511158][ T5657] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  115.530417][ T7935] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  115.694591][ T5600] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  115.755836][ T7939] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.792 (7939)
[  115.761473][ T7939] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  115.765158][ T7939] BTRFS info (device loop2): using sha256 checksum algorithm
[  115.812772][ T7939] BTRFS info (device loop2): enabling ssd optimizations
[  115.816127][ T7939] BTRFS info (device loop2): turning on sync discard
[  115.822210][ T7939] BTRFS info (device loop2): enabling free space tree
[  115.893053][ T6385] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.009491][ T7963] size and base must be multiples of 4 kiB
[  116.025132][ T7963] CPU: 0 UID: 0 PID: 7963 Comm: syz.2.795 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  116.025146][ T7963] Tainted: [L]=SOFTLOCKUP
[  116.025149][ T7963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.025153][ T7963] Call Trace:
[  116.025157][ T7963]  <TASK>
[  116.025160][ T7963]  dump_stack_lvl+0xe8/0x150
[  116.025174][ T7963]  mtrr_del+0xc8/0xf0
[  116.025184][ T7963]  mtrr_ioctl+0xcb8/0x13b0
[  116.025194][ T7963]  ? __pfx_mtrr_ioctl+0x10/0x10
[  116.025207][ T7963]  ? __fget_files+0x2a/0x420
[  116.025216][ T7963]  ? __fget_files+0x3a2/0x420
[  116.025225][ T7963]  ? __fget_files+0x2a/0x420
[  116.025233][ T7963]  ? __pfx_mtrr_ioctl+0x10/0x10
[  116.025240][ T7963]  proc_reg_unlocked_ioctl+0x1d6/0x2c0
[  116.025252][ T7963]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[  116.025262][ T7963]  __se_sys_ioctl+0xfc/0x170
[  116.025270][ T7963]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.025277][ T7963]  do_syscall_64+0x170/0xf80
[  116.025287][ T7963]  ? trace_irq_disable+0x3b/0x150
[  116.025298][ T7963]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.025304][ T7963] RIP: 0033:0x7f7bf039e019
[  116.025312][ T7963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.025319][ T7963] RSP: 002b:00007f7bf12cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  116.025328][ T7963] RAX: ffffffffffffffda RBX: 00007f7bf0625fa0 RCX: 00007f7bf039e019
[  116.025334][ T7963] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003
[  116.025338][ T7963] RBP: 00007f7bf043500c R08: 0000000000000000 R09: 0000000000000000
[  116.025343][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.025348][ T7963] R13: 00007f7bf0626038 R14: 00007f7bf0625fa0 R15: 00007ffc44b90608
[  116.025358][ T7963]  </TASK>
[  116.177799][ T7967] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  116.179968][ T7967] ntfs3(loop2): Failed to initialize $Secure::$SDH (-22).
[  116.182251][ T7967] ntfs3(loop2): Failed to initialize $Secure (-22).
[  116.185158][ T7967] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  116.206127][ T7969] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.226792][ T7968] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1347: i_size: 36864 lbcount: 40960 extent 65+7680
[  116.330767][ T7975] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  116.395762][ T7979] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[  116.449638][ T7984] syzkaller1: entered promiscuous mode
[  116.455918][ T7984] syzkaller1: entered allmulticast mode
[  116.512641][ T7987] ntfs3(loop1): Unsupported bytes per MFT record 8192.
[  116.516363][ T7987] ntfs3(loop1): try to read out of volume at offset 0x1ffe00
[  116.608294][ T7992] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  116.640504][ T7992] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  116.663592][ T7992] ntfs3(loop1): Failed to load $Secure (-22).
[  116.669184][ T7992] ntfs3(loop1): Failed to initialize $Secure (-22).
[  116.906710][ T8009] usb_phy_generic usb_phy_generic.2.auto: dummy supplies not allowed for exclusive requests (id=vbus)
[  116.944216][ T8009] dwc2 dwc2.3.auto: supply vusb_d not found, using dummy regulator
[  116.973777][ T8009] dwc2 dwc2.3.auto: supply vusb_a not found, using dummy regulator
[  116.994012][ T8009] dwc2 dwc2.3.auto: Configuration mismatch. dr_mode forced to host
[  117.003660][ T8009] dwc2 dwc2.3.auto: Bad value for GSNPSID: 0x00000000
[  117.230431][ T8039] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  117.233487][ T8039] NILFS (loop1): mounting unchecked fs
[  117.235346][ T8039] NILFS (loop1): recovery required for readonly filesystem
[  117.237580][ T8039] NILFS (loop1): write access will be enabled during recovery
[  117.238968][ T5702] udevd[5702]: incorrect nilfs2 checksum on /dev/loop1
[  117.241356][ T8039] NILFS (loop1): norecovery option specified, skipping roll-forward recovery
[  117.251540][ T5702] udevd[5702]: incorrect nilfs2 checksum on /dev/loop1
[  117.339127][ T8047] kernel profiling enabled (shift: 63)
[  117.344226][ T5768] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  117.345200][ T8047] profiling shift: 63 too large
[  117.375693][ T8051] netlink: 'syz.1.836': attribute type 10 has an invalid length.
[  117.379207][ T8051] syz_tun: entered promiscuous mode
[  117.385942][ T8051] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  117.494043][ T5768] usb 5-1: Using ep0 maxpacket: 32
[  117.499204][ T5768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.503240][ T5768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.507508][ T5768] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  117.510984][ T5768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.519741][ T5768] usb 5-1: config 0 descriptor??
[  117.528068][ T5768] hub 5-1:0.0: USB hub found
[  117.591998][ T8064] FAT-fs (loop2): error, clusters badly computed (1 != 0)
[  117.596471][ T8064] FAT-fs (loop2): Filesystem has been set read-only
[  117.600667][ T8064] FAT-fs (loop2): error, clusters badly computed (2 != 1)
[  117.624036][ T8056] set_capacity_and_notify: 9 callbacks suppressed
[  117.624046][ T8056] loop1: detected capacity change from 0 to 32768
[  117.689016][ T8066] syz.2.843 uses obsolete (PF_INET,SOCK_PACKET)
[  117.724978][ T5768] hub 5-1:0.0: 1 port detected
[  117.984248][   T24] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  118.144138][ T5768] usb 5-1: USB disconnect, device number 7
[  118.176204][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  118.183287][ T5664] libceph: connect (1)[c::]:6789 error -101
[  118.186875][ T5664] libceph: mon0 (1)[c::]:6789 connect error
[  118.221457][ T8085] ceph: No mds server is up or the cluster is laggy
[  118.699601][ T8091] loop4: detected capacity change from 0 to 1024
[  118.730977][ T8091] hfsplus: walked past end of dir
[  118.744697][   T24] usb 2-1: not running at top speed; connect to a high speed hub
[  118.918606][   T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 113, changing to 4
[  118.921971][   T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 34, changing to 4
[  118.934550][   T24] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40
[  118.937565][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.939919][   T24] usb 2-1: Product: syz
[  118.941174][   T24] usb 2-1: Manufacturer: syz
[  118.942576][   T24] usb 2-1: SerialNumber: syz
[  119.018059][ T8102] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI
[  119.018078][ T8102] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  119.018092][ T8102] CPU: 0 UID: 0 PID: 8102 Comm: syz.4.856 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  119.018120][ T8102] Tainted: [L]=SOFTLOCKUP
[  119.018125][ T8102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  119.018134][ T8102] RIP: 0010:fb_videomode_to_var+0x2e/0x600
[  119.018157][ T8102] Code: 55 41 57 41 56 41 55 41 54 53 49 89 f6 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 4d d7 ab fc 4d 8d 7e 0c 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 c7 02 00 00 41 8b 2f 48 89 d8 48 c1 e8
[  119.018168][ T8102] RSP: 0018:ffffc90006a37748 EFLAGS: 00010203
[  119.018182][ T8102] RAX: 0000000000000001 RBX: ffffc90006a378e0 RCX: 0000000000080000
[  119.018191][ T8102] RDX: ffffc90024e67000 RSI: 000000000000053c RDI: 000000000000053d
[  119.018201][ T8102] RBP: ffffc90006a37a10 R08: ffff888161eebb00 R09: 0000000000000002
[  119.018210][ T8102] R10: 0000000000000002 R11: 0000000000000002 R12: ffffffff9a5cff70
[  119.018219][ T8102] R13: dffffc0000000000 R14: 0000000000000000 R15: 000000000000000c
[  119.018228][ T8102] FS:  00007f7ff14e16c0(0000) GS:ffff88818de52000(0000) knlGS:0000000000000000
[  119.018239][ T8102] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  119.018247][ T8102] CR2: 0000200000000280 CR3: 000000016cece000 CR4: 00000000000006f0
[  119.018292][ T8102] Call Trace:
[  119.018299][ T8102]  <TASK>
[  119.018306][ T8102]  fbcon_resize+0x745/0x1730
[  119.018325][ T8102]  ? __vmalloc_node_range_noprof+0x1794/0x1830
[  119.018352][ T8102]  ? __pfx_fbcon_resize+0x10/0x10
[  119.018371][ T8102]  ? vc_do_resize+0x393/0x17e0
[  119.018389][ T8102]  ? vzalloc_noprof+0xb2/0xe0
[  119.018407][ T8102]  vc_do_resize+0x7bb/0x17e0
[  119.018428][ T8102]  ? do_raw_spin_lock+0x12b/0x2f0
[  119.018446][ T8102]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  119.018463][ T8102]  ? __pfx_vc_do_resize+0x10/0x10
[  119.018481][ T8102]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  119.018497][ T8102]  vt_resizex+0x3d7/0x570
[  119.018560][ T8102]  ? __pfx_vt_resizex+0x10/0x10
[  119.018578][ T8102]  ? bpf_lsm_capable+0x9/0x20
[  119.018592][ T8102]  ? security_capable+0x7e/0x2c0
[  119.018608][ T8102]  vt_ioctl+0x135c/0x20d0
[  119.018624][ T8102]  ? __pfx_vt_ioctl+0x10/0x10
[  119.018642][ T8102]  ? __fget_files+0x2a/0x420
[  119.018659][ T8102]  ? tty_jobctrl_ioctl+0x378/0xba0
[  119.018675][ T8102]  ? __fget_files+0x2a/0x420
[  119.018691][ T8102]  tty_ioctl+0x920/0xdd0
[  119.018703][ T8102]  ? __pfx_tty_ioctl+0x10/0x10
[  119.018715][ T8102]  __se_sys_ioctl+0xfc/0x170
[  119.018726][ T8102]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.018739][ T8102]  do_syscall_64+0x170/0xf80
[  119.018756][ T8102]  ? trace_irq_disable+0x3b/0x150
[  119.018772][ T8102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.018784][ T8102] RIP: 0033:0x7f7ff059e019
[  119.018795][ T8102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.018806][ T8102] RSP: 002b:00007f7ff14e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  119.018820][ T8102] RAX: ffffffffffffffda RBX: 00007f7ff0825fa0 RCX: 00007f7ff059e019
[  119.018829][ T8102] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 0000000000000004
[  119.018837][ T8102] RBP: 00007f7ff063500c R08: 0000000000000000 R09: 0000000000000000
[  119.018845][ T8102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.018852][ T8102] R13: 00007f7ff0826038 R14: 00007f7ff0825fa0 R15: 00007ffc7f4334c8
[  119.018866][ T8102]  </TASK>
[  119.018870][ T8102] Modules linked in:
[  119.018881][ T8102] ---[ end trace 0000000000000000 ]---
[  119.018889][ T8102] RIP: 0010:fb_videomode_to_var+0x2e/0x600
[  119.018906][ T8102] Code: 55 41 57 41 56 41 55 41 54 53 49 89 f6 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 4d d7 ab fc 4d 8d 7e 0c 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 c7 02 00 00 41 8b 2f 48 89 d8 48 c1 e8
[  119.018916][ T8102] RSP: 0018:ffffc90006a37748 EFLAGS: 00010203
[  119.018927][ T8102] RAX: 0000000000000001 RBX: ffffc90006a378e0 RCX: 0000000000080000
[  119.018936][ T8102] RDX: ffffc90024e67000 RSI: 000000000000053c RDI: 000000000000053d
[  119.018946][ T8102] RBP: ffffc90006a37a10 R08: ffff888161eebb00 R09: 0000000000000002
[  119.018956][ T8102] R10: 0000000000000002 R11: 0000000000000002 R12: ffffffff9a5cff70
[  119.018965][ T8102] R13: dffffc0000000000 R14: 0000000000000000 R15: 000000000000000c
[  119.018973][ T8102] FS:  00007f7ff14e16c0(0000) GS:ffff88818de52000(0000) knlGS:0000000000000000
[  119.018984][ T8102] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  119.018992][ T8102] CR2: 0000200000000280 CR3: 000000016cece000 CR4: 00000000000006f0
[  119.019032][ T8102] Kernel panic - not syncing: Fatal exception
[  119.019873][ T8102] Kernel Offset: disabled
