last executing test programs:

3.539257362s ago: executing program 0 (id=541):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x0, {0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fallocate(r3, 0x0, 0x460e, 0x3)
dup3(r0, r1, 0x6700000000000000)

3.308149084s ago: executing program 0 (id=542):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122)
connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x1}, 0x14)
shutdown(r0, 0x1)

2.440341547s ago: executing program 0 (id=549):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
socket$inet(0xa, 0x801, 0x84)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.570683702s ago: executing program 0 (id=552):
r0 = socket(0x2b, 0x80801, 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x50, 0x0, &(0x7f0000000180))

1.507891808s ago: executing program 0 (id=553):
socket(0x10, 0x80002, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x280483, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000200), 0x1, 0x564, &(0x7f0000000c00)="$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")
mkdir(&(0x7f0000000040)='./bus\x00', 0xf2)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./bus\x00')

533.437352ms ago: executing program 0 (id=562):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x2400c0d6)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)

439.125427ms ago: executing program 2 (id=563):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x2, @empty, 0xe884}}, 0x0, 0x0, 0x50, 0x0, "a27eeb1839106138172ad1ed7d1d9bfbaeed4520662584241c0e774a4cad546325b89dfb9d33f6fb7f45545dc77c8dcbab7120d7aa88e3f6d21c20b0f00807c80cb089d6c97b63f247377bbfad8c40a1"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)

438.796213ms ago: executing program 1 (id=564):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000140))

438.65361ms ago: executing program 1 (id=565):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0)

438.294308ms ago: executing program 2 (id=566):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2d4, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x240, 0x1, [@m_xt={0x130, 0xa, 0x0, 0x0, {{0x7}, {0x108, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x800}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x4d, 0x6, {0x2fe, 'nat\x00', 0x7, 0x1000, "32191f502c659f78524cedcb63159b9970fd761bd5a7356aa2eb78ed001acbeda2a4ab"}}, @TCA_IPT_TARG={0x55, 0x6, {0x8001, 'nat\x00', 0xe, 0x1000, "5b17aa89d80870c15066789ffc3b484ddb037d507299171c05cbd077a4e3492a17ecb2370233755138b385"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffd}, @TCA_IPT_TARG={0x2a, 0x6, {0x22, 'mangle\x00', 0x8, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xdc, 0x34, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x4, 0x0, 0x136bcb9c}, 0x6c}}]}, {0x75, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a3729"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x80, 0x1, [@m_gact={0x7c, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0x4d, 0x6, "3b5787a933d0695a3c65e24e5c4c8a9428e87983fcb08e778c4c16d937c9d6cdd2b42f9e24f75184f7dfdc33389e6615d6aa21fe6ee7d9836096a2743418947b1a45472c40db288e9f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4004000}, 0x50)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

330.722724ms ago: executing program 2 (id=567):
openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x42002, 0x0)
r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0xffffffff, 0x10100}, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000005c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0)

329.791305ms ago: executing program 1 (id=568):
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x5, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x1a, 0xf2, 0x10, 0xfffffffb, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x103, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x5, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0a6, 0xc, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x2, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x0, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x7, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x8001, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]})
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8)

200.441517ms ago: executing program 2 (id=569):
r0 = syz_open_dev$evdev(&(0x7f0000007bc0), 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x80044520, &(0x7f0000000000)=""/85)

200.230132ms ago: executing program 1 (id=570):
setreuid(0x0, 0x0)

120.137473ms ago: executing program 1 (id=571):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$xdp(0x2c, 0x3, 0x0)
close_range(r3, r3, 0x2)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1c, r3}, 0x10)

68.204027ms ago: executing program 1 (id=572):
syz_open_dev$video4linux(&(0x7f0000000000), 0x3fd, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = socket$caif_seqpacket(0x25, 0x5, 0x3)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

406.93µs ago: executing program 2 (id=573):
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000003740), 0x8084, 0x0)
ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f00000037c0))

0s ago: executing program 2 (id=574):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x28444, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0x3, 0x7f, 0xa9, 0xfffffffffffffff7})
read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[{0x10, 0x84, 0x4}], 0x10}, 0x20040004)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x9, 0x404, 0x2, 0x8000013, 0xa7, 0xffffffa7, 0x8000b, 0x34d, 0x6e, 0x0, 0x4000009, 0x200, 0xe2df, 0x9, 0x20000001, 0x4, 0x505e, 0x7, 0xf58, 0x6]})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={<r3=>0x0, @multicast1}, &(0x7f0000000240)=0xc)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0xf)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
read$FUSE(r6, &(0x7f0000004dc0)={0x2020}, 0x2020)
ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x20018080}, 0x94)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x41703, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r10}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r10, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x27, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3c9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x909edde}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x16}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x0, 0x2, 0x7, 0x18, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x84}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x29, &(0x7f00000001c0)=""/41, 0x41000, 0x18, '\x00', r3, 0x25, r4, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xb, 0x7f, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[r5, r6, r8, 0x1, 0x1], &(0x7f0000000400)=[{0x0, 0x4, 0xa, 0x2}, {0x3, 0x2, 0x10}, {0x4, 0x1, 0xe, 0x4}, {0x4, 0x1, 0x7, 0xb}, {0x6, 0x67d, 0xa, 0xb}, {0x2, 0x9, 0x10, 0x9}, {0x2, 0x800004, 0x8000001, 0xf03e6ce8b924874e}, {0x4, 0x5, 0xf, 0xa}], 0x10, 0xf51}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50963' (ED25519) to the list of known hosts.
syzkaller login: [   58.291726][ T5833] cgroup: Unknown subsys name 'net'
[   58.408568][ T5833] cgroup: Unknown subsys name 'cpuset'
[   58.414186][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.263357][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.196241][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.199583][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.202369][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.205247][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.207789][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.245407][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.248481][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.251371][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.255547][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.258852][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.294097][   T57] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.298201][   T57] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.301713][   T57] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.305674][   T57] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.309159][   T57] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.548594][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   66.699166][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   66.769630][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.773169][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.776184][ T5848] bridge_slave_0: entered allmulticast mode
[   66.780259][ T5848] bridge_slave_0: entered promiscuous mode
[   66.790665][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.793453][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.796262][ T5848] bridge_slave_1: entered allmulticast mode
[   66.800161][ T5848] bridge_slave_1: entered promiscuous mode
[   66.875176][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.885104][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   66.895959][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.965809][ T5848] team0: Port device team_slave_0 added
[   66.968538][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.971858][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.974652][ T5852] bridge_slave_0: entered allmulticast mode
[   66.978385][ T5852] bridge_slave_0: entered promiscuous mode
[   67.005718][ T5848] team0: Port device team_slave_1 added
[   67.008505][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.011757][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.014571][ T5852] bridge_slave_1: entered allmulticast mode
[   67.018355][ T5852] bridge_slave_1: entered promiscuous mode
[   67.094304][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.096614][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.106169][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.114418][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.119076][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.122568][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.132379][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.137628][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.140753][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.143592][ T5854] bridge_slave_0: entered allmulticast mode
[   67.147416][ T5854] bridge_slave_0: entered promiscuous mode
[   67.153221][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.156022][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.158855][ T5854] bridge_slave_1: entered allmulticast mode
[   67.163319][ T5854] bridge_slave_1: entered promiscuous mode
[   67.168832][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.234561][ T5852] team0: Port device team_slave_0 added
[   67.249052][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.256439][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.262317][ T5852] team0: Port device team_slave_1 added
[   67.307476][ T5848] hsr_slave_0: entered promiscuous mode
[   67.310167][ T5848] hsr_slave_1: entered promiscuous mode
[   67.325852][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.328283][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.335995][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.341201][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.343237][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.351226][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.356984][ T5854] team0: Port device team_slave_0 added
[   67.368934][ T5854] team0: Port device team_slave_1 added
[   67.426245][ T5852] hsr_slave_0: entered promiscuous mode
[   67.428544][ T5852] hsr_slave_1: entered promiscuous mode
[   67.431584][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   67.433457][ T5852] Cannot create hsr debugfs directory
[   67.435655][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.438261][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.447011][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.452213][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.454432][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.463275][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.613992][ T5854] hsr_slave_0: entered promiscuous mode
[   67.617076][ T5854] hsr_slave_1: entered promiscuous mode
[   67.620033][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   67.622525][ T5854] Cannot create hsr debugfs directory
[   67.827900][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.835199][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.856490][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.872821][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.905636][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.917240][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.931174][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.938373][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.024812][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.040937][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.047775][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.056413][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.133305][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.183395][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   68.192567][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.219615][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.222707][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.231285][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.234608][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.241036][   T57] Bluetooth: hci0: command tx timeout
[   68.246511][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   68.258872][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.261848][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.282624][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.285563][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.321008][   T57] Bluetooth: hci2: command tx timeout
[   68.323580][ T5850] Bluetooth: hci1: command tx timeout
[   68.345697][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.403566][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   68.441614][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.444332][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.452147][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.454929][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.592382][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.648261][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.671877][ T5848] veth0_vlan: entered promiscuous mode
[   68.686500][ T5848] veth1_vlan: entered promiscuous mode
[   68.731568][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.754328][ T5848] veth0_macvtap: entered promiscuous mode
[   68.774579][ T5852] veth0_vlan: entered promiscuous mode
[   68.786794][ T5848] veth1_macvtap: entered promiscuous mode
[   68.797556][ T5852] veth1_vlan: entered promiscuous mode
[   68.831888][ T5854] veth0_vlan: entered promiscuous mode
[   68.845025][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.863631][ T5854] veth1_vlan: entered promiscuous mode
[   68.867275][ T5852] veth0_macvtap: entered promiscuous mode
[   68.875884][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.888971][ T5852] veth1_macvtap: entered promiscuous mode
[   68.905801][ T5894] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.917965][ T5894] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.932201][ T5894] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.945907][ T5894] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.952207][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.977576][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.993480][ T5854] veth0_macvtap: entered promiscuous mode
[   69.005296][ T5894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.008847][ T5894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.014884][ T5894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.031660][ T5854] veth1_macvtap: entered promiscuous mode
[   69.036090][ T5894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.086861][   T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.092040][   T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.112359][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.151573][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.167568][   T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.172870][ T5678] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.175716][ T5678] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.180780][   T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.186155][ T5894] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.193406][   T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.196954][ T5894] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.203614][   T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.266882][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.272309][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.272336][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.413363][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.415969][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.456918][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.460089][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.525735][ T5913] loop0: detected capacity change from 0 to 8192
[   69.540913][ T5911] loop2: detected capacity change from 0 to 32768
[   69.549358][ T5911] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3 (5911)
[   69.604227][ T5911] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   69.607878][ T5911] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   69.757880][ T5936] loop1: detected capacity change from 0 to 512
[   69.780969][ T5911] BTRFS info (device loop2): enabling ssd optimizations
[   69.783329][ T5911] BTRFS info (device loop2): enabling free space tree
[   69.816117][ T5936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.839212][ T5936] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.908599][ T5936] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   69.949745][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.956455][ T5848] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   70.203190][ T5956] loop1: detected capacity change from 0 to 512
[   70.212980][ T5956] =======================================================
[   70.212980][ T5956] WARNING: The mand mount option has been deprecated and
[   70.212980][ T5956]          and is ignored by this kernel. Remove the mand
[   70.212980][ T5956]          option from the mount to silence this warning.
[   70.212980][ T5956] =======================================================
[   70.233513][ T5956] EXT4-fs: Ignoring removed oldalloc option
[   70.239315][ T5956] EXT4-fs: inline encryption not supported
[   70.243502][ T5956] EXT4-fs: Ignoring removed mblk_io_submit option
[   70.247458][ T5956] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   70.255072][ T5958] input: syz1 as /devices/virtual/input/input4
[   70.287003][ T5956] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.12: bg 0: block 64: padding at end of block bitmap is not set
[   70.294697][ T5956] Quota error (device loop1): write_blk: dquota write failed
[   70.297736][ T5956] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   70.312460][ T5956] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.12: Failed to acquire dquot type 0
[   70.320987][   T57] Bluetooth: hci0: command tx timeout
[   70.323956][ T5956] EXT4-fs (loop1): 1 truncate cleaned up
[   70.335414][ T5956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.354155][ T5956] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.401248][   T57] Bluetooth: hci2: command tx timeout
[   70.401271][ T5850] Bluetooth: hci1: command tx timeout
[   70.498013][ T5969] netlink: 'syz.1.17': attribute type 30 has an invalid length.
[   70.501856][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'.
[   70.505413][ T5969] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[   70.693740][ T5976] loop1: detected capacity change from 0 to 16
[   70.724671][ T5976] erofs (device loop1): mounted with root inode @ nid 36.
[   70.744862][ T5967] loop2: detected capacity change from 0 to 40427
[   70.750459][ T5967] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0)
[   70.753214][ T5967] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   70.757591][ T5967] F2FS-fs (loop2): invalid crc value
[   70.819470][ T5967] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   70.842607][ T5967] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   70.845495][ T5967] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   70.855010][ T5979] loop1: detected capacity change from 0 to 4096
[   70.911357][ T5979] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   70.924545][ T5979] ntfs3(loop1): Failed to load $Extend (-22).
[   70.926549][ T5979] ntfs3(loop1): Failed to initialize $Extend.
[   71.187786][ T5984] loop0: detected capacity change from 0 to 32768
[   71.206797][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.209113][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.235903][ T5984] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   71.268882][ T5984] XFS (loop0): Ending clean mount
[   71.275545][ T5984] XFS (loop0): Quotacheck needed: Please wait.
[   71.302545][ T5984] XFS (loop0): Quotacheck: Done.
[   71.344063][ T5852] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   71.494195][ T5895] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   71.531728][ T6003] loop0: detected capacity change from 0 to 2048
[   71.546823][ T6003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.558390][ T6003] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.637467][ T6010] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.28: bg 0: block 345: padding at end of block bitmap is not set
[   71.644320][ T6010] EXT4-fs (loop0): Remounting filesystem read-only
[   71.648950][ T1009] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   71.660023][ T5895] usb 3-1: Using ep0 maxpacket: 32
[   71.668174][ T5895] usb 3-1: unable to get BOS descriptor or descriptor too short
[   71.686876][ T5895] usb 3-1: config 9 has an invalid interface number: 55 but max is 0
[   71.691812][ T5895] usb 3-1: config 9 has no interface number 0
[   71.694249][ T5895] usb 3-1: config 9 interface 55 has no altsetting 0
[   71.708063][ T5895] usb 3-1: New USB device found, idVendor=2fc1, idProduct=f4e0, bcdDevice=5a.b5
[   71.715530][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.718626][ T5895] usb 3-1: Product: syz
[   71.720732][ T5895] usb 3-1: Manufacturer: syz
[   71.722501][ T5895] usb 3-1: SerialNumber: syz
[   71.801021][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.900578][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'.
[   71.953384][ T6025] netlink: 'syz.0.37': attribute type 12 has an invalid length.
[   71.953579][ T5895] usb 3-1: USB disconnect, device number 2
[   72.218849][ T6036] loop0: detected capacity change from 0 to 512
[   72.262005][ T6036] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.42: invalid indirect mapped block 4294967295 (level 1)
[   72.268188][ T6036] EXT4-fs (loop0): Remounting filesystem read-only
[   72.270858][ T6036] EXT4-fs (loop0): 2 truncates cleaned up
[   72.273368][ T6036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.306469][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.401358][ T5850] Bluetooth: hci0: command tx timeout
[   72.532945][ T5850] Bluetooth: hci1: command tx timeout
[   72.534775][ T5850] Bluetooth: hci2: command tx timeout
[   72.976768][ T6056] loop2: detected capacity change from 0 to 1024
[   72.981326][ T6056] hfsplus: creator requires a 4 character value
[   73.138155][ T6061] batadv_slave_1: entered promiscuous mode
[   73.144371][ T6061] batman_adv: batadv0: Adding interface: macsec1
[   73.146913][ T6061] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[   73.154587][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.158513][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.161839][ T6061] batman_adv: batadv0: Interface activated: macsec1
[   73.609719][ T6067] Zero length message leads to an empty skb
[   73.709539][ T6069] loop0: detected capacity change from 0 to 4096
[   73.736688][ T6069] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   73.752510][ T6069] ntfs3(loop0): Failed to load $Extend (-22).
[   73.755902][ T6069] ntfs3(loop0): Failed to initialize $Extend.
[   73.790728][ T6065] loop1: detected capacity change from 0 to 32768
[   73.803241][ T6065] jfs_mount: dbMount failed w/rc = -22
[   73.809455][ T6065] Mount JFS Failure: -22
[   73.816012][ T6065] jfs_mount failed w/return code = -22
[   73.977703][ T6075] netlink: 56 bytes leftover after parsing attributes in process `syz.1.58'.
[   73.999325][ T6071] usb usb8: usbfs: process 6071 (syz.0.56) did not claim interface 0 before use
[   74.479911][   T57] Bluetooth: hci0: command tx timeout
[   74.560659][   T57] Bluetooth: hci2: command tx timeout
[   74.562863][   T57] Bluetooth: hci1: command tx timeout
[   74.675772][  T976] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   74.842150][  T976] usb 3-1: config 0 has an invalid interface number: 168 but max is 0
[   74.845549][  T976] usb 3-1: config 0 has no interface number 0
[   74.847846][  T976] usb 3-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[   74.855596][  T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.878088][  T976] usb 3-1: config 0 descriptor??
[   75.096802][  T976] usb 3-1: string descriptor 0 read error: -71
[   75.102228][  T976] usb-storage 3-1:0.168: USB Mass Storage device detected
[   75.119110][  T976] usb-storage 3-1:0.168: Quirks match for vid 05ab pid 0060: 2
[   75.132288][   T57] Bluetooth: hci0: Malformed LE Event: 0x0d
[   75.171012][  T976] usb 3-1: USB disconnect, device number 3
[   75.270625][ T6131] loop1: detected capacity change from 0 to 32768
[   75.618027][ T6145] loop1: detected capacity change from 0 to 1024
[   75.634720][ T6145] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   75.667805][ T6145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.766852][ T6145] futex_wake_op: syz.1.88 tries to shift op by 36; fix this program
[   75.818658][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.939408][ T6168] capability: warning: `syz.0.98' uses deprecated v2 capabilities in a way that may be insecure
[   76.055374][ T6178] Bluetooth: MGMT ver 1.23
[   76.080086][  T976] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   76.225942][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.233533][  T976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   76.237178][  T976] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[   76.248916][  T976] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[   76.255186][  T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.272050][  T976] usb 3-1: config 0 descriptor??
[   76.276097][  T976] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[   76.282616][  T976] dvb-usb: bulk message failed: -22 (3/0)
[   76.300869][  T976] dvb-usb: will use the device's hardware PID filter (table count: 16).
[   76.304489][  T976] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[   76.306763][  T976] usb 3-1: media controller created
[   76.321056][  T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   76.355026][  T976] dvb-usb: bulk message failed: -22 (6/0)
[   76.357518][  T976] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[   76.378048][  T976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5
[   76.410761][  T976] dvb-usb: schedule remote query interval to 150 msecs.
[   76.412957][  T976] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[   76.495811][  T976] usb 3-1: USB disconnect, device number 4
[   76.541362][  T976] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[   76.598856][ T6207] loop0: detected capacity change from 0 to 16
[   76.601962][ T6207] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   77.608344][ T6210] loop1: detected capacity change from 0 to 32768
[   77.631681][ T6210] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   77.683808][ T6229] loop2: detected capacity change from 0 to 512
[   77.695818][ T6210] XFS (loop1): Ending clean mount
[   77.702298][ T6229] EXT4-fs: Ignoring removed oldalloc option
[   77.724639][ T6229] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.125: Parent and EA inode have the same ino 15
[   77.733588][ T6229] EXT4-fs (loop2): 1 orphan inode deleted
[   77.736178][ T6229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.747786][ T6229] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.125: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   77.771945][ T5854] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   77.801360][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.882851][ T6237] ALSA: mixer_oss: invalid OSS volume 'u'
[   78.255748][ T6267] process 'syz.2.141' launched './file1' with NULL argv: empty string added
[   78.271390][ T6269] netlink: 76 bytes leftover after parsing attributes in process `syz.0.142'.
[   78.410739][ T2320] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   78.570155][ T2320] usb 2-1: Using ep0 maxpacket: 16
[   78.576714][ T2320] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02
[   78.585862][ T2320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   78.589003][ T2320] usb 2-1: SerialNumber: syz
[   78.602608][ T2320] usb 2-1: config 0 descriptor??
[   78.614675][ T2320] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[   78.619292][ T2320] usb 2-1: Detected SIO
[   78.627736][ T2320] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   78.898305][ T2320] usb 2-1: USB disconnect, device number 2
[   79.058533][ T6300] 9pnet_fd: Insufficient options for proto=fd
[   79.100863][   T33] audit: type=1326 audit(1759224834.652:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.2.156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ae38ec29 code=0x7ffc0000
[   79.111735][   T33] audit: type=1326 audit(1759224834.652:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.2.156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ae38ec29 code=0x7ffc0000
[   79.136223][   T33] audit: type=1326 audit(1759224834.652:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.2.156" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fc0ae38ec29 code=0x7ffc0000
[   79.149931][   T33] audit: type=1326 audit(1759224834.652:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.2.156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ae38ec29 code=0x7ffc0000
[   79.158514][   T33] audit: type=1326 audit(1759224834.652:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.2.156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ae38ec29 code=0x7ffc0000
[   79.171774][   T33] audit: type=1326 audit(1759224834.652:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.2.156" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0ae38ec29 code=0x7ffc0000
[   79.179454][   T33] audit: type=1326 audit(1759224834.652:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.2.156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ae38ec29 code=0x7ffc0000
[   79.193370][   T33] audit: type=1326 audit(1759224834.652:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.2.156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ae38ec29 code=0x7ffc0000
[   79.206426][   T33] audit: type=1326 audit(1759224834.652:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.2.156" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0ae38ec29 code=0x7ffc0000
[   79.216846][   T33] audit: type=1326 audit(1759224834.652:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.2.156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ae38ec29 code=0x7ffc0000
[   79.317606][ T2320] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   79.322353][ T2320] ftdi_sio 2-1:0.0: device disconnected
[   80.003038][ T6305] loop1: detected capacity change from 0 to 32768
[   80.012275][ T6305] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   80.027818][ T6305] XFS (loop1): Ending clean mount
[   80.053392][ T5854] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   80.122720][ T2320] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   80.280020][ T2320] usb 1-1: Using ep0 maxpacket: 8
[   80.285624][ T2320] usb 1-1: unable to get BOS descriptor or descriptor too short
[   80.290840][ T2320] usb 1-1: config 6 has an invalid interface number: 81 but max is 0
[   80.294056][ T2320] usb 1-1: config 6 has no interface number 0
[   80.296592][ T2320] usb 1-1: config 6 interface 81 has no altsetting 0
[   80.299409][ T6324] loop1: detected capacity change from 0 to 4096
[   80.301978][ T2320] usb 1-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=f7.ec
[   80.301999][ T2320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.302014][ T2320] usb 1-1: Product: syz
[   80.302024][ T2320] usb 1-1: Manufacturer: syz
[   80.302035][ T2320] usb 1-1: SerialNumber: syz
[   80.525417][ T2320] quatech2 1-1:6.81: Quatech 2nd gen USB to Serial Driver converter detected
[   80.556320][ T2320] usb 1-1: qt2_attach - failed to power on unit: -71
[   80.559313][ T2320] quatech2 1-1:6.81: probe with driver quatech2 failed with error -71
[   80.568432][ T2320] usb 1-1: USB disconnect, device number 2
[   80.951538][ T6332] loop2: detected capacity change from 0 to 1024
[   80.995503][ T6332] hfsplus: xattr searching failed
[   81.061134][ T6334] loop2: detected capacity change from 0 to 8
[   81.942669][  T793] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   81.999557][  T793] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   82.682984][ T6362] loop1: detected capacity change from 0 to 64
[   82.692102][ T6362] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[   82.695475][ T6362] BFS-fs: bfs_fill_super(): Last block not available on loop1: 4139327
[   82.923185][ T6368] warning: `syz.0.181' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   83.287988][ T6369] binder: 6361:6369 ioctl c0306201 0 returned -14
[   83.452940][ T6378] Illegal XDP return value 4294967274 on prog  (id 11) dev N/A, expect packet loss!
[   83.601259][ T6382] netlink: get zone limit has 4 unknown bytes
[   84.049219][ T6414] loop2: detected capacity change from 0 to 1024
[   84.056206][ T6414] hfsplus: failed to load attributes file
[   84.113605][ T6418] tipc: Started in network mode
[   84.115759][ T6418] tipc: Node identity , cluster identity 4711
[   84.118169][ T6418] tipc: Failed to set node id, please configure manually
[   84.123098][ T6418] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   84.156852][ T6412] loop1: detected capacity change from 0 to 40427
[   84.162623][ T6412] F2FS-fs (loop1): invalid crc value
[   84.216553][ T6412] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   84.220851][ T6412] F2FS-fs (loop1): Start checkpoint disabled!
[   84.228918][ T6412] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   84.232706][ T6412] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   84.242997][   T33] kauditd_printk_skb: 8 callbacks suppressed
[   84.243006][   T33] audit: type=1800 audit(1759224839.822:20): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.201" name="file1" dev="loop1" ino=10 res=0 errno=0
[   84.421102][ T6420] loop2: detected capacity change from 0 to 32768
[   84.459575][ T6420] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   84.594881][ T6426] syz.1.201: attempt to access beyond end of device
[   84.594881][ T6426] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   84.606432][ T6426] syz.1.201: attempt to access beyond end of device
[   84.606432][ T6426] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   84.617153][ T6426] syz.1.201: attempt to access beyond end of device
[   84.617153][ T6426] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[   84.627079][ T6426] syz.1.201: attempt to access beyond end of device
[   84.627079][ T6426] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[   84.636160][ T6426] syz.1.201: attempt to access beyond end of device
[   84.636160][ T6426] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[   84.646644][ T6426] syz.1.201: attempt to access beyond end of device
[   84.646644][ T6426] loop1: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[   84.655141][ T6426] syz.1.201: attempt to access beyond end of device
[   84.655141][ T6426] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[   84.664008][ T6426] syz.1.201: attempt to access beyond end of device
[   84.664008][ T6426] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[   84.669878][ T6426] syz.1.201: attempt to access beyond end of device
[   84.669878][ T6426] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[   84.675930][ T6426] syz.1.201: attempt to access beyond end of device
[   84.675930][ T6426] loop1: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[   84.716313][ T6420] syz.2.205 (6420) used greatest stack depth: 18680 bytes left
[   84.757579][ T5848] ocfs2: Unmounting device (7,2) on (node local)
[   84.801231][ T6428] vivid-000: disconnect
[   84.809092][ T6427] vivid-000: reconnect
[   84.923221][   T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u10:2 Not tainted syzkaller #0 PREEMPT(full) 
[   84.923241][   T40] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   84.923250][   T40] Workqueue: writeback wb_workfn (flush-7:1)
[   84.923277][   T40] Call Trace:
[   84.923292][   T40]  <TASK>
[   84.923306][   T40]  dump_stack_lvl+0x189/0x250
[   84.923326][   T40]  ? __pfx_dump_stack_lvl+0x10/0x10
[   84.923341][   T40]  ? __pfx_queue_work_on+0x10/0x10
[   84.923352][   T40]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   84.923367][   T40]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   84.923391][   T40]  f2fs_handle_critical_error+0x37c/0x540
[   84.923410][   T40]  f2fs_write_end_io+0x886/0xb60
[   84.923474][   T40]  __submit_merged_bio+0x27a/0x6a0
[   84.923495][   T40]  __submit_merged_write_cond+0x255/0x530
[   84.923521][   T40]  f2fs_write_data_pages+0x261d/0x3000
[   84.923562][   T40]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   84.923588][   T40]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   84.923631][   T40]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   84.923655][   T40]  ? trace_f2fs_writepages+0x7f/0x200
[   84.923670][   T40]  ? f2fs_write_node_pages+0x478/0x6e0
[   84.923690][   T40]  ? unwind_next_frame+0xa5/0x2390
[   84.923701][   T40]  ? rcu_is_watching+0x15/0xb0
[   84.923712][   T40]  ? __kasan_check_byte+0x12/0x40
[   84.923728][   T40]  ? unwind_next_frame+0xa5/0x2390
[   84.923745][   T40]  ? unwind_next_frame+0xa5/0x2390
[   84.923757][   T40]  ? rcu_is_watching+0x15/0xb0
[   84.923770][   T40]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   84.923786][   T40]  do_writepages+0x32e/0x550
[   84.923803][   T40]  ? reacquire_held_locks+0x127/0x1d0
[   84.923815][   T40]  ? writeback_sb_inodes+0x384/0x1010
[   84.923835][   T40]  __writeback_single_inode+0x145/0xff0
[   84.923850][   T40]  ? do_raw_spin_unlock+0x4d/0x240
[   84.923868][   T40]  writeback_sb_inodes+0x6c7/0x1010
[   84.923902][   T40]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   84.923949][   T40]  ? rcu_is_watching+0x15/0xb0
[   84.923968][   T40]  wb_writeback+0x43b/0xaf0
[   84.923989][   T40]  ? queue_io+0x301/0x590
[   84.924005][   T40]  ? __pfx_wb_writeback+0x10/0x10
[   84.924025][   T40]  ? _raw_spin_unlock_irq+0x23/0x50
[   84.924044][   T40]  wb_workfn+0x409/0xef0
[   84.924074][   T40]  ? __pfx_wb_workfn+0x10/0x10
[   84.924096][   T40]  ? __lock_acquire+0xab9/0xd20
[   84.924121][   T40]  ? process_scheduled_works+0x9ef/0x17b0
[   84.924144][   T40]  ? _raw_spin_unlock_irq+0x23/0x50
[   84.924157][   T40]  ? process_scheduled_works+0x9ef/0x17b0
[   84.924174][   T40]  ? process_scheduled_works+0x9ef/0x17b0
[   84.924193][   T40]  process_scheduled_works+0xae1/0x17b0
[   84.924233][   T40]  ? __pfx_process_scheduled_works+0x10/0x10
[   84.924265][   T40]  worker_thread+0x8a0/0xda0
[   84.924286][   T40]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   84.924307][   T40]  ? __kthread_parkme+0x7b/0x200
[   84.924327][   T40]  kthread+0x711/0x8a0
[   84.924345][   T40]  ? __pfx_worker_thread+0x10/0x10
[   84.924363][   T40]  ? __pfx_kthread+0x10/0x10
[   84.924378][   T40]  ? _raw_spin_unlock_irq+0x23/0x50
[   84.924391][   T40]  ? lockdep_hardirqs_on+0x9c/0x150
[   84.924404][   T40]  ? __pfx_kthread+0x10/0x10
[   84.924419][   T40]  ret_from_fork+0x4bc/0x870
[   84.924472][   T40]  ? __pfx_ret_from_fork+0x10/0x10
[   84.924496][   T40]  ? __switch_to_asm+0x39/0x70
[   84.924511][   T40]  ? __switch_to_asm+0x33/0x70
[   84.924524][   T40]  ? __pfx_kthread+0x10/0x10
[   84.924539][   T40]  ret_from_fork_asm+0x1a/0x30
[   84.924569][   T40]  </TASK>
[   84.924575][   T40] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   84.975799][ T6433] loop0: detected capacity change from 0 to 1024
[   85.112961][ T6433] EXT4-fs: inline encryption not supported
[   85.115464][ T6433] EXT4-fs: Ignoring removed nobh option
[   85.117689][ T6433] EXT4-fs: Ignoring removed bh option
[   85.164691][ T6433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.178018][   T33] audit: type=1800 audit(1759224840.752:21): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.208" name="bus" dev="loop0" ino=18 res=0 errno=0
[   85.196930][ T6433] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.208: Allocating blocks 497-513 which overlap fs metadata
[   85.226834][ T5852] Trying to write to read-only block-device loop0
[   85.231880][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.552266][  T976] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   85.706711][  T976] usb 1-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00
[   85.710644][  T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.731090][  T976] usb 1-1: Product: syz
[   85.732791][  T976] usb 1-1: Manufacturer: syz
[   85.737617][  T976] usb 1-1: SerialNumber: syz
[   85.744033][  T976] usb 1-1: config 0 descriptor??
[   85.960716][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'.
[   85.970618][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'.
[   85.974161][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'.
[   85.987955][  T976] usb 1-1: USB disconnect, device number 3
[   86.429480][ T6464] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.572229][   T24] cfg80211: failed to load regulatory.db
[   86.972473][ T6468] hub 9-0:1.0: USB hub found
[   86.974680][ T6468] hub 9-0:1.0: 1 port detected
[   87.237124][ T6476] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[   87.669627][ T6488] capability: warning: `syz.0.228' uses 32-bit capabilities (legacy support in use)
[   87.859596][ T6498] loop2: detected capacity change from 0 to 4096
[   89.979900][  T976] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   90.130053][  T976] usb 1-1: Using ep0 maxpacket: 16
[   90.138324][  T976] usb 1-1: config index 0 descriptor too short (expected 12592, got 72)
[   90.143875][  T976] usb 1-1: config 55 has too many interfaces: 55, using maximum allowed: 32
[   90.154020][  T976] usb 1-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config
[   90.160188][  T976] usb 1-1: config 55 has 0 interfaces, different from the descriptor's value: 55
[   90.171449][  T976] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[   90.174927][  T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.178100][  T976] usb 1-1: Product: syz
[   90.190370][  T976] usb 1-1: Manufacturer: syz
[   90.192296][  T976] usb 1-1: SerialNumber: syz
[   90.408289][ T6556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.412265][ T6556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.748298][ T6566] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   92.027437][ T6599] loop2: detected capacity change from 0 to 128
[   92.157626][  T976] usb 1-1: USB disconnect, device number 4
[   92.195111][ T6603] loop2: detected capacity change from 0 to 512
[   92.198248][ T6603] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   92.210197][ T6603] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   92.219071][ T6603] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   92.239417][ T6603] EXT4-fs (loop2): 1 truncate cleaned up
[   92.242723][ T6603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.274077][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.417430][ T6595] loop1: detected capacity change from 0 to 32768
[   92.426995][ T6595] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.274 (6595)
[   92.451681][ T6595] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   92.455661][ T6595] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   92.521505][ T6595] BTRFS info (device loop1): enabling ssd optimizations
[   92.524375][ T6595] BTRFS info (device loop1): enabling free space tree
[   92.600953][ T5854] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   93.331065][   T33] audit: type=1326 audit(1759224848.912:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.2.300" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0ae38ec29 code=0x0
[   93.419978][   T47] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   93.446111][ T6671] loop2: detected capacity change from 0 to 2048
[   93.454062][ T6671] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26504, location=26504
[   93.461507][ T6671] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.529236][ T6673] veth3: entered allmulticast mode
[   93.621002][   T47] usb 2-1: Using ep0 maxpacket: 16
[   93.632205][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.635710][   T47] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[   93.638325][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.644432][   T47] usb 2-1: config 0 descriptor??
[   93.999337][ T5315] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   94.058140][   T47] creative-sb0540 0003:041E:3100.0002: unbalanced delimiter at end of report description
[   94.061827][   T47] creative-sb0540 0003:041E:3100.0002: parse failed
[   94.063915][   T47] creative-sb0540 0003:041E:3100.0002: probe with driver creative-sb0540 failed with error -22
[   94.335799][  T976] usb 2-1: USB disconnect, device number 3
[   94.401697][ T5315] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[   94.404193][ T5315] usb 3-1: config 0 has no interface number 0
[   94.408368][ T5315] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   94.411740][ T5315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.414395][ T5315] usb 3-1: Product: syz
[   94.415779][ T5315] usb 3-1: Manufacturer: syz
[   94.417194][ T5315] usb 3-1: SerialNumber: syz
[   94.425491][ T5315] usb 3-1: config 0 descriptor??
[   94.858470][ T6699] netlink: 27 bytes leftover after parsing attributes in process `syz.0.315'.
[   94.916074][ T6702] loop1: detected capacity change from 0 to 1024
[   94.943266][ T6702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   94.947669][ T6702] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.000472][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   95.112627][ T6721] loop0: detected capacity change from 0 to 512
[   95.115298][ T6721] EXT4-fs: Ignoring removed oldalloc option
[   95.241841][ T5315] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   95.250268][ T5315] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[   95.258101][ T5315] asix 3-1:0.251: probe with driver asix failed with error -71
[   95.271984][ T5315] usb 3-1: USB disconnect, device number 5
[   95.310563][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   95.337977][ T6731] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.346098][ T6731] netlink: 512 bytes leftover after parsing attributes in process `syz.0.329'.
[   95.459860][    T9] usb 2-1: Using ep0 maxpacket: 16
[   95.462892][    T9] usb 2-1: too many configurations: 60, using maximum allowed: 8
[   95.475617][    T9] usb 2-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9
[   95.478370][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204
[   95.481350][    T9] usb 2-1: Product: syz
[   95.482746][    T9] usb 2-1: Manufacturer: syz
[   95.484433][    T9] usb 2-1: SerialNumber: syz
[   95.488192][    T9] usb 2-1: config 0 descriptor??
[   95.492297][    T9] pwc: Philips SPC 880NC USB webcam detected.
[   95.544058][ T6735] loop0: detected capacity change from 0 to 32768
[   95.699560][    T9] pwc: Warning: more than 1 configuration available.
[   95.703410][    T9] pwc: Failed to set LED on/off time (-71)
[   95.706018][    T9] pwc: send_video_command error -71
[   95.708050][    T9] pwc: Failed to set video mode VGA@30 fps; return code = -71
[   95.712228][    T9] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[   95.721112][    T9] usb 2-1: USB disconnect, device number 4
[   95.825080][ T6739] loop0: detected capacity change from 0 to 32768
[   95.987645][ T6750] loop0: detected capacity change from 0 to 512
[   96.031057][  T976] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   96.143032][ T6758] loop0: detected capacity change from 0 to 4096
[   96.189972][  T976] usb 3-1: Using ep0 maxpacket: 16
[   96.201823][  T976] usb 3-1: config 5 has an invalid interface number: 206 but max is 0
[   96.205168][  T976] usb 3-1: config 5 has no interface number 0
[   96.207720][  T976] usb 3-1: config 5 interface 206 has no altsetting 0
[   96.232079][  T976] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44
[   96.235755][  T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.238844][  T976] usb 3-1: Product: syz
[   96.245733][  T976] usb 3-1: Manufacturer: syz
[   96.252010][  T976] usb 3-1: SerialNumber: syz
[   96.321606][ T6758] loop0: detected capacity change from 0 to 32768
[   96.499676][  T976] usb_ehset_test 3-1:5.206: probe with driver usb_ehset_test failed with error -32
[   96.528472][  T976] usb 3-1: USB disconnect, device number 6
[   97.477159][ T6779] tmpfs: Bad value for 'mpol'
[   97.548486][ T6783] program syz.2.353 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   97.839993][  T793] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   97.855038][ T6795] netlink: 104 bytes leftover after parsing attributes in process `syz.2.359'.
[   98.011592][  T793] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9
[   98.015142][  T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 197, setting to 64
[   98.018540][  T793] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[   98.029195][  T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.042910][  T793] usb 2-1: config 0 descriptor??
[   98.045026][ T6785] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   98.052346][  T793] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22
[   98.085864][ T6811] loop0: detected capacity change from 0 to 512
[   98.264624][ T6821] loop0: detected capacity change from 0 to 1024
[   98.593905][ T6828] loop0: detected capacity change from 0 to 2048
[   98.596607][ T6828] EXT4-fs: Ignoring removed nobh option
[   98.622902][ T6829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.625857][ T6829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.690184][  T976] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   98.804181][ T6837] loop0: detected capacity change from 0 to 128
[   98.947302][  T976] usb 3-1: config 0 has an invalid interface number: 139 but max is 0
[   98.951121][  T976] usb 3-1: config 0 has no interface number 0
[   98.953747][  T976] usb 3-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   98.958337][  T976] usb 3-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D
[   98.963452][  T976] usb 3-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64
[   98.967889][  T976] usb 3-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   98.976726][  T976] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6
[   99.206708][  T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.211395][  T976] usb 3-1: Product: syz
[   99.213411][  T976] usb 3-1: Manufacturer: syz
[   99.224216][ T6838] loop0: detected capacity change from 0 to 1024
[   99.230548][  T976] usb 3-1: SerialNumber: syz
[   99.239757][  T976] usb 3-1: config 0 descriptor??
[   99.243486][ T6825] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   99.246626][ T6825] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   99.461435][  T976] mct_u232 3-1:0.139: MCT U232 converter detected
[   99.470336][  T976] usb 3-1: MCT U232 converter now attached to ttyUSB0
[   99.478372][  T976] usb 3-1: USB disconnect, device number 7
[   99.489596][  T976] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0
[   99.493656][  T976] mct_u232 3-1:0.139: device disconnected
[   99.882594][ T6848] bridge: RTM_NEWNEIGH with invalid ether address
[  100.666836][   T47] usb 2-1: USB disconnect, device number 5
[  100.944279][ T6877] netlink: 'syz.1.396': attribute type 2 has an invalid length.
[  100.985772][ T6879] loop0: detected capacity change from 0 to 512
[  100.989115][ T6879] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  101.347153][ T6903] loop0: detected capacity change from 0 to 8
[  101.350801][ T6905] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  101.360508][ T6905] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  101.363100][ T6905] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  101.366000][ T6905] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  101.391061][ T6905] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff7,4)
[  101.401468][ T6905] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  101.403583][ T6905] comedi comedi3: 8255: I/O port conflict (0x21,4)
[  101.405611][ T6905] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  101.419734][ T6905] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  101.430404][ T6905] comedi comedi3: 8255: I/O port conflict (0x400,4)
[  101.445223][ T6905] comedi comedi3: 8255: I/O port conflict (0x800006,4)
[  101.448434][ T6905] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  101.460228][ T6905] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  101.489886][ T6905] comedi comedi3: 8255: I/O port conflict (0x80402,4)
[  101.492677][ T6905] comedi comedi3: 8255: I/O port conflict (0xd,4)
[  101.495125][ T6905] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  101.497598][ T6905] comedi comedi3: 8255: I/O port conflict (0x41,4)
[  101.524497][ T6905] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  101.540085][ T6905] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  101.549642][ T6905] comedi comedi3: 8255: I/O port conflict (0x8000003,4)
[  101.561698][ T6905] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4)
[  101.872271][   T47] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  102.041552][   T47] usb 1-1: Using ep0 maxpacket: 32
[  102.056176][   T47] usb 1-1: config 0 has an invalid interface number: 16 but max is 0
[  102.059324][   T47] usb 1-1: config 0 has no interface number 0
[  102.066902][   T47] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  102.077252][   T47] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  102.090828][   T47] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  102.102144][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.107422][   T47] usb 1-1: Product: syz
[  102.112939][   T47] usb 1-1: Manufacturer: syz
[  102.117146][   T47] usb 1-1: SerialNumber: syz
[  102.126346][   T47] usb 1-1: config 0 descriptor??
[  102.138125][ T6915] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  102.145768][ T6915] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  102.172064][   T47] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  102.298365][ T6954] loop2: detected capacity change from 0 to 32768
[  102.336127][ T6954] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  102.367944][ T6954] XFS (loop2): Ending clean mount
[  102.372380][ T6954] XFS (loop2): Quotacheck needed: Please wait.
[  102.458147][ T6954] XFS (loop2): Quotacheck: Done.
[  102.658720][ T5848] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  102.934459][ T6979] loop2: detected capacity change from 0 to 1024
[  102.950961][ T6979] EXT4-fs: Ignoring removed bh option
[  102.992798][ T6979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.027274][ T6979] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #2: comm syz.2.432: missing EA_INODE flag
[  103.032722][ T6979] EXT4-fs (loop2): Remounting filesystem read-only
[  103.035169][ T6979] EXT4-fs warning (device loop2): ext4_xattr_block_set:2195: inode #19: comm syz.2.432: dec ref error=-30
[  103.082132][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.559617][ T6977] loop1: detected capacity change from 0 to 32768
[  103.569099][ T6977] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.433 (6977)
[  103.626377][ T6977] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  103.642492][ T6977] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  103.771875][ T6977] BTRFS info (device loop1): enabling ssd optimizations
[  103.774432][ T6977] BTRFS info (device loop1): enabling free space tree
[  103.790986][    T9] usb 1-1: USB disconnect, device number 5
[  103.807303][ T7007] netlink: 48 bytes leftover after parsing attributes in process `syz.2.437'.
[  103.844249][ T5854] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  104.032013][ T7013] loop2: detected capacity change from 0 to 2048
[  104.044008][ T7013] EXT4-fs: inline encryption not supported
[  104.078860][ T7013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000002000000 r/w without journal. Quota mode: none.
[  104.088191][ T7015] loop1: detected capacity change from 0 to 2048
[  104.090092][ T7013] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.108037][ T7015] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.178511][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000002000000.
[  104.183800][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'.
[  104.269376][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.443'.
[  104.370859][ T7029] netlink: 'syz.0.447': attribute type 29 has an invalid length.
[  104.380622][ T7029] netlink: 'syz.0.447': attribute type 29 has an invalid length.
[  104.390406][ T7029] netlink: 500 bytes leftover after parsing attributes in process `syz.0.447'.
[  104.398359][ T7029] unsupported nla_type 58
[  104.485228][ T7040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.452'.
[  104.500547][ T7040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.452'.
[  105.605239][ T7068] loop3: detected capacity change from 0 to 1
[  105.614624][ T7068] Dev loop3: unable to read RDB block 1
[  105.616932][ T7068]  loop3: unable to read partition table
[  105.619294][ T7068] loop3: partition table beyond EOD, truncated
[  105.635449][ T7068] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5)
[  105.666863][ T7070] loop1: detected capacity change from 0 to 128
[  105.690938][ T7070] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback.
[  105.741225][ T5854] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.784549][ T7075] loop1: detected capacity change from 0 to 256
[  105.926756][ T7081] loop1: detected capacity change from 0 to 512
[  105.930171][ T7081] EXT4-fs: Ignoring removed bh option
[  105.933959][ T7081] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  105.937669][ T7081] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  105.944192][ T7081] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  105.947273][ T7081] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  105.961405][ T7081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.980203][   T47] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  105.992777][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.151413][   T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.155440][   T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  106.159130][   T47] usb 3-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df
[  106.163257][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.174051][   T47] usb 3-1: config 0 descriptor??
[  106.186640][   T47] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected.
[  106.388829][   T47] pwc: send_video_command error -71
[  106.391003][   T47] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  106.393936][   T47] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  106.411348][   T47] usb 3-1: USB disconnect, device number 8
[  107.207632][ T7091] loop1: detected capacity change from 0 to 32768
[  107.224503][ T7091] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  107.228169][ T7091] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  107.238753][ T7091] XFS (loop1): Ending clean mount
[  107.244430][ T7091] XFS (loop1): Quotacheck needed: Please wait.
[  107.253729][ T1227] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1143 dinode
[  107.257682][ T1227] XFS (loop1): Unmount and run xfs_repair
[  107.260265][ T1227] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  107.263282][ T1227] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  107.266534][ T1227] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.269932][ T1227] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[  107.273397][ T1227] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[  107.276353][ T1227] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.279192][ T1227] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 3f 08 c9 94  ............?...
[  107.282647][ T1227] 00000060: ff ff ff ff 49 55 aa 1c 00 00 00 00 00 00 00 04  ....IU..........
[  107.285502][ T1227] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  107.301497][ T7091] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  107.326201][ T5854] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  107.332292][ T5854] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  107.512300][ T7112] netlink: 'syz.1.480': attribute type 2 has an invalid length.
[  107.515141][ T7112] netlink: 'syz.1.480': attribute type 8 has an invalid length.
[  107.517720][ T7112] netlink: 132 bytes leftover after parsing attributes in process `syz.1.480'.
[  107.762733][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'.
[  107.907798][ T7130] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  108.211574][ T7135] loop2: detected capacity change from 0 to 32768
[  108.311595][ T7135] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  108.355389][ T7135] XFS (loop2): Metadata CRC error detected at xfs_agi_read_verify+0x12f/0x1f0, xfs_agi block 0x2 
[  108.358940][ T7135] XFS (loop2): Unmount and run xfs_repair
[  108.361069][ T7135] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  108.363506][ T7135] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 10 00  XAGI............
[  108.367493][ T7135] 00000010: 00 00 00 40 00 00 00 01 00 00 00 01 00 00 00 37  ...@...........7
[  108.371714][ T7135] 00000020: 00 00 11 40 ff ff ff ff ff ff ff ff ff ff ff ff  ...@............
[  108.374404][ T7135] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  108.377406][ T7135] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  108.380620][ T7135] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  108.383647][ T7135] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  108.386728][ T7135] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  108.390473][ T7135] XFS (loop2): metadata I/O error in "xfs_read_agi+0x272/0x5b0" at daddr 0x2 len 1 error 74
[  108.394405][ T7135] XFS (loop2): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[  108.397944][ T7135] XFS (loop2): Failed to read root inode 0x1140, error 117
[  108.401345][ T7135] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  109.323962][   T33] audit: type=1800 audit(1759224864.902:23): pid=7176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.505" name="file1" dev="tmpfs" ino=871 res=0 errno=0
[  109.598088][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'.
[  109.788189][ T7187] loop0: detected capacity change from 0 to 256
[  109.865616][ T7191] ceph: No source
[  110.129510][ T7195] loop1: detected capacity change from 0 to 4096
[  110.140391][   T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  110.170878][ T7198] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.302525][   T24] usb 1-1: too many configurations: 151, using maximum allowed: 8
[  110.355668][   T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  110.362500][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  110.365878][   T24] usb 1-1: Product: syz
[  110.369190][   T24] usb 1-1: Manufacturer: syz
[  110.371293][   T24] usb 1-1: SerialNumber: syz
[  110.388989][   T24] usb 1-1: config 0 descriptor??
[  110.429307][ T7200] loop2: detected capacity change from 0 to 32768
[  110.439135][ T7200] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.516 (7200)
[  110.453894][ T7200] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.476713][ T7200] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  110.574840][ T7200] BTRFS info (device loop2): enabling ssd optimizations
[  110.582227][ T7200] BTRFS info (device loop2): enabling free space tree
[  110.711219][ T5848] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.757885][   T24] ims_pcu 1-1:0.0: Zero length descriptor
[  110.765129][   T24] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22
[  110.775419][   T24] usb 1-1: USB disconnect, device number 6
[  111.561522][ T7234] loop0: detected capacity change from 0 to 1024
[  111.929511][   T33] audit: type=1326 audit(1759224867.502:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.2.532" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ae38ec29 code=0x7ffc0000
[  111.940689][   T33] audit: type=1326 audit(1759224867.512:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.2.532" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ae38ec29 code=0x7ffc0000
[  111.947334][   T33] audit: type=1326 audit(1759224867.512:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.2.532" exe="/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fc0ae38ec29 code=0x7ffc0000
[  111.954899][   T33] audit: type=1326 audit(1759224867.512:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.2.532" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ae38ec29 code=0x7ffc0000
[  111.962653][   T33] audit: type=1326 audit(1759224867.512:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.2.532" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ae38ec29 code=0x7ffc0000
[  112.827938][ T7271] pimreg: tun_chr_ioctl cmd 1074025676
[  112.829925][ T7271] pimreg: owner set to 60929
[  112.830091][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  112.990056][   T24] usb 2-1: Using ep0 maxpacket: 32
[  112.994428][   T24] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  112.997823][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.002314][   T24] usb 2-1: config 0 has no interface number 0
[  113.007090][   T24] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice= 4.be
[  113.011139][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.014247][   T24] usb 2-1: Product: syz
[  113.016029][   T24] usb 2-1: Manufacturer: syz
[  113.017977][   T24] usb 2-1: SerialNumber: syz
[  113.022696][   T24] usb 2-1: config 0 descriptor??
[  113.030627][   T24] kvaser_usb 2-1:0.89: error -ENODEV: Cannot get usb endpoint(s)
[  113.244104][   T10] usb 2-1: USB disconnect, device number 6
[  113.852098][ T7290] loop1: detected capacity change from 0 to 2048
[  113.867484][ T7290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.876498][ T7290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.212099][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  114.361850][   T10] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  114.365270][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.371107][   T10] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  114.374741][   T10] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  114.377870][   T10] usb 2-1: Manufacturer: syz
[  114.382437][   T10] usb 2-1: config 0 descriptor??
[  114.429959][   T10] rc_core: IR keymap rc-hauppauge not found
[  114.432362][   T10] Registered IR keymap rc-empty
[  114.436349][   T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  114.442458][   T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[  114.443673][   T24] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  114.602059][   T24] usb 3-1: LPM exit latency is zeroed, disabling LPM.
[  114.606398][   T24] usb 3-1: config 0 has no interfaces?
[  114.613282][   T24] usb 3-1: string descriptor 0 read error: -22
[  114.616082][   T24] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=9a.90
[  114.619890][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.626201][   T24] usb 3-1: config 0 descriptor??
[  114.796851][ T7305] rc rc0: two consecutive events of type space
[  114.849933][   T10] usb 3-1: USB disconnect, device number 9
[  115.005423][    T9] usb 2-1: USB disconnect, device number 7
[  115.033099][ T7311] loop0: detected capacity change from 0 to 512
[  115.199938][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[  115.408221][ T7313] syz.2.554 uses obsolete (PF_INET,SOCK_PACKET)
[  115.614845][ T7318] netlink: 48 bytes leftover after parsing attributes in process `syz.2.557'.
[  115.699329][ T7321] loop1: detected capacity change from 0 to 8
[  115.728850][ T7321] SQUASHFS error: zlib decompression failed, data probably corrupt
[  115.758678][ T7321] SQUASHFS error: Failed to read block 0x9b: -5
[  115.783048][ T7321] SQUASHFS error: Unable to read metadata cache entry [99]
[  115.785859][ T7321] SQUASHFS error: Unable to read inode 0x127
[  115.860833][   T33] audit: type=1400 audit(1759224871.442:29): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262620FF06579013531A18D214C21893D4D8C4DAB69C9913C2CCCFE6B640A125F90453E8518EA533252C0E08559DFC69A9F9D621D16DC6B6A70E6C67780E1FE75953D02768745C82C169A1E07F19860A50E0369469AC655A6ABBE04B91C65F09AFD5C64E190CEEF64CCB6001CAD2 pid=7316 comm="syz.1.556"
[  116.596461][ T7360] comedi comedi1: c6xdigio: I/O port conflict (0x401,3)
[  116.599385][ T7360] ------------[ cut here ]------------
[  116.601874][ T7360] Unexpected driver unregister!
[  116.604935][ T7360] WARNING: drivers/base/driver.c:273 at driver_unregister+0x94/0xb0, CPU#1: syz.2.574/7360
[  116.608518][ T7360] Modules linked in:
[  116.610691][ T7360] CPU: 1 UID: 0 PID: 7360 Comm: syz.2.574 Not tainted syzkaller #0 PREEMPT(full) 
[  116.615094][ T7360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.618901][ T7360] RIP: 0010:driver_unregister+0x94/0xb0
[  116.622256][ T7360] Code: e6 58 fc 48 89 df 5b 41 5e 41 5f e9 56 55 ff ff e8 61 3f b7 fb eb 05 e8 5a 3f b7 fb 90 48 c7 c7 e0 33 2a 8c e8 6d af 7a fb 90 <0f> 0b 90 90 5b 41 5e 41 5f e9 be 68 79 05 cc cc cc cc cc cc cc cc
[  116.629741][ T7360] RSP: 0018:ffffc90004487a20 EFLAGS: 00010246
[  116.632276][ T7360] RAX: 6bc4037a13152400 RBX: ffffffff8f5fc4e0 RCX: 0000000000080000
[  116.635433][ T7360] RDX: ffffc900095c1000 RSI: 0000000000000fc5 RDI: 0000000000000fc6
[  116.638650][ T7360] RBP: 0000000000000001 R08: ffffc90004487747 R09: 1ffff92000890ee8
[  116.642066][ T7360] R10: dffffc0000000000 R11: fffff52000890ee9 R12: ffff88802842a038
[  116.645240][ T7360] R13: ffffffff8f5fc430 R14: 0000000000000000 R15: dffffc0000000000
[  116.648514][ T7360] FS:  00007fc0af26e6c0(0000) GS:ffff8881a39fc000(0000) knlGS:0000000000000000
[  116.652261][ T7360] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.655019][ T7360] CR2: 00002000000012c0 CR3: 000000010f234000 CR4: 00000000000006f0
[  116.658283][ T7360] Call Trace:
[  116.659911][ T7360]  <TASK>
[  116.661160][ T7360]  comedi_device_detach_locked+0x178/0x750
[  116.663558][ T7360]  comedi_device_attach+0x5d4/0x720
[  116.665631][ T7360]  comedi_unlocked_ioctl+0x5ff/0x1020
[  116.667794][ T7360]  ? kasan_quarantine_put+0xdd/0x220
[  116.670134][ T7360]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  116.672559][ T7360]  ? __fget_files+0x2a/0x420
[  116.674468][ T7360]  ? __fget_files+0x3a0/0x420
[  116.676441][ T7360]  ? __fget_files+0x2a/0x420
[  116.678302][ T7360]  ? bpf_lsm_file_ioctl+0x9/0x20
[  116.680334][ T7360]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  116.682710][ T7360]  __se_sys_ioctl+0xfc/0x170
[  116.684606][ T7360]  do_syscall_64+0xfa/0xfa0
[  116.686469][ T7360]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.688652][ T7360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.691290][ T7360]  ? exc_page_fault+0xab/0x100
[  116.693256][ T7360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.695631][ T7360] RIP: 0033:0x7fc0ae38ec29
[  116.697415][ T7360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.705137][ T7360] RSP: 002b:00007fc0af26e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  116.708261][ T7360] RAX: ffffffffffffffda RBX: 00007fc0ae5d6090 RCX: 00007fc0ae38ec29
[  116.711478][ T7360] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003
[  116.714653][ T7360] RBP: 00007fc0ae411e41 R08: 0000000000000000 R09: 0000000000000000
[  116.717836][ T7360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.721117][ T7360] R13: 00007fc0ae5d6128 R14: 00007fc0ae5d6090 R15: 00007ffe9e9f57b8
[  116.724265][ T7360]  </TASK>
[  116.725591][ T7360] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  116.728506][ T7360] CPU: 1 UID: 0 PID: 7360 Comm: syz.2.574 Not tainted syzkaller #0 PREEMPT(full) 
[  116.732190][ T7360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.736186][ T7360] Call Trace:
[  116.737562][ T7360]  <TASK>
[  116.738769][ T7360]  dump_stack_lvl+0x99/0x250
[  116.740641][ T7360]  ? __asan_memcpy+0x40/0x70
[  116.742512][ T7360]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.744508][ T7360]  ? __pfx__printk+0x10/0x10
[  116.746437][ T7360]  vpanic+0x237/0x6d0
[  116.748089][ T7360]  ? __pfx_vpanic+0x10/0x10
[  116.749916][ T7360]  ? is_bpf_text_address+0x292/0x2b0
[  116.752072][ T7360]  ? is_bpf_text_address+0x26/0x2b0
[  116.754224][ T7360]  panic+0xb9/0xc0
[  116.755806][ T7360]  ? __pfx_panic+0x10/0x10
[  116.757649][ T7360]  __warn+0x334/0x4c0
[  116.759293][ T7360]  ? driver_unregister+0x94/0xb0
[  116.761270][ T7360]  ? driver_unregister+0x94/0xb0
[  116.763200][ T7360]  report_bug+0x2be/0x4f0
[  116.764983][ T7360]  ? driver_unregister+0x94/0xb0
[  116.767020][ T7360]  ? driver_unregister+0x94/0xb0
[  116.769050][ T7360]  ? driver_unregister+0x96/0xb0
[  116.771125][ T7360]  handle_bug+0x84/0x160
[  116.772907][ T7360]  exc_invalid_op+0x1a/0x50
[  116.774799][ T7360]  asm_exc_invalid_op+0x1a/0x20
[  116.776796][ T7360] RIP: 0010:driver_unregister+0x94/0xb0
[  116.779054][ T7360] Code: e6 58 fc 48 89 df 5b 41 5e 41 5f e9 56 55 ff ff e8 61 3f b7 fb eb 05 e8 5a 3f b7 fb 90 48 c7 c7 e0 33 2a 8c e8 6d af 7a fb 90 <0f> 0b 90 90 5b 41 5e 41 5f e9 be 68 79 05 cc cc cc cc cc cc cc cc
[  116.786450][ T7360] RSP: 0018:ffffc90004487a20 EFLAGS: 00010246
[  116.788964][ T7360] RAX: 6bc4037a13152400 RBX: ffffffff8f5fc4e0 RCX: 0000000000080000
[  116.792188][ T7360] RDX: ffffc900095c1000 RSI: 0000000000000fc5 RDI: 0000000000000fc6
[  116.795427][ T7360] RBP: 0000000000000001 R08: ffffc90004487747 R09: 1ffff92000890ee8
[  116.798615][ T7360] R10: dffffc0000000000 R11: fffff52000890ee9 R12: ffff88802842a038
[  116.801805][ T7360] R13: ffffffff8f5fc430 R14: 0000000000000000 R15: dffffc0000000000
[  116.805036][ T7360]  comedi_device_detach_locked+0x178/0x750
[  116.807425][ T7360]  comedi_device_attach+0x5d4/0x720
[  116.809625][ T7360]  comedi_unlocked_ioctl+0x5ff/0x1020
[  116.811834][ T7360]  ? kasan_quarantine_put+0xdd/0x220
[  116.814002][ T7360]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  116.816335][ T7360]  ? __fget_files+0x2a/0x420
[  116.818256][ T7360]  ? __fget_files+0x3a0/0x420
[  116.820208][ T7360]  ? __fget_files+0x2a/0x420
[  116.822117][ T7360]  ? bpf_lsm_file_ioctl+0x9/0x20
[  116.824148][ T7360]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  116.826499][ T7360]  __se_sys_ioctl+0xfc/0x170
[  116.828398][ T7360]  do_syscall_64+0xfa/0xfa0
[  116.830263][ T7360]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.832348][ T7360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.834844][ T7360]  ? exc_page_fault+0xab/0x100
[  116.836838][ T7360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.839182][ T7360] RIP: 0033:0x7fc0ae38ec29
[  116.840989][ T7360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.848704][ T7360] RSP: 002b:00007fc0af26e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  116.851918][ T7360] RAX: ffffffffffffffda RBX: 00007fc0ae5d6090 RCX: 00007fc0ae38ec29
[  116.855091][ T7360] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003
[  116.858171][ T7360] RBP: 00007fc0ae411e41 R08: 0000000000000000 R09: 0000000000000000
[  116.861403][ T7360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.864599][ T7360] R13: 00007fc0ae5d6128 R14: 00007fc0ae5d6090 R15: 00007ffe9e9f57b8
[  116.867679][ T7360]  </TASK>
[  116.869662][ T7360] Kernel Offset: disabled
[  116.871332][ T7360] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:34:32  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffffffff824d4cd8 RCX=ffff8880211b8000 RDX=0000000000000000
RSI=ffffffff8dd8dcaa RDI=ffffffff8c03da60 RBP=1ffff1100520ed6d RSP=ffffc90004307530
R8 =0000000000000000 R9 =ffffffff824d4cd8 R10=dffffc0000000000 R11=fffff52000860e88
R12=ffff888029076b00 R13=ffff888029076b18 R14=ffff888029076b00 R15=ffff888028f5f130
RIP=ffffffff8b7fa8fd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3d3a0ba6c0 ffffffff 00c00000
GS =0000 ffff8880b83fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000263030 CR3=000000002f7b6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0000000000ffff00 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000c2b5 RDI=000000000000c2b6 RBP=00000000000003f8 RSP=ffffc900044871d0
R8 =ffff8880217f0237 R9 =1ffff110042fe046 R10=dffffc0000000000 R11=ffffffff8556cf10
R12=dffffc0000000000 R13=ffffffff99d1990e R14=ffffffff9a00f5a0 R15=0000000000000000
RIP=ffffffff8556cf8c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc0af26e6c0 ffffffff 00c00000
GS =0000 ffff8881a39fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000012c0 CR3=000000010f234000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000006f696769
XMM02=00007fc0ae5a7498 00007fc0ae5a7470 XMM03=00007fc0ae5a74a8 00007fc0ae5a74a0
XMM04=00007fc0af10d100 00007fc0ae5a7460 XMM05=00007fc0ae5a7478 00007fc0ae5a74c0
XMM06=00007fc0ae5a74b8 00007fc0ae5a74b0 XMM07=00007fc0ae5a74a8 00007fc0ae5a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fc0ae412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
