last executing test programs:

7m34.199469205s ago: executing program 5 (id=346):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c)

7m32.823901855s ago: executing program 5 (id=352):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc)

7m32.382511961s ago: executing program 5 (id=355):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x3, 0x40000000000000, 0x3, 0x4, 0x0, 0x7572, {0x0, 0x0, 0x19b, 0x9, 0x0, 0x3, 0x1, 0x6, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x10000000, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, &(0x7f0000001140)=""/4096, 0x0, 0x0, 0x5}, 0x38)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f0000000480)="18607651149d7b10b4024fbbdc08899b8f589df2db8ebcd920a2b5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b250a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7")

7m32.019402237s ago: executing program 5 (id=359):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000380)='./bus\x00', 0x200880, &(0x7f0000000440)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078303030303030303030303030303030362c616c6c6f775f7574696d653d30303030303030303030303030303030303037373737372c757466382c757466382c6572726f72733d636f6e74696e75652c00b96565c0941c97570bbc7b02c07f780970d7661194c0cf3528e6f7090fdbf3d1ce5c354f013e96c495d8dd8ee8d05f0ed4152a0f085e2263b2a8c3dd78735da134da1353e5b55d8a588c22cc082a840800ae8bc2cf58e90d6995b2dc6cce8a107684bce7c7744ff115c110979f", @ANYRES8, @ANYRES8=0x0], 0x3, 0x1509, &(0x7f0000000f80)="$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")
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000002280)='.\x00', &(0x7f00000022c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00')

7m31.607516734s ago: executing program 5 (id=363):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
r1 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d})
io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, &(0x7f0000000140), 0x1)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180))

7m30.670950441s ago: executing program 5 (id=375):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x596f38d1, 0x7}, &(0x7f0000000100)=0xc)

7m29.901685063s ago: executing program 32 (id=375):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x596f38d1, 0x7}, &(0x7f0000000100)=0xc)

6m50.810631719s ago: executing program 2 (id=703):
r0 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r0, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4000)

6m50.517531592s ago: executing program 2 (id=707):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000010000001900000018000180140002006970766c616e31000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40)

6m49.29498708s ago: executing program 2 (id=723):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r2=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r2, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

6m48.975902555s ago: executing program 2 (id=726):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591)

6m48.485650728s ago: executing program 2 (id=729):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x100)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
removexattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000080)=@known='user.incfs.id\x00')

6m46.691508579s ago: executing program 2 (id=751):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2043, 0x0)

6m46.23063291s ago: executing program 33 (id=751):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2043, 0x0)

6m34.607342267s ago: executing program 6 (id=848):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0)

6m34.258174853s ago: executing program 6 (id=853):
syz_usb_connect(0x3, 0x2d, &(0x7f0000001680)={{0x12, 0x1, 0x250, 0x60, 0x24, 0x64, 0x8, 0x3fd, 0xebbe, 0x2ca5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x7, 0x0, 0x9, "", [{{0x9, 0x4, 0x96, 0x3, 0x1, 0xe3, 0x90, 0xbc, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x8, 0x12, 0x5, 0x9}}]}}]}}]}}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x1, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)

6m32.118776679s ago: executing program 6 (id=872):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200001, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

6m31.667977239s ago: executing program 6 (id=874):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000000900)=""/194, 0xc2)

6m30.597007533s ago: executing program 6 (id=885):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000340)={0x400007f5, 0x3500000, 0x100082}, 0xc)

6m29.942534386s ago: executing program 6 (id=891):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
setuid(0xee00)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000)

6m29.254895826s ago: executing program 34 (id=891):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
setuid(0xee00)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000)

1m50.191815581s ago: executing program 0 (id=3184):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x21}], 0x1)
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x400, 0x40002, 0x1e5}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=<r5=>0x0)
syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2, 0x0, r0}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0)

1m49.026647895s ago: executing program 0 (id=3190):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@barrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, 'io'}]}, 0x4)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mremap(&(0x7f0000a47000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

1m47.761284919s ago: executing program 0 (id=3202):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4)
listen(r0, 0x0)

1m47.358460468s ago: executing program 0 (id=3207):
socket$packet(0x11, 0xa, 0x300)
socket(0x10, 0x3, 0x4)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)

1m47.083871163s ago: executing program 0 (id=3213):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0)
write(r0, &(0x7f0000000900)='*', 0x1)

1m46.893949096s ago: executing program 0 (id=3214):
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x407, 0x4000004)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
capset(&(0x7f00000010c0)={0x19980330}, &(0x7f0000000340)={0x0, 0x200000, 0x0, 0x0, 0x8, 0x3})
fcntl$setpipe(r1, 0x407, 0x100000)

1m31.750810395s ago: executing program 35 (id=3214):
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x407, 0x4000004)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
capset(&(0x7f00000010c0)={0x19980330}, &(0x7f0000000340)={0x0, 0x200000, 0x0, 0x0, 0x8, 0x3})
fcntl$setpipe(r1, 0x407, 0x100000)

30.322723189s ago: executing program 7 (id=3759):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2020)
read$FUSE(r0, &(0x7f0000006d00)={0x2020}, 0x2020)

29.919146123s ago: executing program 7 (id=3762):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r1, &(0x7f0000000240)=ANY=[], 0xbb)
close(r1)

29.524738219s ago: executing program 7 (id=3767):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x12, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x6}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x4000014)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

28.402858644s ago: executing program 9 (id=3775):
syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x4016, &(0x7f0000002440)=ANY=[], 0xff, 0xc0c, &(0x7f0000001500)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x1a0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r0, 0xffffffffffffffff, 0x0)

28.19391439s ago: executing program 7 (id=3777):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00)

27.202924038s ago: executing program 7 (id=3788):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f00000000c0), 0x10)
sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x81, 0x4)
recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x2)

26.358572814s ago: executing program 9 (id=3796):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c80)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004001}, 0x10)

26.195441077s ago: executing program 7 (id=3798):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1}, 0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r1, 0x211d9572}, &(0x7f00000001c0)=0x8)

25.578633867s ago: executing program 36 (id=3798):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1}, 0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r1, 0x211d9572}, &(0x7f00000001c0)=0x8)

25.565399516s ago: executing program 9 (id=3803):
unshare(0x22020600)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x6637, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0x5ffffffe}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x40080)

25.324544845s ago: executing program 9 (id=3810):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

24.020476492s ago: executing program 9 (id=3821):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r0, &(0x7f00000007c0)=[{0x84, 0x74, 0x0, 0x0, @tick=0x1, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick=0x8, {0xfd}, {0x3}, @note={0x81}}, {0x6, 0x7, 0x9, 0x3, @time={0x2, 0xff}, {0x10, 0x5}, {0xce, 0x2}, @connect={{0xf, 0x2}, {0x7, 0xb}}}, {0xf7, 0xf1, 0x0, 0x1, @tick, {0x70, 0x3c}, {0x1}, @quote={{0x5, 0x6}, 0x6}}], 0x70)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c)

22.822816039s ago: executing program 9 (id=3832):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

22.259107708s ago: executing program 37 (id=3832):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

5.561438396s ago: executing program 1 (id=3923):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x3, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xc5661000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0))
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))

4.684486263s ago: executing program 4 (id=3929):
unshare(0x28040680)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0xa, 0x3, 0x0, 0x2}, 0x30, 0x0)
landlock_restrict_self(r1, 0x2)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)

4.48411863s ago: executing program 4 (id=3932):
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000201"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x6}]}}}}}}, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e110b"], 0xec)

4.072718988s ago: executing program 1 (id=3936):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00124788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

3.698514509s ago: executing program 8 (id=3940):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0)

3.618062077s ago: executing program 1 (id=3941):
syz_usb_connect(0x3, 0x32, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./mysys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='dummy_hcd.0\x00', 0xb)

3.217341743s ago: executing program 8 (id=3943):
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x88)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x10000a006)

3.001330972s ago: executing program 8 (id=3944):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'rw\x00'}, 0x9)
write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9)

2.649298765s ago: executing program 8 (id=3946):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xc0}}, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c)

2.487315304s ago: executing program 8 (id=3947):
syz_mount_image$hfs(&(0x7f0000000840), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB='codepage=iso8859-2,iocharset=default,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c008b1b7e1447e0e4a2b51ef3fa706f346ff1ad27d705714e14ad1eedf4bdc9b633cbb5e7e4ec4501004203bcdf6e085cdef4fad42c38b30ac586c0b83b4ecf0e63dd74069544e97b2df39fba32b0798b4e239cb15b208fbcc861d1d10fa47392d0129ecc276f358499856c9bcbf096294194a8152d8a658c832c39a2ef894567e2715ede536beb7d284b6266377eaab131e249a57dc708a1c168c993e57d67c7b3c4f22ece4ca07672f8ba37ff0cc7b9cd651895d0b0ad5641fbcd7aec4418bad435d5842ff5f655b1c6faec3604bbbffdeef04710000000ad94d2d39a"], 0x5, 0x2e9, &(0x7f0000006440)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

2.400253355s ago: executing program 4 (id=3948):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="4673c875ca4d9cb6f1d39f116100f2510db1e88217a55acb8319f17ef647c524516c0e45ec91a98a614276cb321854", 0x2f}, {&(0x7f0000000400)="e146badcd6aca239c46b952e5dd493f4578940a27af1978ab8560c3b60f6060b76497e6650431a4ddd927750aae5b1792d322a1b3e349e18eb", 0x39}], 0x2)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}})

2.239700906s ago: executing program 3 (id=3949):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
sendmsg$tipc(r0, &(0x7f0000000700)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0xffffffff}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000500)="0cd44a58", 0x4}], 0x1, 0x0, 0x0, 0x20000000}, 0x80)

2.144092316s ago: executing program 1 (id=3950):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xffff, 0x3, 0x91c, 0x218b}, 'syz0\x00', 0x13})
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

2.142002839s ago: executing program 8 (id=3951):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x2, [{}, {}]}, 0x48)

1.976252395s ago: executing program 4 (id=3952):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

1.952202894s ago: executing program 3 (id=3953):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
r1 = fanotify_init(0x2, 0x1000)
fanotify_mark(r1, 0x1, 0x48001021, r0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
fanotify_mark(r1, 0x641, 0x1038, r2, 0x0)

1.679267218s ago: executing program 3 (id=3954):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r0, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x5)
flock(r1, 0x6)

1.669067852s ago: executing program 1 (id=3955):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d)
r1 = socket(0x1e, 0x4, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x10)
sendfile(r1, r0, 0x0, 0x8010002b)

1.339493714s ago: executing program 3 (id=3956):
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)

1.328638064s ago: executing program 4 (id=3957):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x11, 0xa, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe9b, 0x6000002f, &(0x7f0000000500)="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", 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)

894.609665ms ago: executing program 4 (id=3958):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

477.767484ms ago: executing program 1 (id=3959):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x15, 0x5, 0x0)
socket(0x40000000015, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2716, 0x0, &(0x7f0000000040))

126.089132ms ago: executing program 3 (id=3960):
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}], &(0x7f00000005c0), 0x2}, 0x20)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x2, 0x77f83464)
pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x3}], 0x10000000000000a3, 0x0, 0x0)

0s ago: executing program 3 (id=3961):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x0, {0xa, 0x4e23, 0x9, @mcast1, 0x97}}}, 0x80, 0x0}, 0x2000f765)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'})

kernel console output (not intermixed with test programs):

yz
[  476.143665][ T5352] usb 5-1: Manufacturer: syz
[  476.157505][ T5352] usb 5-1: SerialNumber: syz
[  476.441630][ T5352] usbhid 5-1:1.0: can't add hid device: -71
[  476.454457][ T5352] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  476.482963][ T5352] usb 5-1: USB disconnect, device number 17
[  476.514469][T14429] XFS (loop1): Quotacheck: Done.
[  476.920500][T14490] tap0: tun_chr_ioctl cmd 1074025675
[  476.937690][T14490] tap0: persist enabled
[  476.954813][T14490] tap0: tun_chr_ioctl cmd 1074025675
[  476.980176][T14490] tap0: persist enabled
[  477.036154][ T5621] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  477.353252][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3135'.
[  477.385991][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3135'.
[  477.399583][  T803] net_ratelimit: 6 callbacks suppressed
[  477.399607][  T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.413741][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.889541][ T5352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.908762][T14520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.206046][T14519] loop1: detected capacity change from 0 to 32768
[  478.213938][T14519] btrfs: Deprecated parameter 'usebackuproot'
[  478.220125][T14519] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  478.231999][T14519] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3130 (14519)
[  478.249363][T14519] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  478.259555][T14519] BTRFS info (device loop1): using crc32c checksum algorithm
[  478.266983][T14519] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  478.341657][ T6804] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  478.367080][T14519] BTRFS error (device loop1): failed to load root extent
[  478.375712][T14519] BTRFS warning (device loop1): try to load backup roots slot 1
[  478.384931][ T6799] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  478.407043][T14519] BTRFS warning (device loop1): couldn't read tree root
[  478.414630][T14519] BTRFS warning (device loop1): try to load backup roots slot 2
[  478.422851][ T1146] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  478.468671][  T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.477150][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.549052][T14519] BTRFS warning (device loop1): couldn't read tree root
[  478.556285][T14519] BTRFS warning (device loop1): try to load backup roots slot 3
[  478.579472][T14519] BTRFS info (device loop1): rebuilding free space tree
[  478.649329][T14519] BTRFS info (device loop1): disabling free space tree
[  478.656536][T14519] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  478.669418][T14519] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  478.685737][T14519] BTRFS info (device loop1): checking UUID tree
[  478.694571][T14519] BTRFS info (device loop1): enabling ssd optimizations
[  478.701787][T14519] BTRFS info (device loop1): turning on async discard
[  478.709540][T14519] BTRFS info (device loop1): enabling disk space caching
[  478.716588][T14519] BTRFS info (device loop1): force clearing of disk cache
[  478.723800][T14519] BTRFS info (device loop1): enabling auto defrag
[  478.730277][T14519] BTRFS info (device loop1): trying to use backup root at mount time
[  478.738457][T14519] BTRFS info (device loop1): use zstd compression, level 3
[  479.008264][T14558] loop4: detected capacity change from 0 to 1024
[  479.075120][ T5621] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  479.109305][T14558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  479.560210][  T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.568845][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.623018][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.631819][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.279064][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.659201][T14588] loop3: detected capacity change from 0 to 8192
[  480.799457][  T803] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  480.988940][  T803] usb 5-1: Using ep0 maxpacket: 8
[  480.996362][  T803] usb 5-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30
[  481.012633][T13807] kernel read not supported for file /vga_arbiter (pid: 13807 comm: kworker/1:7)
[  481.022533][  T803] usb 5-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  481.048077][  T803] usb 5-1: config 0 interface 0 has no altsetting 0
[  481.065067][  T803] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  481.085238][  T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.112857][  T803] usb 5-1: config 0 descriptor??
[  481.585845][  T803] uclogic 0003:5543:0042.0015: unexpected long global item
[  481.615222][  T803] uclogic 0003:5543:0042.0015: parse failed
[  481.642460][  T803] uclogic 0003:5543:0042.0015: probe with driver uclogic failed with error -22
[  481.780915][  T803] usb 5-1: USB disconnect, device number 18
[  482.065361][T14605] loop7: detected capacity change from 0 to 32768
[  482.569863][T14628] loop4: detected capacity change from 0 to 512
[  482.611554][T14628] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  482.656423][   T30] audit: type=1326 audit(1785572565.497:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.0.3184" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfbd9e019 code=0x7ffc0000
[  482.747714][  T803] net_ratelimit: 7 callbacks suppressed
[  482.747736][  T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.755114][   T30] audit: type=1326 audit(1785572565.497:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.0.3184" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfbd9e019 code=0x7ffc0000
[  482.761884][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.890836][T14634] loop7: detected capacity change from 0 to 1024
[  482.901650][   T30] audit: type=1326 audit(1785572565.537:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.0.3184" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfbd9e019 code=0x7ffc0000
[  482.934300][T14634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  482.995364][T14628] EXT4-fs (loop4): failed to open journal device unknown-block(238,156) -ENXIO
[  483.005249][   T30] audit: type=1326 audit(1785572565.537:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.0.3184" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfbd9e019 code=0x7ffc0000
[  483.057058][T14634] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  483.073766][   T30] audit: type=1326 audit(1785572565.557:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.0.3184" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f0cfbd9e019 code=0x7ffc0000
[  483.100153][   T30] audit: type=1326 audit(1785572565.557:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.0.3184" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfbd9e019 code=0x7ffc0000
[  483.126548][   T30] audit: type=1326 audit(1785572565.557:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.0.3184" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfbd9e019 code=0x7ffc0000
[  483.167572][   T30] audit: type=1326 audit(1785572565.557:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.0.3184" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfbd9e019 code=0x7ffc0000
[  483.211630][T14628] loop4: detected capacity change from 0 to 642
[  483.245591][T14628] EXT4-fs (loop4): failed to parse options in superblock: ÿÿ
[  483.273783][   T30] audit: type=1326 audit(1785572565.557:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.0.3184" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfbd9e019 code=0x7ffc0000
[  483.306559][T14628] EXT4-fs (loop4): Invalid default hash set in the superblock
[  483.368971][ T8012] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.405699][   T30] audit: type=1326 audit(1785572565.557:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.0.3184" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0cfbd9e019 code=0x7ffc0000
[  483.787877][T13807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.796422][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.867561][  T803] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  483.948544][ T5352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.037801][  T803] usb 5-1: unable to get BOS descriptor or descriptor too short
[  484.058401][  T803] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  484.084776][  T803] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  484.103386][  T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.132322][  T803] usb 5-1: Product: syz
[  484.152864][  T803] usb 5-1: Manufacturer: syz
[  484.168900][  T803] usb 5-1: SerialNumber: syz
[  484.488292][  T803] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  484.506579][T14660] netlink: 'syz.3.3196': attribute type 11 has an invalid length.
[  484.625349][  T803] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  484.657982][  T803] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[  484.832785][T13807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.841328][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.870742][ T1146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.879243][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.059152][  T803] usb 5-1: invalid uac2 rates
[  485.081894][  T803] usb 5-1: invalid uac2 rates
[  485.107823][  T803] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  485.128353][  T803] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[  485.152719][ T6812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.257615][  T803] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  485.539878][  T803] usb 5-1: USB disconnect, device number 19
[  485.850905][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  485.869548][T14694] input: syz0 as /devices/virtual/input/input33
[  486.174395][T14707] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  488.128697][T14759] loop3: detected capacity change from 0 to 64
[  488.226902][   T30] kauditd_printk_skb: 62 callbacks suppressed
[  488.226924][   T30] audit: type=1800 audit(1785572571.067:277): pid=14759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3240" name="file1" dev="loop3" ino=21 res=0 errno=0
[  488.577815][T14741] loop4: detected capacity change from 0 to 32768
[  488.626910][T14741] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  488.638858][ T5622] hfs: node 4:3 still has 1 user(s)!
[  488.807125][T14741] XFS (loop4): Ending clean mount
[  489.255806][ T5634] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  489.608748][T14793] loop1: detected capacity change from 0 to 512
[  489.683014][T14793] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3252: iget: bad i_size value: 38620345925642
[  489.796340][T14793] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  489.797634][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  489.813324][    C1] EXT4-fs (loop1): initial error at time 1785572572: ext4_orphan_get:1399: inode 15
[  489.822765][    C1] EXT4-fs (loop1): last error at time 1785572572: ext4_orphan_get:1399: inode 15
[  489.845667][T14793] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3252: couldn't read orphan inode 15 (err -117)
[  489.896388][T14793] loop1: lost filesystem error report for type 5 error -117
[  489.901665][T14793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  490.173607][ T6812] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:18: bg 0: block 5: invalid block bitmap
[  490.323051][T14811] serio: Serial port ptm0
[  490.423703][ T6812] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  490.439065][T14815] netlink: 'syz.8.3259': attribute type 4 has an invalid length.
[  490.459201][ T6812] EXT4-fs (loop1): This should not happen!! Data will be lost
[  490.459201][ T6812] 
[  490.481443][ T6812] EXT4-fs (loop1): Total free blocks count 0
[  490.498037][ T6812] EXT4-fs (loop1): Free/Dirty block details
[  490.511468][ T6812] EXT4-fs (loop1): free_blocks=0
[  490.522858][ T6812] EXT4-fs (loop1): dirty_blocks=1
[  490.537789][ T6812] EXT4-fs (loop1): Block reservation details
[  490.550616][ T6812] EXT4-fs (loop1): i_reserved_data_blocks=1
[  490.570029][ T5621] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  490.601361][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.856609][T14819] tipc: Started in network mode
[  490.886702][T14819] tipc: Node identity 2007ff, cluster identity 4711
[  490.912313][T14819] tipc: Node number set to 2099199
[  491.039432][  T803] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  491.208503][  T803] usb 5-1: Using ep0 maxpacket: 8
[  491.223091][  T803] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  491.241989][  T803] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  491.264619][T14832] Invalid argument reading file caps for ./file0
[  491.275491][  T803] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  491.295909][  T803] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  491.317662][  T803] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  491.353160][  T803] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  491.398149][  T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.509102][T14834] all (unregistering): Released all slaves
[  491.621430][T14817] loop3: detected capacity change from 0 to 32768
[  491.639860][  T803] usb 5-1: usb_control_msg returned -32
[  491.658246][  T803] usbtmc 5-1:16.0: can't read capabilities
[  491.690516][T14817] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  491.986588][T14817] XFS (loop3): Ending clean mount
[  492.483704][   T30] audit: type=1800 audit(1785572575.327:278): pid=14855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3260" name="file1" dev="loop3" ino=9286 res=0 errno=0
[  492.583084][   T30] audit: type=1800 audit(1785572575.347:279): pid=14817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3260" name="bus" dev="loop3" ino=9289 res=0 errno=0
[  492.698901][ T5622] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  492.968412][T14847] loop7: detected capacity change from 0 to 131072
[  492.995946][T14847] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0)
[  493.006607][T14847] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  493.053865][T14847] F2FS-fs (loop7): invalid crc value
[  493.233396][T14847] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  493.269616][T14847] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  493.276747][T14847] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  493.630621][  T803] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  493.890323][ T5352] usb 5-1: USB disconnect, device number 20
[  494.064402][T14873] loop3: detected capacity change from 0 to 40427
[  494.082490][T14873] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  494.089878][T14873] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  494.098644][T14873] F2FS-fs (loop3): Image doesn't support compression
[  494.109163][T14873] F2FS-fs (loop3): invalid crc value
[  494.183727][  T803] usb 2-1: Using ep0 maxpacket: 32
[  494.194574][T14873] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  494.207885][T14873] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0
[  494.215525][T14873] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  494.226567][T14873] F2FS-fs (loop3): Start checkpoint disabled!
[  494.244552][T14873] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0
[  494.259472][T14873] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  494.266702][T14873] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  494.275559][  T803] usb 2-1: config 32 has an invalid interface number: 85 but max is 0
[  494.304680][  T803] usb 2-1: config 32 has no interface number 0
[  494.332147][  T803] usb 2-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  494.376326][  T803] usb 2-1: config 32 interface 85 has no altsetting 0
[  494.415479][  T803] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  494.445936][  T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.487441][  T803] usb 2-1: Product: syz
[  494.500597][  T803] usb 2-1: Manufacturer: syz
[  494.507246][ T6812] kworker/u8:18: attempt to access beyond end of device
[  494.507246][ T6812] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  494.510193][  T803] usb 2-1: SerialNumber: syz
[  494.574217][ T6812] CPU: 0 UID: 0 PID: 6812 Comm: kworker/u8:18 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  494.574258][ T6812] Tainted: [L]=SOFTLOCKUP
[  494.574268][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  494.574285][ T6812] Workqueue: writeback wb_workfn (flush-7:3)
[  494.574329][ T6812] Call Trace:
[  494.574339][ T6812]  <TASK>
[  494.574351][ T6812]  dump_stack_lvl+0xe8/0x150
[  494.574394][ T6812]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  494.574436][ T6812]  f2fs_write_end_io+0x124b/0x1710
[  494.574504][ T6812]  __submit_merged_bio+0x258/0x6a0
[  494.574537][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.574568][ T6812]  ? rcu_is_watching+0x15/0xb0
[  494.574602][ T6812]  f2fs_submit_merged_write+0x27d/0x380
[  494.574644][ T6812]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  494.574686][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.574726][ T6812]  f2fs_sync_node_pages+0x1055/0x1210
[  494.574783][ T6812]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  494.574897][ T6812]  ? __percpu_counter_sum+0x1c6/0x1f0
[  494.575002][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.575035][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.575063][ T6812]  ? blk_start_plug+0x51/0x1b0
[  494.575148][ T6812]  f2fs_write_node_pages+0x311/0x700
[  494.575189][ T6812]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  494.575229][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.575258][ T6812]  ? set_raw_inline+0x28b/0x390
[  494.575289][ T6812]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  494.575331][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.575364][ T6812]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  494.575399][ T6812]  do_writepages+0x338/0x560
[  494.575445][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.575475][ T6812]  ? reacquire_held_locks+0x104/0x190
[  494.575501][ T6812]  ? writeback_sb_inodes+0x450/0x1b00
[  494.575545][ T6812]  __writeback_single_inode+0x12e/0xf90
[  494.575591][ T6812]  writeback_sb_inodes+0x9de/0x1b00
[  494.575654][ T6812]  ? __lock_acquire+0x683/0x2cf0
[  494.575721][ T6812]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  494.575805][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.575834][ T6812]  ? rcu_is_watching+0x15/0xb0
[  494.575858][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.575892][ T6812]  ? queue_io+0x2d3/0x470
[  494.575929][ T6812]  wb_writeback+0x41c/0xad0
[  494.575964][ T6812]  ? queue_io+0x2d1/0x470
[  494.576004][ T6812]  ? __pfx_wb_writeback+0x10/0x10
[  494.576032][ T6812]  ? do_raw_spin_lock+0x12b/0x2f0
[  494.576081][ T6812]  wb_workfn+0x431/0x10f0
[  494.576128][ T6812]  ? __pfx_wb_workfn+0x10/0x10
[  494.576154][ T6812]  ? irqentry_exit+0x218/0x8f0
[  494.576187][ T6812]  ? lockdep_hardirqs_on+0x7a/0x110
[  494.576217][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.576244][ T6812]  ? irqentry_exit+0x218/0x8f0
[  494.576273][ T6812]  ? trace_irq_disable+0x3b/0x140
[  494.576314][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.576341][ T6812]  ? do_raw_spin_lock+0x12b/0x2f0
[  494.576373][ T6812]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  494.576405][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.576477][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.576513][ T6812]  ? rcu_is_watching+0x15/0xb0
[  494.576536][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.576565][ T6812]  ? process_scheduled_works+0xa20/0x14e0
[  494.576596][ T6812]  process_scheduled_works+0xa8e/0x14e0
[  494.576660][ T6812]  ? __pfx_process_scheduled_works+0x10/0x10
[  494.576696][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.576724][ T6812]  ? assign_work+0x3cf/0x5d0
[  494.576757][ T6812]  worker_thread+0xa47/0xfb0
[  494.576789][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.576830][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.576859][ T6812]  ? __kthread_parkme+0x71/0x1f0
[  494.576910][ T6812]  kthread+0x388/0x470
[  494.576948][ T6812]  ? __pfx_worker_thread+0x10/0x10
[  494.576976][ T6812]  ? __pfx_kthread+0x10/0x10
[  494.577015][ T6812]  ret_from_fork+0x514/0xb70
[  494.577060][ T6812]  ? __pfx_ret_from_fork+0x10/0x10
[  494.577115][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.577143][ T6812]  ? __switch_to+0xc89/0x1420
[  494.577183][ T6812]  ? __pfx_kthread+0x10/0x10
[  494.577220][ T6812]  ret_from_fork_asm+0x1a/0x30
[  494.577264][ T6812]  </TASK>
[  495.007763][ T6812] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  495.019895][ T6812] CPU: 1 UID: 0 PID: 6812 Comm: kworker/u8:18 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  495.019932][ T6812] Tainted: [L]=SOFTLOCKUP
[  495.019997][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  495.020013][ T6812] Workqueue: writeback wb_workfn (flush-7:3)
[  495.020054][ T6812] Call Trace:
[  495.020064][ T6812]  <TASK>
[  495.020075][ T6812]  dump_stack_lvl+0xe8/0x150
[  495.020117][ T6812]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  495.020159][ T6812]  f2fs_write_end_io+0x124b/0x1710
[  495.020221][ T6812]  __submit_merged_bio+0x258/0x6a0
[  495.020253][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.020282][ T6812]  ? rcu_is_watching+0x15/0xb0
[  495.020315][ T6812]  f2fs_submit_merged_write+0x27d/0x380
[  495.020354][ T6812]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  495.020395][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.020441][ T6812]  f2fs_sync_node_pages+0x1055/0x1210
[  495.020497][ T6812]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  495.020529][ T6812]  ? __percpu_counter_sum+0x1c6/0x1f0
[  495.020598][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.020629][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.020658][ T6812]  ? blk_start_plug+0x51/0x1b0
[  495.020700][ T6812]  f2fs_write_node_pages+0x311/0x700
[  495.020740][ T6812]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  495.020778][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.020806][ T6812]  ? set_raw_inline+0x28b/0x390
[  495.020837][ T6812]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  495.020863][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.020895][ T6812]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  495.020928][ T6812]  do_writepages+0x338/0x560
[  495.020974][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.021002][ T6812]  ? reacquire_held_locks+0x104/0x190
[  495.021029][ T6812]  ? writeback_sb_inodes+0x450/0x1b00
[  495.021071][ T6812]  __writeback_single_inode+0x12e/0xf90
[  495.021116][ T6812]  writeback_sb_inodes+0x9de/0x1b00
[  495.021148][ T6812]  ? __lock_acquire+0x683/0x2cf0
[  495.021214][ T6812]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  495.021297][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.021326][ T6812]  ? rcu_is_watching+0x15/0xb0
[  495.021349][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.021377][ T6812]  ? queue_io+0x2d3/0x470
[  495.021415][ T6812]  wb_writeback+0x41c/0xad0
[  495.021458][ T6812]  ? queue_io+0x2d1/0x470
[  495.021499][ T6812]  ? __pfx_wb_writeback+0x10/0x10
[  495.021530][ T6812]  ? do_raw_spin_lock+0x12b/0x2f0
[  495.021579][ T6812]  wb_workfn+0x431/0x10f0
[  495.021629][ T6812]  ? __pfx_wb_workfn+0x10/0x10
[  495.021655][ T6812]  ? irqentry_exit+0x218/0x8f0
[  495.021688][ T6812]  ? lockdep_hardirqs_on+0x7a/0x110
[  495.021718][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.021756][ T6812]  ? irqentry_exit+0x218/0x8f0
[  495.021785][ T6812]  ? trace_irq_disable+0x3b/0x140
[  495.021827][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.021855][ T6812]  ? do_raw_spin_lock+0x12b/0x2f0
[  495.021889][ T6812]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  495.021922][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.021954][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.021992][ T6812]  ? rcu_is_watching+0x15/0xb0
[  495.022016][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.022047][ T6812]  ? process_scheduled_works+0xa20/0x14e0
[  495.022079][ T6812]  process_scheduled_works+0xa8e/0x14e0
[  495.022143][ T6812]  ? __pfx_process_scheduled_works+0x10/0x10
[  495.022180][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.022208][ T6812]  ? assign_work+0x3cf/0x5d0
[  495.022244][ T6812]  worker_thread+0xa47/0xfb0
[  495.022323][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.022365][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.022394][ T6812]  ? __kthread_parkme+0x71/0x1f0
[  495.022446][ T6812]  kthread+0x388/0x470
[  495.022483][ T6812]  ? __pfx_worker_thread+0x10/0x10
[  495.022513][ T6812]  ? __pfx_kthread+0x10/0x10
[  495.022551][ T6812]  ret_from_fork+0x514/0xb70
[  495.022594][ T6812]  ? __pfx_ret_from_fork+0x10/0x10
[  495.022631][ T6812]  ? srso_alias_return_thunk+0x5/0xfbef5
[  495.022659][ T6812]  ? __switch_to+0xc89/0x1420
[  495.022697][ T6812]  ? __pfx_kthread+0x10/0x10
[  495.022736][ T6812]  ret_from_fork_asm+0x1a/0x30
[  495.022781][ T6812]  </TASK>
[  495.022838][ T6812] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  495.505794][ T5767] loop3: lost filesystem error report for type 5 error -108
[  495.784751][  T803] appletouch 2-1:32.85: Geyser mode initialized.
[  495.862595][  T803] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.85/input/input34
[  495.863286][T14887] loop4: detected capacity change from 0 to 512
[  495.940281][T14887] EXT4-fs (loop4): Test dummy encryption mode enabled
[  495.981506][T14887] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3285: inode has both inline data and extents flags
[  496.021719][T14887] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  496.022469][T14887] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3285: couldn't read orphan inode 15 (err -117)
[  496.031875][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  496.031902][    C1] EXT4-fs (loop4): initial error at time 1785572578: ext4_orphan_get:1399: inode 15
[  496.031941][    C1] EXT4-fs (loop4): last error at time 1785572578: ext4_orphan_get:1399: inode 15
[  496.071936][T14887] loop4: lost filesystem error report for type 5 error -117
[  496.165732][T14887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  496.381381][  T803] usb 2-1: USB disconnect, device number 16
[  496.449688][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.563723][  T803] appletouch 2-1:32.85: input: appletouch disconnected
[  496.659262][T14895] netlink: 'syz.3.3283': attribute type 10 has an invalid length.
[  496.742225][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3283'.
[  496.795929][T14895] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  496.829435][T14900] vlan2: left allmulticast mode
[  496.853189][T14900] geneve0: left allmulticast mode
[  496.874679][T14900] vlan2: left promiscuous mode
[  496.911142][T14900] geneve0: left promiscuous mode
[  496.964743][T14900] bridge0: port 3(vlan2) entered disabled state
[  497.127928][T14900] bond0: (slave bridge0): Releasing backup interface
[  497.639952][T14911] loop1: detected capacity change from 0 to 32768
[  497.708498][T14911] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  497.740562][T14911] JBD2: Ignoring recovery information on journal
[  497.811882][T14911] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  497.935964][   T30] audit: type=1800 audit(1785572580.777:280): pid=14911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3294" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  498.178792][T14921] loop4: detected capacity change from 0 to 128
[  498.279990][T14921] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  498.312901][T14921] System zones: 1-3, 19-19, 35-36
[  498.323436][ T5621] ocfs2: Unmounting device (7,1) on (node local)
[  498.396574][T14921] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  498.461183][T14921] ext4 filesystem being mounted at /514/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  498.815676][ T5634] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  500.282462][T14963] loop3: detected capacity change from 0 to 32768
[  500.331270][T14963] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  500.460831][T14975] loop4: detected capacity change from 0 to 256
[  500.513995][   T30] audit: type=1800 audit(1785572583.357:281): pid=14975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3314" name="file2" dev="loop4" ino=1048736 res=0 errno=0
[  500.580757][T14963] XFS (loop3): Ending clean mount
[  500.688936][T14963] XFS (loop3): Quotacheck needed: Please wait.
[  501.065353][T14963] XFS (loop3): Quotacheck: Done.
[  501.548414][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  501.562598][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  501.575690][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  501.584907][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  501.593153][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  501.737281][ T5622] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  502.522114][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  502.528778][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  502.593117][ T5856] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  502.669307][ T5856] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  502.897235][T15018] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3329'.
[  503.052891][T15012] loop3: detected capacity change from 0 to 4096
[  503.088384][T15016] loop7: detected capacity change from 0 to 32768
[  503.099660][T15012] ext4: Unknown parameter 'seclabel'
[  503.133392][T15016] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  503.142164][T15016] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  503.201713][T15016] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  503.235005][ T5856] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  503.257659][ T5856] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  503.627951][ T5623] Bluetooth: hci6: command tx timeout
[  503.683974][ T5856] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 426ms
[  503.805276][ T5856] gfs2: fsid=syz:syz.0: jid=0: Done
[  503.842774][T15016] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  504.012242][T15016] gfs2: fsid=syz:syz.0: found 1 quota changes
[  504.263872][T15031] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0
[  504.298068][T15031] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  504.356288][T15031] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  504.379423][T15031] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  504.390356][T15031] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  504.475730][T15031] gfs2: fsid=syz:syz.0: gfs2_quotad: sync error -5
[  504.533064][ T8012] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  504.578805][ T8012] CPU: 0 UID: 0 PID: 8012 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  504.578848][ T8012] Tainted: [L]=SOFTLOCKUP
[  504.578857][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  504.578874][ T8012] Call Trace:
[  504.578884][ T8012]  <TASK>
[  504.578895][ T8012]  dump_stack_lvl+0xe8/0x150
[  504.578943][ T8012]  gfs2_assert_warn_i+0x18c/0x2c0
[  504.578982][ T8012]  gfs2_qd_dispose+0x444/0x540
[  504.579028][ T8012]  gfs2_quota_cleanup+0x42d/0x770
[  504.579070][ T8012]  ? __pfx_gfs2_quota_cleanup+0x10/0x10
[  504.579110][ T8012]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.579144][ T8012]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.579179][ T8012]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.579218][ T8012]  gfs2_make_fs_ro+0x2a0/0x320
[  504.579254][ T8012]  ? __pfx_gfs2_make_fs_ro+0x10/0x10
[  504.579286][ T8012]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.579321][ T8012]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.579353][ T8012]  ? srso_alias_return_thunk+0x5/0xfbef5
[  504.579381][ T8012]  ? flush_work+0xd/0x30
[  504.579422][ T8012]  gfs2_put_super+0x235/0x870
[  504.579470][ T8012]  ? __pfx_gfs2_put_super+0x10/0x10
[  504.579503][ T8012]  generic_shutdown_super+0x13d/0x2d0
[  504.579548][ T8012]  kill_block_super+0x44/0x90
[  504.579576][ T8012]  deactivate_locked_super+0xbc/0x130
[  504.579618][ T8012]  cleanup_mnt+0x3d3/0x460
[  504.579649][ T8012]  task_work_run+0x1d9/0x270
[  504.579678][ T8012]  ? __pfx_task_work_run+0x10/0x10
[  504.579719][ T8012]  exit_to_user_mode_loop+0x1fa/0x730
[  504.579756][ T8012]  ? rcu_is_watching+0x15/0xb0
[  504.579784][ T8012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.579811][ T8012]  do_syscall_64+0x353/0x580
[  504.579846][ T8012]  ? trace_irq_disable+0x3b/0x140
[  504.579888][ T8012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.579914][ T8012] RIP: 0033:0x7fa61db9f257
[  504.579938][ T8012] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  504.579959][ T8012] RSP: 002b:00007ffedbca0838 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  504.580050][ T8012] RAX: 0000000000000000 RBX: 00007fa61dc3445c RCX: 00007fa61db9f257
[  504.580067][ T8012] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedbca08f0
[  504.580083][ T8012] RBP: 00007ffedbca08f0 R08: 00007ffedbca18f0 R09: 00000000ffffffff
[  504.580100][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffedbca1980
[  504.580117][ T8012] R13: 00007fa61dc3445c R14: 000000000007b0d7 R15: 00007ffedbca19c0
[  504.580156][ T8012]  </TASK>
[  505.028844][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3335'.
[  505.037911][T15036] netlink: 'syz.3.3335': attribute type 30 has an invalid length.
[  505.062510][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3335'.
[  505.071655][T15036] netlink: 'syz.3.3335': attribute type 30 has an invalid length.
[  505.104699][ T1146] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  505.152875][ T1146] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  505.214461][ T1146] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  505.250885][ T5856] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  505.310636][ T6801] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  505.407507][ T5856] usb 5-1: Using ep0 maxpacket: 8
[  505.414911][ T5856] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  505.426120][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.566758][ T5856] pvrusb2: Hardware description: Terratec Grabster AV400
[  505.609955][ T5856] pvrusb2: **********
[  505.626120][ T5856] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  505.662580][T15041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3337'.
[  505.676955][ T5856] pvrusb2: Important functionality might not be entirely working.
[  505.686127][ T5856] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  505.698302][ T5856] pvrusb2: **********
[  505.712270][ T5623] Bluetooth: hci6: command tx timeout
[  505.738702][ T2360] pvrusb2: Invalid write control endpoint
[  505.762577][T15045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3337'.
[  505.941932][ T5856] usb 5-1: USB disconnect, device number 21
[  506.035050][ T2360] pvrusb2: Invalid write control endpoint
[  506.044438][ T2360] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  506.056008][ T2360] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  506.069790][ T2360] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  506.082164][ T2360] pvrusb2: Device being rendered inoperable
[  506.154821][ T2360] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  506.164307][ T2360] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  506.226687][ T2360] pvrusb2: Attached sub-driver cx25840
[  506.239194][ T2360] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  506.261750][ T2360] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  506.997833][T15063] 8021q: adding VLAN 0 to HW filter on device bond1
[  507.341282][T15083] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  507.457029][T15090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3356'.
[  507.626039][T15094] loop7: detected capacity change from 0 to 512
[  507.723949][T15094] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  507.787453][ T5623] Bluetooth: hci6: command tx timeout
[  508.008635][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3361'.
[  508.124106][ T6812] team0: left allmulticast mode
[  508.126053][ T8012] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.139689][ T6812] batadv0: left allmulticast mode
[  508.157179][ T6812] team0: left promiscuous mode
[  508.175304][ T6812] batadv0: left promiscuous mode
[  508.237912][ T6812] bridge0: port 1(team0) entered disabled state
[  508.517561][ T5352] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  508.667159][ T6812] bond0 (unregistering): Released all slaves
[  508.681737][ T5352] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  508.703471][ T5352] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00
[  508.714532][ T5352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  508.737808][ T5352] usb 4-1: Product: syz
[  508.772669][ T5352] usb 4-1: Manufacturer: syz
[  508.813600][ T5352] usb_debug 4-1:1.0: debug converter detected
[  508.858035][ T5352] usb 4-1: debug converter now attached to ttyUSB0
[  509.074613][ T5352] usb 4-1: USB disconnect, device number 18
[  509.092153][ T5352] debug ttyUSB0: debug converter now disconnected from ttyUSB0
[  509.133928][ T5352] usb_debug 4-1:1.0: device disconnected
[  509.475677][ T6812] tipc: Left network mode
[  509.717020][T15139] loop1: detected capacity change from 0 to 512
[  509.848969][T15139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  509.888941][ T5623] Bluetooth: hci6: command tx timeout
[  509.906228][T15144] bond0: (slave vlan3): Opening slave failed
[  510.208716][T13808] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  510.407843][T13808] usb 2-1: Using ep0 maxpacket: 16
[  510.460933][T13808] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  510.485216][T13808] usb 2-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3
[  510.520217][T13808] usb 2-1: Product: syz
[  510.546206][T13808] usb 2-1: Manufacturer: syz
[  510.567584][T13808] usb 2-1: SerialNumber: syz
[  510.606640][T14992] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.626406][T13808] usb 2-1: config 0 descriptor??
[  510.642806][T14992] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.675944][T13808] ums-onetouch 2-1:0.0: USB Mass Storage device detected
[  510.678609][T14992] bridge_slave_0: entered allmulticast mode
[  510.734870][T14992] bridge_slave_0: entered promiscuous mode
[  510.796326][T14992] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.804272][T14992] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.812719][T14992] bridge_slave_1: entered allmulticast mode
[  510.821728][T14992] bridge_slave_1: entered promiscuous mode
[  510.951053][T13808] usb 2-1: USB disconnect, device number 17
[  511.183884][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13
[  511.261234][T15175] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3382'.
[  511.333861][T15175] netlink: 'syz.7.3382': attribute type 20 has an invalid length.
[  511.353206][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3382'.
[  511.537834][ T6801] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  511.583524][T14992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  511.632306][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  511.696473][T14992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  511.727683][ T6804] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  511.948814][T14992] team0: Port device team_slave_0 added
[  512.067947][ T6812] hsr_slave_0: left promiscuous mode
[  512.078593][ T6812] hsr_slave_1: left promiscuous mode
[  512.634618][ T6812] smc: removing net device vlan1 with user defined pnetid SYZ2
[  513.248344][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3402'.
[  513.543279][ T6812] team0 (unregistering): Port device batadv0 removed
[  513.608458][T13808] libceph: connect (1)[c::]:6789 error -101
[  513.647866][T13808] libceph: mon0 (1)[c::]:6789 connect error
[  513.711198][ T1052] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  513.725955][T15227] ceph: No mds server is up or the cluster is laggy
[  513.745880][T14992] team0: Port device team_slave_1 added
[  513.781048][ T5818] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  513.926504][ T5352] libceph: connect (1)[c::]:6789 error -101
[  513.936171][T15233] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3405'.
[  513.962960][ T5352] libceph: mon0 (1)[c::]:6789 connect error
[  513.975862][T15233] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3405'.
[  513.993801][T14992] batman_adv: batadv0: Adding interface: batadv_slave_0
[  514.009065][T14992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.083192][T14992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  514.172947][T14992] batman_adv: batadv0: Adding interface: batadv_slave_1
[  514.185483][T15236] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3406'.
[  514.213293][T14992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.310382][T14992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  514.581820][T15225] loop1: detected capacity change from 0 to 32768
[  514.766295][T15257] loop3: detected capacity change from 0 to 256
[  514.785129][T14992] hsr_slave_0: entered promiscuous mode
[  514.814806][T15257] exfat: Deprecated parameter 'utf8'
[  514.842025][T14992] hsr_slave_1: entered promiscuous mode
[  514.867098][T15257] exfat: Deprecated parameter 'utf8'
[  514.876167][T15225] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  514.905627][T15253] process '/newroot/434/file0' started with executable stack
[  514.925095][T15257] exfat: Deprecated parameter 'namecase'
[  515.012994][T15257] exfat: Deprecated parameter 'namecase'
[  515.112866][T15257] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  515.133456][T15225] XFS (loop1): Ending clean mount
[  515.155831][ T6812] IPVS: stop unused estimator thread 0...
[  515.201307][T15265] netlink: 'syz.4.3412': attribute type 2 has an invalid length.
[  515.640420][ T6801] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  515.652447][ T6801] XFS (loop1): Unmount and run xfs_repair
[  515.663624][ T6801] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  515.671813][ T6801] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00  XAFL......BN....
[  515.692943][ T6801] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00  .... ...........
[  515.713452][ T6801] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1  ................
[  515.734730][ T6801] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5  ................
[  515.756219][ T6801] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  515.794366][ T6801] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  515.833925][ T6801] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  515.852757][ T6801] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  515.870553][ T6801] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74
[  515.921015][ T6801] XFS (loop1): page discard on page ffffea000123b100, inode 0x1809, pos 0.
[  515.967040][ T6801] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  516.006228][ T6801] XFS (loop1): Unmount and run xfs_repair
[  516.040414][ T6801] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  516.096049][ T6801] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00  XAFL......BN....
[  516.120037][ T6801] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00  .... ...........
[  516.142324][   T30] audit: type=1326 audit(1785572598.987:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.4.3422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438139e019 code=0x7ffc0000
[  516.144836][ T6801] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1  ................
[  516.199822][ T6801] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5  ................
[  516.208850][ T5281] 8021q: adding VLAN 0 to HW filter on device eth14
[  516.224424][ T6801] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  516.236496][ T6801] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  516.239363][   T30] audit: type=1326 audit(1785572598.987:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.4.3422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438139e019 code=0x7ffc0000
[  516.271664][ T6801] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  516.281965][ T6801] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  516.308107][   T30] audit: type=1326 audit(1785572599.017:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.4.3422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438139e019 code=0x7ffc0000
[  516.349846][ T6801] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74
[  516.373706][ T6801] XFS (loop1): page discard on page ffffea00012de0c0, inode 0x1809, pos 4096.
[  516.401547][   T30] audit: type=1326 audit(1785572599.027:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.4.3422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438139e019 code=0x7ffc0000
[  516.523212][ T5621] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  516.524345][   T30] audit: type=1326 audit(1785572599.027:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.4.3422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f438139e019 code=0x7ffc0000
[  516.562341][   T30] audit: type=1326 audit(1785572599.027:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.4.3422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438139e019 code=0x7ffc0000
[  516.588555][   T30] audit: type=1326 audit(1785572599.027:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.4.3422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438139e019 code=0x7ffc0000
[  516.598245][ T5621] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  516.637768][   T30] audit: type=1326 audit(1785572599.027:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.4.3422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f438139e019 code=0x7ffc0000
[  516.754074][   T30] audit: type=1326 audit(1785572599.027:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.4.3422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f438139dd82 code=0x7ffc0000
[  516.833480][   T30] audit: type=1326 audit(1785572599.027:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.4.3422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438139e019 code=0x7ffc0000
[  517.784055][T15315] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3429'.
[  517.886482][T15315] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3429'.
[  518.098833][T14992] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  518.178018][T14992] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  518.213768][T14992] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  518.229569][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3433'.
[  518.275898][T14992] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  518.309102][T15330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3433'.
[  518.353729][T14992] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  518.406120][T14992] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  518.437090][T14992] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  518.479559][T14992] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  518.673363][T15345] loop1: detected capacity change from 0 to 64
[  519.034410][T15350] netlink: 'syz.8.3438': attribute type 10 has an invalid length.
[  519.100862][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3438'.
[  519.155224][T15350] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  519.206455][ T5621] hfs: node 4:3 still has 1 user(s)!
[  519.219649][T14992] 8021q: adding VLAN 0 to HW filter on device bond0
[  519.253486][T15316] loop3: detected capacity change from 0 to 32768
[  519.261945][T15353] bridge_slave_1: left allmulticast mode
[  519.280408][T15353] bridge_slave_1: left promiscuous mode
[  519.304877][T15353] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.343393][T15316] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  519.355707][T15353] bridge_slave_0: left allmulticast mode
[  519.369197][T15353] bridge_slave_0: left promiscuous mode
[  519.383678][T15353] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.384061][T15355] loop7: detected capacity change from 0 to 1764
[  519.454733][T15353] bond0: (slave bridge0): Releasing backup interface
[  519.478786][T15316] XFS (loop3): Ending clean mount
[  519.545813][ T5281] 8021q: adding VLAN 0 to HW filter on device eth15
[  519.666675][T14992] 8021q: adding VLAN 0 to HW filter on device team0
[  519.718580][ T6801] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.725819][ T6801] bridge0: port 1(bridge_slave_0) entered forwarding state
[  519.788604][T15316] XFS (loop3): Quotacheck needed: Please wait.
[  519.879676][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.886930][ T5818] bridge0: port 2(bridge_slave_1) entered forwarding state
[  520.035709][T15366] loop1: detected capacity change from 0 to 32768
[  520.043433][T15366] btrfs: Deprecated parameter 'usebackuproot'
[  520.049699][T15366] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  520.060000][T15366] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3451 (15366)
[  520.103279][T15366] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  520.116694][T15366] BTRFS info (device loop1): using crc32c checksum algorithm
[  520.273920][   T57] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  520.373040][T15368] loop7: detected capacity change from 0 to 4096
[  520.444506][T15366] BTRFS error (device loop1): failed to load root extent
[  520.452034][T15366] BTRFS warning (device loop1): try to load backup roots slot 1
[  520.460489][ T6801] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  520.464123][T15316] XFS (loop3): Quotacheck: Done.
[  520.571684][T15366] BTRFS warning (device loop1): couldn't read tree root
[  520.581192][T15366] BTRFS warning (device loop1): try to load backup roots slot 2
[  520.590775][ T6812] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  520.624590][ T5622] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  520.656114][T15366] BTRFS warning (device loop1): couldn't read tree root
[  520.670428][T15366] BTRFS warning (device loop1): try to load backup roots slot 3
[  520.693406][T15388] loop4: detected capacity change from 0 to 256
[  520.710826][T15366] BTRFS info (device loop1): rebuilding free space tree
[  520.750715][T15366] BTRFS info (device loop1): checking UUID tree
[  520.754340][T15388] exfat: Deprecated parameter 'namecase'
[  520.764727][T15366] BTRFS info (device loop1): enabling ssd optimizations
[  520.771758][T15366] BTRFS info (device loop1): turning on async discard
[  520.771782][T15366] BTRFS info (device loop1): enabling free space tree
[  520.771802][T15366] BTRFS info (device loop1): force clearing of disk cache
[  520.771843][T15366] BTRFS info (device loop1): enabling auto defrag
[  520.799541][T15366] BTRFS info (device loop1): trying to use backup root at mount time
[  520.807722][T15366] BTRFS info (device loop1): use zstd compression, level 3
[  520.970434][T15388] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d)
[  521.337779][   T30] kauditd_printk_skb: 252 callbacks suppressed
[  521.337804][   T30] audit: type=1800 audit(1785572604.187:544): pid=15388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3443" name="file2" dev="loop4" ino=1048737 res=0 errno=0
[  521.547078][ T5621] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  522.115534][T15414] loop7: detected capacity change from 0 to 1024
[  522.151459][T15414] EXT4-fs: Ignoring removed nomblk_io_submit option
[  522.364055][T15414] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.497797][T15414] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  522.582977][T15430] Invalid ELF header magic: != ELF
[  522.624407][T15432] binder: 15431:15432 ioctl 40046205 0 returned -22
[  523.155977][ T8012] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  523.159300][T14992] 8021q: adding VLAN 0 to HW filter on device batadv0
[  523.413177][   T30] audit: type=1326 audit(1785572606.257:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.1.3458" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  523.423481][ T5281] 8021q: adding VLAN 0 to HW filter on device eth16
[  523.529025][   T30] audit: type=1326 audit(1785572606.287:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.1.3458" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  523.626325][   T30] audit: type=1326 audit(1785572606.297:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.1.3458" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  523.744838][   T30] audit: type=1326 audit(1785572606.297:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.1.3458" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  523.892045][   T30] audit: type=1326 audit(1785572606.297:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.1.3458" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  524.028345][   T30] audit: type=1326 audit(1785572606.297:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.1.3458" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  524.160466][   T30] audit: type=1326 audit(1785572606.337:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.1.3458" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  524.280798][   T30] audit: type=1326 audit(1785572606.337:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.1.3458" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  524.390088][   T30] audit: type=1326 audit(1785572606.337:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.1.3458" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  524.999782][T14992] veth0_vlan: entered promiscuous mode
[  525.117176][T14992] veth1_vlan: entered promiscuous mode
[  525.233968][T15486] loop1: detected capacity change from 0 to 1024
[  525.265858][T15486] EXT4-fs: inline encryption not supported
[  525.396872][T15486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.561435][T14992] veth0_macvtap: entered promiscuous mode
[  525.722214][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.733139][T14992] veth1_macvtap: entered promiscuous mode
[  525.872785][T14992] batman_adv: batadv0: Interface activated: batadv_slave_0
[  525.988289][T14992] batman_adv: batadv0: Interface activated: batadv_slave_1
[  526.137671][ T6801] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  526.299164][ T1052] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  526.388932][ T6801] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  526.429076][ T6801] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  526.730907][ T6801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.776322][ T6801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.932634][ T6801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.962516][ T6801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  527.366473][T15522] netlink: 'syz.1.3475': attribute type 10 has an invalid length.
[  527.425288][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3475'.
[  527.575552][T15497] loop4: detected capacity change from 0 to 32768
[  527.616884][T15497] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  527.753434][T15501] loop7: detected capacity change from 0 to 32768
[  527.784579][T15497] XFS (loop4): Ending clean mount
[  527.802570][T15501] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  527.870324][T15501] XFS (loop7): Ending clean mount
[  528.128063][ T8012] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  528.195941][ T5634] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  528.245896][T15558] loop1: detected capacity change from 0 to 16
[  528.307780][ T5767] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  528.453619][T15558] erofs (device loop1): mounted with root inode @ nid 36.
[  528.494159][ T5767] usb 4-1: Using ep0 maxpacket: 32
[  528.506150][ T5767] usb 4-1: config 0 has no interfaces?
[  528.544301][ T5767] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  528.556906][ T5767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.602353][ T5767] usb 4-1: Product: syz
[  528.603165][T15558] syz.1.3484: attempt to access beyond end of device
[  528.603165][T15558] loop1: rw=8912896, sector=36, nr_sectors = 1 limit=16
[  528.613106][ T5767] usb 4-1: Manufacturer: syz
[  528.680378][ T5767] usb 4-1: SerialNumber: syz
[  528.683873][T15558] syz.1.3484: attempt to access beyond end of device
[  528.683873][T15558] loop1: rw=8912896, sector=131156, nr_sectors = 1 limit=16
[  528.704252][ T5767] usb 4-1: config 0 descriptor??
[  528.710433][T15558] syz.1.3484: attempt to access beyond end of device
[  528.710433][T15558] loop1: rw=8912896, sector=36, nr_sectors = 1 limit=16
[  528.744261][T15558] syz.1.3484: attempt to access beyond end of device
[  528.744261][T15558] loop1: rw=8912896, sector=131157, nr_sectors = 1 limit=16
[  528.852562][T15558] syz.1.3484: attempt to access beyond end of device
[  528.852562][T15558] loop1: rw=8912896, sector=41, nr_sectors = 1 limit=16
[  528.920332][T15558] syz.1.3484: attempt to access beyond end of device
[  528.920332][T15558] loop1: rw=8912896, sector=65623, nr_sectors = 1 limit=16
[  528.993811][ T5767] usb 4-1: USB disconnect, device number 19
[  529.006722][T15558] syz.1.3484: attempt to access beyond end of device
[  529.006722][T15558] loop1: rw=8912896, sector=46, nr_sectors = 1 limit=16
[  529.026467][T15558] syz.1.3484: attempt to access beyond end of device
[  529.026467][T15558] loop1: rw=8912896, sector=131168, nr_sectors = 1 limit=16
[  529.095177][T15558] syz.1.3484: attempt to access beyond end of device
[  529.095177][T15558] loop1: rw=8912896, sector=86, nr_sectors = 1 limit=16
[  529.139705][T15558] syz.1.3484: attempt to access beyond end of device
[  529.139705][T15558] loop1: rw=8912896, sector=65637, nr_sectors = 1 limit=16
[  529.182105][T15561] loop7: detected capacity change from 0 to 4096
[  529.276928][T15558] erofs (device loop1): failed to readdir of logical block 0 of nid 36
[  529.355326][T15561] ntfs3(loop7): ino=3, ntfs_set_state failed, -22.
[  529.364530][T15559] erofs (device loop1): failed to readdir of logical block 0 of nid 36
[  529.366774][T15561] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[  529.977176][ T1146] ntfs3(loop7): ino=3, ntfs3_write_inode failed, -22.
[  530.044916][ T8012] ntfs3(loop7): ino=3, ntfs_set_state failed, -22.
[  530.053406][T15574] loop3: detected capacity change from 0 to 1024
[  530.087465][ T8012] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  530.113081][T15574] EXT4-fs: inline encryption not supported
[  530.170698][T15574] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  530.282578][ T8012] ntfs3(loop7): ino=3, ntfs_set_state failed, -22.
[  530.340639][   T57] ntfs3(loop7): ino=3, ntfs3_write_inode failed, -22.
[  530.489445][T15581] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  530.883736][T15574] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 1: comm syz.3.3488: lblock 1 mapped to illegal pblock 1 (length 1)
[  530.900038][T15580] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  530.901948][T15574] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  530.929500][    C0] EXT4-fs (loop3): initial error at time 1785572613: ext4_map_blocks:833: inode 3: block 1
[  530.948808][    C0] EXT4-fs (loop3): last error at time 1785572613: ext4_map_blocks:833: inode 3: block 1
[  530.964015][T15581] CPU: 0 UID: 0 PID: 15581 Comm: syz.1.3490 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  530.964046][T15581] Tainted: [L]=SOFTLOCKUP
[  530.964053][T15581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  530.964065][T15581] Call Trace:
[  530.964073][T15581]  <TASK>
[  530.964082][T15581]  dump_stack_lvl+0xe8/0x150
[  530.964120][T15581]  sysfs_create_dir_ns+0x271/0x2a0
[  530.964189][T15581]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  530.964220][T15581]  ? srso_alias_return_thunk+0x5/0xfbef5
[  530.964242][T15581]  ? do_raw_spin_unlock+0xf5/0x210
[  530.964269][T15581]  kobject_add_internal+0x622/0xcd0
[  530.964322][T15581]  kobject_add+0x163/0x240
[  530.964350][T15581]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  530.964381][T15581]  ? __pfx_kobject_add+0x10/0x10
[  530.964407][T15581]  ? srso_alias_return_thunk+0x5/0xfbef5
[  530.964436][T15581]  ? srso_alias_return_thunk+0x5/0xfbef5
[  530.964457][T15581]  ? get_device_parent+0x366/0x3a0
[  530.964537][T15581]  ? srso_alias_return_thunk+0x5/0xfbef5
[  530.964563][T15581]  device_add+0x3fa/0xb80
[  530.964588][T15581]  tty_register_device_attr+0x422/0x950
[  530.964645][T15581]  ? __pfx_tty_register_device_attr+0x10/0x10
[  530.964674][T15581]  ? srso_alias_return_thunk+0x5/0xfbef5
[  530.964695][T15581]  ? tty_port_init+0x136/0x1a0
[  530.964743][T15581]  ? srso_alias_return_thunk+0x5/0xfbef5
[  530.964764][T15581]  ? gsm_dlci_alloc+0x330/0x640
[  530.964808][T15581]  gsm_activate_mux+0x110/0x2a0
[  530.964836][T15581]  gsmld_ioctl+0x12d3/0x1930
[  530.964866][T15581]  ? __pfx_gsmld_ioctl+0x10/0x10
[  530.964897][T15581]  ? __pfx___ldsem_down_read_nested+0x10/0x10
[  530.964930][T15581]  ? srso_alias_return_thunk+0x5/0xfbef5
[  530.964959][T15581]  ? ldsem_down_read+0x12/0x40
[  530.964983][T15581]  ? __pfx_gsmld_ioctl+0x10/0x10
[  530.965003][T15581]  tty_ioctl+0x9bd/0xdd0
[  530.965027][T15581]  ? __pfx_tty_ioctl+0x10/0x10
[  530.965046][T15581]  __se_sys_ioctl+0xfc/0x170
[  530.965068][T15581]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.965089][T15581]  do_syscall_64+0x174/0x580
[  530.965113][T15581]  ? trace_irq_disable+0x3b/0x140
[  530.965144][T15581]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.965163][T15581] RIP: 0033:0x7f2b67d9e019
[  530.965182][T15581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  530.965198][T15581] RSP: 002b:00007f2b68b90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  530.965218][T15581] RAX: ffffffffffffffda RBX: 00007f2b68026090 RCX: 00007f2b67d9e019
[  530.965232][T15581] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003
[  530.965244][T15581] RBP: 00007f2b67e3500c R08: 0000000000000000 R09: 0000000000000000
[  530.965256][T15581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  530.965267][T15581] R13: 00007f2b68026128 R14: 00007f2b68026090 R15: 00007fffed7689e8
[  530.965296][T15581]  </TASK>
[  530.965431][T15581] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  531.151023][T15574] EXT4-fs (loop3): Remounting filesystem read-only
[  531.202787][T15580] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  531.351411][T15574] __quota_error: 123 callbacks suppressed
[  531.351498][T15574] Quota error (device loop3): write_blk: dquota write failed
[  531.406680][T15574] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  531.460571][T15574] EXT4-fs (loop3): 1 orphan inode deleted
[  531.542141][T15574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  531.614672][T15586] netlink: 240 bytes leftover after parsing attributes in process `syz.8.3493'.
[  531.679525][T15591] netlink: 'syz.9.3494': attribute type 11 has an invalid length.
[  531.721368][T15591] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3494'.
[  532.218734][T15600] loop9: detected capacity change from 0 to 512
[  532.340659][T15604] batadv_slave_1: entered promiscuous mode
[  532.372117][T15602] batadv_slave_1: left promiscuous mode
[  532.394411][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.460126][T15600] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  532.575534][T15600] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 6: comm syz.9.3497: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=4096 fake=0
[  532.665022][T15600] EXT4-fs (loop9): Remounting filesystem read-only
[  532.712615][   T30] audit: type=1800 audit(1785572615.557:677): pid=15600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3497" name="file1" dev="loop9" ino=15 res=0 errno=0
[  532.983243][T14992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.183015][T15621] loop7: detected capacity change from 0 to 4096
[  533.184257][T15621] EXT4-fs: Ignoring removed mblk_io_submit option
[  533.223204][T15621] EXT4-fs (loop7): Test dummy encryption mode enabled
[  533.269978][T15621] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  533.460158][T15634] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  533.544285][ T8012] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.716615][T15641] ALSA: mixer_oss: invalid OSS volume ''
[  533.763409][T15641] ALSA: mixer_oss: invalid OSS volume ''
[  534.800650][T15669] loop9: detected capacity change from 0 to 8192
[  534.881079][T15680] loop1: detected capacity change from 0 to 24
[  534.914384][T15680] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  534.982327][T15680] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  536.152687][T15706] ipvlan2: entered promiscuous mode
[  536.171599][T15706] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  536.223769][T15706] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  536.248268][T15709] loop3: detected capacity change from 0 to 2048
[  536.259076][T15706] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  536.323490][T15709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  536.367122][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3538'.
[  536.407933][T15709] ext4 filesystem being mounted at /601/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  536.426858][   T30] audit: type=1326 audit(1785572619.267:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.1.3539" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  536.545382][T15721] netlink: 'syz.9.3540': attribute type 6 has an invalid length.
[  536.557487][   T30] audit: type=1326 audit(1785572619.307:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.1.3539" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  536.647743][   T30] audit: type=1326 audit(1785572619.307:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.1.3539" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  536.782516][   T30] audit: type=1326 audit(1785572619.307:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.1.3539" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  536.845295][   T30] audit: type=1326 audit(1785572619.307:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.1.3539" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  536.910558][   T30] audit: type=1326 audit(1785572619.307:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.1.3539" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  536.942845][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.963731][   T30] audit: type=1326 audit(1785572619.347:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.1.3539" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  537.014566][ T5639] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  537.059580][   T30] audit: type=1326 audit(1785572619.347:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.1.3539" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  537.156655][   T30] audit: type=1326 audit(1785572619.347:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.1.3539" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  537.197494][ T5639] usb 2-1: Using ep0 maxpacket: 8
[  537.215266][   T30] audit: type=1326 audit(1785572619.357:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.1.3539" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f2b67d9e019 code=0x7ffc0000
[  537.251663][ T5639] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  537.262927][T15740] loop3: detected capacity change from 0 to 256
[  537.269581][ T5639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.279297][T15740] exfat: Deprecated parameter 'utf8'
[  537.284843][ T5639] usb 2-1: Product: syz
[  537.301310][ T5639] usb 2-1: Manufacturer: syz
[  537.313460][ T5639] usb 2-1: SerialNumber: syz
[  537.338138][ T5639] usb 2-1: config 0 descriptor??
[  537.388270][T15740] exfat: Deprecated parameter 'namecase'
[  537.423701][T15740] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d)
[  537.569599][ T5639] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  537.700408][T15730] loop4: detected capacity change from 0 to 32768
[  537.776446][T15730] JBD2: Ignoring recovery information on journal
[  538.024955][T15730] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  538.168806][ T1146] (kworker/u8:8,1146,0):ocfs2_read_blocks_sync:110 ERROR: status = -12
[  538.210414][ T1146] (kworker/u8:8,1146,0):ocfs2_read_locked_inode:633 ERROR: status = -12
[  538.257094][ T1146] (kworker/u8:8,1146,0):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0
[  538.429935][ T5639] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  538.442527][T13812] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  538.494503][ T5639] usb 2-1: USB disconnect, device number 18
[  538.624106][ T5634] ocfs2: Unmounting device (7,4) on (node local)
[  538.647527][T13812] usb 4-1: Using ep0 maxpacket: 8
[  538.663731][T13812] usb 4-1: config 0 has no interfaces?
[  538.692226][T13812] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  538.745992][T13812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.862015][T13812] usb 4-1: config 0 descriptor??
[  539.142042][T13812] usb 4-1: USB disconnect, device number 20
[  540.842996][T15817] netlink: 58 bytes leftover after parsing attributes in process `syz.1.3572'.
[  540.877568][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3572'.
[  540.914583][T15817] netlink: 58 bytes leftover after parsing attributes in process `syz.1.3572'.
[  541.063609][T15825] loop9: detected capacity change from 0 to 256
[  541.147871][T15825] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  541.149190][T15827] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3576'.
[  542.128055][ T5352] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  542.312580][ T5352] usb 2-1: Using ep0 maxpacket: 32
[  542.332921][ T5352] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  542.350333][ T5352] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  542.374183][ T5352] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  542.404028][ T5352] usb 2-1: config 1 has no interface number 0
[  542.426986][ T5352] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  542.458349][ T5352] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  542.485751][ T5352] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  542.496096][ T5352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.529238][ T5352] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  542.573582][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3589'.
[  542.578238][ T5639] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  542.735146][ T5352] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  542.750946][ T5639] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  542.782145][ T5639] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00
[  542.805199][ T5639] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  542.831462][ T5639] usb 4-1: Product: syz
[  542.843889][ T5639] usb 4-1: Manufacturer: syz
[  542.881730][ T5639] usb_debug 4-1:1.0: debug converter detected
[  542.906233][ T5639] usb 4-1: debug converter now attached to ttyUSB0
[  543.154743][ T5639] usb 4-1: USB disconnect, device number 21
[  543.189249][T13808] usb 2-1: USB disconnect, device number 19
[  543.201504][ T5639] debug ttyUSB0: debug converter now disconnected from ttyUSB0
[  543.229289][T13808] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  543.237296][ T5639] usb_debug 4-1:1.0: device disconnected
[  543.320922][T15881] loop9: detected capacity change from 0 to 4096
[  543.475917][T15881] ntfs3(loop9): Failed to load $Extend (-22).
[  543.498374][T15881] ntfs3(loop9): Failed to initialize $Extend.
[  544.317769][ T5767] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  544.489373][ T5767] usb 5-1: not running at top speed; connect to a high speed hub
[  544.514753][ T5767] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  544.546941][ T5767] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  544.557257][ T5767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.581883][ T5767] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected
[  544.638090][ T5767] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  544.944237][ T5767] usb 5-1: USB disconnect, device number 22
[  544.976954][ T5767] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  545.008161][ T5767] garmin_gps 5-1:1.0: device disconnected
[  546.761446][T15969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3623'.
[  546.779642][T15951] loop9: detected capacity change from 0 to 131072
[  546.841009][T15951] F2FS-fs (loop9): Invalid log sectorsize (67108873)
[  546.851867][T15951] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  546.861982][T15951] F2FS-fs (loop9): invalid crc value
[  546.967861][T15951] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  546.990495][T15951] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  546.998555][T15951] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  547.187581][T13808] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  547.388069][T13808] usb 4-1: Using ep0 maxpacket: 8
[  547.423027][T13808] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  547.464332][T13808] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  547.501735][T13808] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  547.531292][T15982] syzkaller1: entered promiscuous mode
[  547.541175][T13808] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  547.553968][T15982] syzkaller1: entered allmulticast mode
[  547.556313][T13808] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  547.575160][T13808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.836446][T13808] usb 4-1: GET_CAPABILITIES returned 0
[  547.857004][T13808] usbtmc 4-1:16.0: can't read capabilities
[  548.140134][ T5767] usb 4-1: USB disconnect, device number 22
[  549.024637][T16022] loop4: detected capacity change from 0 to 1024
[  550.027917][T16038] loop4: detected capacity change from 0 to 1024
[  550.102466][T16038] EXT4-fs: Ignoring removed i_version option
[  550.153989][T16038] EXT4-fs: inline encryption not supported
[  550.190901][T16038] EXT4-fs (loop4): Test dummy encryption mode enabled
[  550.292008][T16038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  550.560152][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  550.576287][T16063] loop9: detected capacity change from 0 to 512
[  550.690549][T16063] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.3660: iget: bad i_size value: 38620345925642
[  550.741217][T16063] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  550.757357][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  550.758747][ T5352] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  550.766597][    C1] EXT4-fs (loop9): initial error at time 1785572633: ext4_orphan_get:1399: inode 15
[  550.766640][    C1] EXT4-fs (loop9): last error at time 1785572633: ext4_orphan_get:1399: inode 15
[  550.769046][T16063] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3660: couldn't read orphan inode 15 (err -117)
[  550.833133][T16063] loop9: lost filesystem error report for type 5 error -117
[  550.841419][T16063] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  550.972640][T16063] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.3660: bg 0: block 5: invalid block bitmap
[  550.987859][ T5352] usb 2-1: Using ep0 maxpacket: 8
[  550.997156][ T5352] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  551.013243][T16071] loop4: detected capacity change from 0 to 1024
[  551.020902][ T5352] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  551.054574][ T5352] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  551.085708][ T5352] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  551.150949][ T5352] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  551.201043][T16063] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 6 with error 28
[  551.233015][ T5352] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  551.301918][T16063] EXT4-fs (loop9): This should not happen!! Data will be lost
[  551.301918][T16063] 
[  551.323181][ T5352] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  551.392704][T16063] EXT4-fs (loop9): Total free blocks count 0
[  551.405842][ T5352] usb 2-1: config 168 interface 0 has no altsetting 0
[  551.439324][T16063] EXT4-fs (loop9): Free/Dirty block details
[  551.479794][ T5352] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  551.516196][ T5352] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  551.530898][T16063] EXT4-fs (loop9): free_blocks=0
[  551.566102][T16063] EXT4-fs (loop9): dirty_blocks=66
[  551.595053][ T5352] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  551.609324][T16063] EXT4-fs (loop9): Block reservation details
[  551.630366][T16063] EXT4-fs (loop9): i_reserved_data_blocks=66
[  551.650853][ T5352] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  551.714466][ T5352] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  551.729840][T16076] loop3: detected capacity change from 0 to 1024
[  551.764304][T16076] EXT4-fs: Ignoring removed orlov option
[  551.789805][ T5352] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  551.826300][T16076] EXT4-fs: Ignoring removed oldalloc option
[  551.842009][ T1052] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 60 with error 28
[  551.884570][T16076] EXT4-fs: Ignoring removed orlov option
[  551.898984][ T5352] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  551.959942][T14992] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  551.985158][T16071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  552.008677][ T5352] usb 2-1: config 168 interface 0 has no altsetting 0
[  552.020985][T16076] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[  552.051543][T16072] loop7: detected capacity change from 0 to 131072
[  552.053987][ T5352] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  552.060164][T16071] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  552.076899][ T5352] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  552.079969][T16076] System zones: 
[  552.090524][ T5352] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  552.106385][T16072] F2FS-fs (loop7): Invalid log sectorsize (67108873)
[  552.109565][ T5352] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  552.113324][T16072] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  552.125829][ T5352] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  552.152435][T16072] F2FS-fs (loop7): invalid crc value
[  552.157181][T16076] 0-1, 3-12
[  552.195346][T16076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  552.211450][ T5352] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  552.245269][T16072] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  552.314252][ T5352] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  552.349794][T16071] EXT4-fs (loop4): shut down requested (1)
[  552.357280][T16072] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  552.364376][T16072] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  552.365920][ T5352] usb 2-1: config 168 interface 0 has no altsetting 0
[  552.392222][ T5352] usb 2-1: string descriptor 0 read error: -22
[  552.399989][ T5352] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  552.421206][ T5352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.435189][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  552.467201][ T5352] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  552.691216][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  552.825184][ T5352] usb 2-1: USB disconnect, device number 20
[  553.524731][T16108] loop9: detected capacity change from 0 to 1024
[  554.101169][T16121] sg_write: data in/out 360512/136 bytes for SCSI command 0x0-- guessing data in;
[  554.101169][T16121]    program syz.4.3684 not setting count and/or reply_len properly
[  554.690012][T16134] veth0: entered promiscuous mode
[  554.719704][T16133] veth0: left promiscuous mode
[  554.767796][T16136] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  554.894764][T16138] loop1: detected capacity change from 0 to 512
[  555.006847][T16138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  555.074700][T16138] ext4 filesystem being mounted at /594/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  555.166613][T16138] EXT4-fs (loop1): shut down requested (1)
[  555.409156][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  556.084973][T16170] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3)
[  556.091548][T16170] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  556.170182][T16170] vhci_hcd vhci_hcd.0: Device attached
[  556.205625][T16177] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(6)
[  556.212190][T16177] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  556.272878][T16177] vhci_hcd vhci_hcd.0: Device attached
[  556.299617][T16170] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(5)
[  556.306195][T16170] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  556.360049][T16170] vhci_hcd vhci_hcd.0: Device attached
[  556.377528][T16177] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(8)
[  556.384105][T16177] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  556.407512][ T5352] usb 51-1: new low-speed USB device number 2 using vhci_hcd
[  556.436679][T16170] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(10)
[  556.443339][T16170] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  556.470794][T16177] vhci_hcd vhci_hcd.0: Device attached
[  556.510482][T16170] vhci_hcd vhci_hcd.0: Device attached
[  556.580217][T16187] vhci_hcd: connection closed
[  556.580619][T16181] vhci_hcd: connection closed
[  556.580922][T16185] vhci_hcd: connection closed
[  556.598830][T16178] vhci_hcd: connection closed
[  556.603964][T16171] vhci_hcd: connection reset by peer
[  556.626223][   T57] vhci_hcd vhci_hcd.9: stop threads
[  556.650560][   T57] vhci_hcd vhci_hcd.9: release socket
[  556.678324][   T57] vhci_hcd vhci_hcd.9: disconnect device
[  556.702533][   T57] vhci_hcd vhci_hcd.9: stop threads
[  556.715022][   T57] vhci_hcd vhci_hcd.9: release socket
[  556.734836][   T57] vhci_hcd vhci_hcd.9: disconnect device
[  556.757879][   T57] vhci_hcd vhci_hcd.9: stop threads
[  556.775564][   T57] vhci_hcd vhci_hcd.9: release socket
[  556.808952][   T57] vhci_hcd vhci_hcd.9: disconnect device
[  556.841599][T16157] loop4: detected capacity change from 0 to 32768
[  556.846110][   T57] vhci_hcd vhci_hcd.9: stop threads
[  556.889570][   T57] vhci_hcd vhci_hcd.9: release socket
[  556.918849][   T57] vhci_hcd vhci_hcd.9: disconnect device
[  556.947964][   T57] vhci_hcd vhci_hcd.9: stop threads
[  556.971355][   T57] vhci_hcd vhci_hcd.9: release socket
[  556.993059][   T57] vhci_hcd vhci_hcd.9: disconnect device
[  557.257843][T16196] loop1: detected capacity change from 0 to 512
[  557.591471][T16196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  557.629248][T16196] ext4 filesystem being mounted at /597/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  558.144831][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  558.805671][T16227] batadv_slave_1: entered promiscuous mode
[  558.849288][T16224] batadv_slave_1: left promiscuous mode
[  559.690248][ T5767] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  559.867613][ T5767] usb 4-1: Using ep0 maxpacket: 8
[  559.903094][ T5767] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  559.926706][ T5767] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  559.958836][ T5767] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  559.980101][ T5767] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  559.993572][ T5767] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  560.017150][ T5767] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  560.042035][ T5767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.312886][ T5767] usb 4-1: usb_control_msg returned -32
[  560.332624][ T5767] usbtmc 4-1:16.0: can't read capabilities
[  560.449526][T16279] loop1: detected capacity change from 0 to 2048
[  560.538505][T16281] netlink: 'syz.8.3746': attribute type 21 has an invalid length.
[  560.547817][T16279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  560.586405][T16281] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3746'.
[  560.633419][T16281] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3746'.
[  560.703063][T16287] usbtmc 4-1:16.0: stb usb_control_msg returned -32
[  560.730743][ T5639] usb 4-1: USB disconnect, device number 23
[  560.750104][T16288] netlink: 'syz.8.3746': attribute type 21 has an invalid length.
[  560.773625][T16278] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  560.782744][T16288] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3746'.
[  560.841156][T16288] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3746'.
[  560.856252][T16278] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  560.901855][T16278] EXT4-fs (loop1): This should not happen!! Data will be lost
[  560.901855][T16278] 
[  560.920644][T16278] EXT4-fs (loop1): Total free blocks count 0
[  560.943626][T16278] EXT4-fs (loop1): Free/Dirty block details
[  560.971838][T16278] EXT4-fs (loop1): free_blocks=4096
[  560.994675][T16278] EXT4-fs (loop1): dirty_blocks=64
[  561.010341][T16278] EXT4-fs (loop1): Block reservation details
[  561.026855][T16278] EXT4-fs (loop1): i_reserved_data_blocks=4
[  561.211900][ T5621] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  561.252821][T16295] loop4: detected capacity change from 0 to 128
[  561.269095][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  561.537901][ T5352] vhci_hcd vhci_hcd.9: vhci_device speed not set
[  561.998405][T16307] sctp: [Deprecated]: syz.3.3756 (pid 16307) Use of struct sctp_assoc_value in delayed_ack socket option.
[  561.998405][T16307] Use struct sctp_sack_info instead
[  562.076432][T16308] loop7: detected capacity change from 0 to 1024
[  563.001975][T16321] ALSA: mixer_oss: invalid OSS volume ''
[  563.548647][T16336] loop4: detected capacity change from 0 to 2048
[  563.603049][T16336] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  563.950210][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  563.977909][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  564.608188][T16350] loop9: detected capacity change from 0 to 2048
[  564.661853][T16350] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  564.733774][T16354] loop7: detected capacity change from 0 to 512
[  564.785853][T16354] EXT4-fs (loop7): Test dummy encryption mode enabled
[  564.831509][T16354] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  564.910203][T16354] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.3777: bad orphan inode 131083
[  564.967552][T16354] loop7: lost filesystem error report for type 5 error -117
[  564.975182][T16354] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  565.073025][T16354] overlayfs: upper fs needs to support d_type.
[  565.174610][T16366] 9pnet: p9_errstr2errno: server reported unknown error 
[  565.455432][ T8012] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /463/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  565.483848][T16374] loop4: detected capacity change from 0 to 4096
[  565.520705][T16378] input: syz0 as /devices/virtual/input/input35
[  565.596395][T16374] ntfs3(loop4): Failed to load $Extend (-22).
[  565.627457][T16374] ntfs3(loop4): Failed to initialize $Extend.
[  566.297918][ T5352] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  566.400367][T16396] veth1_to_bond: entered allmulticast mode
[  566.407214][T16396] veth1_to_bond: left allmulticast mode
[  566.416945][ T8785] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  566.483165][ T5352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  566.513179][ T5352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  566.567689][ T5352] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  566.609163][ T5352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.678276][ T5352] usb 5-1: config 0 descriptor??
[  566.935321][ T1052] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  566.948089][ T1052] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 46784 - 0
[  567.109166][ T1052] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  567.122555][ T1052] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 46784 - 0
[  567.346511][ T5352] usb 5-1: string descriptor 0 read error: -22
[  567.539730][ T1052] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  567.568215][ T1052] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 46784 - 0
[  567.597693][T16423] loop9: detected capacity change from 0 to 512
[  567.623637][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  567.644695][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  567.654664][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  567.663616][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  567.675148][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  567.721362][T16423] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  567.774364][ T5352] uclogic 0003:256C:006D.0017: failed retrieving string descriptor #100: -71
[  567.859117][ T5352] uclogic 0003:256C:006D.0017: failed retrieving pen parameters: -71
[  567.901279][ T5352] uclogic 0003:256C:006D.0017: failed probing pen v1 parameters: -71
[  567.913424][T16423] EXT4-fs (loop9): 1 truncate cleaned up
[  567.929099][ T5352] uclogic 0003:256C:006D.0017: failed probing parameters: -71
[  567.930576][T16423] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  567.939033][ T5352] uclogic 0003:256C:006D.0017: probe with driver uclogic failed with error -71
[  567.972362][ T1052] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  567.991368][ T5352] usb 5-1: USB disconnect, device number 23
[  568.000443][ T1052] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 46784 - 0
[  568.702318][T14992] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt.
[  568.784189][T14992] EXT4-fs error (device loop9): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[  568.837637][T14992] EXT4-fs error (device loop9): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[  569.163864][T16236] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  569.715677][ T5623] Bluetooth: hci3: command tx timeout
[  569.980260][ T5747] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  570.068514][T13807] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  570.171773][ T5747] usb 5-1: Using ep0 maxpacket: 32
[  570.183675][ T5747] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  570.204185][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.237697][T13807] usb 4-1: Using ep0 maxpacket: 32
[  570.250339][T13807] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  570.274516][T13807] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  570.297137][ T5747] usb 5-1: config 0 descriptor??
[  570.310770][T13807] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  570.340360][T13807] usb 4-1: config 1 has no interface number 0
[  570.350893][ T5747] gspca_main: sq930x-2.14.0 probing 041e:403c
[  570.357222][T13807] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  570.372966][T13807] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  570.388308][T13807] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  570.400395][T13807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.482831][T13807] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  570.717516][T13807] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  570.968082][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  570.979662][ T1052] bond0 (unregistering): Released all slaves
[  571.003345][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  571.016499][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  571.027650][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  571.039596][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  571.175711][ T5856] usb 4-1: USB disconnect, device number 24
[  571.215008][ T5856] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  571.314570][ T5281] 8021q: adding VLAN 0 to HW filter on device eth17
[  571.381097][ T5747] gspca_sq930x: ucbus_write failed -71
[  571.398764][ T5747] sq930x 5-1:0.0: probe with driver sq930x failed with error -71
[  571.441644][ T5747] usb 5-1: USB disconnect, device number 24
[  571.788053][ T5623] Bluetooth: hci3: command tx timeout
[  571.967514][ T1052] hsr_slave_0: left promiscuous mode
[  571.970874][T16533] loop3: detected capacity change from 0 to 256
[  572.003686][ T1052] hsr_slave_1: left promiscuous mode
[  572.428447][T16543] loop1: detected capacity change from 0 to 128
[  572.466987][T16543] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  572.513442][T16543] ext4 filesystem being mounted at /618/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  572.606081][T16547] loop3: detected capacity change from 0 to 256
[  572.628145][T16543] fscrypt (loop1, inode 12): Unsupported encryption modes (contents 0, filenames 0)
[  572.714765][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  572.714789][   T30] audit: type=1800 audit(1785572655.557:690): pid=16547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3844" name="file1" dev="loop3" ino=1048761 res=0 errno=0
[  572.881735][ T5621] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  573.163459][ T5623] Bluetooth: hci4: command tx timeout
[  573.397921][ T5747] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  573.635547][ T5747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  573.659419][ T5747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  573.715208][ T5747] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  573.776500][ T5747] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  573.810819][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.853835][ T5281] 8021q: adding VLAN 0 to HW filter on device eth18
[  573.868624][ T5623] Bluetooth: hci3: command tx timeout
[  573.921387][ T5747] usb 2-1: config 0 descriptor??
[  574.424271][ T5747] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  574.816186][ T1052] IPVS: stop unused estimator thread 0...
[  574.871135][T16574] loop3: detected capacity change from 0 to 2048
[  574.977217][T16574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  575.227810][ T5623] Bluetooth: hci4: command tx timeout
[  575.460658][T16586] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3851'.
[  575.696655][ T5856] usb 2-1: USB disconnect, device number 21
[  575.947860][ T5623] Bluetooth: hci3: command tx timeout
[  575.989340][ T1052] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.128693][T16595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3853'.
[  576.550935][ T5281] 8021q: adding VLAN 0 to HW filter on device eth19
[  576.560018][T16613] loop1: detected capacity change from 0 to 1024
[  576.704534][T16425] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.722985][T16425] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.737457][T16425] bridge_slave_0: entered allmulticast mode
[  576.756088][T16425] bridge_slave_0: entered promiscuous mode
[  576.903559][T16618] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[  576.940236][ T1052] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.112018][T16425] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.134642][T16425] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.164038][T16425] bridge_slave_1: entered allmulticast mode
[  577.194019][T16425] bridge_slave_1: entered promiscuous mode
[  577.307771][ T5623] Bluetooth: hci4: command tx timeout
[  577.463870][T16616] loop3: detected capacity change from 0 to 32768
[  577.511754][ T1052] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.535690][T16616] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  577.610137][T16621] loop1: detected capacity change from 0 to 32768
[  577.699963][T16621] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  577.734811][T16616] XFS (loop3): Ending clean mount
[  577.905622][T16425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  577.961499][T16425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  578.208435][T16644] loop4: detected capacity change from 0 to 2048
[  578.229939][ T1052] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.257214][ T5622] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  578.270865][T16644] NILFS (loop4): invalid segment: Magic number mismatch
[  578.287561][T16644] NILFS (loop4): trying rollback from an earlier position
[  578.395556][T16644] NILFS (loop4): recovery complete
[  578.463456][T16646] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  578.609850][ T5621] ocfs2: Unmounting device (7,1) on (node local)
[  579.063293][T16425] team0: Port device team_slave_0 added
[  579.254463][T16425] team0: Port device team_slave_1 added
[  579.387852][ T5623] Bluetooth: hci4: command tx timeout
[  579.716937][T16513] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.759031][T16513] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.787858][T16513] bridge_slave_0: entered allmulticast mode
[  579.836413][T16513] bridge_slave_0: entered promiscuous mode
[  579.902357][T16425] batman_adv: batadv0: Adding interface: batadv_slave_0
[  579.949842][T16425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  580.079778][T16425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  580.094349][T16684] block nbd1: shutting down sockets
[  580.385019][T16513] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.406967][T16513] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.435999][T16513] bridge_slave_1: entered allmulticast mode
[  580.480504][T16513] bridge_slave_1: entered promiscuous mode
[  580.579822][T16425] batman_adv: batadv0: Adding interface: batadv_slave_1
[  580.609032][T16425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  580.712551][T16425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  581.030788][T16513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  581.119111][ T5639] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  581.222707][T16513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  581.297531][ T5639] usb 2-1: Using ep0 maxpacket: 8
[  581.317282][ T5639] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  581.374182][ T5639] usb 2-1: config 0 interface 0 has no altsetting 0
[  581.411591][ T5639] usb 2-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00
[  581.464832][ T5639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.505680][ T5639] usb 2-1: config 0 descriptor??
[  581.653497][ T5281] 8021q: adding VLAN 0 to HW filter on device eth20
[  581.727219][ T1052] bridge_slave_1: left allmulticast mode
[  581.760805][ T1052] bridge_slave_1: left promiscuous mode
[  581.790067][ T1052] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.819913][T16729] loop3: detected capacity change from 0 to 256
[  581.857288][ T1052] bridge_slave_0: left allmulticast mode
[  581.859926][T16729] exfat: Deprecated parameter 'utf8'
[  581.877518][ T1052] bridge_slave_0: left promiscuous mode
[  581.900652][ T1052] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.925632][T16729] exfat: Deprecated parameter 'namecase'
[  581.962940][T16729] exfat: Deprecated parameter 'namecase'
[  582.016079][ T5639] thrustmaster 0003:044F:B300.0019: unknown main item tag 0x2
[  582.046459][ T5639] thrustmaster 0003:044F:B300.0019: invalid report_count 2121247544
[  582.073392][ T5639] thrustmaster 0003:044F:B300.0019: item 0 4 1 9 parsing failed
[  582.093034][T16729] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d)
[  582.118994][ T5639] thrustmaster 0003:044F:B300.0019: parse failed
[  582.141585][ T5639] thrustmaster 0003:044F:B300.0019: probe with driver thrustmaster failed with error -22
[  582.260197][T16738] loop4: detected capacity change from 0 to 512
[  582.266191][ T5639] usb 2-1: USB disconnect, device number 22
[  582.315072][T16738] FAT-fs (loop4): error, corrupted file size (i_pos 0, 8960)
[  582.323276][T16738] FAT-fs (loop4): error, corrupted file size (i_pos 0, 8960)
[  582.394602][T16738] FAT-fs (loop4): error, corrupted file size (i_pos 0, 8960)
[  582.703831][T16740] loop3: detected capacity change from 0 to 32768
[  582.711713][T16740] btrfs: Deprecated parameter 'usebackuproot'
[  582.717895][T16740] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  582.759606][T16740] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3895 (16740)
[  582.785779][T16740] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  582.796156][T16740] BTRFS info (device loop3): using crc32c checksum algorithm
[  582.964754][   T79] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  583.034791][T16740] BTRFS error (device loop3): failed to load root extent
[  583.042236][T16740] BTRFS warning (device loop3): try to load backup roots slot 1
[  583.050424][ T6799] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  583.103890][T16759] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3897'.
[  583.115701][T16740] BTRFS warning (device loop3): couldn't read tree root
[  583.126213][T16740] BTRFS warning (device loop3): try to load backup roots slot 2
[  583.136507][ T6804] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  583.173159][T16759] net_ratelimit: 1 callbacks suppressed
[  583.173183][T16759] openvswitch: netlink: Message has 512 unknown bytes.
[  583.190065][T16740] BTRFS warning (device loop3): couldn't read tree root
[  583.197110][T16740] BTRFS warning (device loop3): try to load backup roots slot 3
[  583.229490][ T1052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  583.241533][T16740] BTRFS info (device loop3): rebuilding free space tree
[  583.275576][T16740] BTRFS info (device loop3): checking UUID tree
[  583.285947][T16740] BTRFS info (device loop3): enabling ssd optimizations
[  583.293002][T16740] BTRFS info (device loop3): turning on async discard
[  583.299835][T16740] BTRFS info (device loop3): enabling free space tree
[  583.306760][T16740] BTRFS info (device loop3): force clearing of disk cache
[  583.314063][T16740] BTRFS info (device loop3): enabling auto defrag
[  583.320720][T16740] BTRFS info (device loop3): trying to use backup root at mount time
[  583.328873][T16740] BTRFS info (device loop3): use zstd compression, level 3
[  583.439508][ T1052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  583.484237][ T1052] bond0 (unregistering): Released all slaves
[  583.565266][T16769] loop4: detected capacity change from 0 to 128
[  583.612050][T16513] team0: Port device team_slave_0 added
[  583.621404][ T5622] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  583.655825][T16513] team0: Port device team_slave_1 added
[  583.795944][T16425] hsr_slave_0: entered promiscuous mode
[  583.854405][T16425] hsr_slave_1: entered promiscuous mode
[  583.881663][T16425] debugfs: 'hsr0' already exists in 'hsr'
[  583.923678][T16425] Cannot create hsr debugfs directory
[  584.131122][T16783] loop3: detected capacity change from 0 to 256
[  584.182197][T16783] exfat: Deprecated parameter 'utf8'
[  584.191707][T16783] exfat: Deprecated parameter 'namecase'
[  584.212504][T16783] exfat: Deprecated parameter 'utf8'
[  584.260569][T16783] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  584.483895][T16788] loop4: detected capacity change from 0 to 512
[  584.593421][T16788] EXT4-fs (loop4): 1 truncate cleaned up
[  584.605092][T16788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  584.794767][T16513] batman_adv: batadv0: Adding interface: batadv_slave_0
[  584.812988][T16513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  584.868875][T16788] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3909: bg 0: block 465: padding at end of block bitmap is not set
[  584.886544][T16513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  585.054702][T16513] batman_adv: batadv0: Adding interface: batadv_slave_1
[  585.074858][T16790] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  585.085846][T16513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  585.230603][T16513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  585.329074][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.085069][T16513] hsr_slave_0: entered promiscuous mode
[  586.103549][T16813] trusted_key: syz.1.3917 sent an empty control message without MSG_MORE.
[  586.111983][T16513] hsr_slave_1: entered promiscuous mode
[  586.138762][T16513] debugfs: 'hsr0' already exists in 'hsr'
[  586.158096][T16513] Cannot create hsr debugfs directory
[  586.440798][T16818] vivid-000: disconnect
[  586.485388][T16817] vivid-000: reconnect
[  586.683557][ T1052] hsr_slave_0: left promiscuous mode
[  586.980104][ T1052] hsr_slave_1: left promiscuous mode
[  586.994313][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  587.033387][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_0
[  587.069377][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  587.097540][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_1
[  587.188427][ T1052] veth1_macvtap: left promiscuous mode
[  587.210955][ T1052] veth0_macvtap: left promiscuous mode
[  587.232415][ T1052] veth1_vlan: left promiscuous mode
[  587.256123][ T1052] veth0_vlan: left promiscuous mode
[  587.772218][T16833] input: syz0 as /devices/virtual/input/input36
[  588.567933][ T5747] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  588.627183][ T1052] team0 (unregistering): Port device team_slave_1 removed
[  588.696885][ T1052] team0 (unregistering): Port device team_slave_0 removed
[  588.749147][ T5747] usb 5-1: Using ep0 maxpacket: 32
[  588.772203][ T5747] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  588.803691][ T5747] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  588.839011][ T5747] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  588.867535][ T5747] usb 5-1: config 1 has no interface number 0
[  588.886572][ T5747] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 34305, setting to 1024
[  588.933129][ T5747] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  588.976583][ T5747] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  589.009258][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.050867][T16846] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  589.090363][ T5747] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  589.137263][T16867] dummy_hcd dummy_hcd.0: remove, state 4
[  589.151949][T16867] usb usb1: USB disconnect, device number 1
[  589.294752][T16846] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  589.327383][ T5747] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  589.348901][T16867] dummy_hcd dummy_hcd.0: stopped
[  589.354249][T16867] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[  589.615613][ T5747] usb 5-1: USB disconnect, device number 25
[  589.709929][ T5747] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  590.150988][T16883] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3946'.
[  590.463275][T16889] loop8: detected capacity change from 0 to 7
[  590.496541][T16889] Dev loop8: unable to read RDB block 7
[  590.517862][T16889]  loop8: unable to read partition table
[  590.530128][T16889] loop8: partition table beyond EOD, truncated
[  590.562670][T16889] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  590.721394][T16899] input: syz0 as /devices/virtual/input/input37
[  591.199574][T16902] tipc: Started in network mode
[  591.211215][T16902] tipc: Node identity ac14140f, cluster identity 4711
[  591.260112][T16902] tipc: Enabled bearer <udp:syz2>, priority 10
[  591.847110][ T5281] 8021q: adding VLAN 0 to HW filter on device eth21
[  592.197535][T13812] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  592.361145][T13812] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  592.385913][T13812] usb 5-1: config 0 has no interface number 0
[  592.425385][T13812] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  592.448233][T13812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.458912][ T5639] tipc: Node number set to 2886997007
[  592.477452][T13812] usb 5-1: Product: syz
[  592.490007][T13812] usb 5-1: Manufacturer: syz
[  592.500353][T13812] usb 5-1: SerialNumber: syz
[  592.510462][T13812] usb 5-1: config 0 descriptor??
[  592.740685][T13812] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  592.884356][T13812] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  592.918149][T13812] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  592.931831][T13812] usb 5-1: media controller created
[  592.943847][T16921] ==================================================================
[  592.951980][T16921] BUG: KASAN: slab-use-after-free in i2c_adapter_lock_bus+0x5e/0xf0
[  592.960081][T16921] Read of size 8 at addr ffff88802ae7a108 by task syz.4.3958/16921
[  592.967970][T16921] 
[  592.970363][T16921] CPU: 0 UID: 0 PID: 16921 Comm: syz.4.3958 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  592.970412][T16921] Tainted: [L]=SOFTLOCKUP
[  592.970420][T16921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  592.970436][T16921] Call Trace:
[  592.970448][T16921]  <TASK>
[  592.970459][T16921]  dump_stack_lvl+0xe8/0x150
[  592.970503][T16921]  print_address_description+0x55/0x1e0
[  592.970575][T16921]  ? i2c_adapter_lock_bus+0x5e/0xf0
[  592.970599][T16921]  print_report+0x58/0x70
[  592.970628][T16921]  kasan_report+0x117/0x150
[  592.970716][T16921]  ? i2c_adapter_lock_bus+0x5e/0xf0
[  592.970742][T16921]  i2c_adapter_lock_bus+0x5e/0xf0
[  592.970767][T16921]  i2c_transfer+0xc8/0x2d0
[  592.970836][T16921]  i2c_transfer_buffer_flags+0x10d/0x1a0
[  592.970869][T16921]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.970898][T16921]  ? __pfx_i2c_transfer_buffer_flags+0x10/0x10
[  592.970935][T16921]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.970960][T16921]  ? _copy_from_user+0x94/0xb0
[  592.971012][T16921]  i2cdev_write+0x113/0x1e0
[  592.971048][T16921]  vfs_writev+0x4bb/0x990
[  592.971078][T16921]  ? __pfx_i2cdev_write+0x10/0x10
[  592.971113][T16921]  ? __pfx_vfs_writev+0x10/0x10
[  592.971147][T16921]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.971175][T16921]  ? __fget_files+0x2a/0x420
[  592.971211][T16921]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.971236][T16921]  ? __fget_files+0x3a2/0x420
[  592.971265][T16921]  ? __fget_files+0x2a/0x420
[  592.971298][T16921]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.971326][T16921]  do_writev+0x154/0x2e0
[  592.971354][T16921]  ? __pfx_do_writev+0x10/0x10
[  592.971432][T16921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.971456][T16921]  do_syscall_64+0x174/0x580
[  592.971493][T16921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.971516][T16921] RIP: 0033:0x7f438139e019
[  592.971539][T16921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  592.971559][T16921] RSP: 002b:00007f43822b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  592.971583][T16921] RAX: ffffffffffffffda RBX: 00007f4381625fa0 RCX: 00007f438139e019
[  592.971600][T16921] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000004
[  592.971615][T16921] RBP: 00007f438143500c R08: 0000000000000000 R09: 0000000000000000
[  592.971629][T16921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.971643][T16921] R13: 00007f4381626038 R14: 00007f4381625fa0 R15: 00007ffe59417c98
[  592.971670][T16921]  </TASK>
[  592.971679][T16921] 
[  593.221382][T16921] Allocated by task 1:
[  593.225553][T16921]  kasan_save_track+0x3e/0x80
[  593.230247][T16921]  __kasan_kmalloc+0x93/0xb0
[  593.234840][T16921]  __kmalloc_cache_noprof+0x32d/0x660
[  593.240291][T16921]  usb_alloc_dev+0x5f/0xf10
[  593.244899][T16921]  usb_add_hcd+0x407/0xf80
[  593.249355][T16921]  dummy_hcd_probe+0x134/0x270
[  593.254125][T16921]  platform_probe+0xf9/0x190
[  593.258770][T16921]  really_probe+0x254/0xae0
[  593.263269][T16921]  __driver_probe_device+0x1e8/0x360
[  593.268549][T16921]  driver_probe_device+0x4f/0x240
[  593.273611][T16921]  __device_attach_driver+0x270/0x410
[  593.278979][T16921]  bus_for_each_drv+0x258/0x2f0
[  593.283834][T16921]  __device_attach+0x2c4/0x450
[  593.288591][T16921]  device_initial_probe+0xa1/0xd0
[  593.293613][T16921]  bus_probe_device+0x12a/0x220
[  593.298454][T16921]  device_add+0x7d7/0xb80
[  593.302815][T16921]  platform_device_add+0x4bd/0x860
[  593.307916][T16921]  dummy_hcd_init+0x667/0xd00
[  593.312694][T16921]  do_one_initcall+0x250/0x870
[  593.317460][T16921]  do_initcall_level+0x10a/0x1a0
[  593.322445][T16921]  do_initcalls+0x59/0xa0
[  593.326762][T16921]  kernel_init_freeable+0x29d/0x3e0
[  593.331954][T16921]  kernel_init+0x1d/0x1d0
[  593.336285][T16921]  ret_from_fork+0x514/0xb70
[  593.340876][T16921]  ret_from_fork_asm+0x1a/0x30
[  593.345636][T16921] 
[  593.347942][T16921] Freed by task 16867:
[  593.351990][T16921]  kasan_save_track+0x3e/0x80
[  593.356663][T16921]  kasan_save_free_info+0x40/0x50
[  593.361677][T16921]  __kasan_slab_free+0x5c/0x80
[  593.366481][T16921]  kfree+0x1c5/0x640
[  593.370365][T16921]  device_release+0xc4/0x1f0
[  593.374956][T16921]  kobject_put+0x222/0x550
[  593.379371][T16921]  usb_remove_hcd+0x460/0x670
[  593.384045][T16921]  dummy_hcd_remove+0xed/0x130
[  593.389349][T16921]  device_release_driver_internal+0x48b/0x880
[  593.395419][T16921]  unbind_store+0x1a1/0x1d0
[  593.399937][T16921]  kernfs_fop_write_iter+0x3a4/0x540
[  593.405220][T16921]  vfs_write+0x612/0xba0
[  593.409476][T16921]  ksys_write+0x150/0x270
[  593.414054][T16921]  do_syscall_64+0x174/0x580
[  593.418637][T16921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.424525][T16921] 
[  593.426831][T16921] Last potentially related work creation:
[  593.432548][T16921]  kasan_save_stack+0x3e/0x60
[  593.437252][T16921]  kasan_record_aux_stack+0xbd/0xd0
[  593.442453][T16921]  insert_work+0x3d/0x330
[  593.446782][T16921]  __queue_work+0xcd8/0x10a0
[  593.451379][T16921]  queue_work_on+0x106/0x1d0
[  593.455971][T16921]  rpm_idle+0x511/0x980
[  593.460209][T16921]  rpm_suspend+0x126f/0x17b0
[  593.464797][T16921]  __pm_runtime_idle+0x12f/0x1a0
[  593.469727][T16921]  hub_event+0x471e/0x4d30
[  593.474138][T16921]  process_scheduled_works+0xa8e/0x14e0
[  593.479689][T16921]  worker_thread+0xa47/0xfb0
[  593.484275][T16921]  kthread+0x388/0x470
[  593.488363][T16921]  ret_from_fork+0x514/0xb70
[  593.492968][T16921]  ret_from_fork_asm+0x1a/0x30
[  593.497730][T16921] 
[  593.500037][T16921] Second to last potentially related work creation:
[  593.506596][T16921]  kasan_save_stack+0x3e/0x60
[  593.511272][T16921]  kasan_record_aux_stack+0xbd/0xd0
[  593.516458][T16921]  insert_work+0x3d/0x330
[  593.520776][T16921]  __queue_work+0xcd8/0x10a0
[  593.525362][T16921]  queue_work_on+0x106/0x1d0
[  593.529942][T16921]  rpm_idle+0x511/0x980
[  593.534090][T16921]  rpm_suspend+0x126f/0x17b0
[  593.538669][T16921]  __pm_runtime_idle+0x12f/0x1a0
[  593.543593][T16921]  hub_event+0x471e/0x4d30
[  593.548004][T16921]  process_scheduled_works+0xa8e/0x14e0
[  593.553544][T16921]  worker_thread+0xa47/0xfb0
[  593.558125][T16921]  kthread+0x388/0x470
[  593.562190][T16921]  ret_from_fork+0x514/0xb70
[  593.566782][T16921]  ret_from_fork_asm+0x1a/0x30
[  593.571555][T16921] 
[  593.573863][T16921] The buggy address belongs to the object at ffff88802ae7a000
[  593.573863][T16921]  which belongs to the cache kmalloc-2k of size 2048
[  593.587907][T16921] The buggy address is located 264 bytes inside of
[  593.587907][T16921]  freed 2048-byte region [ffff88802ae7a000, ffff88802ae7a800)
[  593.601792][T16921] 
[  593.604111][T16921] The buggy address belongs to the physical page:
[  593.610587][T16921] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802ae7e000 pfn:0x2ae78
[  593.620680][T16921] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  593.629170][T16921] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  593.637680][T16921] page_type: f5(slab)
[  593.641654][T16921] raw: 00fff00000000240 ffff88801b002000 ffffea00014b9c10 ffffea0000d44210
[  593.650232][T16921] raw: ffff88802ae7e000 0000000800080005 00000000f5000000 0000000000000000
[  593.658810][T16921] head: 00fff00000000240 ffff88801b002000 ffffea00014b9c10 ffffea0000d44210
[  593.667472][T16921] head: ffff88802ae7e000 0000000800080005 00000000f5000000 0000000000000000
[  593.676141][T16921] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  593.684808][T16921] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  593.693464][T16921] page dumped because: kasan: bad access detected
[  593.699866][T16921] page_owner tracks the page as allocated
[  593.705645][T16921] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11690201849, free_ts 0
[  593.725445][T16921]  post_alloc_hook+0x1f9/0x250
[  593.730262][T16921]  get_page_from_freelist+0x21fa/0x2270
[  593.735816][T16921]  __alloc_frozen_pages_noprof+0x18d/0x380
[  593.741626][T16921]  allocate_slab+0x79/0x5e0
[  593.746192][T16921]  refill_objects+0x2d5/0x350
[  593.750863][T16921]  __pcs_replace_empty_main+0x2bf/0x6b0
[  593.756407][T16921]  __kmalloc_cache_noprof+0x3a7/0x660
[  593.761776][T16921]  device_create+0x13d/0x300
[  593.766365][T16921]  mon_bin_add+0xb6/0x130
[  593.770774][T16921]  mon_bus_init+0x162/0x2a0
[  593.775275][T16921]  mon_notify+0x10c/0x3f0
[  593.779599][T16921]  notifier_call_chain+0x1a5/0x3d0
[  593.784713][T16921]  blocking_notifier_call_chain+0x6a/0x90
[  593.790435][T16921]  usb_register_bus+0xcf/0x150
[  593.795196][T16921]  usb_add_hcd+0x3e6/0xf80
[  593.799609][T16921]  dummy_hcd_probe+0x134/0x270
[  593.804395][T16921] page_owner free stack trace missing
[  593.809743][T16921] 
[  593.812048][T16921] Memory state around the buggy address:
[  593.817663][T16921]  ffff88802ae7a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  593.825712][T16921]  ffff88802ae7a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  593.833841][T16921] >ffff88802ae7a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  593.841892][T16921]                       ^
[  593.846205][T16921]  ffff88802ae7a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  593.854256][T16921]  ffff88802ae7a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  593.862302][T16921] ==================================================================
[  593.891639][T13812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  594.090830][T16921] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  594.098084][T16921] CPU: 0 UID: 0 PID: 16921 Comm: syz.4.3958 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  594.109025][T16921] Tainted: [L]=SOFTLOCKUP
[  594.113346][T16921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  594.123400][T16921] Call Trace:
[  594.126684][T16921]  <TASK>
[  594.129617][T16921]  vpanic+0x56c/0xa60
[  594.133640][T16921]  ? __pfx_vpanic+0x10/0x10
[  594.138166][T16921]  ? __pfx___schedule+0x10/0x10
[  594.143031][T16921]  panic+0xc5/0xd0
[  594.146764][T16921]  ? __pfx_panic+0x10/0x10
[  594.151198][T16921]  ? preempt_schedule_thunk+0x16/0x40
[  594.156580][T16921]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.162230][T16921]  ? i2c_adapter_lock_bus+0x5e/0xf0
[  594.167438][T16921]  check_panic_on_warn+0x89/0xb0
[  594.172394][T16921]  ? i2c_adapter_lock_bus+0x5e/0xf0
[  594.177598][T16921]  end_report+0x73/0x170
[  594.181853][T16921]  ? i2c_adapter_lock_bus+0x5e/0xf0
[  594.187052][T16921]  kasan_report+0x128/0x150
[  594.191570][T16921]  ? i2c_adapter_lock_bus+0x5e/0xf0
[  594.196782][T16921]  i2c_adapter_lock_bus+0x5e/0xf0
[  594.201814][T16921]  i2c_transfer+0xc8/0x2d0
[  594.206252][T16921]  i2c_transfer_buffer_flags+0x10d/0x1a0
[  594.211902][T16921]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.217548][T16921]  ? __pfx_i2c_transfer_buffer_flags+0x10/0x10
[  594.223725][T16921]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.229367][T16921]  ? _copy_from_user+0x94/0xb0
[  594.234134][T16921]  i2cdev_write+0x113/0x1e0
[  594.238658][T16921]  vfs_writev+0x4bb/0x990
[  594.243001][T16921]  ? __pfx_i2cdev_write+0x10/0x10
[  594.248046][T16921]  ? __pfx_vfs_writev+0x10/0x10
[  594.252911][T16921]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.258543][T16921]  ? __fget_files+0x2a/0x420
[  594.263138][T16921]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.268763][T16921]  ? __fget_files+0x3a2/0x420
[  594.273451][T16921]  ? __fget_files+0x2a/0x420
[  594.278040][T16921]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.283666][T16921]  do_writev+0x154/0x2e0
[  594.287905][T16921]  ? __pfx_do_writev+0x10/0x10
[  594.292672][T16921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.298731][T16921]  do_syscall_64+0x174/0x580
[  594.303329][T16921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.309211][T16921] RIP: 0033:0x7f438139e019
[  594.313618][T16921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  594.333299][T16921] RSP: 002b:00007f43822b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  594.341706][T16921] RAX: ffffffffffffffda RBX: 00007f4381625fa0 RCX: 00007f438139e019
[  594.349696][T16921] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000004
[  594.357654][T16921] RBP: 00007f438143500c R08: 0000000000000000 R09: 0000000000000000
[  594.365613][T16921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  594.373572][T16921] R13: 00007f4381626038 R14: 00007f4381625fa0 R15: 00007ffe59417c98
[  594.381645][T16921]  </TASK>
[  594.384962][T16921] Kernel Offset: disabled
[  594.389294][T16921] Rebooting in 86400 seconds..