last executing test programs:

6m17.611336374s ago: executing program 4 (id=188):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0)
close(r0)

6m17.286812819s ago: executing program 4 (id=191):
r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0xfffffffd, 0x33565348, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7}})

6m16.82725898s ago: executing program 4 (id=196):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4002, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x40001000}}]}, 0x1, 0x4be, &(0x7f0000000540)="$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")
r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

6m15.488397552s ago: executing program 4 (id=201):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x2014000, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0deb0534b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e37e1ebc4d860173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x14, 0xc49, &(0x7f0000001cc0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

6m13.90775304s ago: executing program 4 (id=212):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000180), 0xff, 0x556, &(0x7f0000000ac0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x4)
lseek(r0, 0xfffffffffffffffc, 0x2)
getdents(r0, 0x0, 0x54)

6m12.646681427s ago: executing program 4 (id=220):
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0)

6m11.754223486s ago: executing program 32 (id=220):
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0)

3m6.917633048s ago: executing program 0 (id=1698):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff1}, {0x0, 0xfff3}, {0xd, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

3m6.489317272s ago: executing program 0 (id=1702):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
pwrite64(r0, &(0x7f0000000140)='2', 0xfe34, 0xe7c)

3m6.092734339s ago: executing program 0 (id=1704):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pI4   \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)

3m5.701281597s ago: executing program 0 (id=1708):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2)

3m5.337401215s ago: executing program 0 (id=1712):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000080000000000000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m4.273144257s ago: executing program 0 (id=1720):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)

3m3.096694717s ago: executing program 33 (id=1720):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)

39.021022775s ago: executing program 6 (id=2892):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)={0x5c, r1, 0x1, 0x70bd28, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x5c}}, 0x4000040)

38.70946672s ago: executing program 6 (id=2896):
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0)

38.474928368s ago: executing program 6 (id=2898):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e0132")

38.092046487s ago: executing program 6 (id=2903):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780), 0x3, 0x440, &(0x7f0000000280)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

37.218559463s ago: executing program 6 (id=2908):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x18, 0x100)

35.88072682s ago: executing program 6 (id=2925):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000001400)=[{&(0x7f0000002700)=""/4106, 0x100a}], 0x1)
landlock_restrict_self(0xffffffffffffffff, 0xc)

35.317805818s ago: executing program 34 (id=2925):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000001400)=[{&(0x7f0000002700)=""/4106, 0x100a}], 0x1)
landlock_restrict_self(0xffffffffffffffff, 0xc)

35.302581165s ago: executing program 1 (id=2928):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x200000d4)

34.463566025s ago: executing program 1 (id=2938):
syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002000904000103ff000000070583020002000705040200020007058101000201"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/4096, 0x1000)

31.033996299s ago: executing program 1 (id=2950):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x556, &(0x7f00000003c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r0, 0x100, 0x0)
getdents(r0, 0x0, 0x0)

29.884734943s ago: executing program 1 (id=2957):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780), 0x3, 0x440, &(0x7f0000000280)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

29.157387511s ago: executing program 1 (id=2959):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5ff2cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb69658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d96700e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bed545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177df97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b808451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f5035d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fb4d8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c400"/2303], 0xfd, 0x5e5c, &(0x7f0000005d80)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

28.328314886s ago: executing program 1 (id=2965):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000000)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff3, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

27.625524315s ago: executing program 35 (id=2965):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000000)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff3, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

6.583465384s ago: executing program 7 (id=3061):
syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902220001010080fa0904000000ff0000000904000101ff00000007058201000401"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x1, 0x1, 0x1})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000240)=0x1)

5.439263689s ago: executing program 5 (id=3072):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)

5.133238929s ago: executing program 5 (id=3074):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0)
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000})

3.870422807s ago: executing program 5 (id=3066):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = epoll_create1(0x0)
r2 = eventfd2(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000b80)={0x30000014})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0x20000005})

3.531086081s ago: executing program 8 (id=2926):
r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040d80402c000000000000109022200010100803209040000010300000009211101000122cb000705810308000a"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022cb0000000600ff0901a10185110902150026ff0075089502810285210903150026ff0075089501810285910904150026ff0075089501910285920905150026ff0075089501910285940906150026ff0075089501910285950907150026ff0075089501910285960908150026ff0075089501910285810909150026ff0075089501910285a3090a150026ff0075089501910285a4090b150026ff0075089501910285b3090c150026ff0075089501910285b4090d150026ff007508950191028593090e150026ff00750895019102c0"], 0x0}, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

3.363028733s ago: executing program 7 (id=3068):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4)

3.360062651s ago: executing program 3 (id=3069):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x4, 0x8, 0x2}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

3.314884786s ago: executing program 5 (id=3070):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x8c, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
vmsplice(r1, &(0x7f00000012c0)=[{&(0x7f00000002c0)="8f", 0x1}], 0x1, 0x5)

2.850253664s ago: executing program 3 (id=3075):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r2, 0x25, 0x4, @void}, 0x10)
syz_emit_ethernet(0x3ae, &(0x7f0000000940)=ANY=[], 0x0)

2.628153569s ago: executing program 5 (id=3076):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3010010, &(0x7f0000000100)={[{@grpjquota}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")
r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
sched_setscheduler(0x0, 0x2, 0x0)

2.622705709s ago: executing program 7 (id=3077):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc80, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x11, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffff8, 0x7}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800c051}, 0x4044084)

2.355886701s ago: executing program 3 (id=3078):
syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000440)=0x40)
r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5)
statx(r1, 0x0, 0x1000, 0x20, &(0x7f0000002500))

2.121583797s ago: executing program 2 (id=3080):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x4012d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44)

2.038265915s ago: executing program 7 (id=3081):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0xfffffffc, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0xfffd, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2, 0xfffffffffffffffc}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x8001}]}]}, 0xfc}}, 0x0)
r1 = socket(0x2, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x10)
sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f00000004c0)="2d9b1d00000000000000000000000000000000005315b443b7d788aec4bf4890556e91eebbdef82765cda6401bcf473eb55635e9", 0x34}], 0x1}}], 0x1, 0x4)

1.913830526s ago: executing program 2 (id=3082):
mmap(0x0, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x6, 0x8, 0x4, 0x40}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.456045397s ago: executing program 7 (id=3083):
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000500)={[{@gid}, {@mode={'mode', 0x3d, 0x3}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)

1.422965571s ago: executing program 3 (id=3084):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="1c002d800a"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.384670688s ago: executing program 2 (id=3085):
r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
setuid(0xee00)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='sysfs\x00', &(0x7f0000000380)='./bus\x00', r1)

988.89227ms ago: executing program 9 (id=2967):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0})
ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, 0x0)

862.189244ms ago: executing program 2 (id=3086):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x8, r2, 0x0, 0x9, 0x2, &(0x7f0000000140)='!;', 0x1})

759.859919ms ago: executing program 3 (id=3087):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4)

569.595157ms ago: executing program 9 (id=3088):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x8c, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
vmsplice(r1, &(0x7f00000012c0)=[{&(0x7f00000002c0)="8f", 0x1}], 0x1, 0x5)

523.642343ms ago: executing program 2 (id=3089):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000080)=0xd, 0x4)

456.89693ms ago: executing program 3 (id=3090):
r0 = socket(0x2b, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
listen(r0, 0x5)
accept4$vsock_stream(r0, 0x0, 0x0, 0x800)
landlock_restrict_self(0xffffffffffffffff, 0xc)

318.484624ms ago: executing program 7 (id=3091):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r1)

29.946106ms ago: executing program 2 (id=3092):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc80, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x11, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffff8, 0x7}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800c051}, 0x4044084)

0s ago: executing program 5 (id=3104):
socket$netlink(0x10, 0x3, 0x10)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB=' mO'], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[], 0x214}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

c" to macgreek
[  401.481368][T12305] ntfs3(loop2): ino=20, mi_enum_attr
[  401.546934][   T30] audit: type=1800 audit(1786037339.589:2498): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  401.690211][   T30] audit: type=1800 audit(1786037339.729:2499): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  401.791615][   T30] audit: type=1800 audit(1786037339.819:2500): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  401.874582][   T30] audit: type=1800 audit(1786037339.889:2501): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  402.338838][T12336] input: syz1 as /devices/virtual/input/input13
[  403.628582][T12316] loop7: detected capacity change from 0 to 32768
[  403.976140][T12316] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  404.174571][T12370] loop3: detected capacity change from 0 to 128
[  404.244619][T12370] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  404.361330][T12370] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  404.462137][T10339] ocfs2: Unmounting device (7,7) on (node local)
[  404.620587][   T49] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  405.863729][   T30] kauditd_printk_skb: 36 callbacks suppressed
[  405.863756][   T30] audit: type=1800 audit(1786037343.899:2538): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  405.996721][   T30] audit: type=1800 audit(1786037343.989:2539): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  406.057862][T12395] HELLO WORLD FROM SYZ
[  406.078894][   T30] audit: type=1800 audit(1786037344.059:2540): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  406.255992][   T30] audit: type=1800 audit(1786037344.269:2541): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  406.375168][   T30] audit: type=1800 audit(1786037344.349:2542): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  406.458399][   T30] audit: type=1800 audit(1786037344.449:2543): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  406.542819][   T30] audit: type=1800 audit(1786037344.479:2544): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  406.568861][T12407] loop5: detected capacity change from 0 to 2048
[  406.604993][T12407] EXT4-fs: Ignoring removed oldalloc option
[  406.636703][   T47] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  406.646367][   T30] audit: type=1800 audit(1786037344.549:2545): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0
[  406.697475][   T30] audit: type=1800 audit(1786037344.569:2546): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  406.717737][T12407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  406.890448][   T30] audit: type=1800 audit(1786037344.929:2547): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  406.902391][   T47] usb 3-1: config 127 has an invalid interface number: 57 but max is 0
[  406.979667][   T47] usb 3-1: config 127 has no interface number 0
[  406.995179][   T47] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  407.017150][ T5611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.095328][   T47] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  407.121727][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.133511][T12418] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2446'.
[  407.164249][   T47] usb 3-1: Product: syz
[  407.172543][   T47] usb 3-1: Manufacturer: syz
[  407.193169][   T47] usb 3-1: SerialNumber: syz
[  407.238184][T12403] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  407.741746][T12403] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  407.961059][   T47] asix 3-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random
[  408.165762][   T47] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  408.190333][T12391] loop7: detected capacity change from 0 to 32768
[  408.196324][   T47] asix 3-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  408.231439][   T47] asix 3-1:127.57: probe with driver asix failed with error -71
[  408.255294][T12391] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2427 (12391)
[  408.270341][   T47] usb 3-1: USB disconnect, device number 7
[  408.415410][T12391] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  408.474280][T12391] BTRFS info (device loop7): using blake2b checksum algorithm
[  408.972803][T12456] loop1: detected capacity change from 0 to 2048
[  409.068663][T12456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  409.310539][T12466] loop5: detected capacity change from 0 to 256
[  409.491235][T12391] BTRFS error (device loop7): open_ctree failed: -4
[  409.508767][T12466] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d)
[  409.661406][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.096629][T12478] vivid-002: disconnect
[  410.194299][T12475] vivid-002: reconnect
[  410.559091][T12489] loop5: detected capacity change from 0 to 128
[  410.659441][T12489] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  410.744726][T12492] loop1: detected capacity change from 0 to 2048
[  410.753081][T12489] ext4 filesystem being mounted at /423/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  410.786892][T12492] EXT4-fs: Ignoring removed oldalloc option
[  410.816689][T12492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.988766][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.009817][   T30] kauditd_printk_skb: 40 callbacks suppressed
[  411.009846][   T30] audit: type=1800 audit(1786037349.049:2588): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0
[  411.222975][   T30] audit: type=1800 audit(1786037349.189:2589): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  411.254837][ T5611] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  411.412066][   T30] audit: type=1800 audit(1786037349.369:2590): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  411.604604][   T30] audit: type=1800 audit(1786037349.529:2591): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  411.844380][   T30] audit: type=1800 audit(1786037349.629:2592): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0
[  411.904253][T12509] loop6: detected capacity change from 0 to 256
[  412.127625][T12499] loop2: detected capacity change from 0 to 131072
[  412.138676][T12499] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  412.147884][T12499] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  412.159595][T12499] F2FS-fs (loop2): invalid crc value
[  412.171271][   T30] audit: type=1800 audit(1786037350.209:2593): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  412.341741][T12499] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  412.345502][   T30] audit: type=1800 audit(1786037350.239:2594): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0
[  412.363344][T12517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2477'.
[  412.420736][T12517] netlink: 'syz.1.2477': attribute type 7 has an invalid length.
[  412.431123][T12499] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  412.438420][T12499] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  412.438482][   T30] audit: type=1800 audit(1786037350.249:2595): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  412.552807][T12517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2477'.
[  412.620461][   T30] audit: type=1800 audit(1786037350.259:2596): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  412.734075][   T30] audit: type=1800 audit(1786037350.399:2597): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  412.787674][T12525] loop6: detected capacity change from 0 to 512
[  412.873320][T12525] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2484: inode has both inline data and extents flags
[  412.886795][T12525] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  412.887618][T12525] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2484: couldn't read orphan inode 15 (err -117)
[  412.906305][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  412.916371][    C1] EXT4-fs (loop6): initial error at time 1786037350: ext4_orphan_get:1399: inode 15
[  412.925805][    C1] EXT4-fs (loop6): last error at time 1786037350: ext4_orphan_get:1399: inode 15
[  412.957671][T12525] loop6: lost filesystem error report for type 5 error -117
[  412.989581][T12525] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  413.643958][ T6382] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.382219][T12531] loop7: detected capacity change from 0 to 131072
[  414.391163][T12531] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0)
[  414.399476][T12531] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  414.411277][T12531] F2FS-fs (loop7): invalid crc value
[  414.552025][T12531] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  414.569714][T12531] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  414.576909][T12531] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  415.063357][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2500'.
[  415.108089][T12565] netlink: 'syz.3.2500': attribute type 7 has an invalid length.
[  415.185462][T12565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2500'.
[  416.039080][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  416.039106][   T30] audit: type=1800 audit(1786037354.079:2623): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0
[  416.299326][   T30] audit: type=1800 audit(1786037354.329:2624): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0
[  416.392706][   T30] audit: type=1800 audit(1786037354.419:2625): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  416.522440][   T30] audit: type=1800 audit(1786037354.559:2626): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  416.621052][   T30] audit: type=1800 audit(1786037354.649:2627): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  416.695117][   T30] audit: type=1800 audit(1786037354.709:2628): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  416.817367][   T30] audit: type=1800 audit(1786037354.789:2629): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  416.901002][T12599] loop7: detected capacity change from 0 to 512
[  416.961436][T12599] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  417.043639][   T30] audit: type=1800 audit(1786037355.079:2630): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  417.200451][   T30] audit: type=1800 audit(1786037355.219:2631): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  417.235238][T12599] EXT4-fs (loop7): 1 truncate cleaned up
[  417.303535][T12599] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  417.447167][   T30] audit: type=1800 audit(1786037355.489:2632): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  417.784497][T10339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.979513][T12596] loop1: detected capacity change from 0 to 131072
[  417.992471][T12596] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  418.000683][T12596] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  418.013244][T12596] F2FS-fs (loop1): invalid crc value
[  418.242280][T12596] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  418.259975][   T47] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  418.275036][T12596] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  418.283777][T12596] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  418.416509][   T47] usb 6-1: Using ep0 maxpacket: 16
[  418.438184][   T47] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  418.468660][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.503990][   T47] usb 6-1: Product: syz
[  418.523570][   T47] usb 6-1: Manufacturer: syz
[  418.550323][   T47] usb 6-1: SerialNumber: syz
[  418.808306][T12634] loop7: detected capacity change from 0 to 128
[  418.821443][T11589] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  418.949453][   T47] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  418.989819][T12634] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  419.042416][   T47] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  419.066750][   T47] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  419.091470][   T47] usb 6-1: media controller created
[  419.107324][T12634] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  419.244246][   T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  419.298051][T11589] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  419.583987][   T47] zl10353_read_register: readreg error (reg=127, ret==-71)
[  419.908745][   T47] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  419.943198][T10339] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  419.976760][   T47] usb 6-1: USB disconnect, device number 11
[  420.359833][T12649] loop7: detected capacity change from 0 to 1024
[  420.399974][T12649] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  420.415567][T12649] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  420.432000][T12649] jbd2_journal_init_inode: Cannot locate journal superblock
[  420.449661][T12649] EXT4-fs (loop7): Could not load journal inode
[  420.758058][T11590] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  420.920397][T11590] usb 6-1: too many endpoints for config 0 interface 0 altsetting 3: 255, using maximum allowed: 30
[  420.946067][T11590] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  420.967175][T11590] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  420.981934][T11590] usb 6-1: config 0 interface 0 has no altsetting 0
[  420.990444][T11590] usb 6-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00
[  421.043212][T11590] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.083045][T11590] usb 6-1: config 0 descriptor??
[  421.092639][   T30] kauditd_printk_skb: 36 callbacks suppressed
[  421.092664][   T30] audit: type=1800 audit(1786037359.139:2669): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=165857 res=0 errno=0
[  421.216459][   T30] audit: type=1800 audit(1786037359.169:2670): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=165886 res=0 errno=0
[  421.261196][   T30] audit: type=1800 audit(1786037359.189:2671): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=165864 res=0 errno=0
[  421.341440][   T30] audit: type=1800 audit(1786037359.189:2672): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=165865 res=0 errno=0
[  421.364230][T12667] batadv_slave_1: entered promiscuous mode
[  421.384652][T12666] batadv_slave_1: left promiscuous mode
[  421.424731][   T30] audit: type=1800 audit(1786037359.199:2673): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=165866 res=0 errno=0
[  421.487774][   T30] audit: type=1800 audit(1786037359.209:2674): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=165906 res=0 errno=0
[  421.529455][   T30] audit: type=1800 audit(1786037359.289:2675): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  421.560972][T11590] logitech-hidpp-device 0003:046D:C088.000D: item fetching failed at offset 5/6
[  421.599038][T11590] logitech-hidpp-device 0003:046D:C088.000D: hidpp_probe:parse failed
[  421.614631][   T30] audit: type=1800 audit(1786037359.379:2676): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0
[  421.626098][T11590] logitech-hidpp-device 0003:046D:C088.000D: probe with driver logitech-hidpp-device failed with error -22
[  421.677991][T11591] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  421.692513][   T30] audit: type=1800 audit(1786037359.619:2677): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  421.760354][   T30] audit: type=1800 audit(1786037359.619:2678): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=165932 res=0 errno=0
[  421.843563][T11591] usb 7-1: config 0 has an invalid interface number: 214 but max is 0
[  421.852278][T11591] usb 7-1: config 0 has no interface number 0
[  421.863420][T11589] usb 6-1: USB disconnect, device number 12
[  421.901618][T11591] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 25955, setting to 64
[  421.953013][T11591] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  421.963763][T11591] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  421.986128][T11591] usb 7-1: Manufacturer: syz
[  421.996976][T11591] usb 7-1: SerialNumber: syz
[  422.022176][T11591] usb 7-1: config 0 descriptor??
[  422.047332][T12669] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  422.079142][T12682] loop3: detected capacity change from 0 to 256
[  422.445313][T12688] kAFS: Invalid Command on /proc/fs/afs/cells file
[  422.502969][T11591] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71
[  422.567581][T11591] usb 7-1: USB disconnect, device number 10
[  423.607250][T12726] kAFS: Invalid Command on /proc/fs/afs/cells file
[  423.894962][T12732] loop5: detected capacity change from 0 to 128
[  423.939320][T12732] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  423.991240][T12732] ext4 filesystem being mounted at /438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  424.482467][ T5611] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  425.129154][T12758] loop3: detected capacity change from 0 to 4096
[  425.188164][T12758] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  425.217601][T11591] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  425.269835][T12758] ntfs3(loop3): Failed to load $Extend (-22).
[  425.297781][T12758] ntfs3(loop3): Failed to initialize $Extend.
[  425.376566][T11591] usb 2-1: Using ep0 maxpacket: 16
[  425.391758][T11591] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  425.404185][T11591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.418425][T11591] usb 2-1: Product: syz
[  425.443925][T11591] usb 2-1: Manufacturer: syz
[  425.462606][T11591] usb 2-1: SerialNumber: syz
[  425.570340][T12772] loop2: detected capacity change from 0 to 128
[  425.621263][T12772] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  425.652665][T12772] ext4 filesystem being mounted at /430/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  425.733062][T11591] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  425.767034][T11591] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  425.785623][T11591] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  425.795088][T11591] usb 2-1: media controller created
[  425.818302][T11591] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  426.010140][ T5613] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  426.069037][T11591] zl10353_read_register: readreg error (reg=127, ret==-110)
[  426.110613][   T30] kauditd_printk_skb: 63 callbacks suppressed
[  426.110637][   T30] audit: type=1800 audit(1786037364.149:2742): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  426.249661][   T30] audit: type=1800 audit(1786037364.289:2743): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0
[  426.322515][T11591] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  426.343538][   T30] audit: type=1800 audit(1786037364.339:2744): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  426.374228][T11591] usb 2-1: USB disconnect, device number 6
[  426.419007][   T30] audit: type=1800 audit(1786037364.409:2745): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  426.482902][   T30] audit: type=1800 audit(1786037364.429:2746): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=166213 res=0 errno=0
[  426.563678][   T30] audit: type=1800 audit(1786037364.429:2747): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=166214 res=0 errno=0
[  426.672307][   T30] audit: type=1800 audit(1786037364.429:2748): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=166193 res=0 errno=0
[  426.744389][   T30] audit: type=1800 audit(1786037364.429:2749): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=166215 res=0 errno=0
[  426.816085][   T30] audit: type=1800 audit(1786037364.699:2750): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0
[  426.894315][   T30] audit: type=1800 audit(1786037364.759:2751): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  427.216470][T12803] loop1: detected capacity change from 0 to 4096
[  427.760574][T12811] loop6: detected capacity change from 0 to 4096
[  427.860249][T12811] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  427.971761][T12811] ntfs3(loop6): Failed to load $Extend (-22).
[  428.016244][T12811] ntfs3(loop6): Failed to initialize $Extend.
[  428.195708][T12831] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2612'.
[  428.716881][ T5899] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  428.880413][ T5899] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  428.898056][ T5899] usb 2-1: config 0 has no interface number 0
[  428.921354][ T5899] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 25955, setting to 64
[  428.976948][ T5899] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  428.993760][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  429.031994][ T5899] usb 2-1: Manufacturer: syz
[  429.053192][ T5899] usb 2-1: SerialNumber: syz
[  429.099951][ T5899] usb 2-1: config 0 descriptor??
[  429.125854][T12840] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  429.591293][ T5899] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71
[  429.642099][ T5899] usb 2-1: USB disconnect, device number 7
[  429.976825][T11589] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  430.137852][T11589] usb 4-1: Using ep0 maxpacket: 16
[  430.160572][T11589] usb 4-1: unable to get BOS descriptor or descriptor too short
[  430.195342][T11589] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  430.230941][T11589] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  430.269869][T11589] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  430.312600][T11589] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  430.335008][T11589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.355208][T11589] usb 4-1: Product: syz
[  430.371859][T11589] usb 4-1: Manufacturer: syz
[  430.516561][   T47] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  430.702023][T12866] loop7: detected capacity change from 0 to 32768
[  430.711180][   T47] usb 7-1: Using ep0 maxpacket: 16
[  430.734957][   T47] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  430.752707][T12866] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2629 (12866)
[  430.787914][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.820470][   T47] usb 7-1: Product: syz
[  430.842518][   T47] usb 7-1: Manufacturer: syz
[  430.873244][   T47] usb 7-1: SerialNumber: syz
[  430.947857][T12892] loop5: detected capacity change from 0 to 65
[  431.032935][T12892] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway
[  431.145585][   T47] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  431.196916][   T47] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  431.234033][   T47] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  431.265811][   T47] usb 7-1: media controller created
[  431.302867][   T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  431.339227][T11589] usb 4-1: SerialNumber: syz
[  431.358303][   T30] kauditd_printk_skb: 56 callbacks suppressed
[  431.358329][   T30] audit: type=1800 audit(1786037369.399:2808): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166914 res=0 errno=0
[  431.479739][T12866] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  431.501716][T12866] BTRFS info (device loop7): using sha256 checksum algorithm
[  431.572167][   T30] audit: type=1800 audit(1786037369.399:2809): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=166946 res=0 errno=0
[  431.609964][   T47] zl10353_read_register: readreg error (reg=127, ret==-71)
[  431.692480][   T30] audit: type=1800 audit(1786037369.399:2810): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=166921 res=0 errno=0
[  431.736042][T12886] loop2: detected capacity change from 0 to 131072
[  431.751118][T12886] F2FS-fs (loop2): invalid crc value
[  431.770593][   T30] audit: type=1800 audit(1786037369.399:2811): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=166922 res=0 errno=0
[  431.792926][   T30] audit: type=1800 audit(1786037369.499:2812): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166967 res=0 errno=0
[  431.860914][   T30] audit: type=1800 audit(1786037369.659:2813): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  431.884526][T11589] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  431.910979][T11589] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  431.928117][T12886] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  431.954311][T12886] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  432.004439][T12866] BTRFS info (device loop7): enabling ssd optimizations
[  432.017192][   T30] audit: type=1800 audit(1786037369.729:2814): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  432.056485][T12866] BTRFS info (device loop7): turning on async discard
[  432.063602][T12866] BTRFS info (device loop7): enabling free space tree
[  432.111297][   T47] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  432.160651][   T30] audit: type=1800 audit(1786037370.119:2815): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  432.213681][T11589] usb 4-1: 2:1 : can't get Cluster Descriptor
[  432.220177][   T47] usb 7-1: USB disconnect, device number 11
[  432.288445][   T30] audit: type=1800 audit(1786037370.299:2816): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  432.404550][   T30] audit: type=1800 audit(1786037370.329:2817): pid=6314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=166838 res=0 errno=0
[  432.836745][T10339] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  432.910147][T11589] usb 4-1: USB disconnect, device number 13
[  433.903484][T12945] loop1: detected capacity change from 0 to 512
[  434.014449][T12945] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.2667: bad orphan inode 17
[  434.099792][T12945] loop1: lost filesystem error report for type 5 error -117
[  434.106318][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  434.120232][    C1] EXT4-fs (loop1): initial error at time 1786037372: ext4_orphan_get:1425
[  434.128847][    C1] EXT4-fs (loop1): last error at time 1786037372: ext4_orphan_get:1425
[  434.138070][T12945] ext4_test_bit(bit=16, block=4) = 1
[  434.143574][T12945] is_bad_inode(inode)=0
[  434.147826][T12945] NEXT_ORPHAN(inode)=0
[  434.151921][T12945] max_ino=32
[  434.155133][T12945] i_nlink=1
[  434.196450][T12945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  434.212901][T12953] 9p: Bad value for 'rfdno'
[  434.480204][T12956] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  434.544749][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.011760][T12970] loop7: detected capacity change from 0 to 65
[  435.078895][T12970] BFS-fs: bfs_fill_super(): NOTE: filesystem loop7 was created with 512 inodes, the real maximum is 511, mounting anyway
[  435.728094][ T5737] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  435.944078][ T5737] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  435.978214][ T5737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.021185][ T5737] usb 6-1: config 0 descriptor??
[  436.083328][ T5737] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  436.184113][T12993] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  436.198702][T12995] loop3: detected capacity change from 0 to 256
[  436.262945][T12995] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  436.365051][T12995] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff)
[  436.424543][   T30] kauditd_printk_skb: 48 callbacks suppressed
[  436.424571][   T30] audit: type=1800 audit(1786037374.469:2866): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0
[  436.479270][T12995] exFAT-fs (loop3): valid_size(150994954) is greater than size(10)
[  436.584960][   T30] audit: type=1800 audit(1786037374.609:2867): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  436.715828][   T30] audit: type=1800 audit(1786037374.749:2868): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  436.802745][   T30] audit: type=1800 audit(1786037374.819:2869): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  436.883716][T13008] loop3: detected capacity change from 0 to 2048
[  436.893558][   T30] audit: type=1800 audit(1786037374.939:2870): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0
[  436.897114][ T5737] usb 6-1: USB disconnect, device number 13
[  436.969462][T13008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.010004][   T30] audit: type=1800 audit(1786037375.029:2871): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  437.104670][   T30] audit: type=1800 audit(1786037375.139:2872): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  437.316363][   T30] audit: type=1800 audit(1786037375.349:2873): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0
[  437.431534][   T30] audit: type=1800 audit(1786037375.389:2874): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  437.504409][ T5608] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.533011][   T30] audit: type=1800 audit(1786037375.419:2875): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  437.889764][T13035] loop7: detected capacity change from 0 to 256
[  437.930011][T13035] exfat: Deprecated parameter 'utf8'
[  438.017874][T13035] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  438.415765][T13043] loop3: detected capacity change from 0 to 256
[  439.058493][T13031] loop5: detected capacity change from 0 to 131072
[  439.073503][T13031] F2FS-fs (loop5): invalid crc value
[  439.187322][T13031] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  439.220904][T13031] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  439.420910][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  439.436385][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  439.930555][T13071] loop2: detected capacity change from 0 to 2048
[  439.988417][T13071] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  440.359427][T13085] loop7: detected capacity change from 0 to 256
[  440.393517][T13085] exfat: Deprecated parameter 'namecase'
[  440.405118][T13084] loop6: detected capacity change from 0 to 1024
[  440.461239][T13085] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  440.496747][T13087] i2c i2c-0: new_device: Missing parameters
[  440.548860][T13084] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  440.666999][T13084] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.679741][T13092] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0
[  440.691006][T13091] IPVS: stopping backup sync thread 13092 ...
[  440.856825][T13012] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  441.090557][T13099] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2719'.
[  441.181883][ T6382] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  441.460781][   T30] kauditd_printk_skb: 33 callbacks suppressed
[  441.460809][   T30] audit: type=1800 audit(1786037379.499:2909): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  441.499205][ T5618] Bluetooth: hci1: command 0x0406 tx timeout
[  441.563630][   T30] audit: type=1800 audit(1786037379.599:2910): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  441.672761][   T30] audit: type=1800 audit(1786037379.689:2911): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  441.771215][   T30] audit: type=1800 audit(1786037379.739:2912): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  441.877857][   T30] audit: type=1800 audit(1786037379.849:2913): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0
[  441.938102][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2728'.
[  441.990394][   T30] audit: type=1800 audit(1786037379.949:2914): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  442.084682][   T30] audit: type=1800 audit(1786037380.019:2915): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  442.178368][   T30] audit: type=1800 audit(1786037380.089:2916): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  442.253144][   T30] audit: type=1800 audit(1786037380.189:2917): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0
[  442.279607][   T30] audit: type=1800 audit(1786037380.269:2918): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  442.362766][T13130] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0
[  442.423330][T13129] IPVS: stopping backup sync thread 13130 ...
[  442.443293][T13122] nbd0: detected capacity change from 0 to 63
[  442.497593][ T5630] block nbd0: Receive control failed (result -32)
[  442.589256][ T6727] block nbd0: Dead connection, failed to find a fallback
[  442.597454][ T6727] block nbd0: shutting down sockets
[  442.609358][ T6727] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  442.627485][ T6727] buffer_io_error: 9 callbacks suppressed
[  442.627511][ T6727] Buffer I/O error on dev nbd0, logical block 0, async page read
[  442.650055][ T6727] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  442.659862][ T6727] Buffer I/O error on dev nbd0, logical block 1, async page read
[  442.668191][ T6727] Buffer I/O error on dev nbd0, logical block 2, async page read
[  442.676580][ T6727] Buffer I/O error on dev nbd0, logical block 3, async page read
[  442.691732][ T6727] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2
[  442.701937][ T6727] Buffer I/O error on dev nbd0, logical block 0, async page read
[  442.709794][ T6727] Buffer I/O error on dev nbd0, logical block 1, async page read
[  442.718004][ T6727] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2
[  442.727770][ T6727] Buffer I/O error on dev nbd0, logical block 2, async page read
[  442.735661][ T6727] Buffer I/O error on dev nbd0, logical block 3, async page read
[  442.743784][ T6727] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  442.753555][ T6727] Buffer I/O error on dev nbd0, logical block 0, async page read
[  442.761483][ T6727] Buffer I/O error on dev nbd0, logical block 1, async page read
[  442.769651][ T6727] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  442.780193][ T6727] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  442.790094][ T6727] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  442.800001][ T6727] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  442.810326][ T6727] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  442.820011][ T5624] ldm_validate_partition_table(): Disk read failed.
[  442.827692][ T5624] Dev nbd0: unable to read RDB block 0
[  442.834129][ T5624]  nbd0: unable to read partition table
[  442.878486][ T5624] ldm_validate_partition_table(): Disk read failed.
[  442.885956][ T5624] Dev nbd0: unable to read RDB block 0
[  442.896069][ T5624]  nbd0: unable to read partition table
[  443.389555][T13154] loop2: detected capacity change from 0 to 64
[  443.792552][T13166] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  443.843707][T13165] loop5: detected capacity change from 0 to 4096
[  443.913094][T13165] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  443.993217][T13165] ntfs3(loop5): Failed to load $Extend (-22).
[  443.999809][T13165] ntfs3(loop5): Failed to initialize $Extend.
[  444.347389][T13176] nbd1: detected capacity change from 0 to 63
[  444.400580][ T5630] block nbd1: Receive control failed (result -32)
[  444.450146][   T11] block nbd1: Dead connection, failed to find a fallback
[  444.460378][   T11] block nbd1: shutting down sockets
[  444.471169][ T5933] ldm_validate_partition_table(): Disk read failed.
[  444.491843][ T5933] Dev nbd1: unable to read RDB block 0
[  444.501860][ T5933]  nbd1: unable to read partition table
[  444.522166][ T5933] ldm_validate_partition_table(): Disk read failed.
[  444.533174][ T5933] Dev nbd1: unable to read RDB block 0
[  444.546120][ T5933]  nbd1: unable to read partition table
[  444.811123][T13190] loop2: detected capacity change from 0 to 256
[  444.906208][T13190] exfat: Deprecated parameter 'namecase'
[  445.009103][T13190] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  445.535155][T13208] loop1: detected capacity change from 0 to 16
[  445.578853][T13208] erofs (device loop1): mounted with root inode @ nid 36.
[  445.763299][T13210] sock: sock_set_timeout: `syz.5.2765' (pid 13210) tries to set negative timeout
[  445.780384][   T47] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  445.936425][T13212] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  445.991916][   T47] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  446.014224][T13219] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2768'.
[  446.021227][   T47] usb 3-1: config 0 interface 0 has no altsetting 0
[  446.055639][   T47] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  446.099041][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.165952][   T47] usb 3-1: config 0 descriptor??
[  446.514076][   T30] kauditd_printk_skb: 46 callbacks suppressed
[  446.514102][   T30] audit: type=1800 audit(1786037384.549:2965): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  446.640198][   T30] audit: type=1800 audit(1786037384.679:2966): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  446.703785][   T30] audit: type=1800 audit(1786037384.719:2967): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168803 res=0 errno=0
[  446.750002][   T47] uclogic 0003:5543:0042.000E: hidraw0: USB HID v10.01 Device [HID 5543:0042] on usb-dummy_hcd.2-1/input0
[  446.767645][   T30] audit: type=1800 audit(1786037384.789:2968): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168820 res=0 errno=0
[  446.843437][   T30] audit: type=1800 audit(1786037384.879:2969): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  446.875431][   T47] usb 3-1: USB disconnect, device number 8
[  447.060422][   T30] audit: type=1800 audit(1786037385.099:2970): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  447.125532][ T5630] Bluetooth: hci3: Malformed LE Event: 0x1b
[  447.315192][   T30] audit: type=1800 audit(1786037385.339:2971): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  447.534302][   T30] audit: type=1800 audit(1786037385.569:2972): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  447.635824][   T30] audit: type=1800 audit(1786037385.639:2973): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  447.720429][   T30] audit: type=1800 audit(1786037385.709:2974): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  448.518779][T13265] loop5: detected capacity change from 0 to 128
[  449.041328][T13279] loop6: detected capacity change from 0 to 16
[  449.118717][T13279] erofs (device loop6): mounted with root inode @ nid 36.
[  449.465164][T13294] kernel read not supported for file /config.gz (pid: 13294 comm: syz.1.2803)
[  450.128665][T13312] loop6: detected capacity change from 0 to 128
[  450.937795][T13331] loop7: detected capacity change from 0 to 16
[  450.989250][T13331] erofs (device loop7): mounted with root inode @ nid 36.
[  451.137352][T13341] overlayfs: failed to clone lowerpath
[  451.197420][T11591] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  451.390026][T11591] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  451.420215][T11591] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.540872][   T30] kauditd_printk_skb: 49 callbacks suppressed
[  451.540898][   T30] audit: type=1800 audit(1786037389.579:3024): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  451.620282][   T30] audit: type=1800 audit(1786037389.619:3025): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168986 res=0 errno=0
[  451.643169][   T30] audit: type=1800 audit(1786037389.629:3026): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=169015 res=0 errno=0
[  451.665878][   T30] audit: type=1800 audit(1786037389.639:3027): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=168993 res=0 errno=0
[  451.708752][T11591] cxacru 7-1:1.0: invalid response length to cm 0x90: 0
[  451.759779][   T30] audit: type=1800 audit(1786037389.639:3028): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=168994 res=0 errno=0
[  451.822934][T13356] cxacru 7-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2
[  451.839736][T13356] cxacru 7-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin
[  451.852447][   T30] audit: type=1800 audit(1786037389.639:3029): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=168995 res=0 errno=0
[  451.905828][   T47] usb 7-1: USB disconnect, device number 12
[  451.950187][   T30] audit: type=1800 audit(1786037389.649:3030): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169035 res=0 errno=0
[  451.991371][   T30] audit: type=1800 audit(1786037389.749:3031): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  452.011379][   T30] audit: type=1800 audit(1786037389.879:3032): pid=13353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2827" name="resource0" dev="sysfs" ino=3191 res=0 errno=0
[  452.160288][T11591] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  452.344345][T11591] usb 6-1: New USB device found, idVendor=2040, idProduct=6500, bcdDevice= 1.00
[  452.355096][T11591] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.380546][T11591] usb 6-1: Product: syz
[  452.393094][T11591] usb 6-1: Manufacturer: syz
[  452.409499][T11591] usb 6-1: SerialNumber: syz
[  452.466004][T11591] em28xx 6-1:1.0: New device syz syz @ 480 Mbps (2040:6500, interface 0, class 0)
[  452.510674][T11591] em28xx 6-1:1.0: DVB interface 0 found: bulk
[  452.728305][T13381] loop7: detected capacity change from 0 to 512
[  452.790882][T13381] EXT4-fs (loop7): Test dummy encryption mode enabled
[  452.802280][T13384] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2841'.
[  452.872439][T13381] EXT4-fs (loop7): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.873284][T13388] ip_tables: iptables: counters copy to user failed while replacing table
[  453.037428][T13381] EXT4-fs error (device loop7): __ext4_add_entry:2412: inode #2: comm syz.7.2840: Directory hole found for htree leaf block 0
[  453.056163][T13381] EXT4-fs (loop7): Remounting filesystem read-only
[  453.268040][T13392] i2c i2c-0: new_device: Instantiated device nb7vpq904m at 0x01
[  453.290242][T10339] EXT4-fs (loop7): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  453.828328][T11591] em28xx 6-1:1.0: unknown em28xx chip ID (0)
[  453.958347][T11591] em28xx 6-1:1.0: reading from i2c device at 0xa0 failed (error=-5)
[  453.995278][T11591] em28xx 6-1:1.0: board has no eeprom
[  454.086732][T11591] em28xx 6-1:1.0: Identified as Hauppauge WinTV HVR 900 (card=10)
[  454.121050][T11591] em28xx 6-1:1.0: dvb set to bulk mode.
[  454.145214][T11589] em28xx 6-1:1.0: Binding DVB extension
[  454.210203][T11591] usb 6-1: USB disconnect, device number 14
[  454.232225][T11591] em28xx 6-1:1.0: Disconnecting em28xx
[  454.251622][T11589] zl10353_read_register: readreg error (reg=127, ret==-19)
[  454.279775][T11589] em28xx 6-1:1.0: dvb frontend not attached. Can't attach xc3028
[  454.344186][T11589] em28xx 6-1:1.0: Registering input extension
[  454.389536][T11591] em28xx 6-1:1.0: Closing input extension
[  454.453638][T13416] loop1: detected capacity change from 0 to 4096
[  454.480526][ T5618] Bluetooth: hci1: Malformed LE Event: 0x1b
[  454.544590][T11591] em28xx 6-1:1.0: Freeing device
[  454.568583][T13416] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  454.661983][T13416] ntfs3(loop1): Failed to load $Extend (-22).
[  454.688300][T13416] ntfs3(loop1): Failed to initialize $Extend.
[  455.056037][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2859'.
[  455.312341][T13436] vivid-002: =================  START STATUS  =================
[  455.345133][T13438] ip_tables: iptables: counters copy to user failed while replacing table
[  455.355874][T13436] vivid-002: Radio HW Seek Mode: Bounded
[  455.392678][T13436] vivid-002: Radio Programmable HW Seek: false
[  455.478904][T13436] vivid-002: RDS Rx I/O Mode: Block I/O
[  455.496651][T13436] vivid-002: Generate RBDS Instead of RDS: false
[  455.546093][T13436] vivid-002: RDS Reception: true
[  455.559421][T13436] vivid-002: RDS Program Type: 0 inactive
[  455.565497][T13436] vivid-002: RDS PS Name:  inactive
[  455.577212][T13436] vivid-002: RDS Radio Text:  inactive
[  455.607329][T13436] vivid-002: RDS Traffic Announcement: false inactive
[  455.652539][T13436] vivid-002: RDS Traffic Program: false inactive
[  455.701787][T13436] vivid-002: RDS Music: false inactive
[  455.725443][T13436] vivid-002: ==================  END STATUS  ==================
[  456.611986][   T30] kauditd_printk_skb: 59 callbacks suppressed
[  456.612013][   T30] audit: type=1800 audit(1786037394.649:3092): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  456.664534][T13461] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2872'.
[  456.719319][   T30] audit: type=1800 audit(1786037394.689:3093): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  456.793400][T13470] loop6: detected capacity change from 0 to 512
[  456.800419][   T30] audit: type=1800 audit(1786037394.749:3094): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  456.842149][T13470] EXT4-fs: Ignoring removed orlov option
[  456.871039][T13470] EXT4-fs: Ignoring removed mblk_io_submit option
[  456.888087][   T30] audit: type=1800 audit(1786037394.819:3095): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  456.935929][T13470] EXT4-fs error (device loop6): ext4_iget_extra_inode:5179: inode #15: comm syz.6.2876: corrupted in-inode xattr: e_value size too large
[  456.989466][   T30] audit: type=1800 audit(1786037394.929:3096): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0
[  456.997458][T13470] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  457.011509][   T30] audit: type=1800 audit(1786037394.999:3097): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0
[  457.060891][   T30] audit: type=1800 audit(1786037395.099:3098): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  457.073767][T13470] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2876: couldn't read orphan inode 15 (err -117)
[  457.080589][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  457.080622][    C0] EXT4-fs (loop6): initial error at time 1786037395: ext4_iget_extra_inode:5179: inode 15
[  457.080684][    C0] EXT4-fs (loop6): last error at time 1786037395: ext4_iget_extra_inode:5179: inode 15
[  457.125749][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2877'.
[  457.169370][T13478] ip_tables: iptables: counters copy to user failed while replacing table
[  457.192217][   T30] audit: type=1800 audit(1786037395.219:3099): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  457.218771][T13470] loop6: lost filesystem error report for type 5 error -117
[  457.221547][T13470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.272651][   T30] audit: type=1800 audit(1786037395.299:3100): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  457.393608][   T30] audit: type=1800 audit(1786037395.409:3101): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  457.678827][T13486] loop3: detected capacity change from 0 to 4096
[  457.733732][T13486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.805246][ T6382] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.259698][T13482] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.2882: corrupted inode contents
[  458.334391][T13482] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  458.423927][T13482] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #15: comm syz.3.2882: mark_inode_dirty error
[  458.493202][T13482] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  458.495817][T13482] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.2882: corrupted inode contents
[  458.535587][T13482] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  458.536148][T13482] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.2882: mark_inode_dirty error
[  458.572336][T13482] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  458.573130][T13482] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.2882: corrupted inode contents
[  458.609092][T13482] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  458.609666][T13482] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.2882: mark_inode_dirty error
[  458.666028][T13482] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  458.668111][T13482] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.2882: corrupted inode contents
[  458.726668][T13482] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  458.763227][T13482] EXT4-fs error (device loop3): ext4_truncate:4691: inode #15: comm syz.3.2882: mark_inode_dirty error
[  458.812484][T13482] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  458.813044][T13482] EXT4-fs error (device loop3): ext4_evict_inode:276: comm syz.3.2882: couldn't truncate inode 15 (err -117)
[  458.971751][ T5608] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.105858][T13525] loop5: detected capacity change from 0 to 1024
[  459.300584][T13527] loop7: detected capacity change from 0 to 512
[  459.431728][T13529] loop1: detected capacity change from 0 to 16
[  459.446253][T13535] loop6: detected capacity change from 0 to 512
[  459.491971][T13535] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  459.535597][T13535] EXT4-fs (loop6): 1 truncate cleaned up
[  459.561453][T13535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.735253][T13535] overlayfs: invalid origin (0000)
[  459.827121][T13538] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  459.835247][T13538] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  460.036053][ T6382] EXT4-fs error (device loop6): mb_free_blocks:2046: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt.
[  460.104491][ T6382] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[  460.168214][ T6382] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[  460.822782][T13558] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2915'.
[  461.241948][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2922'.
[  461.287794][ T9487] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.370199][T13568] 8021q: adding VLAN 0 to HW filter on device macsec1
[  461.680078][   T30] kauditd_printk_skb: 44 callbacks suppressed
[  461.680106][   T30] audit: type=1800 audit(1786037399.719:3146): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  461.753947][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.769051][   T30] audit: type=1800 audit(1786037399.789:3147): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  461.801242][   T30] audit: type=1800 audit(1786037399.829:3148): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  461.829807][   T30] audit: type=1800 audit(1786037399.859:3149): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  461.875986][   T30] audit: type=1800 audit(1786037399.909:3150): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  462.075896][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.203715][   T30] audit: type=1800 audit(1786037400.239:3151): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  462.310360][   T30] audit: type=1800 audit(1786037400.299:3152): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  462.329182][T13586] bond1: invalid ARP target 0.0.0.0 specified for addition
[  462.357645][T13586] bond1: option arp_ip_target: invalid value (0)
[  462.394834][T13586] bond1 (unregistering): Released all slaves
[  462.408294][   T30] audit: type=1800 audit(1786037400.409:3153): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  462.491326][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  462.538192][   T30] audit: type=1800 audit(1786037400.539:3154): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170210 res=0 errno=0
[  462.562957][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  462.573544][   T30] audit: type=1800 audit(1786037400.559:3155): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  462.594581][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  462.612019][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  462.624071][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  462.689025][T13598] ima: Unable to open file: /e (-2)
[  462.691091][T13597] ima: policy update failed
[  462.834376][T13604] loop5: detected capacity change from 0 to 512
[  462.853609][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.052595][T13610] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5608] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[13610]
[  463.227484][T11591] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  463.287892][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.411170][T11591] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  463.416126][T13613] loop7: detected capacity change from 0 to 4096
[  463.456220][T11591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.484724][T13613] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  463.494808][T11591] usb 2-1: Product: syz
[  463.511581][T11591] usb 2-1: Manufacturer: syz
[  463.535362][T11591] usb 2-1: SerialNumber: syz
[  463.608095][T13618] loop5: detected capacity change from 0 to 4096
[  463.959822][T13617] loop2: detected capacity change from 0 to 32768
[  463.993443][T13621] loop3: detected capacity change from 0 to 32768
[  464.058636][T13621] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  464.066980][T13621] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  464.104781][T13621] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  464.127297][T11589] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  464.149498][T11591] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  464.169781][T11589] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  464.239739][T13617] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  464.534616][T13618] ntfs3(loop5): ino=9, attr_set_size_ex
[  464.688306][T11591] gspca_mr97310a: reg write [21] error -110
[  464.696530][ T5630] Bluetooth: hci2: command tx timeout
[  464.761974][T11591] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -110
[  464.959632][ T5613] ocfs2: Unmounting device (7,2) on (node local)
[  465.157805][T11589] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 988ms
[  465.288436][T11589] gfs2: fsid=syz:syz.0: jid=0: Done
[  465.314889][T13621] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  465.499704][T13621] gfs2: fsid=syz:syz.0: found 1 quota changes
[  465.544981][T11569] usb 2-1: USB disconnect, device number 8
[  465.544999][T13621] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0
[  465.561649][T13621] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  465.572238][T13621] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  465.582419][T13621] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  465.759819][ T5608] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  465.880727][ T5608] CPU: 0 UID: 0 PID: 5608 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  465.880788][ T5608] Tainted: [L]=SOFTLOCKUP
[  465.880801][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  465.880822][ T5608] Call Trace:
[  465.880843][ T5608]  <TASK>
[  465.880857][ T5608]  dump_stack_lvl+0x100/0x190
[  465.880913][ T5608]  gfs2_assert_warn_i.cold+0x3a/0x118
[  465.880964][ T5608]  ? __pfx_gfs2_assert_warn_i+0x10/0x10
[  465.881024][ T5608]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.881078][ T5608]  gfs2_qd_dispose+0x5dd/0x720
[  465.881127][ T5608]  gfs2_quota_cleanup+0x361/0x770
[  465.881180][ T5608]  ? __pfx_gfs2_quota_cleanup+0x10/0x10
[  465.881241][ T5608]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.881290][ T5608]  ? __pfx___might_resched+0x10/0x10
[  465.881331][ T5608]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.881376][ T5608]  ? up_write+0x2e5/0x5c0
[  465.881427][ T5608]  gfs2_make_fs_ro+0x11d/0x370
[  465.881467][ T5608]  ? __pfx_gfs2_make_fs_ro+0x10/0x10
[  465.881507][ T5608]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.881554][ T5608]  ? __pfx___might_resched+0x10/0x10
[  465.881592][ T5608]  ? gfs2_put_super+0x149/0x670
[  465.881628][ T5608]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.881686][ T5608]  gfs2_put_super+0x1a4/0x670
[  465.881731][ T5608]  ? __pfx_gfs2_put_super+0x10/0x10
[  465.881772][ T5608]  generic_shutdown_super+0x167/0x360
[  465.881817][ T5608]  kill_block_super+0x3b/0xa0
[  465.881861][ T5608]  gfs2_kill_sb+0x4a9/0x590
[  465.881918][ T5608]  deactivate_locked_super+0xc1/0x1b0
[  465.881959][ T5608]  deactivate_super+0xe7/0x110
[  465.882001][ T5608]  cleanup_mnt+0x21f/0x450
[  465.882053][ T5608]  task_work_run+0x150/0x240
[  465.882088][ T5608]  ? __pfx_task_work_run+0x10/0x10
[  465.882122][ T5608]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.882172][ T5608]  exit_to_user_mode_loop+0x1d8/0x6f0
[  465.882213][ T5608]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.882254][ T5608]  ? rcu_is_watching+0x12/0xc0
[  465.882307][ T5608]  do_syscall_64+0x666/0x870
[  465.882353][ T5608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.882387][ T5608] RIP: 0033:0x7f3597b9f317
[  465.882414][ T5608] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  465.882445][ T5608] RSP: 002b:00007fff861511c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  465.882477][ T5608] RAX: 0000000000000000 RBX: 00007f3597c34474 RCX: 00007f3597b9f317
[  465.882500][ T5608] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff86151280
[  465.882519][ T5608] RBP: 00007fff86151280 R08: 00007fff86152280 R09: 00000000ffffffff
[  465.882539][ T5608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff86152310
[  465.882559][ T5608] R13: 00007f3597c34474 R14: 0000000000071a6e R15: 00007fff86152350
[  465.882606][ T5608]  </TASK>
[  466.488273][T13656] loop1: detected capacity change from 0 to 512
[  466.546707][T13656] EXT4-fs: Ignoring removed bh option
[  466.578560][T13656] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  466.603531][   T13] bridge_slave_1: left allmulticast mode
[  466.644693][   T13] bridge_slave_1: left promiscuous mode
[  466.659159][T13656] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  466.665705][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.714579][   T30] kauditd_printk_skb: 53 callbacks suppressed
[  466.714607][   T30] audit: type=1800 audit(1786037404.749:3209): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  466.751440][   T13] bridge_slave_0: left allmulticast mode
[  466.757562][   T13] bridge_slave_0: left promiscuous mode
[  466.768980][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.788715][ T5630] Bluetooth: hci2: command tx timeout
[  466.823410][   T30] audit: type=1800 audit(1786037404.859:3210): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  466.861555][T13656] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.2950: bg 0: block 248: padding at end of block bitmap is not set
[  466.944682][T13656] loop1: lost filesystem error report for type 5 error -117
[  466.946526][    C0] EXT4-fs (loop1): last error at time 1786037404: ext4_validate_block_bitmap:440
[  467.007694][T13656] Quota error (device loop1): write_blk: dquota write failed
[  467.039418][   T30] audit: type=1800 audit(1786037405.089:3211): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  467.100522][T13656] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  467.144677][T13656] EXT4-fs error (device loop1): ext4_acquire_dquot:7039: comm syz.1.2950: Failed to acquire dquot type 1
[  467.146015][   T30] audit: type=1800 audit(1786037405.179:3212): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  467.175831][T13656] loop1: lost filesystem error report for type 5 error -28
[  467.220191][T13656] EXT4-fs (loop1): 1 truncate cleaned up
[  467.289274][T13656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  467.417388][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  467.468579][T11591] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  467.544233][   T30] audit: type=1800 audit(1786037405.579:3213): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0
[  467.557566][T13681] loop1: detected capacity change from 0 to 512
[  467.651431][T13681] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  467.663377][T11591] usb 3-1: Using ep0 maxpacket: 32
[  467.685709][T11591] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  467.697007][T11591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.715035][T11591] usb 3-1: Product: syz
[  467.725257][T11591] usb 3-1: Manufacturer: syz
[  467.735938][T13681] EXT4-fs (loop1): 1 truncate cleaned up
[  467.744236][T11591] usb 3-1: SerialNumber: syz
[  467.769116][T13681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  467.790517][T11591] usb 3-1: config 0 descriptor??
[  467.813929][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2955'.
[  467.831022][   T30] audit: type=1800 audit(1786037405.839:3214): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171368 res=0 errno=0
[  467.877970][   T30] audit: type=1800 audit(1786037405.849:3215): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=171400 res=0 errno=0
[  467.908512][T11591] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  467.943625][T13681] overlayfs: invalid origin (0000)
[  468.000868][   T30] audit: type=1800 audit(1786037405.849:3216): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=171375 res=0 errno=0
[  468.063432][ T5268] 8021q: adding VLAN 0 to HW filter on device eth10
[  468.134536][ T5612] EXT4-fs error (device loop1): mb_free_blocks:2046: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt.
[  468.292576][ T5612] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[  468.363754][ T5612] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[  468.738308][T11591] gspca_ov534_9: reg_w failed -71
[  468.825020][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.869685][ T5630] Bluetooth: hci2: command tx timeout
[  469.047933][T11591] gspca_ov534_9: Unknown sensor 0000
[  469.048051][T11591] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22
[  469.073568][T11591] usb 3-1: USB disconnect, device number 9
[  469.145029][   T13] hsr_slave_0: left promiscuous mode
[  469.193458][   T13] hsr_slave_1: left promiscuous mode
[  469.231174][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  469.275704][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  469.325330][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  469.365657][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  469.395832][   T13] batman_adv: batadv0: Removing interface: vlan2
[  469.479393][   T13] veth1_macvtap: left promiscuous mode
[  469.509774][   T13] veth0_macvtap: left promiscuous mode
[  469.518251][   T13] veth1_vlan: left promiscuous mode
[  469.550375][   T13] veth0_vlan: left promiscuous mode
[  469.737105][T13695] loop3: detected capacity change from 0 to 32768
[  470.428587][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  470.449612][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  470.463261][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  470.492784][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  470.512391][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  470.725087][   T13] team0 (unregistering): Port device team_slave_1 removed
[  470.865862][   T13] team0 (unregistering): Port device team_slave_0 removed
[  470.937437][ T5618] Bluetooth: hci2: command tx timeout
[  471.251922][ T5268] 8021q: adding VLAN 0 to HW filter on device eth11
[  471.535593][T13725] loop3: detected capacity change from 0 to 32768
[  471.644903][T13729] loop2: detected capacity change from 0 to 32768
[  471.708656][T13725] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  471.758616][T13742] loop5: detected capacity change from 0 to 1024
[  471.768443][T13725] (syz.3.2970,13725,1):ocfs2_read_blocks_sync:110 ERROR: status = -12
[  471.789336][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2973'.
[  471.798491][T13729] jfs_readdir called with invalid offset!
[  471.835391][T13742] EXT4-fs: Ignoring removed bh option
[  471.865933][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  471.865963][   T30] audit: type=1800 audit(1786037409.889:3242): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  471.903932][T13725] (syz.3.2970,13725,1):ocfs2_get_suballoc_slot_bit:3159 ERROR: read block 124554051584 failed -12
[  471.918906][T13742] EXT4-fs (loop5): stripe (26398) is not aligned with cluster size (16), stripe is disabled
[  471.969989][T13725] (syz.3.2970,13725,1):ocfs2_get_suballoc_slot_bit:3192 ERROR: status = -12
[  472.002754][   T30] audit: type=1800 audit(1786037410.019:3243): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  472.073687][T13725] (syz.3.2970,13725,1):ocfs2_test_inode_bit:3278 ERROR: get alloc slot and bit failed -12
[  472.111637][T13742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  472.154361][T13725] (syz.3.2970,13725,1):ocfs2_test_inode_bit:3323 ERROR: status = -12
[  472.180238][T13725] (syz.3.2970,13725,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[  472.340372][   T30] audit: type=1800 audit(1786037410.379:3244): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  472.546593][   T30] audit: type=1800 audit(1786037410.569:3245): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  472.589382][T13596] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.616625][ T5618] Bluetooth: hci4: command tx timeout
[  472.630899][T13596] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.659598][T13765] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5613] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[13765]
[  472.676942][ T5611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.686374][T13596] bridge_slave_0: entered allmulticast mode
[  472.735949][T13596] bridge_slave_0: entered promiscuous mode
[  472.764616][T13596] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.804556][T13596] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.831583][T13596] bridge_slave_1: entered allmulticast mode
[  472.862989][   T30] audit: type=1800 audit(1786037410.899:3246): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  472.886847][ T5608] ocfs2: Unmounting device (7,3) on (node local)
[  472.887606][T13596] bridge_slave_1: entered promiscuous mode
[  473.069375][   T30] audit: type=1800 audit(1786037411.109:3247): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  473.150974][   T30] audit: type=1800 audit(1786037411.189:3248): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  473.273748][   T30] audit: type=1800 audit(1786037411.259:3249): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  473.304715][T13596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  473.471208][T13776] bond0: invalid ARP target 0.0.0.0 specified for addition
[  473.479462][T13776] bond0: option arp_ip_target: invalid value (0)
[  473.497076][T13776] bond0 (unregistering): Released all slaves
[  473.631331][T13596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  473.811261][   T30] audit: type=1800 audit(1786037411.849:3250): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  473.921313][   T30] audit: type=1800 audit(1786037411.949:3251): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  473.949241][T11589] kernel write not supported for file /sg0 (pid: 11589 comm: kworker/0:18)
[  474.004570][T13596] team0: Port device team_slave_0 added
[  474.264331][T13596] team0: Port device team_slave_1 added
[  474.298104][ T5268] 8021q: adding VLAN 0 to HW filter on device eth12
[  474.330566][T13800] loop2: detected capacity change from 0 to 4096
[  474.486929][T11589] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  474.560551][T13806] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  474.585539][T13800] ntfs3(loop2): ino=9, attr_set_size_ex
[  474.646748][T13596] batman_adv: batadv0: Adding interface: batadv_slave_0
[  474.663286][T13596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  474.700367][T13596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  474.701438][T11589] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  474.725200][ T5618] Bluetooth: hci4: command tx timeout
[  474.752482][T13596] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.763870][T11589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.764524][T13596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  474.798751][T11589] usb 4-1: Product: syz
[  474.804553][T11589] usb 4-1: Manufacturer: syz
[  474.809831][T11589] usb 4-1: SerialNumber: syz
[  474.834735][T11589] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  474.893310][T13596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  475.347548][T11589] gspca_mr97310a: reg write [21] error -110
[  475.365259][T11589] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -110
[  475.757986][T13596] hsr_slave_0: entered promiscuous mode
[  475.808730][T13596] hsr_slave_1: entered promiscuous mode
[  475.838061][T13596] debugfs: 'hsr0' already exists in 'hsr'
[  475.859371][T13596] Cannot create hsr debugfs directory
[  476.057844][T13826] loop7: detected capacity change from 0 to 32768
[  476.081995][T13826] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  476.090717][T13826] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  476.157385][T13826] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms
[  476.172675][T11569] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  476.190584][T11569] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  476.242946][ T5899] usb 4-1: USB disconnect, device number 14
[  476.255042][T13819] loop2: detected capacity change from 0 to 32768
[  476.465508][T13819] find_entry called with index >= next_index
[  476.500971][T13819] find_entry called with index >= next_index
[  476.554240][T13819] find_entry called with index >= next_index
[  476.582195][T13819] find_entry called with index >= next_index
[  476.621220][T13819] find_entry called with index >= next_index
[  476.648387][T11569] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 457ms
[  476.659469][T13819] add_index: next_index = 0.  Resetting!
[  476.670242][T11569] gfs2: fsid=syz:syz.0: jid=0: Done
[  476.681126][T13819] find_entry called with index >= next_index
[  476.700764][T13826] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  476.726777][T13819] find_entry called with index >= next_index
[  476.759263][T13819] find_entry called with index >= next_index
[  476.776496][ T5630] Bluetooth: hci4: command tx timeout
[  476.805684][T13819] find_entry called with index >= next_index
[  476.871063][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  476.871089][   T30] audit: type=1800 audit(1786037414.909:3282): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=178598 res=0 errno=0
[  477.183524][   T30] audit: type=1800 audit(1786037415.209:3283): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  477.193707][T13819] non-latin1 character 0x3ff found in JFS file name
[  477.295431][   T30] audit: type=1800 audit(1786037415.309:3284): pid=13826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3002" name="file1" dev="loop7" ino=9378 res=0 errno=0
[  477.316833][T13819] mount with iocharset=utf8 to access
[  477.358080][   T30] audit: type=1800 audit(1786037415.379:3285): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  477.383331][   T30] audit: type=1800 audit(1786037415.389:3286): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179090 res=0 errno=0
[  477.414136][   T30] audit: type=1800 audit(1786037415.399:3287): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=179095 res=0 errno=0
[  477.512512][   T30] audit: type=1800 audit(1786037415.429:3288): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=179099 res=0 errno=0
[  477.570971][   T30] audit: type=1800 audit(1786037415.429:3289): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=179098 res=0 errno=0
[  477.608796][   T30] audit: type=1800 audit(1786037415.429:3290): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=179101 res=0 errno=0
[  477.635091][   T30] audit: type=1800 audit(1786037415.599:3291): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179508 res=0 errno=0
[  477.655499][   T13] bridge_slave_1: left allmulticast mode
[  477.664202][   T13] bridge_slave_1: left promiscuous mode
[  477.700463][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.788663][   T13] bridge_slave_0: left allmulticast mode
[  477.794402][   T13] bridge_slave_0: left promiscuous mode
[  477.800743][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.108747][T13853] loop2: detected capacity change from 0 to 4096
[  478.144779][T13853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.292705][T13852] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.2997: corrupted inode contents
[  478.309017][T13852] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  478.323205][T13852] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #15: comm syz.2.2997: mark_inode_dirty error
[  478.353477][T13852] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  478.355941][T13852] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.2997: corrupted inode contents
[  478.390324][T13852] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  478.395493][T13852] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.2997: mark_inode_dirty error
[  478.417958][ T5268] 8021q: adding VLAN 0 to HW filter on device eth13
[  478.421068][T13852] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  478.430592][T13852] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.2997: corrupted inode contents
[  478.480007][T13852] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  478.502762][T13852] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.2997: mark_inode_dirty error
[  478.532481][   T13] tipc: Left network mode
[  478.606518][T13852] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  478.628070][T13852] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.2997: corrupted inode contents
[  478.691005][T13863] loop7: detected capacity change from 0 to 512
[  478.694391][T13852] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  478.713270][T13728] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.722873][T13852] EXT4-fs error (device loop2): ext4_truncate:4691: inode #15: comm syz.2.2997: mark_inode_dirty error
[  478.813235][T13728] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.832024][T13728] bridge_slave_0: entered allmulticast mode
[  478.840047][T13852] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  478.845343][T13852] EXT4-fs error (device loop2): ext4_evict_inode:276: comm syz.2.2997: couldn't truncate inode 15 (err -117)
[  478.850696][T13863] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.879199][ T5630] Bluetooth: hci4: command tx timeout
[  478.917651][T13728] bridge_slave_0: entered promiscuous mode
[  478.935883][T13863] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  478.985849][T13728] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.029970][T13728] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.095935][T13728] bridge_slave_1: entered allmulticast mode
[  479.169948][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.185996][T13728] bridge_slave_1: entered promiscuous mode
[  479.488175][T10339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.492895][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3005'.
[  479.583646][T13728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  479.665445][T13728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  480.033150][T13890] loop2: detected capacity change from 0 to 512
[  480.130797][T13890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.145139][T13890] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  480.361351][T13892] erspan0: entered promiscuous mode
[  480.373637][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3009'.
[  480.509527][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.569510][T13728] team0: Port device team_slave_0 added
[  480.945604][T13908] loop2: detected capacity change from 0 to 2048
[  480.975833][T13728] team0: Port device team_slave_1 added
[  480.995149][T13908] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  481.034072][T13908] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  481.054509][T13913] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3013'.
[  481.359823][T13917] loop7: detected capacity change from 0 to 4096
[  481.521760][T13917] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  481.544514][ T5268] 8021q: adding VLAN 0 to HW filter on device eth14
[  481.833745][   T13] hsr_slave_0: left promiscuous mode
[  481.865277][T11589] kernel write not supported for file /sg0 (pid: 11589 comm: kworker/0:18)
[  481.883744][   T13] hsr_slave_1: left promiscuous mode
[  481.906044][T13916] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.3015: corrupted inode contents
[  481.906248][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  481.941141][T13916] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  481.946399][T13916] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #15: comm syz.7.3015: mark_inode_dirty error
[  481.986663][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  481.994084][T13916] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  481.996015][T13916] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.3015: corrupted inode contents
[  482.043463][   T30] kauditd_printk_skb: 33 callbacks suppressed
[  482.043492][   T30] audit: type=1800 audit(1786037420.079:3325): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  482.080446][T13916] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.3015: mark_inode_dirty error
[  482.117424][T13923] loop2: detected capacity change from 0 to 32768
[  482.148931][   T30] audit: type=1800 audit(1786037420.189:3326): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  482.159904][T13916] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.3015: corrupted inode contents
[  482.188861][T13923] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  482.213070][T13916] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.3015: mark_inode_dirty error
[  482.257238][T13916] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.3015: corrupted inode contents
[  482.279926][T13916] EXT4-fs error (device loop7): ext4_truncate:4691: inode #15: comm syz.7.3015: mark_inode_dirty error
[  482.301119][T13916] EXT4-fs error (device loop7): ext4_evict_inode:276: comm syz.7.3015: couldn't truncate inode 15 (err -117)
[  482.328687][T13923] (syz.2.3016,13923,1):ocfs2_read_blocks_sync:110 ERROR: status = -12
[  482.351641][T13923] (syz.2.3016,13923,1):ocfs2_get_suballoc_slot_bit:3159 ERROR: read block 124554051584 failed -12
[  482.404213][T13923] (syz.2.3016,13923,1):ocfs2_get_suballoc_slot_bit:3192 ERROR: status = -12
[  482.428297][   T30] audit: type=1800 audit(1786037420.459:3327): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  482.472934][T13923] (syz.2.3016,13923,1):ocfs2_test_inode_bit:3278 ERROR: get alloc slot and bit failed -12
[  482.531889][T13923] (syz.2.3016,13923,1):ocfs2_test_inode_bit:3323 ERROR: status = -12
[  482.549091][T10339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.556839][T13923] (syz.2.3016,13923,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[  482.757284][T13921] loop3: detected capacity change from 0 to 32768
[  482.788050][T13921] jfs_readdir called with invalid offset!
[  482.810030][   T30] audit: type=1800 audit(1786037420.829:3328): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  482.815196][ T5613] ocfs2: Unmounting device (7,2) on (node local)
[  482.869818][   T30] audit: type=1800 audit(1786037420.889:3329): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  483.020359][   T30] audit: type=1800 audit(1786037421.059:3330): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  483.260477][   T13] team0 (unregistering): Port device team_slave_1 removed
[  483.392202][   T13] team0 (unregistering): Port device team_slave_0 removed
[  483.436373][   T30] audit: type=1800 audit(1786037421.469:3331): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  483.557045][   T30] audit: type=1800 audit(1786037421.589:3332): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  483.782257][T13728] batman_adv: batadv0: Adding interface: batadv_slave_0
[  483.789871][T13728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  483.818298][T13728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  483.830735][T13596] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  483.845618][T13596] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  483.935805][T13728] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.956179][T13728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  484.002767][T13728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  484.016770][   T30] audit: type=1800 audit(1786037422.049:3333): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  484.040940][T13596] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  484.063562][T13596] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  484.078570][T13596] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  484.090381][T13957] loop3: detected capacity change from 0 to 128
[  484.095080][T13596] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  484.131755][T13957] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  484.153101][T13957] hpfs: filesystem error: improperly stopped
[  484.162657][T13957] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  484.171448][T13957] hpfs: You really don't want any checks? You are crazy...
[  484.181026][T13957] hpfs: hpfs_map_sector(): read error
[  484.186560][T13957] hpfs: code page support is disabled
[  484.195374][T13957] hpfs: hpfs_map_4sectors(): unaligned read
[  484.201903][T13957] hpfs: hpfs_map_4sectors(): unaligned read
[  484.208790][T13957] hpfs: filesystem error: unable to find root dir
[  484.288682][T13957] hpfs: hpfs_map_4sectors(): unaligned read
[  484.393608][T13596] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  484.411384][   T30] audit: type=1800 audit(1786037422.449:3334): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  484.464068][T13596] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  484.608052][ T5339] IPVS: starting estimator thread 0...
[  484.722109][T13968] IPVS: using max 22 ests per chain, 52800 per kthread
[  484.911788][T13728] hsr_slave_0: entered promiscuous mode
[  484.926259][T13728] hsr_slave_1: entered promiscuous mode
[  484.946257][T13728] debugfs: 'hsr0' already exists in 'hsr'
[  484.986475][T13728] Cannot create hsr debugfs directory
[  485.111051][   T13] IPVS: stop unused estimator thread 0...
[  485.800354][T14002] loop2: detected capacity change from 0 to 128
[  485.910479][T14002] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  485.965279][T14002] hpfs: filesystem error: improperly stopped
[  485.991037][T14002] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  486.032634][T14002] hpfs: You really don't want any checks? You are crazy...
[  486.064363][T13596] 8021q: adding VLAN 0 to HW filter on device bond0
[  486.090913][T14002] hpfs: hpfs_map_sector(): read error
[  486.121963][T14002] hpfs: code page support is disabled
[  486.145885][T14002] hpfs: hpfs_map_4sectors(): unaligned read
[  486.166049][T14002] hpfs: hpfs_map_4sectors(): unaligned read
[  486.172894][T14002] hpfs: filesystem error: unable to find root dir
[  486.223483][T14002] hpfs: hpfs_map_4sectors(): unaligned read
[  486.235118][T13596] 8021q: adding VLAN 0 to HW filter on device team0
[  486.315164][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.322406][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  486.423279][T14014] loop7: detected capacity change from 0 to 512
[  486.447362][T14014] EXT4-fs: Ignoring removed nobh option
[  486.493816][T14014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  486.558892][T14014] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #3: comm syz.7.3041: corrupted inode contents
[  486.560006][T14017] loop2: detected capacity change from 0 to 512
[  486.584919][T14014] fserror_report: 6 callbacks suppressed
[  486.584947][T14014] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  486.596306][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  486.611928][    C0] EXT4-fs (loop7): initial error at time 1786037424: ext4_do_update_inode:5742: inode 3
[  486.624055][    C0] EXT4-fs (loop7): last error at time 1786037424: ext4_do_update_inode:5742: inode 3
[  486.634648][T14014] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #3: comm syz.7.3041: mark_inode_dirty error
[  486.650875][T14014] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  486.672951][T14014] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #3: comm syz.7.3041: corrupted inode contents
[  486.712124][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.719395][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  486.746563][T14014] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  486.748712][T14014] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.3041: mark_inode_dirty error
[  486.804680][T14014] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  486.805447][T14014] EXT4-fs error (device loop7): ext4_acquire_dquot:7039: comm syz.7.3041: Failed to acquire dquot type 0
[  486.893539][T14014] loop7: lost filesystem error report for type 5 error -117
[  486.898460][T14014] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.3041: corrupted inode contents
[  486.929790][T14014] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  486.931876][T14014] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #16: comm syz.7.3041: mark_inode_dirty error
[  487.031962][T14014] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  487.032571][T14014] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.3041: corrupted inode contents
[  487.124387][T14014] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  487.124912][T14014] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.3041: mark_inode_dirty error
[  487.127720][ T5268] 8021q: adding VLAN 0 to HW filter on device eth15
[  487.155619][T14014] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  487.156190][T14014] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.3041: corrupted inode contents
[  487.221563][T14014] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  487.233320][T14014] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[  487.299705][T14014] loop7: lost filesystem error report for type 5 error -117
[  487.300233][T14014] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.3041: corrupted inode contents
[  487.338495][T14014] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  487.339064][T14014] EXT4-fs error (device loop7): ext4_truncate:4691: inode #16: comm syz.7.3041: mark_inode_dirty error
[  487.388691][   T30] kauditd_printk_skb: 28 callbacks suppressed
[  487.388720][   T30] audit: type=1800 audit(1786037425.419:3361): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  487.394684][T14014] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[  487.458488][T14014] loop7: lost filesystem error report for type 5 error -117
[  487.463702][T14014] EXT4-fs (loop7): 1 truncate cleaned up
[  487.519097][T14014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.531957][T14014] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  487.603793][T13728] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  487.604646][T14014] EXT4-fs warning (device loop7): ext4_es_cache_extent:1079: inode #3: comm syz.7.3041: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18]
[  487.604646][T14014] 
[  487.650305][T13728] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  487.678409][   T59] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  487.724120][   T59] EXT4-fs error (device loop7): ext4_release_dquot:7075: comm kworker/u8:5: Failed to release dquot type 1
[  487.772526][   T30] audit: type=1800 audit(1786037425.809:3362): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  488.013751][T10339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.060056][T13728] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  488.140303][T13728] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  488.156217][T13728] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  488.229929][T13728] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  488.238988][   T30] audit: type=1800 audit(1786037426.269:3363): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  488.305195][T13728] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  488.359513][   T30] audit: type=1800 audit(1786037426.399:3364): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  488.387793][T13728] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  488.465038][T14051] erspan0: entered promiscuous mode
[  488.496091][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3048'.
[  488.636221][   T30] audit: type=1800 audit(1786037426.669:3365): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  488.818927][   T30] audit: type=1800 audit(1786037426.859:3366): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  488.966818][T13728] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.060397][T13728] 8021q: adding VLAN 0 to HW filter on device team0
[  489.156761][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.163988][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.183576][   T30] audit: type=1800 audit(1786037427.219:3367): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  489.279363][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.286632][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state
[  489.379005][   T30] audit: type=1800 audit(1786037427.419:3368): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  489.490064][   T30] audit: type=1800 audit(1786037427.509:3369): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  489.591401][T14081] loop7: detected capacity change from 0 to 1024
[  489.682976][T14081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  489.727781][T14085] loop2: detected capacity change from 0 to 512
[  489.771162][T14081] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  489.861789][T14085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  489.983962][T14085] ext4 filesystem being mounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  490.196054][T10339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  490.305755][ T5268] 8021q: adding VLAN 0 to HW filter on device eth16
[  490.612655][T13596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.688535][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.944364][T14111] loop5: detected capacity change from 0 to 1024
[  491.695854][T13728] 8021q: adding VLAN 0 to HW filter on device batadv0
[  491.762945][T13596] veth0_vlan: entered promiscuous mode
[  491.802544][T13596] veth1_vlan: entered promiscuous mode
[  491.947986][T13596] veth0_macvtap: entered promiscuous mode
[  491.991766][T13596] veth1_macvtap: entered promiscuous mode
[  492.023412][T14139] erspan0: entered promiscuous mode
[  492.036622][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3062'.
[  492.103095][T13596] batman_adv: batadv0: Interface activated: batadv_slave_0
[  492.152352][T13596] batman_adv: batadv0: Interface activated: batadv_slave_1
[  492.380404][ T3284] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  492.425400][ T3284] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  492.454528][T14152] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3063'.
[  492.726985][ T3284] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  492.761698][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  492.761724][   T30] audit: type=1800 audit(1786037430.799:3383): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185220 res=0 errno=0
[  492.824691][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  492.968756][  T283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.997600][   T30] audit: type=1800 audit(1786037431.029:3384): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185346 res=0 errno=0
[  493.005407][  T283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.089197][ T5268] 8021q: adding VLAN 0 to HW filter on device eth17
[  493.138940][   T30] audit: type=1800 audit(1786037431.179:3385): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  493.245877][ T3284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.285968][ T3284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.340147][T13728] veth0_vlan: entered promiscuous mode
[  493.365418][T13728] veth1_vlan: entered promiscuous mode
[  493.395776][T14160] loop3: detected capacity change from 0 to 2048
[  493.416552][T14160] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  493.435173][T14160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  493.475920][   T30] audit: type=1800 audit(1786037431.509:3386): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0
[  493.553745][   T30] audit: type=1800 audit(1786037431.589:3387): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0
[  493.584976][T13728] veth0_macvtap: entered promiscuous mode
[  493.655444][T13728] veth1_macvtap: entered promiscuous mode
[  493.678659][   T30] audit: type=1800 audit(1786037431.719:3388): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0
[  493.790021][   T30] audit: type=1800 audit(1786037431.789:3389): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185480 res=0 errno=0
[  493.790913][T13728] batman_adv: batadv0: Interface activated: batadv_slave_0
[  493.840190][   T30] audit: type=1800 audit(1786037431.789:3390): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185495 res=0 errno=0
[  493.879412][   T30] audit: type=1800 audit(1786037431.919:3391): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0
[  494.018109][T13728] batman_adv: batadv0: Interface activated: batadv_slave_1
[  494.034793][   T30] audit: type=1800 audit(1786037432.069:3392): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0
[  494.290261][   T59] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  494.317184][T11569] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  494.363055][  T283] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  494.400798][  T283] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  494.526337][T11569] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  494.547567][   T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  494.568617][T11569] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.793657][  T283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.835265][  T283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.860214][T14186] loop5: detected capacity change from 0 to 512
[  494.879284][T14187] netlink: 13 bytes leftover after parsing attributes in process `syz.7.3077'.
[  494.924115][T14186] EXT4-fs: Ignoring removed nobh option
[  494.966580][T14186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  495.042997][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.066175][T14186] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #3: comm syz.5.3076: corrupted inode contents
[  495.090595][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.110915][T14186] fserror_report: 1 callbacks suppressed
[  495.110941][T14186] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  495.126328][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  495.141956][    C0] EXT4-fs (loop5): initial error at time 1786037433: ext4_do_update_inode:5742: inode 3
[  495.151793][    C0] EXT4-fs (loop5): last error at time 1786037433: ext4_do_update_inode:5742: inode 3
[  495.207808][   T10] IPVS: starting estimator thread 0...
[  495.217229][T14186] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #3: comm syz.5.3076: mark_inode_dirty error
[  495.225640][T11569] input: HID 04d8:c002 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/0003:04D8:C002.000F/input/input20
[  495.249053][T14186] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  495.270251][T14186] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #3: comm syz.5.3076: corrupted inode contents
[  495.296980][T14197] IPVS: using max 22 ests per chain, 52800 per kthread
[  495.298007][T14194] loop3: detected capacity change from 0 to 1024
[  495.418966][T14186] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  495.422720][T14186] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.3076: mark_inode_dirty error
[  495.456582][T14186] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  495.464433][T14186] EXT4-fs error (device loop5): ext4_acquire_dquot:7039: comm syz.5.3076: Failed to acquire dquot type 0
[  495.621191][T14186] loop5: lost filesystem error report for type 5 error -117
[  495.624882][T14186] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.3076: corrupted inode contents
[  495.786816][T14186] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  495.787694][T14186] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #16: comm syz.5.3076: mark_inode_dirty error
[  495.913290][T14186] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  495.913841][T14186] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.3076: corrupted inode contents
[  495.947880][T11569] rc_core: IR keymap rc-rc6-mce not found
[  495.971480][T11569] Registered IR keymap rc-empty
[  495.995715][T11569] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/0003:04D8:C002.000F/rc/rc0
[  496.037874][T14186] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  496.038525][T14186] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.3076: mark_inode_dirty error
[  496.075650][T11569] input: HID 04d8:c002 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/0003:04D8:C002.000F/rc/rc0/input21
[  496.135841][T14186] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  496.145803][T14186] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.3076: corrupted inode contents
[  496.272984][T14210] loop7: detected capacity change from 0 to 2048
[  496.273346][T14186] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  496.301694][T14186] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  496.329652][T14186] loop5: lost filesystem error report for type 5 error -117
[  496.330234][T14186] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.3076: corrupted inode contents
[  496.340451][T14210] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  496.350544][T14186] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  496.390720][T14186] EXT4-fs error (device loop5): ext4_truncate:4691: inode #16: comm syz.5.3076: mark_inode_dirty error
[  496.404777][T14210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  496.480986][T14186] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  496.532418][T14186] loop5: lost filesystem error report for type 5 error -117
[  496.535614][T14186] EXT4-fs (loop5): 1 truncate cleaned up
[  496.592202][T14186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  496.641481][T14186] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  496.894663][T14186] EXT4-fs warning (device loop5): ext4_es_cache_extent:1079: inode #3: comm syz.5.3076: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18]
[  496.894663][T14186] 
[  497.003473][   T49] EXT4-fs error (device loop5): ext4_release_dquot:7075: comm kworker/u8:3: Failed to release dquot type 1
[  497.032534][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (1) exceeds report_count (1)
[  497.032615][ T5899] ==================================================================
[  497.032632][ T5899] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xba/0xc0
[  497.032693][ T5899] Read of size 4 at addr ffff88802cb116c0 by task kworker/1:6/5899
[  497.032725][ T5899] 
[  497.032745][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:6 Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[  497.032800][ T5899] Tainted: [L]=SOFTLOCKUP
[  497.032814][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  497.032841][ T5899] Workqueue: events fb_deferred_io_work
[  497.032878][ T5899] Call Trace:
[  497.032890][ T5899]  <TASK>
[  497.032905][ T5899]  dump_stack_lvl+0x100/0x190
[  497.032946][ T5899]  print_report+0x13d/0x4b0
[  497.033003][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.033051][ T5899]  ? __virt_addr_valid+0x239/0x430
[  497.033099][ T5899]  ? hid_dump_input+0xba/0xc0
** 1238 printk messages dropped **
[  497.088254][ T5899]  device_initial_probe+0xaf/0xd0
[  497.088300][ T5899]  bus_probe_device+0x64/0x160
[  497.088336][ T5899]  device_add+0x121d/0x1970
[  497.088394][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.088438][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.088501][ T5899]  usb_probe_device+0xef/0x400
[  497.088546][ T5899]  really_probe+0x241/0xa60
[  497.088587][ T5899]  __driver_probe_device+0x20e/0x450
[  497.088631][ T5899]  driver_probe_device+0x4a/0x140
[  497.088672][ T5899]  __device_attach_driver+0x1df/0x320
[  497.088716][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.088774][ T5899]  __device_attach+0x1e4/0x4d0
[  497.088818][ T5899]  device_initial_probe+0xaf/0xd0
[  497.088863][ T5899]  bus_probe_device+0x64/0x160
[  497.088897][ T5899]  device_add+0x121d/0x1970
[  497.088947][ T5899]  usb_new_device.cold+0x685/0x115c
[  497.088989][ T5899]  register_root_hub+0x4e6/0x639
[  497.089032][ T5899]  usb_add_hcd.cold+0xccd/0x1158
[  497.089079][ T5899]  vhci_hcd_probe+0x14b/0x4e0
[  497.089116][ T5899]  platform_probe+0x106/0x1d0
[  497.089177][ T5899]  really_probe+0x241/0xa60
[  497.089219][ T5899]  __driver_probe_device+0x20e/0x450
[  497.089264][ T5899]  driver_probe_device+0x4a/0x140
[  497.089310][ T5899]  __device_attach_driver+0x1df/0x320
[  497.089357][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.089425][ T5899]  __device_attach+0x1e4/0x4d0
[  497.089469][ T5899]  device_initial_probe+0xaf/0xd0
[  497.089518][ T5899]  bus_probe_device+0x64/0x160
[  497.089554][ T5899]  device_add+0x121d/0x1970
[  497.089606][ T5899]  platform_device_add+0x35a/0x800
[  497.089666][ T5899]  platform_device_register_full+0x5cf/0x830
[  497.089711][ T5899]  vhci_hcd_init+0x1a1/0x2f0
[  497.089765][ T5899]  do_one_initcall+0x11d/0x700
[  497.089816][ T5899]  kernel_init_freeable+0x6ea/0x7b0
[  497.089858][ T5899]  kernel_init+0x1f/0x1e0
[  497.089910][ T5899]  ret_from_fork+0x72b/0xd50
[  497.089954][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.090004][ T5899] 
[  497.090014][ T5899] The buggy address belongs to the object at ffff88802cb11800
[  497.090014][ T5899]  which belongs to the cache kmalloc-192 of size 192
[  497.090046][ T5899] The buggy address is located 48 bytes to the right of
[  497.090046][ T5899]  allocated 192-byte region [ffff88802cb11800, ffff88802cb118c0)
** 10 printk messages dropped **
[  497.090366][ T5899]  post_alloc_hook+0xfd/0x120
[  497.090419][ T5899]  get_page_from_freelist+0xf48/0x3530
[  497.090472][ T5899]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  497.090527][ T5899]  new_slab+0xa2/0x640
[  497.090573][ T5899]  refill_objects+0xe3/0x410
[  497.090621][ T5899]  __pcs_replace_empty_main+0x376/0x680
[  497.090670][ T5899]  __kmalloc_cache_noprof+0x479/0x6c0
[  497.090716][ T5899]  call_usermodehelper_setup+0xaf/0x360
[  497.090754][ T5899]  kobject_uevent_env+0x17c1/0x18b0
[  497.090815][ T5899]  device_add+0x1173/0x1970
[  497.090864][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.090907][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.090969][ T5899]  usb_probe_device+0xef/0x400
[  497.091012][ T5899]  really_probe+0x241/0xa60
[  497.091052][ T5899]  __driver_probe_device+0x20e/0x450
[  497.091096][ T5899]  driver_probe_device+0x4a/0x140
[  497.091139][ T5899] page_owner free stack trace missing
[  497.091152][ T5899] 
[  497.091161][ T5899] Memory state around the buggy address:
[  497.091181][ T5899]  ffff88802cb11780: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.091209][ T5899]  ffff88802cb11800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.091238][ T5899] >ffff88802cb11880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  497.091260][ T5899]                                                              ^
[  497.091283][ T5899]  ffff88802cb11900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.091311][ T5899]  ffff88802cb11980: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.091334][ T5899] ==================================================================
[  497.091386][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (22) exceeds report_count (1)
[  497.091441][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (23) exceeds report_count (1)
[  497.091497][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (24) exceeds report_count (1)
[  497.091771][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (25) exceeds report_count (1)
[  497.091827][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (26) exceeds report_count (1)
[  497.091883][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (27) exceeds report_count (1)
[  497.091934][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (28) exceeds report_count (1)
[  497.091961][ T5899] ==================================================================
[  497.091977][ T5899] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xba/0xc0
[  497.092030][ T5899] Read of size 4 at addr ffff88802cb119b4 by task kworker/1:6/5899
[  497.092059][ T5899] 
[  497.092077][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:6 Tainted: G    B        L      syzkaller #0 PREEMPT(lazy) 
[  497.092131][ T5899] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  497.092146][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  497.092170][ T5899] Workqueue: events fb_deferred_io_work
[  497.092202][ T5899] Call Trace:
[  497.092213][ T5899]  <TASK>
[  497.092226][ T5899]  dump_stack_lvl+0x100/0x190
[  497.092263][ T5899]  print_report+0x13d/0x4b0
[  497.092315][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.092358][ T5899]  ? __virt_addr_valid+0x239/0x430
[  497.092405][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.092455][ T5899]  kasan_report+0xdf/0x1c0
[  497.092491][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.092547][ T5899]  hid_dump_input+0xba/0xc0
[  497.092597][ T5899]  hid_set_field+0xeb/0x2e0
[  497.092635][ T5899]  picolcd_fb_deferred_io+0x6ba/0x1310
[  497.092686][ T5899]  ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[  497.092739][ T5899]  fb_deferred_io_work+0x1bc/0x4a0
[  497.092778][ T5899]  process_one_work+0xa23/0x1940
[  497.092848][ T5899]  ? __pfx_process_one_work+0x10/0x10
[  497.092906][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.092957][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.093005][ T5899]  worker_thread+0x5ef/0xe50
[  497.093044][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.093078][ T5899]  ? kthread+0x13a/0x450
[  497.093130][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.093162][ T5899]  kthread+0x370/0x450
[  497.093214][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.093270][ T5899]  ret_from_fork+0x72b/0xd50
[  497.093315][ T5899]  ? __pfx_ret_from_fork+0x10/0x10
[  497.093362][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.093410][ T5899]  ? __switch_to+0x800/0x10f0
[  497.093465][ T5899]  ? __switch_to_asm+0x39/0x70
[  497.093512][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.093568][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.093628][ T5899]  </TASK>
[  497.093641][ T5899] 
[  497.093650][ T5899] Allocated by task 11569:
[  497.093666][ T5899]  kasan_save_stack+0x30/0x50
[  497.093719][ T5899]  kasan_save_track+0x14/0x30
[  497.093772][ T5899]  __kasan_kmalloc+0xaa/0xb0
[  497.093824][ T5899]  __kvmalloc_node_noprof+0x34f/0x970
[  497.093877][ T5899]  hid_add_field+0x50c/0x1400
[  497.093914][ T5899]  hid_parser_main+0x159/0xc30
[  497.093951][ T5899]  hid_open_report+0x49b/0x810
[  497.093986][ T5899]  picolcd_probe+0x17b/0x1440
[  497.094015][ T5899]  hid_device_probe+0x50e/0x800
[  497.094051][ T5899]  really_probe+0x241/0xa60
[  497.094088][ T5899]  __driver_probe_device+0x20e/0x450
[  497.094128][ T5899]  driver_probe_device+0x4a/0x140
[  497.094168][ T5899]  __device_attach_driver+0x1df/0x320
[  497.094208][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.094263][ T5899]  __device_attach+0x1e4/0x4d0
[  497.094302][ T5899]  device_initial_probe+0xaf/0xd0
[  497.094344][ T5899]  bus_probe_device+0x64/0x160
[  497.094381][ T5899]  device_add+0x121d/0x1970
[  497.094426][ T5899]  hid_add_device+0x2bf/0x440
[  497.094457][ T5899]  usbhid_probe+0xa64/0x10b0
[  497.094508][ T5899]  usb_probe_interface+0x303/0x8f0
[  497.094553][ T5899]  really_probe+0x241/0xa60
[  497.094591][ T5899]  __driver_probe_device+0x20e/0x450
[  497.094631][ T5899]  driver_probe_device+0x4a/0x140
[  497.094670][ T5899]  __device_attach_driver+0x1df/0x320
[  497.094711][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.094765][ T5899]  __device_attach+0x1e4/0x4d0
[  497.094804][ T5899]  device_initial_probe+0xaf/0xd0
[  497.094845][ T5899]  bus_probe_device+0x64/0x160
[  497.094878][ T5899]  device_add+0x121d/0x1970
[  497.094924][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.094963][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.095020][ T5899]  usb_probe_device+0xef/0x400
[  497.095061][ T5899]  really_probe+0x241/0xa60
[  497.095098][ T5899]  __driver_probe_device+0x20e/0x450
[  497.095137][ T5899]  driver_probe_device+0x4a/0x140
[  497.095177][ T5899]  __device_attach_driver+0x1df/0x320
[  497.095218][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.095273][ T5899]  __device_attach+0x1e4/0x4d0
[  497.095312][ T5899]  device_initial_probe+0xaf/0xd0
[  497.095354][ T5899]  bus_probe_device+0x64/0x160
[  497.095390][ T5899]  device_add+0x121d/0x1970
[  497.095435][ T5899]  usb_new_device.cold+0x685/0x115c
[  497.095473][ T5899]  hub_event+0x30a3/0x4a60
[  497.095512][ T5899]  process_one_work+0xa23/0x1940
[  497.095567][ T5899]  worker_thread+0x5ef/0xe50
[  497.095596][ T5899]  kthread+0x370/0x450
[  497.095646][ T5899]  ret_from_fork+0x72b/0xd50
[  497.095688][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.095734][ T5899] 
[  497.095743][ T5899] The buggy address belongs to the object at ffff88802cb11900
[  497.095743][ T5899]  which belongs to the cache kmalloc-192 of size 192
[  497.095772][ T5899] The buggy address is located 4 bytes to the right of
[  497.095772][ T5899]  allocated 176-byte region [ffff88802cb11900, ffff88802cb119b0)
[  497.095809][ T5899] 
[  497.095818][ T5899] The buggy address belongs to the physical page:
[  497.095833][ T5899] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cb11
[  497.095864][ T5899] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  497.095891][ T5899] page_type: f5(slab)
[  497.095921][ T5899] raw: 00fff00000000000 ffff88813fe1f3c0 dead000000000100 dead000000000122
[  497.095954][ T5899] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  497.095977][ T5899] page dumped because: kasan: bad access detected
[  497.095994][ T5899] page_owner tracks the page as allocated
[  497.096006][ T5899] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14033025985, free_ts 0
[  497.096064][ T5899]  post_alloc_hook+0xfd/0x120
[  497.096105][ T5899]  get_page_from_freelist+0xf48/0x3530
[  497.096153][ T5899]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  497.096203][ T5899]  new_slab+0xa2/0x640
[  497.096244][ T5899]  refill_objects+0xe3/0x410
[  497.096292][ T5899]  __pcs_replace_empty_main+0x376/0x680
[  497.096343][ T5899]  __kmalloc_cache_noprof+0x479/0x6c0
[  497.096404][ T5899]  call_usermodehelper_setup+0xaf/0x360
[  497.096444][ T5899]  kobject_uevent_env+0x17c1/0x18b0
[  497.096506][ T5899]  device_add+0x1173/0x1970
[  497.096555][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.096595][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.096652][ T5899]  usb_probe_device+0xef/0x400
[  497.096692][ T5899]  really_probe+0x241/0xa60
[  497.096730][ T5899]  __driver_probe_device+0x20e/0x450
[  497.096769][ T5899]  driver_probe_device+0x4a/0x140
[  497.096809][ T5899] page_owner free stack trace missing
[  497.096822][ T5899] 
[  497.096832][ T5899] Memory state around the buggy address:
[  497.096850][ T5899]  ffff88802cb11880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  497.096877][ T5899]  ffff88802cb11900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.096906][ T5899] >ffff88802cb11980: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.096927][ T5899]                                      ^
[  497.096946][ T5899]  ffff88802cb11a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.096972][ T5899]  ffff88802cb11a80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  497.096993][ T5899] ==================================================================
[  497.097033][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (29) exceeds report_count (1)
[  497.097062][ T5899] ==================================================================
[  497.097078][ T5899] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xba/0xc0
[  497.097130][ T5899] Read of size 4 at addr ffff88802cb119d0 by task kworker/1:6/5899
[  497.097159][ T5899] 
[  497.097177][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:6 Tainted: G    B        L      syzkaller #0 PREEMPT(lazy) 
[  497.097231][ T5899] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  497.097246][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  497.097271][ T5899] Workqueue: events fb_deferred_io_work
[  497.097303][ T5899] Call Trace:
[  497.097315][ T5899]  <TASK>
[  497.097328][ T5899]  dump_stack_lvl+0x100/0x190
[  497.097364][ T5899]  print_report+0x13d/0x4b0
[  497.097420][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.097464][ T5899]  ? __virt_addr_valid+0x239/0x430
[  497.097506][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.097554][ T5899]  kasan_report+0xdf/0x1c0
[  497.097591][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.097646][ T5899]  hid_dump_input+0xba/0xc0
[  497.097696][ T5899]  hid_set_field+0xeb/0x2e0
[  497.097733][ T5899]  picolcd_fb_deferred_io+0x6ba/0x1310
[  497.097784][ T5899]  ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[  497.097837][ T5899]  fb_deferred_io_work+0x1bc/0x4a0
[  497.097878][ T5899]  process_one_work+0xa23/0x1940
[  497.097946][ T5899]  ? __pfx_process_one_work+0x10/0x10
[  497.098008][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.098059][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.098107][ T5899]  worker_thread+0x5ef/0xe50
[  497.098146][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.098180][ T5899]  ? kthread+0x13a/0x450
[  497.098232][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.098264][ T5899]  kthread+0x370/0x450
[  497.098316][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.098376][ T5899]  ret_from_fork+0x72b/0xd50
[  497.098423][ T5899]  ? __pfx_ret_from_fork+0x10/0x10
[  497.098469][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.098513][ T5899]  ? __switch_to+0x800/0x10f0
[  497.098567][ T5899]  ? __switch_to_asm+0x39/0x70
[  497.098614][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.098670][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.098749][ T5899]  </TASK>
[  497.098763][ T5899] 
[  497.098772][ T5899] Allocated by task 11569:
[  497.098789][ T5899]  kasan_save_stack+0x30/0x50
[  497.098842][ T5899]  kasan_save_track+0x14/0x30
[  497.098896][ T5899]  __kasan_kmalloc+0xaa/0xb0
[  497.098948][ T5899]  __kvmalloc_node_noprof+0x34f/0x970
[  497.099001][ T5899]  hid_add_field+0x50c/0x1400
[  497.099037][ T5899]  hid_parser_main+0x159/0xc30
[  497.099075][ T5899]  hid_open_report+0x49b/0x810
[  497.099109][ T5899]  picolcd_probe+0x17b/0x1440
[  497.099139][ T5899]  hid_device_probe+0x50e/0x800
[  497.099174][ T5899]  really_probe+0x241/0xa60
[  497.099212][ T5899]  __driver_probe_device+0x20e/0x450
[  497.099252][ T5899]  driver_probe_device+0x4a/0x140
[  497.099292][ T5899]  __device_attach_driver+0x1df/0x320
[  497.099332][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.099391][ T5899]  __device_attach+0x1e4/0x4d0
[  497.099430][ T5899]  device_initial_probe+0xaf/0xd0
[  497.099472][ T5899]  bus_probe_device+0x64/0x160
[  497.099504][ T5899]  device_add+0x121d/0x1970
[  497.099549][ T5899]  hid_add_device+0x2bf/0x440
[  497.099580][ T5899]  usbhid_probe+0xa64/0x10b0
[  497.099632][ T5899]  usb_probe_interface+0x303/0x8f0
[  497.099677][ T5899]  really_probe+0x241/0xa60
[  497.099714][ T5899]  __driver_probe_device+0x20e/0x450
[  497.099754][ T5899]  driver_probe_device+0x4a/0x140
[  497.099794][ T5899]  __device_attach_driver+0x1df/0x320
[  497.099835][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.099890][ T5899]  __device_attach+0x1e4/0x4d0
[  497.099930][ T5899]  device_initial_probe+0xaf/0xd0
[  497.099971][ T5899]  bus_probe_device+0x64/0x160
[  497.100003][ T5899]  device_add+0x121d/0x1970
[  497.100048][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.100087][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.100144][ T5899]  usb_probe_device+0xef/0x400
[  497.100184][ T5899]  really_probe+0x241/0xa60
[  497.100221][ T5899]  __driver_probe_device+0x20e/0x450
[  497.100261][ T5899]  driver_probe_device+0x4a/0x140
[  497.100300][ T5899]  __device_attach_driver+0x1df/0x320
[  497.100341][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.100399][ T5899]  __device_attach+0x1e4/0x4d0
[  497.100439][ T5899]  device_initial_probe+0xaf/0xd0
[  497.100480][ T5899]  bus_probe_device+0x64/0x160
[  497.100513][ T5899]  device_add+0x121d/0x1970
[  497.100558][ T5899]  usb_new_device.cold+0x685/0x115c
[  497.100596][ T5899]  hub_event+0x30a3/0x4a60
[  497.100634][ T5899]  process_one_work+0xa23/0x1940
[  497.100690][ T5899]  worker_thread+0x5ef/0xe50
[  497.100719][ T5899]  kthread+0x370/0x450
[  497.100770][ T5899]  ret_from_fork+0x72b/0xd50
[  497.100811][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.100857][ T5899] 
[  497.100866][ T5899] The buggy address belongs to the object at ffff88802cb11900
[  497.100866][ T5899]  which belongs to the cache kmalloc-192 of size 192
[  497.100895][ T5899] The buggy address is located 32 bytes to the right of
[  497.100895][ T5899]  allocated 176-byte region [ffff88802cb11900, ffff88802cb119b0)
[  497.100932][ T5899] 
[  497.100942][ T5899] The buggy address belongs to the physical page:
[  497.100955][ T5899] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cb11
[  497.100985][ T5899] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  497.101013][ T5899] page_type: f5(slab)
[  497.101041][ T5899] raw: 00fff00000000000 ffff88813fe1f3c0 dead000000000100 dead000000000122
[  497.101074][ T5899] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  497.101096][ T5899] page dumped because: kasan: bad access detected
[  497.101112][ T5899] page_owner tracks the page as allocated
[  497.101125][ T5899] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14033025985, free_ts 0
[  497.101182][ T5899]  post_alloc_hook+0xfd/0x120
[  497.101227][ T5899]  get_page_from_freelist+0xf48/0x3530
[  497.101275][ T5899]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  497.101325][ T5899]  new_slab+0xa2/0x640
[  497.101366][ T5899]  refill_objects+0xe3/0x410
[  497.101417][ T5899]  __pcs_replace_empty_main+0x376/0x680
[  497.101460][ T5899]  __kmalloc_cache_noprof+0x479/0x6c0
[  497.101503][ T5899]  call_usermodehelper_setup+0xaf/0x360
[  497.101540][ T5899]  kobject_uevent_env+0x17c1/0x18b0
[  497.101594][ T5899]  device_add+0x1173/0x1970
[  497.101639][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.101678][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.101735][ T5899]  usb_probe_device+0xef/0x400
[  497.101775][ T5899]  really_probe+0x241/0xa60
[  497.101812][ T5899]  __driver_probe_device+0x20e/0x450
[  497.101852][ T5899]  driver_probe_device+0x4a/0x140
[  497.101892][ T5899] page_owner free stack trace missing
[  497.101904][ T5899] 
[  497.101913][ T5899] Memory state around the buggy address:
[  497.101930][ T5899]  ffff88802cb11880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  497.101957][ T5899]  ffff88802cb11900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.101982][ T5899] >ffff88802cb11980: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.102003][ T5899]                                                  ^
[  497.102023][ T5899]  ffff88802cb11a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.102049][ T5899]  ffff88802cb11a80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  497.102069][ T5899] ==================================================================
[  497.102115][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (30) exceeds report_count (1)
[  497.102143][ T5899] ==================================================================
[  497.102158][ T5899] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xba/0xc0
[  497.102210][ T5899] Read of size 4 at addr ffff88802cb119ec by task kworker/1:6/5899
[  497.102239][ T5899] 
[  497.102257][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:6 Tainted: G    B        L      syzkaller #0 PREEMPT(lazy) 
[  497.102310][ T5899] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  497.102325][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  497.102349][ T5899] Workqueue: events fb_deferred_io_work
[  497.102386][ T5899] Call Trace:
[  497.102398][ T5899]  <TASK>
[  497.102411][ T5899]  dump_stack_lvl+0x100/0x190
[  497.102447][ T5899]  print_report+0x13d/0x4b0
[  497.102499][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.102544][ T5899]  ? __virt_addr_valid+0x239/0x430
[  497.102586][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.102634][ T5899]  kasan_report+0xdf/0x1c0
[  497.102671][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.102730][ T5899]  hid_dump_input+0xba/0xc0
[  497.102779][ T5899]  hid_set_field+0xeb/0x2e0
[  497.102817][ T5899]  picolcd_fb_deferred_io+0x6ba/0x1310
[  497.102867][ T5899]  ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[  497.102921][ T5899]  fb_deferred_io_work+0x1bc/0x4a0
[  497.102961][ T5899]  process_one_work+0xa23/0x1940
[  497.103030][ T5899]  ? __pfx_process_one_work+0x10/0x10
[  497.103088][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.103140][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.103188][ T5899]  worker_thread+0x5ef/0xe50
[  497.103227][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.103263][ T5899]  ? kthread+0x13a/0x450
[  497.103314][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.103347][ T5899]  kthread+0x370/0x450
[  497.103408][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.103463][ T5899]  ret_from_fork+0x72b/0xd50
[  497.103509][ T5899]  ? __pfx_ret_from_fork+0x10/0x10
[  497.103556][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.103600][ T5899]  ? __switch_to+0x800/0x10f0
[  497.103655][ T5899]  ? __switch_to_asm+0x39/0x70
[  497.103703][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.103759][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.103819][ T5899]  </TASK>
[  497.103833][ T5899] 
[  497.103842][ T5899] Allocated by task 11569:
[  497.103859][ T5899]  kasan_save_stack+0x30/0x50
[  497.103912][ T5899]  kasan_save_track+0x14/0x30
[  497.103964][ T5899]  __kasan_kmalloc+0xaa/0xb0
[  497.104016][ T5899]  __kvmalloc_node_noprof+0x34f/0x970
[  497.104069][ T5899]  hid_add_field+0x50c/0x1400
[  497.104106][ T5899]  hid_parser_main+0x159/0xc30
[  497.104143][ T5899]  hid_open_report+0x49b/0x810
[  497.104179][ T5899]  picolcd_probe+0x17b/0x1440
[  497.104208][ T5899]  hid_device_probe+0x50e/0x800
[  497.104244][ T5899]  really_probe+0x241/0xa60
[  497.104282][ T5899]  __driver_probe_device+0x20e/0x450
[  497.104321][ T5899]  driver_probe_device+0x4a/0x140
[  497.104361][ T5899]  __device_attach_driver+0x1df/0x320
[  497.104407][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.104462][ T5899]  __device_attach+0x1e4/0x4d0
[  497.104501][ T5899]  device_initial_probe+0xaf/0xd0
[  497.104543][ T5899]  bus_probe_device+0x64/0x160
[  497.104575][ T5899]  device_add+0x121d/0x1970
[  497.104621][ T5899]  hid_add_device+0x2bf/0x440
[  497.104652][ T5899]  usbhid_probe+0xa64/0x10b0
[  497.104702][ T5899]  usb_probe_interface+0x303/0x8f0
[  497.104748][ T5899]  really_probe+0x241/0xa60
[  497.104785][ T5899]  __driver_probe_device+0x20e/0x450
[  497.104826][ T5899]  driver_probe_device+0x4a/0x140
[  497.104865][ T5899]  __device_attach_driver+0x1df/0x320
[  497.104907][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.104961][ T5899]  __device_attach+0x1e4/0x4d0
[  497.105000][ T5899]  device_initial_probe+0xaf/0xd0
[  497.105041][ T5899]  bus_probe_device+0x64/0x160
[  497.105073][ T5899]  device_add+0x121d/0x1970
[  497.105119][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.105158][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.105215][ T5899]  usb_probe_device+0xef/0x400
[  497.105255][ T5899]  really_probe+0x241/0xa60
[  497.105292][ T5899]  __driver_probe_device+0x20e/0x450
[  497.105332][ T5899]  driver_probe_device+0x4a/0x140
[  497.105375][ T5899]  __device_attach_driver+0x1df/0x320
[  497.105416][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.105470][ T5899]  __device_attach+0x1e4/0x4d0
[  497.105509][ T5899]  device_initial_probe+0xaf/0xd0
[  497.105551][ T5899]  bus_probe_device+0x64/0x160
[  497.105583][ T5899]  device_add+0x121d/0x1970
[  497.105628][ T5899]  usb_new_device.cold+0x685/0x115c
[  497.105666][ T5899]  hub_event+0x30a3/0x4a60
[  497.105704][ T5899]  process_one_work+0xa23/0x1940
[  497.105759][ T5899]  worker_thread+0x5ef/0xe50
[  497.105788][ T5899]  kthread+0x370/0x450
[  497.105838][ T5899]  ret_from_fork+0x72b/0xd50
[  497.105881][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.105926][ T5899] 
[  497.105935][ T5899] The buggy address belongs to the object at ffff88802cb11900
[  497.105935][ T5899]  which belongs to the cache kmalloc-192 of size 192
[  497.105963][ T5899] The buggy address is located 60 bytes to the right of
[  497.105963][ T5899]  allocated 176-byte region [ffff88802cb11900, ffff88802cb119b0)
[  497.106000][ T5899] 
[  497.106009][ T5899] The buggy address belongs to the physical page:
[  497.106023][ T5899] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cb11
[  497.106054][ T5899] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  497.106079][ T5899] page_type: f5(slab)
[  497.106108][ T5899] raw: 00fff00000000000 ffff88813fe1f3c0 dead000000000100 dead000000000122
[  497.106142][ T5899] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  497.106163][ T5899] page dumped because: kasan: bad access detected
[  497.106180][ T5899] page_owner tracks the page as allocated
[  497.106192][ T5899] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14033025985, free_ts 0
[  497.106250][ T5899]  post_alloc_hook+0xfd/0x120
[  497.106295][ T5899]  get_page_from_freelist+0xf48/0x3530
[  497.106350][ T5899]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  497.106404][ T5899]  new_slab+0xa2/0x640
[  497.106446][ T5899]  refill_objects+0xe3/0x410
[  497.106490][ T5899]  __pcs_replace_empty_main+0x376/0x680
[  497.106534][ T5899]  __kmalloc_cache_noprof+0x479/0x6c0
[  497.106577][ T5899]  call_usermodehelper_setup+0xaf/0x360
[  497.106613][ T5899]  kobject_uevent_env+0x17c1/0x18b0
[  497.106668][ T5899]  device_add+0x1173/0x1970
[  497.106713][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.106752][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.106808][ T5899]  usb_probe_device+0xef/0x400
[  497.106848][ T5899]  really_probe+0x241/0xa60
[  497.106886][ T5899]  __driver_probe_device+0x20e/0x450
[  497.106929][ T5899]  driver_probe_device+0x4a/0x140
[  497.106969][ T5899] page_owner free stack trace missing
[  497.106981][ T5899] 
[  497.106990][ T5899] Memory state around the buggy address:
[  497.107007][ T5899]  ffff88802cb11880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  497.107034][ T5899]  ffff88802cb11900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.107059][ T5899] >ffff88802cb11980: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.107080][ T5899]                                                           ^
[  497.107101][ T5899]  ffff88802cb11a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.107127][ T5899]  ffff88802cb11a80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  497.107148][ T5899] ==================================================================
[  497.107191][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (31) exceeds report_count (1)
[  497.107454][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (32) exceeds report_count (1)
[  497.107717][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (33) exceeds report_count (1)
[  497.107770][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (34) exceeds report_count (1)
[  497.107821][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (35) exceeds report_count (1)
[  497.107873][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (36) exceeds report_count (1)
[  497.107924][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (37) exceeds report_count (1)
[  497.107953][ T5899] ==================================================================
[  497.107968][ T5899] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xba/0xc0
[  497.108020][ T5899] Read of size 4 at addr ffff88802cb11ab0 by task kworker/1:6/5899
[  497.108049][ T5899] 
[  497.108067][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:6 Tainted: G    B        L      syzkaller #0 PREEMPT(lazy) 
[  497.108120][ T5899] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  497.108135][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  497.108160][ T5899] Workqueue: events fb_deferred_io_work
[  497.108192][ T5899] Call Trace:
[  497.108203][ T5899]  <TASK>
[  497.108217][ T5899]  dump_stack_lvl+0x100/0x190
[  497.108253][ T5899]  print_report+0x13d/0x4b0
[  497.108306][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.108350][ T5899]  ? __virt_addr_valid+0x239/0x430
[  497.108397][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.108445][ T5899]  kasan_report+0xdf/0x1c0
[  497.108481][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.108537][ T5899]  hid_dump_input+0xba/0xc0
[  497.108588][ T5899]  hid_set_field+0xeb/0x2e0
[  497.108625][ T5899]  picolcd_fb_deferred_io+0x6ba/0x1310
[  497.108676][ T5899]  ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[  497.108729][ T5899]  fb_deferred_io_work+0x1bc/0x4a0
[  497.108769][ T5899]  process_one_work+0xa23/0x1940
[  497.108838][ T5899]  ? __pfx_process_one_work+0x10/0x10
[  497.108897][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.108949][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.108997][ T5899]  worker_thread+0x5ef/0xe50
[  497.109036][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.109070][ T5899]  ? kthread+0x13a/0x450
[  497.109122][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.109153][ T5899]  kthread+0x370/0x450
[  497.109206][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.109262][ T5899]  ret_from_fork+0x72b/0xd50
[  497.109307][ T5899]  ? __pfx_ret_from_fork+0x10/0x10
[  497.109354][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.109402][ T5899]  ? __switch_to+0x800/0x10f0
[  497.109457][ T5899]  ? __switch_to_asm+0x39/0x70
[  497.109504][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.109560][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.109621][ T5899]  </TASK>
[  497.109633][ T5899] 
[  497.109642][ T5899] Allocated by task 5608:
[  497.109660][ T5899]  kasan_save_stack+0x30/0x50
[  497.109713][ T5899]  kasan_save_track+0x14/0x30
[  497.109765][ T5899]  __kasan_kmalloc+0xaa/0xb0
[  497.109816][ T5899]  __kmalloc_node_track_caller_noprof+0x331/0x830
[  497.109873][ T5899]  kmemdup_noprof+0x29/0x60
[  497.109922][ T5899]  neigh_parms_alloc+0x85/0x5e0
[  497.109968][ T5899]  ipv6_add_dev+0x3f7/0x1520
[  497.110023][ T5899]  addrconf_notify+0x5db/0x1ba0
[  497.110065][ T5899]  notifier_call_chain+0x99/0x3f0
[  497.110116][ T5899]  call_netdevice_notifiers_info+0xbe/0x110
[  497.110167][ T5899]  register_netdevice+0x1998/0x25a0
[  497.110211][ T5899]  veth_newlink+0x44a/0xa00
[  497.110253][ T5899]  rtnl_newlink+0x1499/0x2380
[  497.110295][ T5899]  rtnetlink_rcv_msg+0x95e/0xe90
[  497.110339][ T5899]  netlink_rcv_skb+0x159/0x420
[  497.110374][ T5899]  netlink_unicast+0x585/0x850
[  497.110404][ T5899]  netlink_sendmsg+0x8b0/0xda0
[  497.110433][ T5899]  __sys_sendto+0x48b/0x4e0
[  497.110469][ T5899]  __x64_sys_sendto+0xe0/0x1c0
[  497.110504][ T5899]  do_syscall_64+0x115/0x870
[  497.110542][ T5899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.110577][ T5899] 
[  497.110586][ T5899] The buggy address belongs to the object at ffff88802cb11a00
[  497.110586][ T5899]  which belongs to the cache kmalloc-192 of size 192
[  497.110615][ T5899] The buggy address is located 16 bytes to the right of
[  497.110615][ T5899]  allocated 160-byte region [ffff88802cb11a00, ffff88802cb11aa0)
[  497.110652][ T5899] 
[  497.110661][ T5899] The buggy address belongs to the physical page:
[  497.110675][ T5899] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cb11
[  497.110705][ T5899] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  497.110732][ T5899] page_type: f5(slab)
[  497.110760][ T5899] raw: 00fff00000000000 ffff88813fe1f3c0 dead000000000100 dead000000000122
[  497.110793][ T5899] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  497.110816][ T5899] page dumped because: kasan: bad access detected
[  497.110832][ T5899] page_owner tracks the page as allocated
[  497.110844][ T5899] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14033025985, free_ts 0
[  497.110902][ T5899]  post_alloc_hook+0xfd/0x120
[  497.110944][ T5899]  get_page_from_freelist+0xf48/0x3530
[  497.110992][ T5899]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  497.111042][ T5899]  new_slab+0xa2/0x640
[  497.111083][ T5899]  refill_objects+0xe3/0x410
[  497.111127][ T5899]  __pcs_replace_empty_main+0x376/0x680
[  497.111171][ T5899]  __kmalloc_cache_noprof+0x479/0x6c0
[  497.111215][ T5899]  call_usermodehelper_setup+0xaf/0x360
[  497.111250][ T5899]  kobject_uevent_env+0x17c1/0x18b0
[  497.111305][ T5899]  device_add+0x1173/0x1970
[  497.111350][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.111394][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.111451][ T5899]  usb_probe_device+0xef/0x400
[  497.111491][ T5899]  really_probe+0x241/0xa60
[  497.111528][ T5899]  __driver_probe_device+0x20e/0x450
[  497.111568][ T5899]  driver_probe_device+0x4a/0x140
[  497.111608][ T5899] page_owner free stack trace missing
[  497.111621][ T5899] 
[  497.111630][ T5899] Memory state around the buggy address:
[  497.111647][ T5899]  ffff88802cb11980: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.111674][ T5899]  ffff88802cb11a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.111700][ T5899] >ffff88802cb11a80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  497.111721][ T5899]                                      ^
[  497.111741][ T5899]  ffff88802cb11b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.111768][ T5899]  ffff88802cb11b80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  497.111788][ T5899] ==================================================================
[  497.111829][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (38) exceeds report_count (1)
[  497.111857][ T5899] ==================================================================
[  497.111871][ T5899] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xba/0xc0
[  497.111924][ T5899] Read of size 4 at addr ffff88802cb11acc by task kworker/1:6/5899
[  497.111952][ T5899] 
[  497.111969][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:6 Tainted: G    B        L      syzkaller #0 PREEMPT(lazy) 
[  497.112022][ T5899] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  497.112038][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  497.112061][ T5899] Workqueue: events fb_deferred_io_work
[  497.112093][ T5899] Call Trace:
[  497.112104][ T5899]  <TASK>
[  497.112117][ T5899]  dump_stack_lvl+0x100/0x190
[  497.112153][ T5899]  print_report+0x13d/0x4b0
[  497.112205][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.112249][ T5899]  ? __virt_addr_valid+0x239/0x430
[  497.112291][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.112339][ T5899]  kasan_report+0xdf/0x1c0
[  497.112380][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.112435][ T5899]  hid_dump_input+0xba/0xc0
[  497.112485][ T5899]  hid_set_field+0xeb/0x2e0
[  497.112522][ T5899]  picolcd_fb_deferred_io+0x6ba/0x1310
[  497.112573][ T5899]  ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[  497.112625][ T5899]  fb_deferred_io_work+0x1bc/0x4a0
[  497.112665][ T5899]  process_one_work+0xa23/0x1940
[  497.112734][ T5899]  ? __pfx_process_one_work+0x10/0x10
[  497.112818][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.112870][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.112918][ T5899]  worker_thread+0x5ef/0xe50
[  497.112957][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.112991][ T5899]  ? kthread+0x13a/0x450
[  497.113043][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.113092][ T5899]  kthread+0x370/0x450
[  497.113145][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.113200][ T5899]  ret_from_fork+0x72b/0xd50
[  497.113246][ T5899]  ? __pfx_ret_from_fork+0x10/0x10
[  497.113293][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.113337][ T5899]  ? __switch_to+0x800/0x10f0
[  497.113396][ T5899]  ? __switch_to_asm+0x39/0x70
[  497.113443][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.113499][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.113560][ T5899]  </TASK>
[  497.113572][ T5899] 
[  497.113581][ T5899] Allocated by task 5608:
[  497.113598][ T5899]  kasan_save_stack+0x30/0x50
[  497.113650][ T5899]  kasan_save_track+0x14/0x30
[  497.113703][ T5899]  __kasan_kmalloc+0xaa/0xb0
[  497.113754][ T5899]  __kmalloc_node_track_caller_noprof+0x331/0x830
[  497.113810][ T5899]  kmemdup_noprof+0x29/0x60
[  497.113859][ T5899]  neigh_parms_alloc+0x85/0x5e0
[  497.113904][ T5899]  ipv6_add_dev+0x3f7/0x1520
[  497.113960][ T5899]  addrconf_notify+0x5db/0x1ba0
[  497.114002][ T5899]  notifier_call_chain+0x99/0x3f0
[  497.114054][ T5899]  call_netdevice_notifiers_info+0xbe/0x110
[  497.114105][ T5899]  register_netdevice+0x1998/0x25a0
[  497.114149][ T5899]  veth_newlink+0x44a/0xa00
[  497.114190][ T5899]  rtnl_newlink+0x1499/0x2380
[  497.114233][ T5899]  rtnetlink_rcv_msg+0x95e/0xe90
[  497.114277][ T5899]  netlink_rcv_skb+0x159/0x420
[  497.114309][ T5899]  netlink_unicast+0x585/0x850
[  497.114338][ T5899]  netlink_sendmsg+0x8b0/0xda0
[  497.114372][ T5899]  __sys_sendto+0x48b/0x4e0
[  497.114408][ T5899]  __x64_sys_sendto+0xe0/0x1c0
[  497.114443][ T5899]  do_syscall_64+0x115/0x870
[  497.114482][ T5899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.114517][ T5899] 
[  497.114526][ T5899] The buggy address belongs to the object at ffff88802cb11a00
[  497.114526][ T5899]  which belongs to the cache kmalloc-192 of size 192
[  497.114555][ T5899] The buggy address is located 44 bytes to the right of
[  497.114555][ T5899]  allocated 160-byte region [ffff88802cb11a00, ffff88802cb11aa0)
[  497.114592][ T5899] 
[  497.114601][ T5899] The buggy address belongs to the physical page:
[  497.114615][ T5899] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cb11
[  497.114646][ T5899] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  497.114672][ T5899] page_type: f5(slab)
[  497.114701][ T5899] raw: 00fff00000000000 ffff88813fe1f3c0 dead000000000100 dead000000000122
[  497.114735][ T5899] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  497.114757][ T5899] page dumped because: kasan: bad access detected
[  497.114774][ T5899] page_owner tracks the page as allocated
[  497.114787][ T5899] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14033025985, free_ts 0
[  497.114845][ T5899]  post_alloc_hook+0xfd/0x120
[  497.114887][ T5899]  get_page_from_freelist+0xf48/0x3530
[  497.114934][ T5899]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  497.114984][ T5899]  new_slab+0xa2/0x640
[  497.115025][ T5899]  refill_objects+0xe3/0x410
[  497.115070][ T5899]  __pcs_replace_empty_main+0x376/0x680
[  497.115114][ T5899]  __kmalloc_cache_noprof+0x479/0x6c0
[  497.115158][ T5899]  call_usermodehelper_setup+0xaf/0x360
[  497.115194][ T5899]  kobject_uevent_env+0x17c1/0x18b0
[  497.115249][ T5899]  device_add+0x1173/0x1970
[  497.115294][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.115333][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.115394][ T5899]  usb_probe_device+0xef/0x400
[  497.115435][ T5899]  really_probe+0x241/0xa60
[  497.115473][ T5899]  __driver_probe_device+0x20e/0x450
[  497.115513][ T5899]  driver_probe_device+0x4a/0x140
[  497.115552][ T5899] page_owner free stack trace missing
[  497.115565][ T5899] 
[  497.115574][ T5899] Memory state around the buggy address:
[  497.115591][ T5899]  ffff88802cb11980: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.115618][ T5899]  ffff88802cb11a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.115644][ T5899] >ffff88802cb11a80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  497.115666][ T5899]                                               ^
[  497.115686][ T5899]  ffff88802cb11b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.115712][ T5899]  ffff88802cb11b80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  497.115733][ T5899] ==================================================================
[  497.115777][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (39) exceeds report_count (1)
[  497.115806][ T5899] ==================================================================
[  497.115821][ T5899] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xba/0xc0
[  497.115873][ T5899] Read of size 4 at addr ffff88802cb11ae8 by task kworker/1:6/5899
[  497.115902][ T5899] 
[  497.115919][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:6 Tainted: G    B        L      syzkaller #0 PREEMPT(lazy) 
[  497.115972][ T5899] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  497.115987][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  497.116010][ T5899] Workqueue: events fb_deferred_io_work
[  497.116042][ T5899] Call Trace:
[  497.116053][ T5899]  <TASK>
[  497.116066][ T5899]  dump_stack_lvl+0x100/0x190
[  497.116102][ T5899]  print_report+0x13d/0x4b0
[  497.116154][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.116197][ T5899]  ? __virt_addr_valid+0x239/0x430
[  497.116239][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.116288][ T5899]  kasan_report+0xdf/0x1c0
[  497.116327][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.116387][ T5899]  hid_dump_input+0xba/0xc0
[  497.116437][ T5899]  hid_set_field+0xeb/0x2e0
[  497.116474][ T5899]  picolcd_fb_deferred_io+0x6ba/0x1310
[  497.116525][ T5899]  ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[  497.116577][ T5899]  fb_deferred_io_work+0x1bc/0x4a0
[  497.116618][ T5899]  process_one_work+0xa23/0x1940
[  497.116687][ T5899]  ? __pfx_process_one_work+0x10/0x10
[  497.116745][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.116796][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.116844][ T5899]  worker_thread+0x5ef/0xe50
[  497.116883][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.116921][ T5899]  ? kthread+0x13a/0x450
[  497.116972][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.117004][ T5899]  kthread+0x370/0x450
[  497.117057][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.117112][ T5899]  ret_from_fork+0x72b/0xd50
[  497.117158][ T5899]  ? __pfx_ret_from_fork+0x10/0x10
[  497.117205][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.117248][ T5899]  ? __switch_to+0x800/0x10f0
[  497.117303][ T5899]  ? __switch_to_asm+0x39/0x70
[  497.117350][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.117417][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.117478][ T5899]  </TASK>
[  497.117490][ T5899] 
[  497.117499][ T5899] Allocated by task 5608:
[  497.117516][ T5899]  kasan_save_stack+0x30/0x50
[  497.117569][ T5899]  kasan_save_track+0x14/0x30
[  497.117621][ T5899]  __kasan_kmalloc+0xaa/0xb0
[  497.117673][ T5899]  __kmalloc_node_track_caller_noprof+0x331/0x830
[  497.117729][ T5899]  kmemdup_noprof+0x29/0x60
[  497.117777][ T5899]  neigh_parms_alloc+0x85/0x5e0
[  497.117823][ T5899]  ipv6_add_dev+0x3f7/0x1520
[  497.117879][ T5899]  addrconf_notify+0x5db/0x1ba0
[  497.117921][ T5899]  notifier_call_chain+0x99/0x3f0
[  497.117973][ T5899]  call_netdevice_notifiers_info+0xbe/0x110
[  497.118024][ T5899]  register_netdevice+0x1998/0x25a0
[  497.118068][ T5899]  veth_newlink+0x44a/0xa00
[  497.118109][ T5899]  rtnl_newlink+0x1499/0x2380
[  497.118152][ T5899]  rtnetlink_rcv_msg+0x95e/0xe90
[  497.118196][ T5899]  netlink_rcv_skb+0x159/0x420
[  497.118228][ T5899]  netlink_unicast+0x585/0x850
[  497.118257][ T5899]  netlink_sendmsg+0x8b0/0xda0
[  497.118287][ T5899]  __sys_sendto+0x48b/0x4e0
[  497.118323][ T5899]  __x64_sys_sendto+0xe0/0x1c0
[  497.118359][ T5899]  do_syscall_64+0x115/0x870
[  497.118402][ T5899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.118438][ T5899] 
[  497.118447][ T5899] The buggy address belongs to the object at ffff88802cb11a00
[  497.118447][ T5899]  which belongs to the cache kmalloc-192 of size 192
[  497.118475][ T5899] The buggy address is located 72 bytes to the right of
[  497.118475][ T5899]  allocated 160-byte region [ffff88802cb11a00, ffff88802cb11aa0)
[  497.118512][ T5899] 
[  497.118521][ T5899] The buggy address belongs to the physical page:
[  497.118535][ T5899] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cb11
[  497.118566][ T5899] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  497.118593][ T5899] page_type: f5(slab)
[  497.118623][ T5899] raw: 00fff00000000000 ffff88813fe1f3c0 dead000000000100 dead000000000122
[  497.118657][ T5899] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  497.118679][ T5899] page dumped because: kasan: bad access detected
[  497.118696][ T5899] page_owner tracks the page as allocated
[  497.118709][ T5899] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14033025985, free_ts 0
[  497.118789][ T5899]  post_alloc_hook+0xfd/0x120
[  497.118831][ T5899]  get_page_from_freelist+0xf48/0x3530
[  497.118878][ T5899]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  497.118928][ T5899]  new_slab+0xa2/0x640
[  497.118970][ T5899]  refill_objects+0xe3/0x410
[  497.119014][ T5899]  __pcs_replace_empty_main+0x376/0x680
[  497.119058][ T5899]  __kmalloc_cache_noprof+0x479/0x6c0
[  497.119102][ T5899]  call_usermodehelper_setup+0xaf/0x360
[  497.119137][ T5899]  kobject_uevent_env+0x17c1/0x18b0
[  497.119192][ T5899]  device_add+0x1173/0x1970
[  497.119238][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.119277][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.119334][ T5899]  usb_probe_device+0xef/0x400
[  497.119380][ T5899]  really_probe+0x241/0xa60
[  497.119417][ T5899]  __driver_probe_device+0x20e/0x450
[  497.119457][ T5899]  driver_probe_device+0x4a/0x140
[  497.119496][ T5899] page_owner free stack trace missing
[  497.119508][ T5899] 
[  497.119517][ T5899] Memory state around the buggy address:
[  497.119535][ T5899]  ffff88802cb11980: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.119561][ T5899]  ffff88802cb11a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.119587][ T5899] >ffff88802cb11a80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  497.119608][ T5899]                                                           ^
[  497.119629][ T5899]  ffff88802cb11b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.119655][ T5899]  ffff88802cb11b80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  497.119675][ T5899] ==================================================================
[  497.119719][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (40) exceeds report_count (1)
[  497.119979][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (41) exceeds report_count (1)
[  497.120245][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (42) exceeds report_count (1)
[  497.120273][ T5899] ==================================================================
[  497.120287][ T5899] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xba/0xc0
[  497.120339][ T5899] Read of size 4 at addr ffff88802cb117f8 by task kworker/1:6/5899
[  497.120372][ T5899] 
[  497.120389][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:6 Tainted: G    B        L      syzkaller #0 PREEMPT(lazy) 
[  497.120443][ T5899] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  497.120457][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  497.120482][ T5899] Workqueue: events fb_deferred_io_work
[  497.120514][ T5899] Call Trace:
[  497.120525][ T5899]  <TASK>
[  497.120538][ T5899]  dump_stack_lvl+0x100/0x190
[  497.120575][ T5899]  print_report+0x13d/0x4b0
[  497.120627][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.120671][ T5899]  ? __virt_addr_valid+0x239/0x430
[  497.120714][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.120762][ T5899]  kasan_report+0xdf/0x1c0
[  497.120798][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.120854][ T5899]  hid_dump_input+0xba/0xc0
[  497.120905][ T5899]  hid_set_field+0xeb/0x2e0
[  497.120942][ T5899]  picolcd_fb_deferred_io+0x6f3/0x1310
[  497.120993][ T5899]  ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[  497.121045][ T5899]  fb_deferred_io_work+0x1bc/0x4a0
[  497.121085][ T5899]  process_one_work+0xa23/0x1940
[  497.121154][ T5899]  ? __pfx_process_one_work+0x10/0x10
[  497.121212][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.121264][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.121311][ T5899]  worker_thread+0x5ef/0xe50
[  497.121350][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.121388][ T5899]  ? kthread+0x13a/0x450
[  497.121440][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.121472][ T5899]  kthread+0x370/0x450
[  497.121525][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.121581][ T5899]  ret_from_fork+0x72b/0xd50
[  497.121627][ T5899]  ? __pfx_ret_from_fork+0x10/0x10
[  497.121673][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.121717][ T5899]  ? __switch_to+0x800/0x10f0
[  497.121771][ T5899]  ? __switch_to_asm+0x39/0x70
[  497.121819][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.121874][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.121935][ T5899]  </TASK>
[  497.121947][ T5899] 
[  497.121957][ T5899] Allocated by task 11569:
[  497.121974][ T5899]  kasan_save_stack+0x30/0x50
[  497.122026][ T5899]  kasan_save_track+0x14/0x30
[  497.122079][ T5899]  __kasan_kmalloc+0xaa/0xb0
[  497.122131][ T5899]  __kvmalloc_node_noprof+0x34f/0x970
[  497.122184][ T5899]  hid_add_field+0x50c/0x1400
[  497.122220][ T5899]  hid_parser_main+0x159/0xc30
[  497.122258][ T5899]  hid_open_report+0x49b/0x810
[  497.122293][ T5899]  picolcd_probe+0x17b/0x1440
[  497.122323][ T5899]  hid_device_probe+0x50e/0x800
[  497.122359][ T5899]  really_probe+0x241/0xa60
[  497.122402][ T5899]  __driver_probe_device+0x20e/0x450
[  497.122442][ T5899]  driver_probe_device+0x4a/0x140
[  497.122482][ T5899]  __device_attach_driver+0x1df/0x320
[  497.122523][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.122578][ T5899]  __device_attach+0x1e4/0x4d0
[  497.122617][ T5899]  device_initial_probe+0xaf/0xd0
[  497.122659][ T5899]  bus_probe_device+0x64/0x160
[  497.122691][ T5899]  device_add+0x121d/0x1970
[  497.122737][ T5899]  hid_add_device+0x2bf/0x440
[  497.122768][ T5899]  usbhid_probe+0xa64/0x10b0
[  497.122820][ T5899]  usb_probe_interface+0x303/0x8f0
[  497.122866][ T5899]  really_probe+0x241/0xa60
[  497.122903][ T5899]  __driver_probe_device+0x20e/0x450
[  497.122944][ T5899]  driver_probe_device+0x4a/0x140
[  497.122984][ T5899]  __device_attach_driver+0x1df/0x320
[  497.123024][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.123079][ T5899]  __device_attach+0x1e4/0x4d0
[  497.123119][ T5899]  device_initial_probe+0xaf/0xd0
[  497.123160][ T5899]  bus_probe_device+0x64/0x160
[  497.123193][ T5899]  device_add+0x121d/0x1970
[  497.123237][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.123277][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.123334][ T5899]  usb_probe_device+0xef/0x400
[  497.123379][ T5899]  really_probe+0x241/0xa60
[  497.123417][ T5899]  __driver_probe_device+0x20e/0x450
[  497.123456][ T5899]  driver_probe_device+0x4a/0x140
[  497.123496][ T5899]  __device_attach_driver+0x1df/0x320
[  497.123537][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.123591][ T5899]  __device_attach+0x1e4/0x4d0
[  497.123630][ T5899]  device_initial_probe+0xaf/0xd0
[  497.123672][ T5899]  bus_probe_device+0x64/0x160
[  497.123704][ T5899]  device_add+0x121d/0x1970
[  497.123749][ T5899]  usb_new_device.cold+0x685/0x115c
[  497.123789][ T5899]  hub_event+0x30a3/0x4a60
[  497.123827][ T5899]  process_one_work+0xa23/0x1940
[  497.123883][ T5899]  worker_thread+0x5ef/0xe50
[  497.123913][ T5899]  kthread+0x370/0x450
[  497.123963][ T5899]  ret_from_fork+0x72b/0xd50
[  497.124004][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.124050][ T5899] 
[  497.124060][ T5899] The buggy address belongs to the object at ffff88802cb11700
[  497.124060][ T5899]  which belongs to the cache kmalloc-192 of size 192
[  497.124088][ T5899] The buggy address is located 72 bytes to the right of
[  497.124088][ T5899]  allocated 176-byte region [ffff88802cb11700, ffff88802cb117b0)
[  497.124126][ T5899] 
[  497.124135][ T5899] The buggy address belongs to the physical page:
[  497.124149][ T5899] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cb11
[  497.124179][ T5899] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  497.124205][ T5899] page_type: f5(slab)
[  497.124234][ T5899] raw: 00fff00000000000 ffff88813fe1f3c0 dead000000000100 dead000000000122
[  497.124267][ T5899] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  497.124288][ T5899] page dumped because: kasan: bad access detected
[  497.124305][ T5899] page_owner tracks the page as allocated
[  497.124317][ T5899] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14033025985, free_ts 0
[  497.124379][ T5899]  post_alloc_hook+0xfd/0x120
[  497.124420][ T5899]  get_page_from_freelist+0xf48/0x3530
[  497.124468][ T5899]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  497.124517][ T5899]  new_slab+0xa2/0x640
[  497.124558][ T5899]  refill_objects+0xe3/0x410
[  497.124603][ T5899]  __pcs_replace_empty_main+0x376/0x680
[  497.124647][ T5899]  __kmalloc_cache_noprof+0x479/0x6c0
[  497.124690][ T5899]  call_usermodehelper_setup+0xaf/0x360
[  497.124725][ T5899]  kobject_uevent_env+0x17c1/0x18b0
[  497.124780][ T5899]  device_add+0x1173/0x1970
[  497.124825][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.124864][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.124921][ T5899]  usb_probe_device+0xef/0x400
[  497.124961][ T5899]  really_probe+0x241/0xa60
[  497.124999][ T5899]  __driver_probe_device+0x20e/0x450
[  497.125038][ T5899]  driver_probe_device+0x4a/0x140
[  497.125078][ T5899] page_owner free stack trace missing
[  497.125090][ T5899] 
[  497.125099][ T5899] Memory state around the buggy address:
[  497.125116][ T5899]  ffff88802cb11680: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.125142][ T5899]  ffff88802cb11700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.125168][ T5899] >ffff88802cb11780: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.125189][ T5899]                                                                 ^
[  497.125211][ T5899]  ffff88802cb11800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.125236][ T5899]  ffff88802cb11880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  497.125257][ T5899] ==================================================================
[  497.125301][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (4) exceeds report_count (1)
[  497.125354][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (5) exceeds report_count (1)
[  497.125629][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (6) exceeds report_count (1)
[  497.125886][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (7) exceeds report_count (1)
[  497.125936][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (8) exceeds report_count (1)
[  497.125987][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (9) exceeds report_count (1)
[  497.126250][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (10) exceeds report_count (1)
[  497.126518][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (11) exceeds report_count (1)
[  497.126547][ T5899] ==================================================================
[  497.126561][ T5899] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xba/0xc0
[  497.126613][ T5899] Read of size 4 at addr ffff88802cb118d8 by task kworker/1:6/5899
[  497.126642][ T5899] 
[  497.126660][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:6 Tainted: G    B        L      syzkaller #0 PREEMPT(lazy) 
[  497.126713][ T5899] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  497.126729][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  497.126754][ T5899] Workqueue: events fb_deferred_io_work
[  497.126785][ T5899] Call Trace:
[  497.126797][ T5899]  <TASK>
[  497.126810][ T5899]  dump_stack_lvl+0x100/0x190
[  497.126847][ T5899]  print_report+0x13d/0x4b0
[  497.126903][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.126947][ T5899]  ? __virt_addr_valid+0x239/0x430
[  497.126998][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.127046][ T5899]  kasan_report+0xdf/0x1c0
[  497.127083][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.127139][ T5899]  hid_dump_input+0xba/0xc0
[  497.127189][ T5899]  hid_set_field+0xeb/0x2e0
[  497.127226][ T5899]  picolcd_fb_deferred_io+0x6f3/0x1310
[  497.127277][ T5899]  ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[  497.127329][ T5899]  fb_deferred_io_work+0x1bc/0x4a0
[  497.127375][ T5899]  process_one_work+0xa23/0x1940
[  497.127444][ T5899]  ? __pfx_process_one_work+0x10/0x10
[  497.127502][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.127554][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.127601][ T5899]  worker_thread+0x5ef/0xe50
[  497.127641][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.127675][ T5899]  ? kthread+0x13a/0x450
[  497.127727][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.127759][ T5899]  kthread+0x370/0x450
[  497.127812][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.127867][ T5899]  ret_from_fork+0x72b/0xd50
[  497.127913][ T5899]  ? __pfx_ret_from_fork+0x10/0x10
[  497.127960][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.128003][ T5899]  ? __switch_to+0x800/0x10f0
[  497.128058][ T5899]  ? __switch_to_asm+0x39/0x70
[  497.128105][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.128161][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.128222][ T5899]  </TASK>
[  497.128257][ T5899] 
[  497.128266][ T5899] Allocated by task 1:
[  497.128283][ T5899]  kasan_save_stack+0x30/0x50
[  497.128336][ T5899]  kasan_save_track+0x14/0x30
[  497.128393][ T5899]  __kasan_kmalloc+0xaa/0xb0
[  497.128444][ T5899]  __kmalloc_noprof+0x322/0x820
[  497.128494][ T5899]  usb_alloc_urb+0x66/0xa0
[  497.128544][ T5899]  hub_probe.cold+0x25fb/0x2eda
[  497.128582][ T5899]  usb_probe_interface+0x303/0x8f0
[  497.128628][ T5899]  really_probe+0x241/0xa60
[  497.128665][ T5899]  __driver_probe_device+0x20e/0x450
[  497.128705][ T5899]  driver_probe_device+0x4a/0x140
[  497.128744][ T5899]  __device_attach_driver+0x1df/0x320
[  497.128785][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.128841][ T5899]  __device_attach+0x1e4/0x4d0
[  497.128880][ T5899]  device_initial_probe+0xaf/0xd0
[  497.128922][ T5899]  bus_probe_device+0x64/0x160
[  497.128955][ T5899]  device_add+0x121d/0x1970
[  497.129000][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.129038][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.129095][ T5899]  usb_probe_device+0xef/0x400
[  497.129135][ T5899]  really_probe+0x241/0xa60
[  497.129172][ T5899]  __driver_probe_device+0x20e/0x450
[  497.129212][ T5899]  driver_probe_device+0x4a/0x140
[  497.129252][ T5899]  __device_attach_driver+0x1df/0x320
[  497.129292][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.129346][ T5899]  __device_attach+0x1e4/0x4d0
[  497.129389][ T5899]  device_initial_probe+0xaf/0xd0
[  497.129430][ T5899]  bus_probe_device+0x64/0x160
[  497.129462][ T5899]  device_add+0x121d/0x1970
[  497.129507][ T5899]  usb_new_device.cold+0x685/0x115c
[  497.129545][ T5899]  register_root_hub+0x4e6/0x639
[  497.129585][ T5899]  usb_add_hcd.cold+0xccd/0x1158
[  497.129624][ T5899]  vhci_hcd_probe+0x14b/0x4e0
[  497.129657][ T5899]  platform_probe+0x106/0x1d0
[  497.129711][ T5899]  really_probe+0x241/0xa60
[  497.129748][ T5899]  __driver_probe_device+0x20e/0x450
[  497.129788][ T5899]  driver_probe_device+0x4a/0x140
[  497.129829][ T5899]  __device_attach_driver+0x1df/0x320
[  497.129869][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.129924][ T5899]  __device_attach+0x1e4/0x4d0
[  497.129963][ T5899]  device_initial_probe+0xaf/0xd0
[  497.130004][ T5899]  bus_probe_device+0x64/0x160
[  497.130037][ T5899]  device_add+0x121d/0x1970
[  497.130082][ T5899]  platform_device_add+0x35a/0x800
[  497.130136][ T5899]  platform_device_register_full+0x5cf/0x830
[  497.130175][ T5899]  vhci_hcd_init+0x1a1/0x2f0
[  497.130224][ T5899]  do_one_initcall+0x11d/0x700
[  497.130268][ T5899]  kernel_init_freeable+0x6ea/0x7b0
[  497.130302][ T5899]  kernel_init+0x1f/0x1e0
[  497.130349][ T5899]  ret_from_fork+0x72b/0xd50
[  497.130395][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.130440][ T5899] 
[  497.130449][ T5899] The buggy address belongs to the object at ffff88802cb11800
[  497.130449][ T5899]  which belongs to the cache kmalloc-192 of size 192
[  497.130478][ T5899] The buggy address is located 24 bytes to the right of
[  497.130478][ T5899]  allocated 192-byte region [ffff88802cb11800, ffff88802cb118c0)
[  497.130515][ T5899] 
[  497.130524][ T5899] The buggy address belongs to the physical page:
[  497.130538][ T5899] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cb11
[  497.130568][ T5899] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  497.130595][ T5899] page_type: f5(slab)
[  497.130623][ T5899] raw: 00fff00000000000 ffff88813fe1f3c0 dead000000000100 dead000000000122
[  497.130657][ T5899] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  497.130679][ T5899] page dumped because: kasan: bad access detected
[  497.130696][ T5899] page_owner tracks the page as allocated
[  497.130708][ T5899] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14033025985, free_ts 0
[  497.130766][ T5899]  post_alloc_hook+0xfd/0x120
[  497.130808][ T5899]  get_page_from_freelist+0xf48/0x3530
[  497.130855][ T5899]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  497.130905][ T5899]  new_slab+0xa2/0x640
[  497.130947][ T5899]  refill_objects+0xe3/0x410
[  497.130991][ T5899]  __pcs_replace_empty_main+0x376/0x680
[  497.131035][ T5899]  __kmalloc_cache_noprof+0x479/0x6c0
[  497.131079][ T5899]  call_usermodehelper_setup+0xaf/0x360
[  497.131114][ T5899]  kobject_uevent_env+0x17c1/0x18b0
[  497.131169][ T5899]  device_add+0x1173/0x1970
[  497.131215][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.131253][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.131310][ T5899]  usb_probe_device+0xef/0x400
[  497.131350][ T5899]  really_probe+0x241/0xa60
[  497.131391][ T5899]  __driver_probe_device+0x20e/0x450
[  497.131432][ T5899]  driver_probe_device+0x4a/0x140
[  497.131471][ T5899] page_owner free stack trace missing
[  497.131483][ T5899] 
[  497.131492][ T5899] Memory state around the buggy address:
[  497.131510][ T5899]  ffff88802cb11780: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.131537][ T5899]  ffff88802cb11800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.131563][ T5899] >ffff88802cb11880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  497.131584][ T5899]                                                     ^
[  497.131605][ T5899]  ffff88802cb11900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.131632][ T5899]  ffff88802cb11980: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.131653][ T5899] ==================================================================
[  497.131695][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (12) exceeds report_count (1)
[  497.131723][ T5899] ==================================================================
[  497.131739][ T5899] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xba/0xc0
[  497.131791][ T5899] Read of size 4 at addr ffff88802cb118f4 by task kworker/1:6/5899
[  497.131820][ T5899] 
[  497.131838][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:6 Tainted: G    B        L      syzkaller #0 PREEMPT(lazy) 
[  497.131891][ T5899] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  497.131907][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  497.131931][ T5899] Workqueue: events fb_deferred_io_work
[  497.131963][ T5899] Call Trace:
[  497.131974][ T5899]  <TASK>
[  497.131988][ T5899]  dump_stack_lvl+0x100/0x190
[  497.132025][ T5899]  print_report+0x13d/0x4b0
[  497.132077][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.132121][ T5899]  ? __virt_addr_valid+0x239/0x430
[  497.132168][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.132217][ T5899]  kasan_report+0xdf/0x1c0
[  497.132253][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.132309][ T5899]  hid_dump_input+0xba/0xc0
[  497.132358][ T5899]  hid_set_field+0xeb/0x2e0
[  497.132401][ T5899]  picolcd_fb_deferred_io+0x6f3/0x1310
[  497.132452][ T5899]  ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[  497.132504][ T5899]  fb_deferred_io_work+0x1bc/0x4a0
[  497.132545][ T5899]  process_one_work+0xa23/0x1940
[  497.132614][ T5899]  ? __pfx_process_one_work+0x10/0x10
[  497.132673][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.132725][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.132772][ T5899]  worker_thread+0x5ef/0xe50
[  497.132812][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.132846][ T5899]  ? kthread+0x13a/0x450
[  497.132897][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.132930][ T5899]  kthread+0x370/0x450
[  497.132982][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.133038][ T5899]  ret_from_fork+0x72b/0xd50
[  497.133084][ T5899]  ? __pfx_ret_from_fork+0x10/0x10
[  497.133130][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.133174][ T5899]  ? __switch_to+0x800/0x10f0
[  497.133228][ T5899]  ? __switch_to_asm+0x39/0x70
[  497.133275][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.133331][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.133398][ T5899]  </TASK>
[  497.133410][ T5899] 
[  497.133419][ T5899] Allocated by task 1:
[  497.133435][ T5899]  kasan_save_stack+0x30/0x50
[  497.133487][ T5899]  kasan_save_track+0x14/0x30
[  497.133540][ T5899]  __kasan_kmalloc+0xaa/0xb0
[  497.133591][ T5899]  __kmalloc_noprof+0x322/0x820
[  497.133642][ T5899]  usb_alloc_urb+0x66/0xa0
[  497.133691][ T5899]  hub_probe.cold+0x25fb/0x2eda
[  497.133728][ T5899]  usb_probe_interface+0x303/0x8f0
[  497.133774][ T5899]  really_probe+0x241/0xa60
[  497.133812][ T5899]  __driver_probe_device+0x20e/0x450
[  497.133852][ T5899]  driver_probe_device+0x4a/0x140
[  497.133892][ T5899]  __device_attach_driver+0x1df/0x320
[  497.133933][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.133988][ T5899]  __device_attach+0x1e4/0x4d0
[  497.134027][ T5899]  device_initial_probe+0xaf/0xd0
[  497.134068][ T5899]  bus_probe_device+0x64/0x160
[  497.134100][ T5899]  device_add+0x121d/0x1970
[  497.134145][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.134185][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.134241][ T5899]  usb_probe_device+0xef/0x400
[  497.134282][ T5899]  really_probe+0x241/0xa60
[  497.134318][ T5899]  __driver_probe_device+0x20e/0x450
[  497.134358][ T5899]  driver_probe_device+0x4a/0x140
[  497.134406][ T5899]  __device_attach_driver+0x1df/0x320
[  497.134446][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.134500][ T5899]  __device_attach+0x1e4/0x4d0
[  497.134539][ T5899]  device_initial_probe+0xaf/0xd0
[  497.134580][ T5899]  bus_probe_device+0x64/0x160
[  497.134613][ T5899]  device_add+0x121d/0x1970
[  497.134658][ T5899]  usb_new_device.cold+0x685/0x115c
[  497.134696][ T5899]  register_root_hub+0x4e6/0x639
[  497.134736][ T5899]  usb_add_hcd.cold+0xccd/0x1158
[  497.134775][ T5899]  vhci_hcd_probe+0x14b/0x4e0
[  497.134808][ T5899]  platform_probe+0x106/0x1d0
[  497.134862][ T5899]  really_probe+0x241/0xa60
[  497.134899][ T5899]  __driver_probe_device+0x20e/0x450
[  497.134939][ T5899]  driver_probe_device+0x4a/0x140
[  497.134979][ T5899]  __device_attach_driver+0x1df/0x320
[  497.135020][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.135074][ T5899]  __device_attach+0x1e4/0x4d0
[  497.135113][ T5899]  device_initial_probe+0xaf/0xd0
[  497.135154][ T5899]  bus_probe_device+0x64/0x160
[  497.135186][ T5899]  device_add+0x121d/0x1970
[  497.135231][ T5899]  platform_device_add+0x35a/0x800
[  497.135285][ T5899]  platform_device_register_full+0x5cf/0x830
[  497.135325][ T5899]  vhci_hcd_init+0x1a1/0x2f0
[  497.135376][ T5899]  do_one_initcall+0x11d/0x700
[  497.135420][ T5899]  kernel_init_freeable+0x6ea/0x7b0
[  497.135454][ T5899]  kernel_init+0x1f/0x1e0
[  497.135500][ T5899]  ret_from_fork+0x72b/0xd50
[  497.135542][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.135587][ T5899] 
[  497.135596][ T5899] The buggy address belongs to the object at ffff88802cb11800
[  497.135596][ T5899]  which belongs to the cache kmalloc-192 of size 192
[  497.135624][ T5899] The buggy address is located 52 bytes to the right of
[  497.135624][ T5899]  allocated 192-byte region [ffff88802cb11800, ffff88802cb118c0)
[  497.135661][ T5899] 
[  497.135670][ T5899] The buggy address belongs to the physical page:
[  497.135684][ T5899] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cb11
[  497.135714][ T5899] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  497.135740][ T5899] page_type: f5(slab)
[  497.135769][ T5899] raw: 00fff00000000000 ffff88813fe1f3c0 dead000000000100 dead000000000122
[  497.135802][ T5899] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  497.135824][ T5899] page dumped because: kasan: bad access detected
[  497.135840][ T5899] page_owner tracks the page as allocated
[  497.135852][ T5899] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14033025985, free_ts 0
[  497.135910][ T5899]  post_alloc_hook+0xfd/0x120
[  497.135951][ T5899]  get_page_from_freelist+0xf48/0x3530
[  497.135999][ T5899]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  497.136048][ T5899]  new_slab+0xa2/0x640
[  497.136090][ T5899]  refill_objects+0xe3/0x410
[  497.136134][ T5899]  __pcs_replace_empty_main+0x376/0x680
[  497.136179][ T5899]  __kmalloc_cache_noprof+0x479/0x6c0
[  497.136222][ T5899]  call_usermodehelper_setup+0xaf/0x360
[  497.136257][ T5899]  kobject_uevent_env+0x17c1/0x18b0
[  497.136315][ T5899]  device_add+0x1173/0x1970
[  497.136360][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.136404][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.136461][ T5899]  usb_probe_device+0xef/0x400
[  497.136502][ T5899]  really_probe+0x241/0xa60
[  497.136539][ T5899]  __driver_probe_device+0x20e/0x450
[  497.136578][ T5899]  driver_probe_device+0x4a/0x140
[  497.136618][ T5899] page_owner free stack trace missing
[  497.136630][ T5899] 
[  497.136639][ T5899] Memory state around the buggy address:
[  497.136657][ T5899]  ffff88802cb11780: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.136683][ T5899]  ffff88802cb11800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.136709][ T5899] >ffff88802cb11880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  497.136730][ T5899]                                                              ^
[  497.136752][ T5899]  ffff88802cb11900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.136778][ T5899]  ffff88802cb11980: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.136799][ T5899] ==================================================================
[  497.136840][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (13) exceeds report_count (1)
[  497.137104][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (14) exceeds report_count (1)
[  497.137161][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (15) exceeds report_count (1)
[  497.137212][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (16) exceeds report_count (1)
[  497.137294][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (17) exceeds report_count (1)
[  497.137345][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (18) exceeds report_count (1)
[  497.137402][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (19) exceeds report_count (1)
[  497.137430][ T5899] ==================================================================
[  497.137445][ T5899] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xba/0xc0
[  497.137497][ T5899] Read of size 4 at addr ffff88802cb119b8 by task kworker/1:6/5899
[  497.137526][ T5899] 
[  497.137544][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:6 Tainted: G    B        L      syzkaller #0 PREEMPT(lazy) 
[  497.137596][ T5899] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  497.137629][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  497.137653][ T5899] Workqueue: events fb_deferred_io_work
[  497.137685][ T5899] Call Trace:
[  497.137696][ T5899]  <TASK>
[  497.137709][ T5899]  dump_stack_lvl+0x100/0x190
[  497.137745][ T5899]  print_report+0x13d/0x4b0
[  497.137797][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.137841][ T5899]  ? __virt_addr_valid+0x239/0x430
[  497.137883][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.137931][ T5899]  kasan_report+0xdf/0x1c0
[  497.137967][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.138023][ T5899]  hid_dump_input+0xba/0xc0
[  497.138073][ T5899]  hid_set_field+0xeb/0x2e0
[  497.138110][ T5899]  picolcd_fb_deferred_io+0x6f3/0x1310
[  497.138161][ T5899]  ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[  497.138214][ T5899]  fb_deferred_io_work+0x1bc/0x4a0
[  497.138254][ T5899]  process_one_work+0xa23/0x1940
[  497.138323][ T5899]  ? __pfx_process_one_work+0x10/0x10
[  497.138384][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.138436][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.138484][ T5899]  worker_thread+0x5ef/0xe50
[  497.138523][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.138557][ T5899]  ? kthread+0x13a/0x450
[  497.138608][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.138640][ T5899]  kthread+0x370/0x450
[  497.138693][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.138769][ T5899]  ret_from_fork+0x72b/0xd50
[  497.138815][ T5899]  ? __pfx_ret_from_fork+0x10/0x10
[  497.138862][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.138906][ T5899]  ? __switch_to+0x800/0x10f0
[  497.138960][ T5899]  ? __switch_to_asm+0x39/0x70
[  497.139007][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.139063][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.139124][ T5899]  </TASK>
[  497.139136][ T5899] 
[  497.139145][ T5899] Allocated by task 11569:
[  497.139162][ T5899]  kasan_save_stack+0x30/0x50
[  497.139214][ T5899]  kasan_save_track+0x14/0x30
[  497.139267][ T5899]  __kasan_kmalloc+0xaa/0xb0
[  497.139319][ T5899]  __kvmalloc_node_noprof+0x34f/0x970
[  497.139376][ T5899]  hid_add_field+0x50c/0x1400
[  497.139413][ T5899]  hid_parser_main+0x159/0xc30
[  497.139450][ T5899]  hid_open_report+0x49b/0x810
[  497.139485][ T5899]  picolcd_probe+0x17b/0x1440
[  497.139515][ T5899]  hid_device_probe+0x50e/0x800
[  497.139551][ T5899]  really_probe+0x241/0xa60
[  497.139587][ T5899]  __driver_probe_device+0x20e/0x450
[  497.139627][ T5899]  driver_probe_device+0x4a/0x140
[  497.139667][ T5899]  __device_attach_driver+0x1df/0x320
[  497.139708][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.139762][ T5899]  __device_attach+0x1e4/0x4d0
[  497.139802][ T5899]  device_initial_probe+0xaf/0xd0
[  497.139843][ T5899]  bus_probe_device+0x64/0x160
[  497.139875][ T5899]  device_add+0x121d/0x1970
[  497.139921][ T5899]  hid_add_device+0x2bf/0x440
[  497.139952][ T5899]  usbhid_probe+0xa64/0x10b0
[  497.140004][ T5899]  usb_probe_interface+0x303/0x8f0
[  497.140049][ T5899]  really_probe+0x241/0xa60
[  497.140086][ T5899]  __driver_probe_device+0x20e/0x450
[  497.140126][ T5899]  driver_probe_device+0x4a/0x140
[  497.140166][ T5899]  __device_attach_driver+0x1df/0x320
[  497.140206][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.140261][ T5899]  __device_attach+0x1e4/0x4d0
[  497.140300][ T5899]  device_initial_probe+0xaf/0xd0
[  497.140342][ T5899]  bus_probe_device+0x64/0x160
[  497.140380][ T5899]  device_add+0x121d/0x1970
[  497.140425][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.140464][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.140521][ T5899]  usb_probe_device+0xef/0x400
[  497.140561][ T5899]  really_probe+0x241/0xa60
[  497.140604][ T5899]  __driver_probe_device+0x20e/0x450
[  497.140644][ T5899]  driver_probe_device+0x4a/0x140
[  497.140684][ T5899]  __device_attach_driver+0x1df/0x320
[  497.140725][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.140779][ T5899]  __device_attach+0x1e4/0x4d0
[  497.140820][ T5899]  device_initial_probe+0xaf/0xd0
[  497.140861][ T5899]  bus_probe_device+0x64/0x160
[  497.140894][ T5899]  device_add+0x121d/0x1970
[  497.140939][ T5899]  usb_new_device.cold+0x685/0x115c
[  497.140978][ T5899]  hub_event+0x30a3/0x4a60
[  497.141016][ T5899]  process_one_work+0xa23/0x1940
[  497.141072][ T5899]  worker_thread+0x5ef/0xe50
[  497.141101][ T5899]  kthread+0x370/0x450
[  497.141152][ T5899]  ret_from_fork+0x72b/0xd50
[  497.141193][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.141239][ T5899] 
[  497.141248][ T5899] The buggy address belongs to the object at ffff88802cb11900
[  497.141248][ T5899]  which belongs to the cache kmalloc-192 of size 192
[  497.141276][ T5899] The buggy address is located 8 bytes to the right of
[  497.141276][ T5899]  allocated 176-byte region [ffff88802cb11900, ffff88802cb119b0)
[  497.141313][ T5899] 
[  497.141322][ T5899] The buggy address belongs to the physical page:
[  497.141336][ T5899] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cb11
[  497.141366][ T5899] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  497.141398][ T5899] page_type: f5(slab)
[  497.141427][ T5899] raw: 00fff00000000000 ffff88813fe1f3c0 dead000000000100 dead000000000122
[  497.141460][ T5899] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  497.141482][ T5899] page dumped because: kasan: bad access detected
[  497.141498][ T5899] page_owner tracks the page as allocated
[  497.141511][ T5899] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14033025985, free_ts 0
[  497.141568][ T5899]  post_alloc_hook+0xfd/0x120
[  497.141609][ T5899]  get_page_from_freelist+0xf48/0x3530
[  497.141657][ T5899]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  497.141706][ T5899]  new_slab+0xa2/0x640
[  497.141747][ T5899]  refill_objects+0xe3/0x410
[  497.141792][ T5899]  __pcs_replace_empty_main+0x376/0x680
[  497.141835][ T5899]  __kmalloc_cache_noprof+0x479/0x6c0
[  497.141879][ T5899]  call_usermodehelper_setup+0xaf/0x360
[  497.141915][ T5899]  kobject_uevent_env+0x17c1/0x18b0
[  497.141970][ T5899]  device_add+0x1173/0x1970
[  497.142015][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.142054][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.142111][ T5899]  usb_probe_device+0xef/0x400
[  497.142151][ T5899]  really_probe+0x241/0xa60
[  497.142188][ T5899]  __driver_probe_device+0x20e/0x450
[  497.142228][ T5899]  driver_probe_device+0x4a/0x140
[  497.142268][ T5899] page_owner free stack trace missing
[  497.142280][ T5899] 
[  497.142289][ T5899] Memory state around the buggy address:
[  497.142306][ T5899]  ffff88802cb11880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  497.142332][ T5899]  ffff88802cb11900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.142358][ T5899] >ffff88802cb11980: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.142384][ T5899]                                         ^
[  497.142404][ T5899]  ffff88802cb11a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.142430][ T5899]  ffff88802cb11a80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  497.142451][ T5899] ==================================================================
[  497.142491][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (20) exceeds report_count (1)
[  497.142520][ T5899] ==================================================================
[  497.142535][ T5899] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xba/0xc0
[  497.142587][ T5899] Read of size 4 at addr ffff88802cb119d4 by task kworker/1:6/5899
[  497.142615][ T5899] 
[  497.142633][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:6 Tainted: G    B        L      syzkaller #0 PREEMPT(lazy) 
[  497.142686][ T5899] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  497.142700][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  497.142725][ T5899] Workqueue: events fb_deferred_io_work
[  497.142757][ T5899] Call Trace:
[  497.142768][ T5899]  <TASK>
[  497.142781][ T5899]  dump_stack_lvl+0x100/0x190
[  497.142818][ T5899]  print_report+0x13d/0x4b0
[  497.142871][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.142915][ T5899]  ? __virt_addr_valid+0x239/0x430
[  497.142957][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.143005][ T5899]  kasan_report+0xdf/0x1c0
[  497.143041][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.143097][ T5899]  hid_dump_input+0xba/0xc0
[  497.143147][ T5899]  hid_set_field+0xeb/0x2e0
[  497.143184][ T5899]  picolcd_fb_deferred_io+0x6f3/0x1310
[  497.143235][ T5899]  ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[  497.143287][ T5899]  fb_deferred_io_work+0x1bc/0x4a0
[  497.143328][ T5899]  process_one_work+0xa23/0x1940
[  497.143401][ T5899]  ? __pfx_process_one_work+0x10/0x10
[  497.143459][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.143511][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.143559][ T5899]  worker_thread+0x5ef/0xe50
[  497.143598][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.143632][ T5899]  ? kthread+0x13a/0x450
[  497.143684][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.143716][ T5899]  kthread+0x370/0x450
[  497.143768][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.143824][ T5899]  ret_from_fork+0x72b/0xd50
[  497.143870][ T5899]  ? __pfx_ret_from_fork+0x10/0x10
[  497.143917][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.143960][ T5899]  ? __switch_to+0x800/0x10f0
[  497.144015][ T5899]  ? __switch_to_asm+0x39/0x70
[  497.144063][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.144118][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.144179][ T5899]  </TASK>
[  497.144191][ T5899] 
[  497.144200][ T5899] Allocated by task 11569:
[  497.144217][ T5899]  kasan_save_stack+0x30/0x50
[  497.144270][ T5899]  kasan_save_track+0x14/0x30
[  497.144323][ T5899]  __kasan_kmalloc+0xaa/0xb0
[  497.144378][ T5899]  __kvmalloc_node_noprof+0x34f/0x970
[  497.144431][ T5899]  hid_add_field+0x50c/0x1400
[  497.144469][ T5899]  hid_parser_main+0x159/0xc30
[  497.144506][ T5899]  hid_open_report+0x49b/0x810
[  497.144541][ T5899]  picolcd_probe+0x17b/0x1440
[  497.144571][ T5899]  hid_device_probe+0x50e/0x800
[  497.144606][ T5899]  really_probe+0x241/0xa60
[  497.144644][ T5899]  __driver_probe_device+0x20e/0x450
[  497.144684][ T5899]  driver_probe_device+0x4a/0x140
[  497.144723][ T5899]  __device_attach_driver+0x1df/0x320
[  497.144764][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.144818][ T5899]  __device_attach+0x1e4/0x4d0
[  497.144857][ T5899]  device_initial_probe+0xaf/0xd0
[  497.144899][ T5899]  bus_probe_device+0x64/0x160
[  497.144932][ T5899]  device_add+0x121d/0x1970
[  497.144977][ T5899]  hid_add_device+0x2bf/0x440
[  497.145007][ T5899]  usbhid_probe+0xa64/0x10b0
[  497.145058][ T5899]  usb_probe_interface+0x303/0x8f0
[  497.145104][ T5899]  really_probe+0x241/0xa60
[  497.145141][ T5899]  __driver_probe_device+0x20e/0x450
[  497.145181][ T5899]  driver_probe_device+0x4a/0x140
[  497.145221][ T5899]  __device_attach_driver+0x1df/0x320
[  497.145261][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.145315][ T5899]  __device_attach+0x1e4/0x4d0
[  497.145354][ T5899]  device_initial_probe+0xaf/0xd0
[  497.145400][ T5899]  bus_probe_device+0x64/0x160
[  497.145432][ T5899]  device_add+0x121d/0x1970
[  497.145477][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.145516][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.145572][ T5899]  usb_probe_device+0xef/0x400
[  497.145613][ T5899]  really_probe+0x241/0xa60
[  497.145650][ T5899]  __driver_probe_device+0x20e/0x450
[  497.145691][ T5899]  driver_probe_device+0x4a/0x140
[  497.145730][ T5899]  __device_attach_driver+0x1df/0x320
[  497.145771][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.145826][ T5899]  __device_attach+0x1e4/0x4d0
[  497.145865][ T5899]  device_initial_probe+0xaf/0xd0
[  497.145907][ T5899]  bus_probe_device+0x64/0x160
[  497.145939][ T5899]  device_add+0x121d/0x1970
[  497.145984][ T5899]  usb_new_device.cold+0x685/0x115c
[  497.146022][ T5899]  hub_event+0x30a3/0x4a60
[  497.146060][ T5899]  process_one_work+0xa23/0x1940
[  497.146116][ T5899]  worker_thread+0x5ef/0xe50
[  497.146144][ T5899]  kthread+0x370/0x450
[  497.146194][ T5899]  ret_from_fork+0x72b/0xd50
[  497.146236][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.146281][ T5899] 
[  497.146290][ T5899] The buggy address belongs to the object at ffff88802cb11900
[  497.146290][ T5899]  which belongs to the cache kmalloc-192 of size 192
[  497.146320][ T5899] The buggy address is located 36 bytes to the right of
[  497.146320][ T5899]  allocated 176-byte region [ffff88802cb11900, ffff88802cb119b0)
[  497.146357][ T5899] 
[  497.146366][ T5899] The buggy address belongs to the physical page:
[  497.146384][ T5899] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cb11
[  497.146414][ T5899] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  497.146441][ T5899] page_type: f5(slab)
[  497.146469][ T5899] raw: 00fff00000000000 ffff88813fe1f3c0 dead000000000100 dead000000000122
[  497.146503][ T5899] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  497.146525][ T5899] page dumped because: kasan: bad access detected
[  497.146542][ T5899] page_owner tracks the page as allocated
[  497.146555][ T5899] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14033025985, free_ts 0
[  497.146613][ T5899]  post_alloc_hook+0xfd/0x120
[  497.146655][ T5899]  get_page_from_freelist+0xf48/0x3530
[  497.146702][ T5899]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  497.146751][ T5899]  new_slab+0xa2/0x640
[  497.146793][ T5899]  refill_objects+0xe3/0x410
[  497.146837][ T5899]  __pcs_replace_empty_main+0x376/0x680
[  497.146881][ T5899]  __kmalloc_cache_noprof+0x479/0x6c0
[  497.146926][ T5899]  call_usermodehelper_setup+0xaf/0x360
[  497.146961][ T5899]  kobject_uevent_env+0x17c1/0x18b0
[  497.147016][ T5899]  device_add+0x1173/0x1970
[  497.147061][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.147099][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.147156][ T5899]  usb_probe_device+0xef/0x400
[  497.147196][ T5899]  really_probe+0x241/0xa60
[  497.147233][ T5899]  __driver_probe_device+0x20e/0x450
[  497.147273][ T5899]  driver_probe_device+0x4a/0x140
[  497.147313][ T5899] page_owner free stack trace missing
[  497.147325][ T5899] 
[  497.147334][ T5899] Memory state around the buggy address:
[  497.147351][ T5899]  ffff88802cb11880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  497.147381][ T5899]  ffff88802cb11900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.147408][ T5899] >ffff88802cb11980: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.147429][ T5899]                                                  ^
[  497.147450][ T5899]  ffff88802cb11a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.147476][ T5899]  ffff88802cb11a80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  497.147497][ T5899] ==================================================================
[  497.147539][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (21) exceeds report_count (1)
[  497.147567][ T5899] ==================================================================
[  497.147582][ T5899] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xba/0xc0
[  497.147634][ T5899] Read of size 4 at addr ffff88802cb119f0 by task kworker/1:6/5899
[  497.147663][ T5899] 
[  497.147681][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:6 Tainted: G    B        L      syzkaller #0 PREEMPT(lazy) 
[  497.147733][ T5899] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  497.147749][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  497.147773][ T5899] Workqueue: events fb_deferred_io_work
[  497.147805][ T5899] Call Trace:
[  497.147816][ T5899]  <TASK>
[  497.147829][ T5899]  dump_stack_lvl+0x100/0x190
[  497.147865][ T5899]  print_report+0x13d/0x4b0
[  497.147918][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.147962][ T5899]  ? __virt_addr_valid+0x239/0x430
[  497.148004][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.148052][ T5899]  kasan_report+0xdf/0x1c0
[  497.148088][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.148143][ T5899]  hid_dump_input+0xba/0xc0
[  497.148194][ T5899]  hid_set_field+0xeb/0x2e0
[  497.148231][ T5899]  picolcd_fb_deferred_io+0x6f3/0x1310
[  497.148282][ T5899]  ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[  497.148334][ T5899]  fb_deferred_io_work+0x1bc/0x4a0
[  497.148377][ T5899]  process_one_work+0xa23/0x1940
[  497.148446][ T5899]  ? __pfx_process_one_work+0x10/0x10
[  497.148505][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.148556][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.148603][ T5899]  worker_thread+0x5ef/0xe50
[  497.148642][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.148677][ T5899]  ? kthread+0x13a/0x450
[  497.148729][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.148761][ T5899]  kthread+0x370/0x450
[  497.148815][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.148871][ T5899]  ret_from_fork+0x72b/0xd50
[  497.148917][ T5899]  ? __pfx_ret_from_fork+0x10/0x10
[  497.148963][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.149006][ T5899]  ? __switch_to+0x800/0x10f0
[  497.149062][ T5899]  ? __switch_to_asm+0x39/0x70
[  497.149109][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.149165][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.149226][ T5899]  </TASK>
[  497.149238][ T5899] 
[  497.149246][ T5899] Allocated by task 11569:
[  497.149263][ T5899]  kasan_save_stack+0x30/0x50
[  497.149316][ T5899]  kasan_save_track+0x14/0x30
[  497.149374][ T5899]  __kasan_kmalloc+0xaa/0xb0
[  497.149426][ T5899]  __kvmalloc_node_noprof+0x34f/0x970
[  497.149478][ T5899]  hid_add_field+0x50c/0x1400
[  497.149516][ T5899]  hid_parser_main+0x159/0xc30
[  497.149553][ T5899]  hid_open_report+0x49b/0x810
[  497.149588][ T5899]  picolcd_probe+0x17b/0x1440
[  497.149617][ T5899]  hid_device_probe+0x50e/0x800
[  497.149653][ T5899]  really_probe+0x241/0xa60
[  497.149690][ T5899]  __driver_probe_device+0x20e/0x450
[  497.149730][ T5899]  driver_probe_device+0x4a/0x140
[  497.149769][ T5899]  __device_attach_driver+0x1df/0x320
[  497.149810][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.149865][ T5899]  __device_attach+0x1e4/0x4d0
[  497.149905][ T5899]  device_initial_probe+0xaf/0xd0
[  497.149947][ T5899]  bus_probe_device+0x64/0x160
[  497.149979][ T5899]  device_add+0x121d/0x1970
[  497.150024][ T5899]  hid_add_device+0x2bf/0x440
[  497.150054][ T5899]  usbhid_probe+0xa64/0x10b0
[  497.150106][ T5899]  usb_probe_interface+0x303/0x8f0
[  497.150152][ T5899]  really_probe+0x241/0xa60
[  497.150189][ T5899]  __driver_probe_device+0x20e/0x450
[  497.150229][ T5899]  driver_probe_device+0x4a/0x140
[  497.150268][ T5899]  __device_attach_driver+0x1df/0x320
[  497.150309][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.150364][ T5899]  __device_attach+0x1e4/0x4d0
[  497.150408][ T5899]  device_initial_probe+0xaf/0xd0
[  497.150450][ T5899]  bus_probe_device+0x64/0x160
[  497.150482][ T5899]  device_add+0x121d/0x1970
[  497.150527][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.150567][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.150624][ T5899]  usb_probe_device+0xef/0x400
[  497.150664][ T5899]  really_probe+0x241/0xa60
[  497.150701][ T5899]  __driver_probe_device+0x20e/0x450
[  497.150741][ T5899]  driver_probe_device+0x4a/0x140
[  497.150781][ T5899]  __device_attach_driver+0x1df/0x320
[  497.150822][ T5899]  bus_for_each_drv+0x159/0x1e0
[  497.150877][ T5899]  __device_attach+0x1e4/0x4d0
[  497.150916][ T5899]  device_initial_probe+0xaf/0xd0
[  497.150958][ T5899]  bus_probe_device+0x64/0x160
[  497.150991][ T5899]  device_add+0x121d/0x1970
[  497.151036][ T5899]  usb_new_device.cold+0x685/0x115c
[  497.151075][ T5899]  hub_event+0x30a3/0x4a60
[  497.151113][ T5899]  process_one_work+0xa23/0x1940
[  497.151169][ T5899]  worker_thread+0x5ef/0xe50
[  497.151198][ T5899]  kthread+0x370/0x450
[  497.151248][ T5899]  ret_from_fork+0x72b/0xd50
[  497.151290][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.151336][ T5899] 
[  497.151345][ T5899] The buggy address belongs to the object at ffff88802cb11900
[  497.151345][ T5899]  which belongs to the cache kmalloc-192 of size 192
[  497.151378][ T5899] The buggy address is located 64 bytes to the right of
[  497.151378][ T5899]  allocated 176-byte region [ffff88802cb11900, ffff88802cb119b0)
[  497.151415][ T5899] 
[  497.151424][ T5899] The buggy address belongs to the physical page:
[  497.151438][ T5899] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cb11
[  497.151469][ T5899] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  497.151495][ T5899] page_type: f5(slab)
[  497.151523][ T5899] raw: 00fff00000000000 ffff88813fe1f3c0 dead000000000100 dead000000000122
[  497.151557][ T5899] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  497.151578][ T5899] page dumped because: kasan: bad access detected
[  497.151594][ T5899] page_owner tracks the page as allocated
[  497.151607][ T5899] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14033025985, free_ts 0
[  497.151663][ T5899]  post_alloc_hook+0xfd/0x120
[  497.151706][ T5899]  get_page_from_freelist+0xf48/0x3530
[  497.151753][ T5899]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  497.151802][ T5899]  new_slab+0xa2/0x640
[  497.151844][ T5899]  refill_objects+0xe3/0x410
[  497.151888][ T5899]  __pcs_replace_empty_main+0x376/0x680
[  497.151933][ T5899]  __kmalloc_cache_noprof+0x479/0x6c0
[  497.151976][ T5899]  call_usermodehelper_setup+0xaf/0x360
[  497.152012][ T5899]  kobject_uevent_env+0x17c1/0x18b0
[  497.152067][ T5899]  device_add+0x1173/0x1970
[  497.152112][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.152151][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.152208][ T5899]  usb_probe_device+0xef/0x400
[  497.152248][ T5899]  really_probe+0x241/0xa60
[  497.152285][ T5899]  __driver_probe_device+0x20e/0x450
[  497.152325][ T5899]  driver_probe_device+0x4a/0x140
[  497.152364][ T5899] page_owner free stack trace missing
[  497.152380][ T5899] 
[  497.152388][ T5899] Memory state around the buggy address:
[  497.152405][ T5899]  ffff88802cb11880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  497.152432][ T5899]  ffff88802cb11900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.152458][ T5899] >ffff88802cb11980: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.152479][ T5899]                                                              ^
[  497.152499][ T5899]  ffff88802cb11a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.152526][ T5899]  ffff88802cb11a80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  497.152547][ T5899] ==================================================================
[  497.152588][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (22) exceeds report_count (1)
[  497.152848][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (23) exceeds report_count (1)
[  497.152900][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (24) exceeds report_count (1)
[  497.152951][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (25) exceeds report_count (1)
[  497.153002][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (26) exceeds report_count (1)
[  497.153080][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (27) exceeds report_count (1)
[  497.153132][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (28) exceeds report_count (1)
[  497.153160][ T5899] ==================================================================
[  497.153176][ T5899] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xba/0xc0
[  497.153227][ T5899] Read of size 4 at addr ffff88802cb11ab4 by task kworker/1:6/5899
[  497.153256][ T5899] 
[  497.153274][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:6 Tainted: G    B        L      syzkaller #0 PREEMPT(lazy) 
[  497.153327][ T5899] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  497.153342][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  497.153366][ T5899] Workqueue: events fb_deferred_io_work
[  497.153402][ T5899] Call Trace:
[  497.153413][ T5899]  <TASK>
[  497.153426][ T5899]  dump_stack_lvl+0x100/0x190
[  497.153463][ T5899]  print_report+0x13d/0x4b0
[  497.153515][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.153559][ T5899]  ? __virt_addr_valid+0x239/0x430
[  497.153601][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.153649][ T5899]  kasan_report+0xdf/0x1c0
[  497.153686][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.153742][ T5899]  hid_dump_input+0xba/0xc0
[  497.153792][ T5899]  hid_set_field+0xeb/0x2e0
[  497.153830][ T5899]  picolcd_fb_deferred_io+0x6f3/0x1310
[  497.153881][ T5899]  ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[  497.153933][ T5899]  fb_deferred_io_work+0x1bc/0x4a0
[  497.153974][ T5899]  process_one_work+0xa23/0x1940
[  497.154043][ T5899]  ? __pfx_process_one_work+0x10/0x10
[  497.154101][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.154152][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.154200][ T5899]  worker_thread+0x5ef/0xe50
[  497.154239][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.154273][ T5899]  ? kthread+0x13a/0x450
[  497.154326][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.154358][ T5899]  kthread+0x370/0x450
[  497.154416][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.154472][ T5899]  ret_from_fork+0x72b/0xd50
[  497.154517][ T5899]  ? __pfx_ret_from_fork+0x10/0x10
[  497.154564][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.154608][ T5899]  ? __switch_to+0x800/0x10f0
[  497.154698][ T5899]  ? __switch_to_asm+0x39/0x70
[  497.154745][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.154801][ T5899]  ret_from_fork_asm+0x1a/0x30
[  497.154862][ T5899]  </TASK>
[  497.154874][ T5899] 
[  497.154883][ T5899] Allocated by task 5608:
[  497.154900][ T5899]  kasan_save_stack+0x30/0x50
[  497.154953][ T5899]  kasan_save_track+0x14/0x30
[  497.155006][ T5899]  __kasan_kmalloc+0xaa/0xb0
[  497.155057][ T5899]  __kmalloc_node_track_caller_noprof+0x331/0x830
[  497.155114][ T5899]  kmemdup_noprof+0x29/0x60
[  497.155162][ T5899]  neigh_parms_alloc+0x85/0x5e0
[  497.155206][ T5899]  ipv6_add_dev+0x3f7/0x1520
[  497.155263][ T5899]  addrconf_notify+0x5db/0x1ba0
[  497.155304][ T5899]  notifier_call_chain+0x99/0x3f0
[  497.155356][ T5899]  call_netdevice_notifiers_info+0xbe/0x110
[  497.155415][ T5899]  register_netdevice+0x1998/0x25a0
[  497.155459][ T5899]  veth_newlink+0x44a/0xa00
[  497.155499][ T5899]  rtnl_newlink+0x1499/0x2380
[  497.155542][ T5899]  rtnetlink_rcv_msg+0x95e/0xe90
[  497.155585][ T5899]  netlink_rcv_skb+0x159/0x420
[  497.155618][ T5899]  netlink_unicast+0x585/0x850
[  497.155647][ T5899]  netlink_sendmsg+0x8b0/0xda0
[  497.155677][ T5899]  __sys_sendto+0x48b/0x4e0
[  497.155728][ T5899]  __x64_sys_sendto+0xe0/0x1c0
[  497.155763][ T5899]  do_syscall_64+0x115/0x870
[  497.155801][ T5899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.155837][ T5899] 
[  497.155846][ T5899] The buggy address belongs to the object at ffff88802cb11a00
[  497.155846][ T5899]  which belongs to the cache kmalloc-192 of size 192
[  497.155874][ T5899] The buggy address is located 20 bytes to the right of
[  497.155874][ T5899]  allocated 160-byte region [ffff88802cb11a00, ffff88802cb11aa0)
[  497.155911][ T5899] 
[  497.155920][ T5899] The buggy address belongs to the physical page:
[  497.155934][ T5899] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cb11
[  497.155964][ T5899] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  497.155991][ T5899] page_type: f5(slab)
[  497.156019][ T5899] raw: 00fff00000000000 ffff88813fe1f3c0 dead000000000100 dead000000000122
[  497.156052][ T5899] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  497.156074][ T5899] page dumped because: kasan: bad access detected
[  497.156091][ T5899] page_owner tracks the page as allocated
[  497.156105][ T5899] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14033025985, free_ts 0
[  497.156162][ T5899]  post_alloc_hook+0xfd/0x120
[  497.156204][ T5899]  get_page_from_freelist+0xf48/0x3530
[  497.156251][ T5899]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  497.156299][ T5899]  new_slab+0xa2/0x640
[  497.156342][ T5899]  refill_objects+0xe3/0x410
[  497.156403][ T5899]  __pcs_replace_empty_main+0x376/0x680
[  497.156460][ T5899]  __kmalloc_cache_noprof+0x479/0x6c0
[  497.156507][ T5899]  call_usermodehelper_setup+0xaf/0x360
[  497.156542][ T5899]  kobject_uevent_env+0x17c1/0x18b0
[  497.156597][ T5899]  device_add+0x1173/0x1970
[  497.156642][ T5899]  usb_set_configuration+0xd97/0x1c60
[  497.156681][ T5899]  usb_generic_driver_probe+0xa1/0xe0
[  497.156738][ T5899]  usb_probe_device+0xef/0x400
[  497.156779][ T5899]  really_probe+0x241/0xa60
[  497.156816][ T5899]  __driver_probe_device+0x20e/0x450
[  497.156857][ T5899]  driver_probe_device+0x4a/0x140
[  497.156900][ T5899] page_owner free stack trace missing
[  497.156913][ T5899] 
[  497.156921][ T5899] Memory state around the buggy address:
[  497.156939][ T5899]  ffff88802cb11980: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  497.156965][ T5899]  ffff88802cb11a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.156991][ T5899] >ffff88802cb11a80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  497.157011][ T5899]                                      ^
[  497.157031][ T5899]  ffff88802cb11b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.157057][ T5899]  ffff88802cb11b80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  497.157077][ T5899] ==================================================================
[  497.157120][ T5899] hid-picolcd 0003:04D8:C002.000F: offset (29) exceeds report_count (1)
[  497.157147][ T5899] ==================================================================
[  497.157163][ T5899] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xba/0xc0
[  497.157215][ T5899] Read of size 4 at addr ffff88802cb11ad0 by task kworker/1:6/5899
[  497.157243][ T5899] 
[  497.157260][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:6 Tainted: G    B        L      syzkaller #0 PREEMPT(lazy) 
[  497.157313][ T5899] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  497.157329][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  497.157353][ T5899] Workqueue: events fb_deferred_io_work
[  497.157390][ T5899] Call Trace:
[  497.157402][ T5899]  <TASK>
[  497.157415][ T5899]  dump_stack_lvl+0x100/0x190
[  497.157451][ T5899]  print_report+0x13d/0x4b0
[  497.157503][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.157547][ T5899]  ? __virt_addr_valid+0x239/0x430
[  497.157589][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.157638][ T5899]  kasan_report+0xdf/0x1c0
[  497.157674][ T5899]  ? hid_dump_input+0xba/0xc0
[  497.157729][ T5899]  hid_dump_input+0xba/0xc0
[  497.157780][ T5899]  hid_set_field+0xeb/0x2e0
[  497.157816][ T5899]  picolcd_fb_deferred_io+0x6f3/0x1310
[  497.157868][ T5899]  ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[  497.157921][ T5899]  fb_deferred_io_work+0x1bc/0x4a0
[  497.157960][ T5899]  process_one_work+0xa23/0x1940
[  497.158030][ T5899]  ? __pfx_process_one_work+0x10/0x10
[  497.158088][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.158139][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.158187][ T5899]  worker_thread+0x5ef/0xe50
[  497.158226][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.158260][ T5899]  ? kthread+0x13a/0x450
[  497.158313][ T5899]  ? __pfx_worker_thread+0x10/0x10
[  497.158344][ T5899]  kthread+0x370/0x450
[  497.158401][ T5899]  ? __pfx_kthread+0x10/0x10
[  497.158457][ T5899]  ret_from_fork+0x72b/0xd50
[  497.158503][ T5899]  ? __pfx_ret_from_fork+0x10/0x10
[  497.158549][ T5899]  ? srso_alias_return_thunk+0x5/0xfbef5
[  497.158593][ T5899]  ? __switch_to+0x800/0x10f0