last executing test programs:

23.008029879s ago: executing program 2 (id=729):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'team_slave_0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0x8, 0x80000)
fanotify_mark(r7, 0x105, 0x4800003a, r6, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
read$FUSE(r7, 0x0, 0x6c)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0x1, 0x30bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r9 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)

22.167463001s ago: executing program 0 (id=732):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xfffffffffffffdcf}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x15}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000400), &(0x7f0000000000)=0x4)
ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x0, 0x1010, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})

17.982583877s ago: executing program 0 (id=735):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xfffff)

16.526690207s ago: executing program 0 (id=739):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="0018000000000000000c00000000020000000000000700"/38], 0x0, 0x26, 0x0, 0x1, 0x7fffffff, 0x0, @void, @value}, 0x28)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000003140), 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0)
userfaultfd(0x801)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc4})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
creat(&(0x7f0000000280)='./file0\x00', 0x17)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="02010002080000000000000000002000030004000000000002000000e0000000000002000000e000000100"/64], 0x40}}, 0x0)
statx(0xffffffffffffff9c, 0x0, 0x6000, 0x2f9, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x106f)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xa, &(0x7f0000000100)={0xef7, 0xe58}, &(0x7f00000002c0))
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYRES8=r2], 0x1c}], 0x1, 0x0, 0x0, 0x4}, 0x0)

16.070804483s ago: executing program 2 (id=740):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
mlock2(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0)
mlock2(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1, 0x603b, &(0x7f0000009140)="$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")
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x10000)

12.690227878s ago: executing program 0 (id=744):
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{}, {0x7f, 0xc9, 0xb6}}}}, 0xa)
pipe(0x0)
socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpgid(r0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67)
ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

9.359965103s ago: executing program 0 (id=746):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x108)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x4, @mcast2}, {0xa, 0x4e22, 0x3, @empty, 0x9}, 0x0, {[0x9, 0xfffffffc, 0x38000002, 0xb, 0x6, 0x10, 0x7, 0x7]}}, 0x5c)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0xc0844123, &(0x7f0000000080)=0x5)

9.125177827s ago: executing program 1 (id=747):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000080)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@ref_verify}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)=ANY=[])
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x38}}, 0x4000010)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1e, 0x1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000280)=0x14)
read(r4, &(0x7f00000019c0)=""/4097, 0x1001)

9.124764827s ago: executing program 4 (id=748):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

8.216587509s ago: executing program 2 (id=749):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xfffff)

8.216393389s ago: executing program 3 (id=750):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xb000001c})
epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0xa2c, 0x0, 0x0)

7.42881594s ago: executing program 3 (id=751):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r4)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x1ef, '\x00', 0x0, r2, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bind$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002c40)={0x8, {"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", 0xffffffc2}}, 0x1006)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000300)=r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

7.325086031s ago: executing program 1 (id=752):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_emit_ethernet(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000080)=0x3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

7.324723771s ago: executing program 4 (id=753):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
dup(r1)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r4, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan0\x00'})
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x40)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x518)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r9}, 0x10)
unshare(0x64000600)

5.672755073s ago: executing program 2 (id=754):
r0 = io_uring_setup(0x1581, &(0x7f0000000a40)={0x0, 0x2000000, 0x40, 0x0, 0x3bd})
r1 = getpid()
prlimit64(r1, 0x3, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x86b1b18158a7cb82)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x1d)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c3302)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518)
openat(0xffffffffffffff9c, &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x103041, 0x1ae)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe)
connect$bt_l2cap(r5, 0x0, 0x0)
setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
close_range(r0, r6, 0x0)

5.671916023s ago: executing program 3 (id=755):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x149a02, 0x0)
write$binfmt_script(r3, 0x0, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x948, 0x738, 0x738, 0xf0, 0x438, 0x738, 0x878, 0x878, 0x878, 0x878, 0x878, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9a8)

5.612901624s ago: executing program 1 (id=756):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'team_slave_0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0x8, 0x80000)
fanotify_mark(r7, 0x105, 0x4800003a, r6, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
read$FUSE(r7, 0x0, 0x6c)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0x1, 0x30bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03)

3.68662941s ago: executing program 3 (id=757):
r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000200)=0xf0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100))

3.287281595s ago: executing program 1 (id=758):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x800)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
socket$inet6(0xa, 0x805, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$bt_hci(r4, 0x84, 0x7b, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43)

3.286914355s ago: executing program 4 (id=759):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340))
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1})
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

3.216998956s ago: executing program 3 (id=760):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100002320c210240401c0e4490102030109021b00016b2500000904"], 0x0)
syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x41, &(0x7f0000000300)={[{@sysvgroups}, {@nodiscard}, {@debug}, {@data_writeback}, {@grpjquota}, {@noauto_da_alloc}, {@abort}, {@noload}, {}]}, 0x64, 0x52f, &(0x7f0000000d80)="$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")

3.009640409s ago: executing program 2 (id=761):
getgroups(0x2, &(0x7f0000000000)=[0x0, <r0=>0x0])
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,umask=00000000000000000007777,dmask=00000000000000000000152,iocharset=default,gid=', @ANYRESHEX=r0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYRES8=r0], 0x81, 0x14f5, &(0x7f0000001580)="$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")
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0)

2.475648526s ago: executing program 1 (id=762):
syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x212, &(0x7f0000000440)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00')

2.443286147s ago: executing program 4 (id=763):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000080)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@ref_verify}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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")
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000340)=ANY=[])
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)=ANY=[])
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x38}}, 0x4000010)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1e, 0x1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000280)=0x14)
read(r4, &(0x7f00000019c0)=""/4097, 0x1001)

2.036856912s ago: executing program 1 (id=764):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xfffff)

1.48120098s ago: executing program 4 (id=765):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r4)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x1ef, '\x00', 0x0, r2, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bind$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002c40)={0x8, {"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", 0xffffffc2}}, 0x1006)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000300)=r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

607.115652ms ago: executing program 0 (id=766):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = epoll_create1(0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000001040))

484.851813ms ago: executing program 2 (id=767):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00003b2000/0x1000)=nil, 0x1000, 0x0, 0x800, 0x8000)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@data_err_abort}, {@noinit_itable}]}, 0xfe, 0x585, &(0x7f0000001500)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58)
shutdown(r0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020)
ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000000400)={0x25e, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})

270.858306ms ago: executing program 4 (id=768):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'team_slave_0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0x8, 0x80000)
fanotify_mark(r7, 0x105, 0x4800003a, r6, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
read$FUSE(r7, 0x0, 0x6c)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0x1, 0x30bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r9 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r9, r9, &(0x7f0000000080), 0x7f03)

0s ago: executing program 3 (id=769):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
fcntl$getownex(r3, 0x10, &(0x7f0000000280))
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
ioctl$IOCTL_VMCI_SET_NOTIFY(r4, 0x7cb, &(0x7f00000001c0)={0x800, 0x2d, 0xff})
ioctl$SNDCTL_DSP_GETIPTR(r4, 0x800c5011, 0x0)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
setrlimit(0x9, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

7.002858][ T4764] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  137.012945][ T4764] BTRFS info (device loop4): force zlib compression, level 3
[  137.020346][ T4764] BTRFS info (device loop4): force clearing of disk cache
[  137.027628][ T4764] BTRFS info (device loop4): setting nodatasum
[  137.033821][ T4764] BTRFS info (device loop4): doing ref verification
[  137.040413][ T4764] BTRFS info (device loop4): allowing degraded mounts
[  137.047212][ T4764] BTRFS info (device loop4): enabling disk space caching
[  137.054238][ T4764] BTRFS info (device loop4): disk space caching is enabled
[  137.061424][ T4764] BTRFS info (device loop4): has skinny extents
[  137.246920][ T4769] loop0: detected capacity change from 0 to 256
[  138.401557][ T4764] BTRFS info (device loop4): enabling ssd optimizations
[  138.421844][ T4764] BTRFS info (device loop4): clearing free space tree
[  138.429138][ T4764] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  138.439023][ T4764] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  138.989825][ T4805] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  140.197133][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'.
[  140.385411][ T4831] loop0: detected capacity change from 0 to 256
[  141.723966][ T4837] loop3: detected capacity change from 0 to 64
[  141.907748][ T4815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'.
[  141.941854][ T4831] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  142.813449][ T4842] CUSE: unknown device info "ÿ
"
[  142.818583][ T4842] CUSE: zero length info key specified
[  143.310447][ T4848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.152'.
[  143.360296][ T4848] netlink: 44 bytes leftover after parsing attributes in process `syz.4.152'.
[  143.378486][ T4848] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  143.407463][ T4848] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.416054][ T4848] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.457266][ T4854] netlink: 44 bytes leftover after parsing attributes in process `syz.4.152'.
[  143.480335][ T4848] device hsr0 entered promiscuous mode
[  143.496774][ T4848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.152'.
[  143.668402][ T4857] loop0: detected capacity change from 0 to 32768
[  144.486716][ T4857] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.153 (4857)
[  144.507564][ T4854] loop4: detected capacity change from 0 to 1024
[  144.724483][ T4848] device hsr_slave_0 left promiscuous mode
[  144.734159][ T4848] device hsr_slave_1 left promiscuous mode
[  144.757228][ T4857] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  144.766534][ T4857] BTRFS info (device loop0): force zlib compression, level 3
[  144.773943][ T4857] BTRFS info (device loop0): force clearing of disk cache
[  144.781042][ T4857] BTRFS info (device loop0): setting nodatasum
[  144.787206][ T4857] BTRFS info (device loop0): doing ref verification
[  144.794400][ T4857] BTRFS info (device loop0): allowing degraded mounts
[  144.801162][ T4857] BTRFS info (device loop0): enabling disk space caching
[  144.808266][ T4857] BTRFS info (device loop0): disk space caching is enabled
[  144.815488][ T4857] BTRFS info (device loop0): has skinny extents
[  144.901458][ T4866] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  146.525683][ T4892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.161'.
[  146.535534][ T4892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.161'.
[  147.553162][ T4896] CUSE: unknown device info "ÿ
"
[  147.558541][ T4896] CUSE: zero length info key specified
[  147.568209][ T4857] BTRFS error (device loop0): open_ctree failed: -12
[  147.576171][ T4818] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[  147.753203][ T4900] loop3: detected capacity change from 0 to 256
[  147.827448][ T4506] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by udevd (4506)
[  147.910514][ T4900] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  147.983184][ T4818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  148.025423][ T4903] loop4: detected capacity change from 0 to 32768
[  148.042169][ T4903] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.164 (4903)
[  148.052854][ T4818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.105113][ T4818] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  148.133081][ T4818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.215912][ T4818] usb 3-1: config 0 descriptor??
[  148.255284][ T4903] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  148.264126][ T4903] BTRFS info (device loop4): setting nodatacow, compression disabled
[  148.272262][ T4903] BTRFS info (device loop4): turning off barriers
[  148.279122][ T4903] BTRFS info (device loop4): force clearing of disk cache
[  148.286348][ T4903] BTRFS info (device loop4): enabling ssd optimizations
[  148.293327][ T4903] BTRFS info (device loop4): using spread ssd allocation scheme
[  148.301050][ T4903] BTRFS info (device loop4): doing ref verification
[  148.307756][ T4903] BTRFS info (device loop4): not using ssd optimizations
[  148.314840][ T4903] BTRFS info (device loop4): not using spread ssd allocation scheme
[  148.322874][ T4903] BTRFS info (device loop4): using free space tree
[  148.329378][ T4903] BTRFS info (device loop4): has skinny extents
[  148.634752][ T4881] loop1: detected capacity change from 0 to 32768
[  148.707841][ T4881] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.159 (4881)
[  148.742176][ T4881] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  148.760671][ T4818] usbhid 3-1:0.0: can't add hid device: -71
[  148.786965][ T4818] usbhid: probe of 3-1:0.0 failed with error -71
[  148.828212][ T4881] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  148.900509][ T4818] usb 3-1: USB disconnect, device number 2
[  149.552993][ T4818] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  149.553460][ T4881] BTRFS info (device loop1): force lzo compression, level 0
[  149.579236][ T4881] BTRFS info (device loop1): turning on sync discard
[  149.592452][ T4881] BTRFS info (device loop1): force clearing of disk cache
[  149.599828][ T4881] BTRFS info (device loop1): turning on async discard
[  149.607466][ T4881] BTRFS info (device loop1): turning off async discard
[  149.614392][ T4881] BTRFS info (device loop1): using free space tree
[  149.662949][ T4881] BTRFS info (device loop1): has skinny extents
[  149.696443][ T4903] BTRFS info (device loop4): clearing free space tree
[  149.704453][ T4903] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  149.714618][ T4903] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  149.732415][ T4903] BTRFS info (device loop4): creating free space tree
[  149.741697][ T4903] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  149.751342][ T4903] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  149.812881][ T4818] usb 4-1: Using ep0 maxpacket: 16
[  149.859348][ T4903] BTRFS info (device loop4): checking UUID tree
[  150.015927][ T4960] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  150.038219][ T4881] BTRFS error (device loop1): open_ctree failed: -12
[  150.093143][ T4818] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  150.104214][ T4818] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  150.112319][ T4818] usb 4-1: Product: syz
[  150.147207][ T4903] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  150.166276][ T4818] usb 4-1: Manufacturer: syz
[  150.171036][ T4818] usb 4-1: SerialNumber: syz
[  150.180592][ T4818] usb 4-1: config 0 descriptor??
[  150.487319][ T4339] usb 4-1: USB disconnect, device number 2
[  151.613881][ T4974] loop2: detected capacity change from 0 to 32768
[  151.674360][ T4975] netlink: 40 bytes leftover after parsing attributes in process `syz.1.172'.
[  152.378235][ T4974] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  152.387580][ T4974] BTRFS info (device loop2): force zlib compression, level 3
[  152.395013][ T4974] BTRFS info (device loop2): force clearing of disk cache
[  152.402115][ T4974] BTRFS info (device loop2): setting nodatasum
[  152.408462][ T4974] BTRFS info (device loop2): doing ref verification
[  152.415076][ T4974] BTRFS info (device loop2): allowing degraded mounts
[  152.421831][ T4974] BTRFS info (device loop2): enabling disk space caching
[  152.428904][ T4974] BTRFS info (device loop2): disk space caching is enabled
[  152.436117][ T4974] BTRFS info (device loop2): has skinny extents
[  152.446605][ T4972] CUSE: unknown device info "ÿ
"
[  152.451625][ T4972] CUSE: zero length info key specified
[  152.617357][ T4982] loop1: detected capacity change from 0 to 256
[  152.626003][ T4979] loop4: detected capacity change from 0 to 512
[  152.665734][ T4979] EXT4-fs (loop4): Mount option "dioread_nolock" incompatible with ext2
[  152.681830][ T4982] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  153.378337][ T4974] BTRFS info (device loop2): enabling ssd optimizations
[  153.386817][ T4974] BTRFS info (device loop2): clearing free space tree
[  153.394089][ T4974] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  153.403788][ T4974] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  153.822890][ T4820] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  154.072965][ T4820] usb 5-1: Using ep0 maxpacket: 16
[  154.193073][ T4820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.205415][ T4820] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  154.217716][ T4820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.238980][ T4820] usb 5-1: config 0 descriptor??
[  154.368466][ T5017] loop1: detected capacity change from 0 to 164
[  154.776117][ T4820] usbhid 5-1:0.0: can't add hid device: -71
[  154.820951][ T4820] usbhid: probe of 5-1:0.0 failed with error -71
[  155.002296][ T4820] usb 5-1: USB disconnect, device number 2
[  156.021234][ T5031] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  156.091910][ T5034] loop0: detected capacity change from 0 to 256
[  156.194317][ T5034] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  157.026236][ T5017] loop1: detected capacity change from 0 to 40427
[  157.164848][ T5017] F2FS-fs (loop1): Unrecognized mount option "memory=low" or missing value
[  157.337980][ T5044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.190'.
[  158.470058][ T5032] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  158.740126][ T5038] loop2: detected capacity change from 0 to 32768
[  158.840011][ T5038] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.182 (5038)
[  159.057550][ T5038] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  159.299155][ T5038] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  159.999342][ T5066] loop1: detected capacity change from 0 to 32768
[  160.006403][ T5038] BTRFS info (device loop2): use zstd compression, level 3
[  160.027183][ T5038] BTRFS error (device loop2): unrecognized mount option 'async'
[  160.043880][ T5038] BTRFS error (device loop2): open_ctree failed: -22
[  160.085944][ T5066] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.193 (5066)
[  160.194701][ T5070] loop0: detected capacity change from 0 to 2048
[  160.212124][ T5066] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  160.222612][ T5066] BTRFS info (device loop1): force zlib compression, level 3
[  160.230089][ T5066] BTRFS info (device loop1): force clearing of disk cache
[  160.237328][ T5066] BTRFS info (device loop1): setting nodatasum
[  160.243555][ T5066] BTRFS info (device loop1): doing ref verification
[  160.250139][ T5066] BTRFS info (device loop1): allowing degraded mounts
[  160.257204][ T5066] BTRFS info (device loop1): enabling disk space caching
[  160.264378][ T5066] BTRFS info (device loop1): disk space caching is enabled
[  160.271593][ T5066] BTRFS info (device loop1): has skinny extents
[  160.500283][ T5083] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  161.438745][ T5066] BTRFS info (device loop1): enabling ssd optimizations
[  161.447416][ T5066] BTRFS info (device loop1): clearing free space tree
[  161.454321][ T5066] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  161.464010][ T5066] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  161.489187][ T5099] loop4: detected capacity change from 0 to 512
[  161.550927][ T5101] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  161.871604][ T5099] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  161.912712][ T5099] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  162.245107][ T5108] netlink: 40 bytes leftover after parsing attributes in process `syz.3.202'.
[  165.806564][ T5146] loop0: detected capacity change from 0 to 256
[  165.928984][ T5147] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  165.955152][ T5146] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  165.966434][ T5111] loop3: detected capacity change from 0 to 40427
[  166.073053][ T5137] loop4: detected capacity change from 0 to 32768
[  166.102085][ T5111] F2FS-fs (loop3): Unrecognized mount option "barrier" or missing value
[  166.137411][ T5137] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.212 (5137)
[  166.365619][ T5151] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  166.397148][ T5137] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  166.454049][ T5137] BTRFS info (device loop4): using free space tree
[  166.465259][ T5137] BTRFS info (device loop4): has skinny extents
[  166.540376][ T5154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.217'.
[  167.656178][ T5172] loop0: detected capacity change from 0 to 1024
[  167.680784][ T5137] BTRFS info (device loop4): enabling ssd optimizations
[  167.724931][ T5180] loop1: detected capacity change from 0 to 2048
[  167.796556][ T5180] NILFS (loop1): couldn't find nilfs on the device
[  168.609726][ T5172] hfsplus: request for non-existent node 3 in B*Tree
[  168.640556][ T5172] hfsplus: request for non-existent node 3 in B*Tree
[  168.816787][ T5196] loop2: detected capacity change from 0 to 256
[  168.952152][ T5202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.231'.
[  168.962925][ T5202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.231'.
[  169.024360][ T5196] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  170.286648][ T5209] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  170.425528][ T5217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.233'.
[  171.611575][ T5219] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  174.798776][ T5251] loop3: detected capacity change from 0 to 512
[  174.869654][ T5251] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  174.912215][ T5251] EXT4-fs (loop3): invalid journal inode
[  174.925859][ T5251] EXT4-fs (loop3): can't get journal size
[  175.008857][ T5251] EXT4-fs (loop3): 1 truncate cleaned up
[  175.023887][   T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  175.031516][ T5251] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  175.164553][ T5246] loop2: detected capacity change from 0 to 32768
[  175.266743][ T5246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.239 (5246)
[  175.570771][ T5246] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  175.582923][   T21] usb 1-1: Using ep0 maxpacket: 16
[  175.588156][ T5246] BTRFS info (device loop2): using free space tree
[  175.631622][ T5246] BTRFS info (device loop2): has skinny extents
[  175.825082][ T5269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.244'.
[  175.834088][ T5269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.244'.
[  175.932946][   T21] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  175.982893][   T21] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  176.088446][   T21] usb 1-1: Product: syz
[  176.127711][   T21] usb 1-1: Manufacturer: syz
[  176.745421][ T4905] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  176.799318][   T21] usb 1-1: SerialNumber: syz
[  176.837337][ T5246] BTRFS info (device loop2): enabling ssd optimizations
[  176.850614][ T5278] ubi31: attaching mtd0
[  176.858927][ T5278] ubi31: scanning is finished
[  176.864231][ T5278] ubi31: empty MTD device detected
[  176.874659][   T21] usb 1-1: config 0 descriptor??
[  176.972989][ T5278] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  176.992905][ T4905] usb 4-1: Using ep0 maxpacket: 16
[  176.998091][ T5278] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  177.021412][ T5278] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  177.034961][ T5278] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  177.043405][ T5278] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  177.050773][ T5278] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  177.059571][ T5278] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2384962535
[  177.093719][ T5278] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  177.108340][ T5285] ubi31: background thread "ubi_bgt31d" started, PID 5285
[  177.328464][ T4905] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  177.347434][ T4905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.394285][ T4905] usb 4-1: Product: syz
[  177.398485][ T4905] usb 4-1: Manufacturer: syz
[  177.426910][ T4905] usb 4-1: SerialNumber: syz
[  177.476801][ T4905] r8152-cfgselector 4-1: config 0 descriptor??
[  177.495675][ T4217] usb 1-1: USB disconnect, device number 2
[  178.676039][ T5302] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  179.148678][ T4905] r8152-cfgselector 4-1: Unknown version 0x0000
[  179.183039][ T4905] r8152-cfgselector 4-1: Unknown version 0x0000
[  179.189642][ T4905] r8152-cfgselector 4-1: bad CDC descriptors
[  179.213076][ T4905] r8152-cfgselector 4-1: Unknown version 0x0000
[  179.236059][ T4905] r8152-cfgselector 4-1: USB disconnect, device number 3
[  180.214545][ T5321] loop3: detected capacity change from 0 to 512
[  180.237723][ T5323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'.
[  180.246980][ T5323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'.
[  180.410374][ T5306] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  180.453832][ T5321] EXT4-fs (loop3): Mount option "dioread_nolock" incompatible with ext2
[  181.300992][ T5332] loop0: detected capacity change from 0 to 512
[  181.363031][ T5332] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  181.391925][ T5332] EXT4-fs (loop0): invalid journal inode
[  181.401731][ T5332] EXT4-fs (loop0): can't get journal size
[  181.429505][ T5332] EXT4-fs (loop0): 1 truncate cleaned up
[  181.477718][ T5332] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  181.617194][ T2273] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  181.736645][ T5330] loop2: detected capacity change from 0 to 40427
[  181.873734][ T2273] usb 4-1: Using ep0 maxpacket: 16
[  181.885398][ T5330] F2FS-fs (loop2): Unrecognized mount option "barrier" or missing value
[  181.993079][ T2273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.034821][ T2273] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  182.076395][ T2273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.084834][ T5294] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  182.141337][ T2273] usb 4-1: config 0 descriptor??
[  182.326957][ T5294] usb 1-1: Using ep0 maxpacket: 16
[  183.443148][ T2273] usbhid 4-1:0.0: can't add hid device: -71
[  183.449155][ T2273] usbhid: probe of 4-1:0.0 failed with error -71
[  183.462937][ T5294] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  183.472002][ T5294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.483715][ T2273] usb 4-1: USB disconnect, device number 4
[  183.503258][ T5294] usb 1-1: Product: syz
[  183.508121][ T5294] usb 1-1: Manufacturer: syz
[  183.512729][ T5294] usb 1-1: SerialNumber: syz
[  183.529700][ T5294] r8152-cfgselector 1-1: config 0 descriptor??
[  183.590874][ T5343] loop2: detected capacity change from 0 to 32768
[  183.743513][ T5343] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  183.843612][ T5354] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  184.129404][ T5343] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  184.304041][ T1111] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  184.632282][ T4179] ocfs2: Unmounting device (7,2) on (node local)
[  184.772852][ T1111] usb 5-1: Using ep0 maxpacket: 16
[  185.662885][ T5294] r8152-cfgselector 1-1: Unknown version 0x0000
[  185.669253][ T5294] r8152-cfgselector 1-1: bad CDC descriptors
[  185.722997][ T5294] r8152-cfgselector 1-1: Unknown version 0x0000
[  185.749966][ T5294] r8152-cfgselector 1-1: USB disconnect, device number 3
[  186.276163][ T1111] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  186.287773][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  186.295920][ T1111] usb 5-1: Product: syz
[  186.300091][ T1111] usb 5-1: Manufacturer: syz
[  186.305144][ T1111] usb 5-1: SerialNumber: syz
[  186.370444][ T1111] usb 5-1: config 0 descriptor??
[  187.342023][ T1111] usb 5-1: USB disconnect, device number 3
[  187.363812][ T5389] loop1: detected capacity change from 0 to 64
[  187.399048][ T4165] udevd[4165]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  187.430720][ T5392] netlink: 40 bytes leftover after parsing attributes in process `syz.0.268'.
[  187.447102][ T5389] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  187.844984][ T5368] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  187.941424][ T5400] overlayfs: failed to resolve './file0': -2
[  188.743870][ T5402] loop4: detected capacity change from 0 to 512
[  188.788012][ T5402] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  188.804727][ T5402] EXT4-fs (loop4): invalid journal inode
[  188.810548][ T5402] EXT4-fs (loop4): can't get journal size
[  188.882651][ T5402] EXT4-fs (loop4): 1 truncate cleaned up
[  188.891647][ T5402] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  188.998445][ T5396] loop1: detected capacity change from 0 to 32768
[  189.150729][ T5396] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.276 (5396)
[  189.760916][ T5396] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  189.811314][ T5396] BTRFS info (device loop1): using free space tree
[  189.884164][ T5396] BTRFS info (device loop1): has skinny extents
[  189.992871][ T5290] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  190.329777][ T5396] BTRFS info (device loop1): enabling ssd optimizations
[  190.502873][ T5290] usb 5-1: Using ep0 maxpacket: 16
[  191.802910][ T5290] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  191.811987][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.842962][ T5290] usb 5-1: Product: syz
[  191.847173][ T5290] usb 5-1: Manufacturer: syz
[  191.863142][ T5290] r8152-cfgselector 5-1: config 0 descriptor??
[  191.882950][ T5290] r8152-cfgselector 5-1: can't set config #0, error -71
[  191.989403][ T5290] r8152-cfgselector 5-1: Unknown version 0x0000
[  191.997377][ T5290] r8152-cfgselector 5-1: USB disconnect, device number 4
[  193.008519][ T5462] loop1: detected capacity change from 0 to 32768
[  193.085921][ T5462] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.289 (5462)
[  193.102930][ T4905] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  193.153327][ T5462] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  193.162618][ T5462] BTRFS info (device loop1): force zlib compression, level 3
[  193.170180][ T5462] BTRFS info (device loop1): force clearing of disk cache
[  193.177674][ T5462] BTRFS info (device loop1): setting nodatasum
[  193.183851][ T5462] BTRFS info (device loop1): doing ref verification
[  193.190424][ T5462] BTRFS info (device loop1): allowing degraded mounts
[  193.197194][ T5462] BTRFS info (device loop1): enabling disk space caching
[  193.204254][ T5462] BTRFS info (device loop1): disk space caching is enabled
[  193.211437][ T5462] BTRFS info (device loop1): has skinny extents
[  193.372925][ T4905] usb 4-1: Using ep0 maxpacket: 16
[  193.533201][ T4905] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.552913][ T5462] BTRFS info (device loop1): enabling ssd optimizations
[  193.560909][ T5462] BTRFS info (device loop1): clearing free space tree
[  193.567860][ T5462] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  193.577547][ T5462] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  193.592220][ T4905] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.913336][ T4905] usb 4-1: config 0 interface 0 has no altsetting 0
[  193.945302][ T4905] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  194.019895][ T4905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.117493][ T4905] usb 4-1: config 0 descriptor??
[  194.257709][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  194.264884][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  194.282008][ T5489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.291'.
[  194.731607][ T5496] overlayfs: failed to resolve './file0': -2
[  194.804383][   T21] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  194.999692][ T4905] cougar 0003:060B:500A.0001: unexpected long global item
[  195.009596][   T21] Bluetooth: hci2: Injecting HCI hardware error event
[  195.010094][ T4905] cougar 0003:060B:500A.0001: parse failed
[  195.063668][ T4905] cougar: probe of 0003:060B:500A.0001 failed with error -22
[  195.084712][ T4185] Bluetooth: hci2: hardware error 0x00
[  195.142719][ T4905] usb 4-1: USB disconnect, device number 5
[  195.244375][ T5499] loop1: detected capacity change from 0 to 2048
[  195.292064][ T5503] loop2: detected capacity change from 0 to 256
[  195.309003][ T5499] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  195.371598][ T5504] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  195.482897][ T4828] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  195.528794][ T5503] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  197.180749][ T5510] overlayfs: failed to resolve './file0': -2
[  198.904584][ T4828] usb 1-1: unable to read config index 0 descriptor/start: -71
[  198.914079][ T4828] usb 1-1: can't read configurations, error -71
[  199.684562][ T5527] loop1: detected capacity change from 0 to 32768
[  200.440417][ T5527] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.302 (5527)
[  200.456684][ T5527] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  200.465980][ T5527] BTRFS info (device loop1): force zlib compression, level 3
[  200.473409][ T5527] BTRFS info (device loop1): force clearing of disk cache
[  200.480760][ T5527] BTRFS info (device loop1): setting nodatasum
[  200.487211][ T5527] BTRFS info (device loop1): doing ref verification
[  200.493820][ T5527] BTRFS info (device loop1): allowing degraded mounts
[  200.500915][ T5527] BTRFS info (device loop1): enabling disk space caching
[  200.507962][ T5527] BTRFS info (device loop1): disk space caching is enabled
[  200.515166][ T5527] BTRFS info (device loop1): has skinny extents
[  201.395091][ T5542] netlink: 40 bytes leftover after parsing attributes in process `syz.2.304'.
[  201.710167][ T5522] loop0: detected capacity change from 0 to 8192
[  202.122456][ T5561] overlayfs: failed to resolve './file0': -2
[  202.424489][ T5527] BTRFS info (device loop1): enabling ssd optimizations
[  202.432635][ T5527] BTRFS info (device loop1): clearing free space tree
[  202.439618][ T5527] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  202.449562][ T5527] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  202.965146][ T5570] ubi: mtd0 is already attached to ubi31
[  204.071104][ T5574] loop2: detected capacity change from 0 to 32768
[  204.665831][ T5574] ialloc: diAlloc returned -17!
[  206.008441][ T5580] loop3: detected capacity change from 0 to 128
[  206.069689][ T5585] loop4: detected capacity change from 0 to 256
[  206.261997][ T5586] overlayfs: failed to resolve './file0': -2
[  207.309868][ T5585] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  207.337269][ T5580] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  207.378575][ T5580] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.767670][ T5596] netlink: 40 bytes leftover after parsing attributes in process `syz.1.316'.
[  209.481817][ T5609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.319'.
[  209.491348][ T5609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.319'.
[  210.490202][ T5622] loop3: detected capacity change from 0 to 256
[  210.596070][ T5624] overlayfs: failed to resolve './file0': -2
[  210.655629][ T5610] loop0: detected capacity change from 0 to 8192
[  210.700283][ T5622] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  211.843048][ T2273] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  212.044133][ T5640] loop0: detected capacity change from 0 to 512
[  212.107920][ T5640] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  212.291893][ T5640] EXT4-fs (loop0): 1 orphan inode deleted
[  212.351212][ T5647] overlayfs: failed to resolve './file1': -2
[  212.455910][ T5640] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  212.482924][ T2273] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  212.592700][ T2273] usb 3-1: config 0 interface 0 has no altsetting 0
[  212.660531][ T5640] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.709809][ T2273] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  212.982834][ T2273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.030298][ T2273] usb 3-1: config 0 descriptor??
[  213.184314][ T5631] loop4: detected capacity change from 0 to 40427
[  214.599387][ T5631] F2FS-fs (loop4): invalid crc value
[  214.672125][ T5631] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4)
[  214.687324][ T5660] loop3: detected capacity change from 0 to 128
[  214.858115][ T5657] loop0: detected capacity change from 0 to 32768
[  214.864825][ T2273] usbhid 3-1:0.0: can't add hid device: -71
[  214.871386][ T2273] usbhid: probe of 3-1:0.0 failed with error -71
[  214.923225][ T2273] usb 3-1: USB disconnect, device number 3
[  214.950577][ T5657] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.328 (5657)
[  214.969819][ T5660] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  215.452555][ T5660] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.733640][ T5657] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  215.743957][ T5657] BTRFS info (device loop0): force zlib compression, level 3
[  215.751337][ T5657] BTRFS info (device loop0): force clearing of disk cache
[  215.758771][ T5657] BTRFS info (device loop0): setting nodatasum
[  215.764950][ T5657] BTRFS info (device loop0): doing ref verification
[  215.771523][ T5657] BTRFS info (device loop0): allowing degraded mounts
[  215.778318][ T5657] BTRFS info (device loop0): enabling disk space caching
[  215.785371][ T5657] BTRFS info (device loop0): disk space caching is enabled
[  215.792567][ T5657] BTRFS info (device loop0): has skinny extents
[  216.501025][ T5689] loop1: detected capacity change from 0 to 256
[  216.654347][ T5699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'.
[  216.660482][ T5689] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  216.663500][ T5699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'.
[  216.684012][ T5684] loop2: detected capacity change from 0 to 8192
[  216.743231][ T5657] BTRFS info (device loop0): enabling ssd optimizations
[  216.751563][ T5657] BTRFS info (device loop0): clearing free space tree
[  216.758412][ T5657] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  216.768162][ T5657] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  217.541221][ T5708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.333'.
[  218.387921][ T5713] loop4: detected capacity change from 0 to 512
[  218.693658][ T5713] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  218.702583][ T5713] EXT4-fs (loop4): orphan cleanup on readonly fs
[  218.788495][ T4464] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop0 scanned by udevd (4464)
[  218.873140][ T5713] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0).
[  219.562534][ T5713] EXT4-fs warning (device loop4): ext4_enable_quotas:6439: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  219.592813][ T5713] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  220.090984][ T5713] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.339: bg 0: block 40: padding at end of block bitmap is not set
[  220.198501][ T5713] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  220.469210][ T5713] EXT4-fs (loop4): 1 truncate cleaned up
[  220.513147][ T5713] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  221.353009][ T2273] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  221.747877][ T5748] loop2: detected capacity change from 0 to 512
[  223.292919][ T5748] EXT4-fs (loop2): Ignoring removed nobh option
[  223.299211][ T5748] EXT4-fs (loop2): Ignoring removed nobh option
[  223.305584][ T5748] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  223.373494][ T2273] usb 2-1: Using ep0 maxpacket: 16
[  223.655957][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.348'.
[  223.658390][ T5748] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  223.664981][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.348'.
[  223.694329][ T5748] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.342: invalid indirect mapped block 2683928664 (level 1)
[  223.710094][ T5748] EXT4-fs (loop2): 1 truncate cleaned up
[  223.715894][ T5748] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,nobh,minixdf,nobh,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback.
[  223.862941][ T2273] usb 2-1: unable to read config index 0 descriptor/start: -71
[  223.870546][ T2273] usb 2-1: can't read configurations, error -71
[  225.021210][ T5770] netlink: 40 bytes leftover after parsing attributes in process `syz.0.349'.
[  225.841522][ T5767] loop1: detected capacity change from 0 to 32768
[  225.856776][ T5772] loop2: detected capacity change from 0 to 256
[  225.859554][ T5769] loop4: detected capacity change from 0 to 256
[  225.900314][ T5764] loop3: detected capacity change from 0 to 8192
[  225.956373][ T5772] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  226.655418][ T5769] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  227.476851][ T5783] overlayfs: failed to resolve './file1': -2
[  229.167877][ T5795] loop0: detected capacity change from 0 to 256
[  229.294324][ T5802] loop4: detected capacity change from 0 to 128
[  229.419611][ T5802] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  229.442273][ T5802] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.653477][ T5813] overlayfs: failed to resolve './file1': -2
[  229.722965][ T5035] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  229.757703][ T5814] netlink: 68 bytes leftover after parsing attributes in process `syz.4.359'.
[  230.363180][ T5035] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.383937][ T5035] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  230.397398][ T5816] loop3: detected capacity change from 0 to 2048
[  230.422883][ T2273] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  230.480894][ T5816] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  230.499461][ T5816] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  230.517400][ T5035] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  230.533851][ T5035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  230.554328][ T5035] usb 3-1: SerialNumber: syz
[  230.642422][ T5818] loop4: detected capacity change from 0 to 8192
[  230.672843][ T2273] usb 1-1: Using ep0 maxpacket: 8
[  230.805135][ T5820] loop3: detected capacity change from 0 to 64
[  230.813487][ T2273] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  230.873241][ T5820] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  230.947629][ T5035] usb 3-1: 0:2 : does not exist
[  231.034481][ T2273] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  231.093082][ T2273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.351108][ T2273] usb 1-1: Product: syz
[  231.425702][ T2273] usb 1-1: Manufacturer: syz
[  231.430338][ T2273] usb 1-1: SerialNumber: syz
[  231.502137][ T2273] usb 1-1: config 0 descriptor??
[  231.643356][ T5035] usb 3-1: unit 255 not found!
[  231.705824][ T2273] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  231.742819][ T5035] usb 3-1: USB disconnect, device number 4
[  231.754384][ T5827] loop3: detected capacity change from 0 to 256
[  232.190809][ T5827] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  232.494170][ T5809] udc-core: couldn't find an available UDC or it's busy
[  232.540115][ T5809] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  232.594002][ T4506] udevd[4506]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  232.683668][ T5830] loop4: detected capacity change from 0 to 256
[  232.775191][ T5831] mkiss: ax0: crc mode is auto.
[  234.321778][ T5830] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  237.861319][ T5035] usb 1-1: USB disconnect, device number 6
[  237.917641][ T5852] loop0: detected capacity change from 0 to 256
[  237.948612][ T5854] loop4: detected capacity change from 0 to 128
[  237.979007][ T5852] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  237.994469][ T5852] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  238.039794][ T5852] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  238.145888][ T5854] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  238.162485][ T5854] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.425008][ T5863] netlink: 40 bytes leftover after parsing attributes in process `syz.2.378'.
[  238.437764][   T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  238.548259][ T5865] netlink: 68 bytes leftover after parsing attributes in process `syz.4.376'.
[  240.077139][   T21] usb 2-1: Using ep0 maxpacket: 8
[  240.881236][ T5873] loop4: detected capacity change from 0 to 8192
[  240.896023][ T5877] loop2: detected capacity change from 0 to 256
[  240.972990][   T21] usb 2-1: device descriptor read/all, error -71
[  241.003969][ T5877] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  242.677583][ T5897] loop4: detected capacity change from 0 to 256
[  242.792391][ T5897] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  245.772889][ T5035] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  246.163423][ T5035] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  246.209581][ T5035] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  246.229950][ T5035] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  246.248487][ T5035] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  246.271689][ T5035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.312131][ T5035] usb 5-1: config 0 descriptor??
[  246.385361][ T5035] hdpvr 5-1:0.0: Could not find bulk-in endpoint
[  246.403227][ T5035] hdpvr: probe of 5-1:0.0 failed with error -12
[  247.429599][ T5918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.391'.
[  247.734686][   T21] usb 5-1: USB disconnect, device number 5
[  247.758274][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'.
[  247.767282][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'.
[  249.080088][ T5935] loop3: detected capacity change from 0 to 256
[  249.148034][ T5931] loop1: detected capacity change from 0 to 8192
[  249.168275][ T5940] loop4: detected capacity change from 0 to 256
[  249.192679][ T5935] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  249.420254][ T5940] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  252.718539][ T5972] netlink: 40 bytes leftover after parsing attributes in process `syz.2.406'.
[  253.616559][ T5988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.407'.
[  253.625975][ T5988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.407'.
[  254.232462][ T5987] loop4: detected capacity change from 0 to 8192
[  254.453649][ T5966] loop0: detected capacity change from 0 to 40427
[  254.518638][ T5966] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value
[  255.074091][ T6004] loop2: detected capacity change from 0 to 256
[  255.240267][ T6004] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  255.862461][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  255.882611][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  256.575607][ T6019] netlink: 40 bytes leftover after parsing attributes in process `syz.3.421'.
[  257.027658][ T6025] loop0: detected capacity change from 0 to 256
[  257.047796][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.424'.
[  257.056863][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.424'.
[  257.102246][ T6029] loop2: detected capacity change from 0 to 512
[  257.188911][ T6029] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  257.205276][ T6025] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  257.247779][   T26] audit: type=1326 audit(1745674730.505:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b743e7969 code=0x7ffc0000
[  257.270293][ T6029] EXT4-fs (loop2): invalid journal inode
[  257.283057][ T6029] EXT4-fs (loop2): can't get journal size
[  257.335159][ T6029] EXT4-fs (loop2): 1 truncate cleaned up
[  257.340902][ T6029] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  257.499587][   T26] audit: type=1326 audit(1745674730.505:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f0b743e7969 code=0x7ffc0000
[  257.912086][   T26] audit: type=1326 audit(1745674730.505:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b743e7969 code=0x7ffc0000
[  258.018208][   T26] audit: type=1326 audit(1745674730.505:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b743e7969 code=0x7ffc0000
[  258.043106][ T5289] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  258.138194][   T26] audit: type=1326 audit(1745674730.505:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b743e7969 code=0x7ffc0000
[  258.372919][ T5289] usb 3-1: Using ep0 maxpacket: 16
[  258.864699][ T6049] CUSE: unknown device info "ÿ
"
[  258.870162][ T6049] CUSE: zero length info key specified
[  260.462955][ T5289] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  260.554487][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.010215][ T5289] usb 3-1: Product: syz
[  261.017676][ T5289] r8152-cfgselector 3-1: config 0 descriptor??
[  261.026379][ T6065] loop2: detected capacity change from 0 to 128
[  261.073022][ T5289] r8152-cfgselector 3-1: can't set config #0, error -71
[  261.085612][ T6062] loop3: detected capacity change from 0 to 16
[  261.124008][ T5289] r8152-cfgselector 3-1: Unknown version 0x0000
[  261.124978][ T6065] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  261.141678][ T5289] r8152-cfgselector 3-1: USB disconnect, device number 5
[  261.171903][ T6062] erofs: (device loop3): mounted with root inode @ nid 36.
[  261.184189][ T6065] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.247401][ T4185] Bluetooth: hci4: unexpected event for opcode 0x1408
[  261.415285][ T6064] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  261.424965][ T6064] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36
[  261.434289][ T6064] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  261.443939][ T6064] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36
[  261.453012][ T6064] erofs: (device loop3): z_erofs_readahead: readahead error at page 44 @ nid 36
[  261.462067][ T6064] erofs: (device loop3): z_erofs_readahead: readahead error at page 43 @ nid 36
[  261.471117][ T6064] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  261.480427][ T6064] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36
[  261.489494][ T6064] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36
[  261.498535][ T6064] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  261.507841][ T6064] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36
[  261.516930][ T6064] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36
[  261.526115][ T6064] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36
[  261.535674][ T6064] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  261.544974][ T6064] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36
[  261.554064][ T6064] erofs: (device loop3): z_erofs_readahead: readahead error at page 27 @ nid 36
[  261.563142][ T6064] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36
[  261.572179][ T6064] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36
[  261.582203][ T6064] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36
[  261.591293][ T6064] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36
[  261.600577][ T6064] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  261.609990][ T6064] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36
[  261.619032][ T6064] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  261.628940][ T6064] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36
[  261.638244][ T6064] attempt to access beyond end of device
[  261.638244][ T6064] loop3: rw=524288, want=848, limit=16
[  261.649258][ T6064] attempt to access beyond end of device
[  261.649258][ T6064] loop3: rw=524288, want=13478624104, limit=16
[  261.660955][ T6064] attempt to access beyond end of device
[  261.660955][ T6064] loop3: rw=524288, want=13478624080, limit=16
[  261.672671][ T6064] attempt to access beyond end of device
[  261.672671][ T6064] loop3: rw=524288, want=32, limit=16
[  262.394106][ T4185] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651]
[  263.704338][ T6096] loop3: detected capacity change from 0 to 256
[  263.753146][ T6070] loop1: detected capacity change from 0 to 32768
[  263.789613][ T6089] loop0: detected capacity change from 0 to 8192
[  264.133955][ T6070] (syz.1.436,6070,1):ocfs2_initialize_super:2310 ERROR: status = -12
[  264.142385][ T6096] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  264.371214][ T6070] (syz.1.436,6070,1):ocfs2_fill_super:1177 ERROR: status = -12
[  264.609207][ T6103] loop4: detected capacity change from 0 to 512
[  265.330468][ T2273] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  265.341759][ T2273] Bluetooth: hci4: Injecting HCI hardware error event
[  266.003319][ T4185] Bluetooth: hci4: hardware error 0x00
[  266.069583][ T6103] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  266.317041][ T6103] EXT4-fs (loop4): invalid journal inode
[  266.406307][ T6103] EXT4-fs (loop4): can't get journal size
[  266.499197][ T6118] loop0: detected capacity change from 0 to 256
[  266.517008][ T6103] EXT4-fs (loop4): 1 truncate cleaned up
[  266.563234][ T6103] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  266.790216][ T6118] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  267.606027][ T6130] loop1: detected capacity change from 0 to 128
[  267.635246][ T6131] loop3: detected capacity change from 0 to 16
[  267.775081][ T6131] erofs: (device loop3): mounted with root inode @ nid 36.
[  267.782920][ T6130] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  267.797415][ T6134] overlayfs: failed to resolve './file1': -2
[  267.803527][   T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  267.881282][ T6130] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.150533][ T6131] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  268.159896][ T6131] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36
[  268.169014][ T6131] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  268.178323][ T6131] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36
[  268.187886][ T6131] erofs: (device loop3): z_erofs_readahead: readahead error at page 44 @ nid 36
[  268.196930][ T6131] erofs: (device loop3): z_erofs_readahead: readahead error at page 43 @ nid 36
[  268.205952][ T6131] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  268.215249][ T6131] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36
[  268.224288][ T6131] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36
[  268.233314][ T6131] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  268.242580][ T6131] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36
[  268.251657][ T6131] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36
[  268.260708][ T6131] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36
[  268.269892][ T6131] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  268.279184][ T6131] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36
[  268.288753][ T6131] erofs: (device loop3): z_erofs_readahead: readahead error at page 27 @ nid 36
[  268.297785][ T6131] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36
[  268.306817][ T6131] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36
[  268.316845][ T6131] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36
[  268.326080][ T6131] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36
[  268.335236][ T6131] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  268.344617][ T6131] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36
[  268.353699][ T6131] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  268.363600][ T6131] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36
[  268.372700][ T6131] attempt to access beyond end of device
[  268.372700][ T6131] loop3: rw=524288, want=848, limit=16
[  268.383733][ T6131] attempt to access beyond end of device
[  268.383733][ T6131] loop3: rw=524288, want=13478624104, limit=16
[  268.396026][ T6131] attempt to access beyond end of device
[  268.396026][ T6131] loop3: rw=524288, want=13478624080, limit=16
[  268.407757][ T6131] attempt to access beyond end of device
[  268.407757][ T6131] loop3: rw=524288, want=32, limit=16
[  268.450418][ T4190] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651]
[  268.452989][   T21] usb 5-1: Using ep0 maxpacket: 16
[  269.003140][ T6142] netlink: 68 bytes leftover after parsing attributes in process `syz.1.450'.
[  270.120831][ T6137] CUSE: unknown device info "ÿ
"
[  270.125808][ T6137] CUSE: zero length info key specified
[  271.795545][ T6164] loop3: detected capacity change from 0 to 256
[  271.918262][ T6157] loop0: detected capacity change from 0 to 8192
[  271.952511][ T6164] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  272.149231][ T6167] loop2: detected capacity change from 0 to 32768
[  273.824685][   T21] usb 5-1: unable to read config index 0 descriptor/start: -110
[  274.155374][   T21] usb 5-1: can't read configurations, error -110
[  274.332833][   T21] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  274.528888][ T6184] loop3: detected capacity change from 0 to 256
[  274.613080][   T21] usb 5-1: device descriptor read/64, error -32
[  274.759575][   T21] usb usb5-port1: attempt power cycle
[  274.917177][ T6184] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  275.272860][   T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  275.568232][ T6190] loop1: detected capacity change from 0 to 128
[  275.593691][   T21] usb 5-1: device descriptor read/8, error -71
[  275.607936][ T6188] loop0: detected capacity change from 0 to 16
[  275.674937][ T6188] erofs: (device loop0): mounted with root inode @ nid 36.
[  275.744149][ T6190] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  275.787760][ T6195] overlayfs: failed to resolve './file1': -2
[  276.143889][ T6190] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  276.494957][ T6198] CUSE: unknown device info "ÿ
"
[  276.499905][ T6198] CUSE: zero length info key specified
[  276.507753][ T6188] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  276.543034][ T6188] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36
[  276.722859][ T6188] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  276.732876][ T6188] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36
[  276.750882][ T6188] erofs: (device loop0): z_erofs_readahead: readahead error at page 44 @ nid 36
[  276.819100][ T6212] netlink: 68 bytes leftover after parsing attributes in process `syz.1.465'.
[  277.239558][ T6188] erofs: (device loop0): z_erofs_readahead: readahead error at page 43 @ nid 36
[  277.303876][ T6188] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  277.322986][ T6188] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36
[  277.363197][ T6188] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36
[  277.512098][ T6188] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  278.243452][ T6188] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36
[  278.252531][ T6188] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36
[  278.332018][ T6221] loop3: detected capacity change from 0 to 256
[  278.417040][ T6188] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36
[  278.483098][ T6188] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  278.506910][ T6221] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  278.568166][ T6188] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36
[  278.843274][ T6188] erofs: (device loop0): z_erofs_readahead: readahead error at page 27 @ nid 36
[  279.199557][ T6188] erofs: (device loop0): z_erofs_readahead: readahead error at page 26 @ nid 36
[  279.273334][ T6188] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36
[  279.314219][ T6188] erofs: (device loop0): z_erofs_readahead: readahead error at page 25 @ nid 36
[  279.339666][ T6188] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36
[  279.388231][ T6188] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  279.427731][ T6188] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36
[  279.583647][ T6227] loop3: detected capacity change from 0 to 32768
[  279.620746][ T6188] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  279.654314][ T6188] erofs: (device loop0): z_erofs_readahead: readahead error at page 15 @ nid 36
[  280.291239][ T6188] attempt to access beyond end of device
[  280.291239][ T6188] loop0: rw=524288, want=848, limit=16
[  280.353164][ T6188] attempt to access beyond end of device
[  280.353164][ T6188] loop0: rw=524288, want=13478624104, limit=16
[  280.418167][ T6188] attempt to access beyond end of device
[  280.418167][ T6188] loop0: rw=524288, want=13478624080, limit=16
[  280.430361][ T6188] attempt to access beyond end of device
[  280.430361][ T6188] loop0: rw=524288, want=32, limit=16
[  280.443761][ T4185] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651]
[  280.715846][ T6230] loop3: detected capacity change from 0 to 512
[  280.795918][ T6230] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  280.822614][ T6230] EXT4-fs (loop3): invalid journal inode
[  280.831958][ T6230] EXT4-fs (loop3): can't get journal size
[  281.056555][ T6230] EXT4-fs (loop3): 1 truncate cleaned up
[  281.098136][ T6230] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  282.623336][   T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  282.851823][ T6251] loop1: detected capacity change from 0 to 256
[  282.972868][   T21] usb 4-1: Using ep0 maxpacket: 16
[  283.301326][ T6251] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  283.346655][   T21] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  283.429174][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.663402][ T6255] loop2: detected capacity change from 0 to 128
[  283.711379][   T21] usb 4-1: Product: syz
[  283.718023][   T21] usb 4-1: Manufacturer: syz
[  283.722646][   T21] usb 4-1: SerialNumber: syz
[  283.729410][   T21] r8152-cfgselector 4-1: config 0 descriptor??
[  283.742161][ T6257] overlayfs: failed to resolve './file1': -2
[  283.907094][ T6255] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  283.988076][ T6255] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.013431][ T6259] CUSE: unknown device info "ÿ
"
[  284.018373][ T6259] CUSE: zero length info key specified
[  284.203856][ T6255] netlink: 68 bytes leftover after parsing attributes in process `syz.2.481'.
[  284.415879][ T6267] loop1: detected capacity change from 0 to 256
[  284.559628][ T6267] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  285.513987][ T6273] loop4: detected capacity change from 0 to 16
[  285.658184][ T6273] erofs: (device loop4): mounted with root inode @ nid 36.
[  285.814405][ T6275] loop2: detected capacity change from 0 to 32768
[  285.866268][ T6271] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  285.926889][ T6271] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36
[  285.946071][ T6271] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  286.522107][ T6271] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36
[  286.687562][   T21] r8152-cfgselector 4-1: can't set config #0, error -71
[  286.704644][ T6271] erofs: (device loop4): z_erofs_readahead: readahead error at page 44 @ nid 36
[  286.712943][   T21] r8152-cfgselector 4-1: Unknown version 0x0000
[  286.736575][   T21] r8152-cfgselector 4-1: USB disconnect, device number 6
[  287.220717][ T6271] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36
[  287.263360][ T6271] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  287.311248][ T6271] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36
[  287.330860][ T6271] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36
[  287.355833][ T6271] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  287.704792][ T6271] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36
[  287.760332][ T6271] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36
[  287.968272][ T6271] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36
[  289.587319][ T6271] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  289.634322][ T6271] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36
[  289.785875][ T6271] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36
[  289.800310][ T6305] loop2: detected capacity change from 0 to 256
[  290.563140][ T6271] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36
[  290.599141][ T6305] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  290.666912][ T6271] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36
[  290.832859][ T6271] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36
[  291.670218][ T6271] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36
[  291.684068][ T6271] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  291.702788][ T6271] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36
[  291.719667][ T6271] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  291.732313][ T6316] loop0: detected capacity change from 0 to 256
[  291.750492][ T6271] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 36
[  291.760508][ T6271] attempt to access beyond end of device
[  291.760508][ T6271] loop4: rw=524288, want=848, limit=16
[  291.767510][ T6317] loop1: detected capacity change from 0 to 128
[  291.807868][ T6271] attempt to access beyond end of device
[  291.807868][ T6271] loop4: rw=524288, want=13478624104, limit=16
[  291.830304][ T6271] attempt to access beyond end of device
[  291.830304][ T6271] loop4: rw=524288, want=13478624080, limit=16
[  291.847741][ T6271] attempt to access beyond end of device
[  291.847741][ T6271] loop4: rw=524288, want=32, limit=16
[  292.034706][ T6317] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  292.082654][ T4185] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651]
[  292.116142][ T6317] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.689466][ T6324] netlink: 68 bytes leftover after parsing attributes in process `syz.1.496'.
[  293.944031][ T6316] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  294.591584][ T6329] loop4: detected capacity change from 0 to 32768
[  295.225477][ T6334] loop1: detected capacity change from 0 to 512
[  295.250512][ T6336] CUSE: unknown device info "ÿ
"
[  295.258786][ T6336] CUSE: zero length info key specified
[  295.308515][ T6334] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  295.405160][ T6334] EXT4-fs (loop1): invalid journal inode
[  295.410933][ T6334] EXT4-fs (loop1): can't get journal size
[  295.496230][ T6334] EXT4-fs (loop1): 1 truncate cleaned up
[  295.507378][ T6334] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  296.827672][ T6361] loop0: detected capacity change from 0 to 256
[  297.164061][ T4339] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  297.566434][ T4339] usb 2-1: Using ep0 maxpacket: 16
[  297.629078][ T6361] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  297.706602][ T6357] loop2: detected capacity change from 0 to 8192
[  298.848699][ T6373] loop3: detected capacity change from 0 to 16
[  298.912400][ T6375] loop2: detected capacity change from 0 to 128
[  298.923835][ T6373] erofs: (device loop3): mounted with root inode @ nid 36.
[  299.023732][ T6375] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  299.113864][ T6375] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.132213][ T6373] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  299.201380][ T6373] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36
[  299.347929][ T6373] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  299.357888][ T6373] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36
[  299.379216][ T6373] erofs: (device loop3): z_erofs_readahead: readahead error at page 44 @ nid 36
[  299.390359][ T6373] erofs: (device loop3): z_erofs_readahead: readahead error at page 43 @ nid 36
[  299.454796][ T6383] netlink: 68 bytes leftover after parsing attributes in process `syz.2.510'.
[  300.210740][ T6373] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  300.300682][ T6373] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36
[  300.316111][ T6373] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36
[  300.461544][ T6373] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  300.481976][ T6373] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36
[  300.510750][ T6373] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36
[  300.970901][ T6373] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36
[  301.031225][ T6373] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  301.042978][ T4339] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  301.052169][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.074007][ T6391] loop2: detected capacity change from 0 to 256
[  301.106547][ T6373] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36
[  301.115688][ T4339] usb 2-1: Product: syz
[  301.119870][ T4339] usb 2-1: Manufacturer: syz
[  301.140730][ T4339] r8152-cfgselector 2-1: config 0 descriptor??
[  301.153154][ T6373] erofs: (device loop3): z_erofs_readahead: readahead error at page 27 @ nid 36
[  301.180783][ T6373] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36
[  301.203106][ T4339] r8152-cfgselector 2-1: can't set config #0, error -71
[  301.203103][ T6391] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  301.243498][ T6373] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36
[  301.292895][ T4339] r8152-cfgselector 2-1: Unknown version 0x0000
[  301.303105][ T6373] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36
[  301.610912][ T6393] loop1: detected capacity change from 0 to 32768
[  301.618644][ T4339] r8152-cfgselector 2-1: USB disconnect, device number 6
[  301.646141][ T6373] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36
[  302.175496][ T6373] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  302.186533][ T6373] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36
[  302.195718][ T6373] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  302.206253][ T6373] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36
[  302.219414][ T6373] attempt to access beyond end of device
[  302.219414][ T6373] loop3: rw=524288, want=848, limit=16
[  302.230927][ T6373] attempt to access beyond end of device
[  302.230927][ T6373] loop3: rw=524288, want=13478624104, limit=16
[  302.243175][ T6373] attempt to access beyond end of device
[  302.243175][ T6373] loop3: rw=524288, want=13478624080, limit=16
[  302.276159][ T6373] attempt to access beyond end of device
[  302.276159][ T6373] loop3: rw=524288, want=32, limit=16
[  302.289766][ T4185] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651]
[  305.676267][ T6419] loop2: detected capacity change from 0 to 8192
[  305.705198][ T6424] loop4: detected capacity change from 0 to 128
[  305.928533][ T6427] loop3: detected capacity change from 0 to 512
[  306.186661][ T6427] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  306.203943][ T6424] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  306.425602][ T6424] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.437001][ T6427] EXT4-fs (loop3): invalid journal inode
[  306.518334][ T6427] EXT4-fs (loop3): can't get journal size
[  306.650070][ T6427] EXT4-fs (loop3): 1 truncate cleaned up
[  306.659961][ T6427] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  307.315589][ T6424] netlink: 68 bytes leftover after parsing attributes in process `syz.4.523'.
[  307.463015][ T6442] loop2: detected capacity change from 0 to 256
[  307.641057][ T6444] loop1: detected capacity change from 0 to 32768
[  307.654974][ T6442] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  307.737053][ T6446] loop3: detected capacity change from 0 to 16
[  307.803270][ T6446] erofs: (device loop3): mounted with root inode @ nid 36.
[  308.318911][ T6446] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  308.329177][ T6446] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36
[  308.338473][ T6446] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  308.347817][ T6446] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36
[  308.357217][ T6446] erofs: (device loop3): z_erofs_readahead: readahead error at page 44 @ nid 36
[  308.366346][ T6446] erofs: (device loop3): z_erofs_readahead: readahead error at page 43 @ nid 36
[  308.375493][ T6446] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  308.384822][ T6446] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36
[  308.393962][ T6446] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36
[  308.403099][ T6446] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  308.412404][ T6446] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36
[  308.421560][ T6446] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36
[  308.430671][ T6446] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36
[  308.440507][ T6446] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  308.449867][ T6446] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36
[  308.460570][ T6446] erofs: (device loop3): z_erofs_readahead: readahead error at page 27 @ nid 36
[  308.469700][ T6446] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36
[  308.478807][ T6446] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36
[  308.488868][ T6446] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36
[  308.497983][ T6446] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36
[  308.507867][ T6446] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  308.517289][ T6446] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36
[  308.526426][ T6446] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  308.536397][ T6446] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36
[  308.547609][ T6446] attempt to access beyond end of device
[  308.547609][ T6446] loop3: rw=524288, want=848, limit=16
[  308.558990][ T6446] attempt to access beyond end of device
[  308.558990][ T6446] loop3: rw=524288, want=13478624104, limit=16
[  308.571080][ T6446] attempt to access beyond end of device
[  308.571080][ T6446] loop3: rw=524288, want=13478624080, limit=16
[  308.583202][ T6446] attempt to access beyond end of device
[  308.583202][ T6446] loop3: rw=524288, want=32, limit=16
[  308.618616][ T4185] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651]
[  311.066080][ T6476] loop4: detected capacity change from 0 to 512
[  311.281586][ T6476] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  311.293363][ T6476] EXT4-fs (loop4): invalid journal inode
[  311.300532][ T6476] EXT4-fs (loop4): can't get journal size
[  311.503462][ T6477] CUSE: unknown device info "ÿ
"
[  311.933097][ T6477] CUSE: zero length info key specified
[  311.937633][ T6476] EXT4-fs (loop4): 1 truncate cleaned up
[  311.959601][ T6476] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  311.999095][ T6478] loop3: detected capacity change from 0 to 8192
[  312.212345][ T6492] loop1: detected capacity change from 0 to 128
[  312.880664][ T6492] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  312.923015][ T6492] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  312.939535][ T6502] loop2: detected capacity change from 0 to 256
[  313.281940][ T6504] loop0: detected capacity change from 0 to 32768
[  313.349790][ T6506] netlink: 68 bytes leftover after parsing attributes in process `syz.1.540'.
[  313.395052][ T6502] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  314.521896][ T1111] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  314.535201][ T6504] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  314.544520][ T6504] BTRFS info (device loop0): force zlib compression, level 3
[  314.551903][ T6504] BTRFS info (device loop0): force clearing of disk cache
[  314.559076][ T6504] BTRFS info (device loop0): setting nodatasum
[  314.565400][ T6504] BTRFS info (device loop0): doing ref verification
[  314.572269][ T6504] BTRFS info (device loop0): allowing degraded mounts
[  314.579059][ T6504] BTRFS info (device loop0): enabling disk space caching
[  314.586085][ T6504] BTRFS info (device loop0): disk space caching is enabled
[  314.593299][ T6504] BTRFS info (device loop0): has skinny extents
[  315.138057][ T6528] loop1: detected capacity change from 0 to 16
[  315.145392][ T6504] BTRFS info (device loop0): enabling ssd optimizations
[  315.158430][ T6504] BTRFS info (device loop0): clearing free space tree
[  315.165410][ T6504] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  315.175111][ T6504] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  315.338422][ T6528] erofs: (device loop1): mounted with root inode @ nid 36.
[  315.884843][ T6528] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  315.894264][ T6528] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36
[  315.904122][ T6528] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  315.913482][ T6528] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36
[  315.922571][ T6528] erofs: (device loop1): z_erofs_readahead: readahead error at page 44 @ nid 36
[  315.931724][ T6528] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36
[  315.940780][ T6528] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  315.950105][ T6528] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36
[  315.959170][ T6528] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36
[  315.968279][ T6528] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  315.977596][ T6528] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36
[  315.986679][ T6528] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36
[  315.995875][ T6528] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36
[  316.005745][ T6528] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  316.015041][ T6528] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36
[  316.024204][ T6528] erofs: (device loop1): z_erofs_readahead: readahead error at page 27 @ nid 36
[  316.033283][ T6528] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36
[  316.042310][ T6528] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36
[  316.052319][ T6528] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36
[  316.061389][ T6528] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36
[  316.070602][ T6528] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  316.080050][ T6528] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36
[  316.089097][ T6528] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  316.099029][ T6528] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 36
[  316.108953][ T6528] attempt to access beyond end of device
[  316.108953][ T6528] loop1: rw=524288, want=848, limit=16
[  316.120007][ T6528] attempt to access beyond end of device
[  316.120007][ T6528] loop1: rw=524288, want=13478624104, limit=16
[  316.131721][ T6528] attempt to access beyond end of device
[  316.131721][ T6528] loop1: rw=524288, want=13478624080, limit=16
[  316.143489][ T6528] attempt to access beyond end of device
[  316.143489][ T6528] loop1: rw=524288, want=32, limit=16
[  316.163752][ T4185] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651]
[  316.686923][ T4464] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop0 scanned by udevd (4464)
[  318.283184][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  318.289590][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  319.415942][ T6567] loop4: detected capacity change from 0 to 128
[  319.451954][ T6562] CUSE: unknown device info "ÿ
"
[  319.467214][ T6562] CUSE: zero length info key specified
[  320.677809][ T6575] loop1: detected capacity change from 0 to 512
[  320.853837][ T6567] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  320.897940][ T6567] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.950324][ T6573] loop0: detected capacity change from 0 to 8192
[  320.968006][ T6575] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  321.067745][ T6575] EXT4-fs (loop1): invalid journal inode
[  321.243435][ T6575] EXT4-fs (loop1): can't get journal size
[  321.478955][ T6575] EXT4-fs (loop1): 1 truncate cleaned up
[  321.495174][ T6575] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  321.561086][ T6586] netlink: 68 bytes leftover after parsing attributes in process `syz.4.555'.
[  321.810426][ T6587] loop3: detected capacity change from 0 to 256
[  322.428124][ T6587] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  322.962859][ T5289] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  323.230863][ T6591] loop2: detected capacity change from 0 to 32768
[  323.451933][ T6598] loop0: detected capacity change from 0 to 256
[  323.572438][ T6598] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  323.572890][ T5289] usb 2-1: Using ep0 maxpacket: 16
[  323.833115][ T5289] usb 2-1: device descriptor read/all, error -71
[  325.144254][ T6617] CUSE: unknown device info "ÿ
"
[  325.273325][ T6617] CUSE: zero length info key specified
[  327.631578][ T6638] loop0: detected capacity change from 0 to 128
[  327.965280][ T6645] loop2: detected capacity change from 0 to 32768
[  327.986431][ T6642] loop3: detected capacity change from 0 to 512
[  327.996378][ T6638] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  327.998230][ T6639] loop1: detected capacity change from 0 to 8192
[  328.031470][ T6638] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.048790][ T6642] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  328.069143][ T6642] EXT4-fs (loop3): invalid journal inode
[  328.091908][ T6642] EXT4-fs (loop3): can't get journal size
[  328.494918][ T6649] netlink: 68 bytes leftover after parsing attributes in process `syz.0.572'.
[  328.978675][ T6642] EXT4-fs (loop3): 1 truncate cleaned up
[  329.002436][ T6642] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  330.158086][ T6660] loop1: detected capacity change from 0 to 256
[  331.304368][ T6660] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  331.355819][ T6677] loop3: detected capacity change from 0 to 256
[  332.847201][ T6677] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  333.866155][ T6694] CUSE: unknown device info "ÿ
"
[  333.871129][ T6694] CUSE: zero length info key specified
[  334.132558][ T6697] loop1: detected capacity change from 0 to 8192
[  334.195267][ T6703] loop2: detected capacity change from 0 to 512
[  335.391798][ T6705] loop3: detected capacity change from 0 to 32768
[  335.629455][ T6717] loop4: detected capacity change from 0 to 128
[  336.173364][ T6703] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  336.204103][ T6703] EXT4-fs (loop2): invalid journal inode
[  336.213952][ T6703] EXT4-fs (loop2): can't get journal size
[  336.253308][ T6717] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  336.272245][ T6703] EXT4-fs (loop2): 1 truncate cleaned up
[  336.279140][ T6703] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  336.284035][ T6717] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.028647][ T6728] netlink: 60 bytes leftover after parsing attributes in process `syz.4.593'.
[  340.163760][ T6733] loop0: detected capacity change from 0 to 256
[  340.263368][ T6733] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  340.289164][ T6739] loop4: detected capacity change from 0 to 256
[  340.975700][ T6747] CUSE: unknown device info "ÿ
"
[  341.072021][ T6739] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  342.455736][ T6747] CUSE: zero length info key specified
[  343.894599][ T6751] loop2: detected capacity change from 0 to 16
[  344.698379][ T6751] erofs: (device loop2): mounted with root inode @ nid 36.
[  344.776045][ T6757] loop1: detected capacity change from 0 to 512
[  344.806747][ T6751] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  344.816239][ T6751] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36
[  344.825373][ T6751] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  344.834729][ T6751] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36
[  344.843884][ T6751] erofs: (device loop2): z_erofs_readahead: readahead error at page 44 @ nid 36
[  344.852960][ T6751] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36
[  344.861987][ T6751] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  344.871323][ T6751] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36
[  344.880412][ T6751] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36
[  344.889882][ T6751] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  344.899296][ T6751] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36
[  344.908411][ T6751] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36
[  344.917533][ T6751] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36
[  344.926807][ T6751] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  344.936134][ T6751] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36
[  344.945276][ T6751] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36
[  344.954376][ T6751] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36
[  344.963530][ T6751] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36
[  344.973605][ T6751] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36
[  344.982655][ T6751] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36
[  344.992229][ T6751] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  345.001661][ T6751] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36
[  345.010748][ T6751] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  345.020736][ T6751] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 36
[  345.029903][ T6751] attempt to access beyond end of device
[  345.029903][ T6751] loop2: rw=524288, want=848, limit=16
[  345.040947][ T6751] attempt to access beyond end of device
[  345.040947][ T6751] loop2: rw=524288, want=13478624104, limit=16
[  345.052756][ T6751] attempt to access beyond end of device
[  345.052756][ T6751] loop2: rw=524288, want=13478624080, limit=16
[  345.064983][ T6751] attempt to access beyond end of device
[  345.064983][ T6751] loop2: rw=524288, want=32, limit=16
[  345.439798][ T4185] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651]
[  345.473866][ T6757] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  345.689679][ T6757] EXT4-fs (loop1): invalid journal inode
[  345.775869][ T6757] EXT4-fs (loop1): can't get journal size
[  346.061399][ T6757] EXT4-fs (loop1): 1 truncate cleaned up
[  346.146250][ T6757] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  347.163057][ T5439] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  347.433029][ T5439] usb 2-1: Using ep0 maxpacket: 16
[  347.713043][ T5439] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  347.760266][ T5439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.982836][ T5439] usb 2-1: Product: syz
[  348.008646][ T5439] usb 2-1: Manufacturer: syz
[  348.015264][ T5439] usb 2-1: SerialNumber: syz
[  348.021497][ T5439] r8152-cfgselector 2-1: config 0 descriptor??
[  348.028325][ T6776] loop2: detected capacity change from 0 to 128
[  348.043046][ T5439] r8152-cfgselector 2-1: can't set config #0, error -71
[  348.195503][ T5439] r8152-cfgselector 2-1: Unknown version 0x0000
[  348.409741][ T6776] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  348.473792][ T5439] r8152-cfgselector 2-1: USB disconnect, device number 9
[  348.723006][ T6776] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  349.138359][ T6782] netlink: 60 bytes leftover after parsing attributes in process `syz.2.607'.
[  349.565971][ T6788] overlayfs: missing 'lowerdir'
[  350.168383][ T6803] loop2: detected capacity change from 0 to 256
[  350.180356][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'.
[  350.303474][ T6803] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  350.339561][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'.
[  350.511640][ T6811] CUSE: unknown device info "ÿ
"
[  351.691804][ T6806] loop4: detected capacity change from 0 to 256
[  351.731432][ T6811] CUSE: zero length info key specified
[  351.755690][ T6810] loop3: detected capacity change from 0 to 16
[  351.802458][ T6806] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  351.916584][ T6810] erofs: (device loop3): mounted with root inode @ nid 36.
[  351.948282][ T6810] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  351.957807][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36
[  351.966899][ T6810] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  351.976215][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36
[  351.985561][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 44 @ nid 36
[  351.994894][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 43 @ nid 36
[  352.004143][ T6810] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  352.013497][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36
[  352.022649][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36
[  352.031765][ T6810] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  352.041189][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36
[  352.051070][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36
[  352.060443][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36
[  352.070365][ T6810] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  352.079719][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36
[  352.089319][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 27 @ nid 36
[  352.098511][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36
[  352.107707][ T6810] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36
[  352.117789][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36
[  352.127003][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36
[  352.136801][ T6810] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  352.146338][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36
[  352.155519][ T6810] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  352.165510][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36
[  352.176132][ T6810] attempt to access beyond end of device
[  352.176132][ T6810] loop3: rw=524288, want=848, limit=16
[  352.187579][ T6810] attempt to access beyond end of device
[  352.187579][ T6810] loop3: rw=524288, want=13478624104, limit=16
[  352.199823][ T6810] attempt to access beyond end of device
[  352.199823][ T6810] loop3: rw=524288, want=13478624080, limit=16
[  352.212069][ T6810] attempt to access beyond end of device
[  352.212069][ T6810] loop3: rw=524288, want=32, limit=16
[  352.240592][ T4185] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651]
[  353.194472][ T6818] loop3: detected capacity change from 0 to 512
[  353.233487][ T6821] loop0: detected capacity change from 0 to 64
[  353.384423][ T6818] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  353.765335][ T6818] EXT4-fs (loop3): invalid journal inode
[  353.876596][ T6818] EXT4-fs (loop3): can't get journal size
[  354.056669][ T6818] EXT4-fs (loop3): 1 truncate cleaned up
[  354.099813][ T6818] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  354.436491][ T6834] loop4: detected capacity change from 0 to 128
[  354.549887][ T6834] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  354.662955][ T6834] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  354.925745][ T6834] netlink: 60 bytes leftover after parsing attributes in process `syz.4.623'.
[  355.727073][ T5439] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  356.162839][ T5439] usb 4-1: Using ep0 maxpacket: 16
[  356.245055][ T6860] loop2: detected capacity change from 0 to 256
[  356.309166][ T6860] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  356.337506][ T6863] loop4: detected capacity change from 0 to 256
[  357.270328][ T6870] loop0: detected capacity change from 0 to 16
[  357.357415][ T6863] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  357.526453][ T6870] erofs: (device loop0): mounted with root inode @ nid 36.
[  357.546211][ T6870] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  357.555766][ T6870] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36
[  357.565027][ T6870] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  357.574497][ T6870] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36
[  357.584113][ T6870] erofs: (device loop0): z_erofs_readahead: readahead error at page 44 @ nid 36
[  357.593281][ T6870] erofs: (device loop0): z_erofs_readahead: readahead error at page 43 @ nid 36
[  357.602380][ T6870] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  357.611813][ T6870] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36
[  357.620955][ T6870] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36
[  357.630120][ T6870] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  357.639517][ T6870] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36
[  357.648666][ T6870] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36
[  357.657789][ T6870] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36
[  357.667121][ T6870] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  357.676542][ T6870] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36
[  357.685940][ T6870] erofs: (device loop0): z_erofs_readahead: readahead error at page 27 @ nid 36
[  357.695057][ T6870] erofs: (device loop0): z_erofs_readahead: readahead error at page 26 @ nid 36
[  357.704176][ T6870] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36
[  357.714500][ T6870] erofs: (device loop0): z_erofs_readahead: readahead error at page 25 @ nid 36
[  357.723636][ T6870] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36
[  357.732878][ T6870] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  357.742349][ T6870] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36
[  357.751479][ T6870] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  357.761494][ T6870] erofs: (device loop0): z_erofs_readahead: readahead error at page 15 @ nid 36
[  357.770707][ T6870] attempt to access beyond end of device
[  357.770707][ T6870] loop0: rw=524288, want=848, limit=16
[  357.781812][ T6870] attempt to access beyond end of device
[  357.781812][ T6870] loop0: rw=524288, want=13478624104, limit=16
[  357.793928][ T6870] attempt to access beyond end of device
[  357.793928][ T6870] loop0: rw=524288, want=13478624080, limit=16
[  357.805745][ T6870] attempt to access beyond end of device
[  357.805745][ T6870] loop0: rw=524288, want=32, limit=16
[  357.824508][ T4185] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651]
[  362.942788][ T5439] usb 4-1: device descriptor read/all, error -110
[  363.023719][ T6899] loop2: detected capacity change from 0 to 128
[  363.139799][ T6903] overlayfs: missing 'lowerdir'
[  363.144848][ T5439] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  363.192661][ T6899] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  363.206128][ T6899] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.670041][ T6909] netlink: 68 bytes leftover after parsing attributes in process `syz.2.637'.
[  365.100892][ T6924] loop4: detected capacity change from 0 to 16
[  365.463458][ T6924] erofs: (device loop4): mounted with root inode @ nid 36.
[  365.593880][ T6924] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  365.603476][ T6924] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36
[  365.612947][ T6924] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  365.622419][ T6924] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36
[  365.632261][ T6924] erofs: (device loop4): z_erofs_readahead: readahead error at page 44 @ nid 36
[  365.641478][ T6924] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36
[  365.650955][ T6924] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  365.660648][ T6924] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36
[  365.669982][ T6924] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36
[  365.679311][ T6924] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  365.688728][ T6924] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36
[  365.698054][ T6924] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36
[  365.707526][ T6924] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36
[  365.719776][ T6924] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  365.729311][ T6924] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36
[  365.739542][ T6924] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36
[  365.748807][ T6924] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36
[  365.758121][ T6924] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36
[  365.768220][ T6924] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36
[  365.777691][ T6924] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36
[  365.788270][ T6924] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  365.797866][ T6924] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36
[  365.807526][ T6924] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  365.817609][ T6924] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 36
[  365.827588][ T6924] attempt to access beyond end of device
[  365.827588][ T6924] loop4: rw=524288, want=848, limit=16
[  365.839469][ T6924] attempt to access beyond end of device
[  365.839469][ T6924] loop4: rw=524288, want=13478624104, limit=16
[  365.852648][ T6924] attempt to access beyond end of device
[  365.852648][ T6924] loop4: rw=524288, want=13478624080, limit=16
[  365.866234][ T6924] attempt to access beyond end of device
[  365.866234][ T6924] loop4: rw=524288, want=32, limit=16
[  365.881055][ T4185] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651]
[  366.719257][ T6933] loop3: detected capacity change from 0 to 256
[  367.686362][ T6933] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  367.792837][ T4901] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  368.319587][ T6938] overlayfs: missing 'lowerdir'
[  368.582930][ T4901] usb 1-1: Using ep0 maxpacket: 32
[  368.647850][ T6950] loop3: detected capacity change from 0 to 128
[  368.790778][ T6950] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  368.824380][ T6950] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  368.862982][ T4901] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.023593][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'.
[  369.032563][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'.
[  369.040390][ T4901] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.060233][ T4901] usb 1-1: config 0 interface 0 has no altsetting 0
[  369.074379][ T4901] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  369.101629][ T4901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.212231][ T6959] netlink: 68 bytes leftover after parsing attributes in process `syz.3.653'.
[  370.396392][ T4901] usb 1-1: config 0 descriptor??
[  370.437131][ T6945] loop2: detected capacity change from 0 to 32768
[  370.443958][ T4901] usb 1-1: can't set config #0, error -71
[  370.475623][ T4901] usb 1-1: USB disconnect, device number 7
[  370.489652][ T6965] loop0: detected capacity change from 0 to 512
[  370.538206][ T6945] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.652 (6945)
[  370.668449][ T6945] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  370.700279][ T6945] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11
[  370.711172][ T6945] BTRFS info (device loop2): using free space tree
[  370.717729][ T6945] BTRFS info (device loop2): has skinny extents
[  370.733759][ T6965] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  370.774322][ T6965] EXT4-fs (loop0): invalid journal inode
[  370.782296][ T6965] EXT4-fs (loop0): can't get journal size
[  371.835521][ T6991] loop3: detected capacity change from 0 to 16
[  371.844176][ T6965] EXT4-fs (loop0): 1 truncate cleaned up
[  371.850490][ T6965] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  372.015375][ T6991] erofs: (device loop3): mounted with root inode @ nid 36.
[  372.140838][ T6991] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  372.150258][ T6991] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36
[  372.159394][ T6991] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  372.168768][ T6991] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36
[  372.177863][ T6991] erofs: (device loop3): z_erofs_readahead: readahead error at page 44 @ nid 36
[  372.186924][ T6991] erofs: (device loop3): z_erofs_readahead: readahead error at page 43 @ nid 36
[  372.195982][ T6991] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  372.205273][ T6991] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36
[  372.214310][ T6991] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36
[  372.223894][ T6991] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  372.233224][ T6991] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36
[  372.242266][ T6991] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36
[  372.251299][ T6991] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36
[  372.260595][ T6991] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  372.269897][ T6991] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36
[  372.278989][ T6991] erofs: (device loop3): z_erofs_readahead: readahead error at page 27 @ nid 36
[  372.288060][ T6991] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36
[  372.297105][ T6991] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36
[  372.307108][ T6991] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36
[  372.316169][ T6991] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36
[  372.325829][ T6991] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  372.335256][ T6991] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36
[  372.344298][ T6991] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  372.354209][ T6991] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36
[  372.363325][ T6991] attempt to access beyond end of device
[  372.363325][ T6991] loop3: rw=524288, want=848, limit=16
[  372.374329][ T6991] attempt to access beyond end of device
[  372.374329][ T6991] loop3: rw=524288, want=13478624104, limit=16
[  372.386022][ T6991] attempt to access beyond end of device
[  372.386022][ T6991] loop3: rw=524288, want=13478624080, limit=16
[  372.397748][ T6991] attempt to access beyond end of device
[  372.397748][ T6991] loop3: rw=524288, want=32, limit=16
[  372.455208][ T4185] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651]
[  372.673925][ T6945] BTRFS error (device loop2): open_ctree failed: -12
[  372.809967][ T7008] netlink: 'syz.3.661': attribute type 33 has an invalid length.
[  372.835481][ T5443] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  372.844325][ T7008] netlink: 152 bytes leftover after parsing attributes in process `syz.3.661'.
[  372.910369][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'.
[  373.103001][ T5443] usb 1-1: Using ep0 maxpacket: 16
[  373.127431][ T7014] loop2: detected capacity change from 0 to 256
[  373.190866][ T7014] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  373.403694][ T5443] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  373.470406][ T5443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.580740][ T5443] usb 1-1: Product: syz
[  373.646846][ T5443] usb 1-1: Manufacturer: syz
[  373.701429][ T5443] usb 1-1: SerialNumber: syz
[  373.798560][ T5443] r8152-cfgselector 1-1: config 0 descriptor??
[  374.185183][ T7020] mkiss: ax0: crc mode is auto.
[  374.291131][ T7024] loop2: detected capacity change from 0 to 128
[  374.422124][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.668'.
[  374.423012][ T7024] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  374.431635][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.668'.
[  374.441801][ T7024] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  375.083256][ T7035] netlink: 68 bytes leftover after parsing attributes in process `syz.2.667'.
[  375.476256][ T7039] loop4: detected capacity change from 0 to 256
[  375.651915][ T7039] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  375.736717][ T7041] loop2: detected capacity change from 0 to 16
[  375.853079][ T5443] r8152-cfgselector 1-1: can't set config #0, error -71
[  375.913382][ T7041] erofs: (device loop2): mounted with root inode @ nid 36.
[  375.927673][ T5443] r8152-cfgselector 1-1: Unknown version 0x0000
[  375.938596][ T5443] r8152-cfgselector 1-1: USB disconnect, device number 8
[  376.260635][ T7041] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  376.270086][ T7041] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36
[  376.279183][ T7041] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  376.288509][ T7041] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36
[  376.297601][ T7041] erofs: (device loop2): z_erofs_readahead: readahead error at page 44 @ nid 36
[  376.306655][ T7041] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36
[  376.315681][ T7041] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  376.325533][ T7041] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36
[  376.334578][ T7041] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36
[  376.343628][ T7041] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  376.352916][ T7041] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36
[  376.361927][ T7041] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36
[  376.371002][ T7041] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36
[  376.380168][ T7041] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  376.389493][ T7041] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36
[  376.398602][ T7041] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36
[  376.407666][ T7041] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36
[  376.416730][ T7041] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36
[  376.427304][ T7041] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36
[  376.436348][ T7041] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36
[  376.445525][ T7041] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  376.454991][ T7041] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36
[  376.464575][ T7041] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  376.474625][ T7041] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 36
[  376.483945][ T7041] attempt to access beyond end of device
[  376.483945][ T7041] loop2: rw=524288, want=848, limit=16
[  376.494949][ T7041] attempt to access beyond end of device
[  376.494949][ T7041] loop2: rw=524288, want=13478624104, limit=16
[  376.506645][ T7041] attempt to access beyond end of device
[  376.506645][ T7041] loop2: rw=524288, want=13478624080, limit=16
[  376.518361][ T7041] attempt to access beyond end of device
[  376.518361][ T7041] loop2: rw=524288, want=32, limit=16
[  376.545939][ T4185] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651]
[  377.512952][   T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  377.721076][ T7060] loop1: detected capacity change from 0 to 256
[  377.812874][   T13] usb 4-1: Using ep0 maxpacket: 32
[  377.940445][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.680'.
[  377.950460][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.680'.
[  378.125715][   T13] usb 4-1: config 2 has an invalid interface number: 1 but max is 0
[  378.155880][   T13] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  378.158728][ T7060] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  378.179714][   T13] usb 4-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[  378.844444][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  378.850808][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  378.868089][ T7078] loop4: detected capacity change from 0 to 512
[  378.892740][ T7080] loop0: detected capacity change from 0 to 256
[  378.903493][ T7078] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  378.944644][ T7078] EXT4-fs (loop4): invalid journal inode
[  378.955379][ T7078] EXT4-fs (loop4): can't get journal size
[  378.983143][ T7080] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  379.043295][ T7078] EXT4-fs (loop4): 1 truncate cleaned up
[  379.053087][   T13] usb 4-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64
[  379.062251][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.070731][ T7078] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  379.118635][   T13] usb 4-1: Product: syz
[  379.122938][   T13] usb 4-1: Manufacturer: syz
[  379.127631][   T13] usb 4-1: SerialNumber: syz
[  379.223948][   T13] cdc_acm: probe of 4-1:2.1 failed with error -22
[  380.384010][   T13] cdc_acm: probe of 4-1:2.0 failed with error -22
[  380.678687][ T5292] usb 4-1: USB disconnect, device number 9
[  383.240493][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.693'.
[  383.249639][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.693'.
[  384.877067][ T7135] loop0: detected capacity change from 0 to 256
[  384.996273][ T7113] loop2: detected capacity change from 0 to 8192
[  385.035533][ T7135] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  385.642276][ T7132] loop1: detected capacity change from 0 to 32768
[  386.081077][ T7132] ialloc: diAlloc returned -17!
[  389.686682][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'.
[  389.695631][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'.
[  390.847695][ T7179] program syz.3.705 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  392.430229][ T7185] loop2: detected capacity change from 0 to 32768
[  392.768253][ T7185] ialloc: diAlloc returned -17!
[  393.028601][ T7187] loop1: detected capacity change from 0 to 256
[  393.111558][ T7191] loop0: detected capacity change from 0 to 512
[  393.294291][ T7191] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  393.332136][ T7187] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  393.343214][ T7191] EXT4-fs (loop0): invalid journal inode
[  393.349839][ T7191] EXT4-fs (loop0): can't get journal size
[  394.994679][ T7191] EXT4-fs (loop0): 1 truncate cleaned up
[  395.042328][ T7191] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  395.319402][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'.
[  395.328316][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'.
[  395.484515][ T7212] loop4: detected capacity change from 0 to 512
[  396.297359][ T7212] EXT4-fs (loop4): 1 orphan inode deleted
[  396.303418][ T7212] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  396.315284][ T7212] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  399.614625][ T7234] loop1: detected capacity change from 0 to 32768
[  399.669134][ T7234] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.724 (7234)
[  400.417810][ T7234] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  400.830184][ T7234] BTRFS warning (device loop1): the 'inode_cache' option is deprecated and has no effect since 5.11
[  402.378027][ T7234] BTRFS info (device loop1): using free space tree
[  404.014271][ T7234] BTRFS info (device loop1): has skinny extents
[  404.023049][ T7267] loop4: detected capacity change from 0 to 256
[  404.503401][ T7234] BTRFS error (device loop1): open_ctree failed: -12
[  404.514577][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.732'.
[  404.523547][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.732'.
[  405.616506][ T7297] program syz.4.736 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  407.021674][ T7304] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  409.377761][ T7314] loop2: detected capacity change from 0 to 32768
[  409.776943][ T7308] ialloc: diAlloc returned -17!
[  413.776124][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'.
[  413.785146][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'.
[  414.829523][ T7340] loop1: detected capacity change from 0 to 32768
[  414.899821][   T26] audit: type=1326 audit(1745674888.155:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f54b3a969 code=0x7ffc0000
[  415.007957][   T26] audit: type=1326 audit(1745674888.185:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f54b3a969 code=0x7ffc0000
[  415.356944][   T26] audit: type=1326 audit(1745674888.185:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1f54b3a969 code=0x7ffc0000
[  415.379474][   T26] audit: type=1326 audit(1745674888.185:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f54b3a969 code=0x7ffc0000
[  415.401959][   T26] audit: type=1326 audit(1745674888.185:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f54b3a969 code=0x7ffc0000
[  415.424394][   T26] audit: type=1326 audit(1745674888.185:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f1f54b3a969 code=0x7ffc0000
[  415.447344][   T26] audit: type=1326 audit(1745674888.185:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f54b3a969 code=0x7ffc0000
[  415.472075][   T26] audit: type=1326 audit(1745674888.185:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f54b3a969 code=0x7ffc0000
[  415.494931][   T26] audit: type=1326 audit(1745674888.195:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f1f54b3a969 code=0x7ffc0000
[  415.540521][   T26] audit: type=1326 audit(1745674888.195:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f54b3a969 code=0x7ffc0000
[  417.446305][ T7375] xt_connbytes: Forcing CT accounting to be enabled
[  417.453183][ T7375] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  417.465067][ T7375] xt_bpf: check failed: parse error
[  419.528665][ T7378] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  419.969425][ T7390] overlayfs: missing 'lowerdir'
[  420.314828][ T4251] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  420.458122][ T7392] loop2: detected capacity change from 0 to 256
[  420.476273][ T7394] loop1: detected capacity change from 0 to 64
[  420.656519][ T7396] loop4: detected capacity change from 0 to 32768
[  420.693694][ T4251] usb 4-1: Using ep0 maxpacket: 16
[  420.762312][ T7392] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  421.382939][ T4251] usb 4-1: config 107 has an invalid descriptor of length 0, skipping remainder of the config
[  421.722859][ T4251] usb 4-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=49.e4
[  421.731931][ T4251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.511161][ T4251] usb 4-1: Product: syz
[  422.515462][ T4251] usb 4-1: Manufacturer: syz
[  422.520065][ T4251] usb 4-1: SerialNumber: syz
[  423.109439][ T4251] usb 4-1: USB disconnect, device number 10
[  423.428520][ T4251] ==================================================================
[  423.436979][ T4251] BUG: KASAN: use-after-free in hdm_disconnect+0x109/0x1c0
[  423.444223][ T4251] Read of size 8 at addr ffff88807af8d960 by task kworker/0:8/4251
[  423.452126][ T4251] 
[  423.454464][ T4251] CPU: 0 PID: 4251 Comm: kworker/0:8 Not tainted 5.15.180-syzkaller #0
[  423.462714][ T4251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  423.470346][ T7414] mmap: syz.2.767 (7414) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  423.472778][ T4251] Workqueue: usb_hub_wq hub_event
[  423.472841][ T4251] Call Trace:
[  423.472850][ T4251]  <TASK>
[  423.472860][ T4251]  dump_stack_lvl+0x168/0x230
[  423.500530][ T4251]  ? show_regs_print_info+0x20/0x20
[  423.505742][ T4251]  ? load_image+0x3b0/0x3b0
[  423.510249][ T4251]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  423.515632][ T4251]  print_address_description+0x60/0x2d0
[  423.521184][ T4251]  ? hdm_disconnect+0x109/0x1c0
[  423.526034][ T4251]  kasan_report+0xdf/0x130
[  423.530450][ T4251]  ? hdm_disconnect+0x109/0x1c0
[  423.535310][ T4251]  hdm_disconnect+0x109/0x1c0
[  423.539993][ T4251]  usb_unbind_interface+0x1ee/0x860
[  423.545203][ T4251]  ? usb_driver_release_interface+0x1b0/0x1b0
[  423.551267][ T4251]  device_release_driver_internal+0x4b4/0x750
[  423.557351][ T4251]  bus_remove_device+0x2e2/0x400
[  423.562290][ T4251]  device_del+0x628/0xa70
[  423.566619][ T4251]  ? kill_device+0x160/0x160
[  423.571203][ T4251]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  423.576830][ T4251]  ? mutex_lock_io_nested+0x60/0x60
[  423.582027][ T4251]  usb_disable_device+0x3e2/0x890
[  423.587054][ T4251]  usb_disconnect+0x348/0x8a0
[  423.591735][ T4251]  hub_event+0x1af8/0x4fa0
[  423.596180][ T4251]  ? led_work+0x6e0/0x6e0
[  423.600504][ T4251]  ? read_lock_is_recursive+0x10/0x10
[  423.605885][ T4251]  ? preempt_schedule_thunk+0x16/0x18
[  423.611260][ T4251]  process_one_work+0x863/0x1000
[  423.616207][ T4251]  ? worker_detach_from_pool+0x240/0x240
[  423.621836][ T4251]  ? lockdep_hardirqs_off+0x70/0x100
[  423.627130][ T4251]  ? _raw_spin_lock_irq+0xab/0xe0
[  423.632162][ T4251]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  423.637534][ T4251]  ? wq_worker_running+0x97/0x170
[  423.642555][ T4251]  worker_thread+0xdca/0x12a0
[  423.647244][ T4251]  ? lockdep_hardirqs_on+0x94/0x140
[  423.652450][ T4251]  ? lockdep_hardirqs_on+0x94/0x140
[  423.658257][ T4251]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  423.664157][ T4251]  kthread+0x436/0x520
[  423.668221][ T4251]  ? rcu_lock_release+0x20/0x20
[  423.673069][ T4251]  ? kthread_blkcg+0xd0/0xd0
[  423.677652][ T4251]  ret_from_fork+0x1f/0x30
[  423.682076][ T4251]  </TASK>
[  423.685088][ T4251] 
[  423.687408][ T4251] Allocated by task 4251:
[  423.691719][ T4251]  __kasan_kmalloc+0xb5/0xf0
[  423.696303][ T4251]  hdm_probe+0x8f/0x13d0
[  423.700546][ T4251]  usb_probe_interface+0x5a0/0xaf0
[  423.705649][ T4251]  really_probe+0x284/0xc80
[  423.710144][ T4251]  __driver_probe_device+0x18c/0x330
[  423.715421][ T4251]  driver_probe_device+0x4f/0x420
[  423.720443][ T4251]  __device_attach_driver+0x2b0/0x500
[  423.725812][ T4251]  bus_for_each_drv+0x175/0x200
[  423.730654][ T4251]  __device_attach+0x29b/0x460
[  423.735418][ T4251]  bus_probe_device+0xbc/0x1e0
[  423.740176][ T4251]  device_add+0xa00/0xfb0
[  423.744497][ T4251]  usb_set_configuration+0x1991/0x1fd0
[  423.749957][ T4251]  usb_generic_driver_probe+0x89/0x150
[  423.755409][ T4251]  usb_probe_device+0x139/0x270
[  423.760256][ T4251]  really_probe+0x284/0xc80
[  423.764752][ T4251]  __driver_probe_device+0x18c/0x330
[  423.770028][ T4251]  driver_probe_device+0x4f/0x420
[  423.775048][ T4251]  __device_attach_driver+0x2b0/0x500
[  423.780422][ T4251]  bus_for_each_drv+0x175/0x200
[  423.785268][ T4251]  __device_attach+0x29b/0x460
[  423.790027][ T4251]  bus_probe_device+0xbc/0x1e0
[  423.794780][ T4251]  device_add+0xa00/0xfb0
[  423.799124][ T4251]  usb_new_device+0xd53/0x1640
[  423.803885][ T4251]  hub_event+0x295c/0x4fa0
[  423.808291][ T4251]  process_one_work+0x863/0x1000
[  423.813230][ T4251]  worker_thread+0xaa8/0x12a0
[  423.817912][ T4251]  kthread+0x436/0x520
[  423.821971][ T4251]  ret_from_fork+0x1f/0x30
[  423.826384][ T4251] 
[  423.828701][ T4251] Freed by task 4251:
[  423.832681][ T4251]  kasan_set_track+0x4b/0x70
[  423.837272][ T4251]  kasan_set_free_info+0x1f/0x40
[  423.842205][ T4251]  ____kasan_slab_free+0xd5/0x110
[  423.847228][ T4251]  slab_free_freelist_hook+0xea/0x170
[  423.852596][ T4251]  kfree+0xef/0x2a0
[  423.856394][ T4251]  device_release+0x92/0x1c0
[  423.860978][ T4251]  kobject_put+0x21d/0x460
[  423.865387][ T4251]  hdm_disconnect+0xef/0x1c0
[  423.869970][ T4251]  usb_unbind_interface+0x1ee/0x860
[  423.875165][ T4251]  device_release_driver_internal+0x4b4/0x750
[  423.881229][ T4251]  bus_remove_device+0x2e2/0x400
[  423.886157][ T4251]  device_del+0x628/0xa70
[  423.890482][ T4251]  usb_disable_device+0x3e2/0x890
[  423.895507][ T4251]  usb_disconnect+0x348/0x8a0
[  423.900189][ T4251]  hub_event+0x1af8/0x4fa0
[  423.904617][ T4251]  process_one_work+0x863/0x1000
[  423.909559][ T4251]  worker_thread+0xdca/0x12a0
[  423.914239][ T4251]  kthread+0x436/0x520
[  423.918315][ T4251]  ret_from_fork+0x1f/0x30
[  423.922733][ T4251] 
[  423.925049][ T4251] Last potentially related work creation:
[  423.930756][ T4251]  kasan_save_stack+0x35/0x60
[  423.935430][ T4251]  kasan_record_aux_stack+0xb8/0x100
[  423.940715][ T4251]  insert_work+0x54/0x3d0
[  423.945038][ T4251]  __queue_work+0x9c5/0xd50
[  423.949535][ T4251]  queue_work_on+0x11d/0x1d0
[  423.954117][ T4251]  sg_release+0x1d0/0x2c0
[  423.958441][ T4251]  __fput+0x234/0x930
[  423.962421][ T4251]  task_work_run+0x125/0x1a0
[  423.967032][ T4251]  do_exit+0x616/0x20a0
[  423.971183][ T4251]  do_group_exit+0x12e/0x300
[  423.975768][ T4251]  get_signal+0x6ca/0x12c0
[  423.980178][ T4251]  arch_do_signal_or_restart+0xc1/0x1300
[  423.985805][ T4251]  exit_to_user_mode_loop+0x9e/0x130
[  423.991097][ T4251]  exit_to_user_mode_prepare+0xb1/0x140
[  423.996652][ T4251]  syscall_exit_to_user_mode+0x16/0x40
[  424.002122][ T4251]  do_syscall_64+0x58/0xa0
[  424.006550][ T4251]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  424.012444][ T4251] 
[  424.014763][ T4251] The buggy address belongs to the object at ffff88807af8c000
[  424.014763][ T4251]  which belongs to the cache kmalloc-8k of size 8192
[  424.028828][ T4251] The buggy address is located 6496 bytes inside of
[  424.028828][ T4251]  8192-byte region [ffff88807af8c000, ffff88807af8e000)
[  424.042381][ T4251] The buggy address belongs to the page:
[  424.048151][ T4251] page:ffffea0001ebe200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7af88
[  424.058490][ T4251] head:ffffea0001ebe200 order:3 compound_mapcount:0 compound_pincount:0
[  424.066814][ T4251] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  424.074808][ T4251] raw: 00fff00000010200 ffffea0001eb3e00 0000000200000002 ffff888016842280
[  424.083390][ T4251] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000
[  424.091961][ T4251] page dumped because: kasan: bad access detected
[  424.098367][ T4251] page_owner tracks the page as allocated
[  424.104069][ T4251] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7173, ts 388825808198, free_ts 388734056823
[  424.124731][ T4251]  get_page_from_freelist+0x1b77/0x1c60
[  424.130292][ T4251]  __alloc_pages+0x1e1/0x470
[  424.134883][ T4251]  new_slab+0xc0/0x4b0
[  424.138948][ T4251]  ___slab_alloc+0x81e/0xdf0
[  424.143538][ T4251]  __kmalloc_node+0x200/0x3b0
[  424.148212][ T4251]  kvmalloc_node+0x84/0x130
[  424.152711][ T4251]  bpf_check+0x147/0xf090
[  424.157065][ T4251]  bpf_prog_load+0x1043/0x1550
[  424.161824][ T4251]  __sys_bpf+0x4c2/0x670
[  424.166062][ T4251]  __x64_sys_bpf+0x78/0x90
[  424.170471][ T4251]  do_syscall_64+0x4c/0xa0
[  424.174877][ T4251]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  424.180770][ T4251] page last free stack trace:
[  424.185430][ T4251]  free_unref_page_prepare+0x637/0x6c0
[  424.190898][ T4251]  free_unref_page+0x94/0x280
[  424.195572][ T4251]  __unfreeze_partials+0x1a5/0x200
[  424.200675][ T4251]  put_cpu_partial+0x12d/0x190
[  424.205456][ T4251]  qlist_free_all+0x35/0x90
[  424.209957][ T4251]  kasan_quarantine_reduce+0x150/0x160
[  424.215409][ T4251]  __kasan_slab_alloc+0x2f/0xd0
[  424.220265][ T4251]  slab_post_alloc_hook+0x4c/0x380
[  424.225371][ T4251]  kmem_cache_alloc+0x100/0x290
[  424.230217][ T4251]  copy_fs_struct+0x4b/0x270
[  424.234802][ T4251]  copy_fs+0x6c/0x140
[  424.238775][ T4251]  copy_process+0x16ba/0x3e60
[  424.243453][ T4251]  kernel_clone+0x219/0x930
[  424.247953][ T4251]  __x64_sys_clone+0x170/0x1c0
[  424.252710][ T4251]  do_syscall_64+0x4c/0xa0
[  424.257130][ T4251]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  424.263020][ T4251] 
[  424.265331][ T4251] Memory state around the buggy address:
[  424.270952][ T4251]  ffff88807af8d800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  424.279003][ T4251]  ffff88807af8d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  424.287051][ T4251] >ffff88807af8d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  424.295110][ T4251]                                                        ^
[  424.302309][ T4251]  ffff88807af8d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  424.310358][ T4251]  ffff88807af8da00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  424.318411][ T4251] ==================================================================
[  424.326457][ T4251] Disabling lock debugging due to kernel taint
[  424.846424][ T4251] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  424.853654][ T4251] CPU: 0 PID: 4251 Comm: kworker/0:8 Tainted: G    B             5.15.180-syzkaller #0
[  424.863293][ T4251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  424.873357][ T4251] Workqueue: usb_hub_wq hub_event
[  424.878400][ T4251] Call Trace:
[  424.878490][ T7414] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  424.881677][ T4251]  <TASK>
[  424.881686][ T4251]  dump_stack_lvl+0x168/0x230
[  424.890491][ T7414] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  424.893304][ T4251]  ? show_regs_print_info+0x20/0x20
[  424.893331][ T4251]  ? load_image+0x3b0/0x3b0
[  424.898032][ T7414] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  424.906676][ T4251]  panic+0x2c9/0x7f0
[  424.906706][ T4251]  ? bpf_jit_dump+0xd0/0xd0
[  424.906729][ T4251]  ? _raw_spin_unlock_irqrestore+0xf6/0x100
[  424.911999][ T7414] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  424.916477][ T4251]  ? _raw_spin_unlock+0x40/0x40
[  424.916503][ T4251]  ? hdm_disconnect+0x109/0x1c0
[  424.957784][ T4251]  check_panic_on_warn+0x80/0xa0
[  424.962737][ T4251]  ? hdm_disconnect+0x109/0x1c0
[  424.967609][ T4251]  end_report+0x6d/0xf0
[  424.971785][ T4251]  kasan_report+0x102/0x130
[  424.976304][ T4251]  ? hdm_disconnect+0x109/0x1c0
[  424.981170][ T4251]  hdm_disconnect+0x109/0x1c0
[  424.985874][ T4251]  usb_unbind_interface+0x1ee/0x860
[  424.991111][ T4251]  ? usb_driver_release_interface+0x1b0/0x1b0
[  424.997217][ T4251]  device_release_driver_internal+0x4b4/0x750
[  425.003297][ T4251]  bus_remove_device+0x2e2/0x400
[  425.008244][ T4251]  device_del+0x628/0xa70
[  425.012585][ T4251]  ? kill_device+0x160/0x160
[  425.017179][ T4251]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  425.022920][ T4251]  ? mutex_lock_io_nested+0x60/0x60
[  425.028134][ T4251]  usb_disable_device+0x3e2/0x890
[  425.033177][ T4251]  usb_disconnect+0x348/0x8a0
[  425.037865][ T4251]  hub_event+0x1af8/0x4fa0
[  425.042315][ T4251]  ? led_work+0x6e0/0x6e0
[  425.046647][ T4251]  ? read_lock_is_recursive+0x10/0x10
[  425.052030][ T4251]  ? preempt_schedule_thunk+0x16/0x18
[  425.057418][ T4251]  process_one_work+0x863/0x1000
[  425.062378][ T4251]  ? worker_detach_from_pool+0x240/0x240
[  425.068019][ T4251]  ? lockdep_hardirqs_off+0x70/0x100
[  425.073321][ T4251]  ? _raw_spin_lock_irq+0xab/0xe0
[  425.078360][ T4251]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  425.083742][ T4251]  ? wq_worker_running+0x97/0x170
[  425.088771][ T4251]  worker_thread+0xdca/0x12a0
[  425.093452][ T4251]  ? lockdep_hardirqs_on+0x94/0x140
[  425.098664][ T4251]  ? lockdep_hardirqs_on+0x94/0x140
[  425.103907][ T4251]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  425.109822][ T4251]  kthread+0x436/0x520
[  425.113894][ T4251]  ? rcu_lock_release+0x20/0x20
[  425.118753][ T4251]  ? kthread_blkcg+0xd0/0xd0
[  425.123348][ T4251]  ret_from_fork+0x1f/0x30
[  425.127797][ T4251]  </TASK>
[  425.130911][ T4251] Kernel Offset: disabled
[  425.135242][ T4251] Rebooting in 86400 seconds..