last executing test programs:

38.883387596s ago: executing program 0 (id=8):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x31}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

38.525936941s ago: executing program 0 (id=10):
syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x38, 0x2d, 0x32, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r0, 0x0, 0x0, 0x1001f0)
fallocate(r0, 0x3, 0x9, 0x10000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xffff, 0x100000001, 0x6})

36.751496527s ago: executing program 0 (id=19):
r0 = gettid()
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
read$FUSE(r1, &(0x7f0000001680)={0x2020}, 0x2020)
timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0)
rt_sigaction(0x12, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180))

35.455861556s ago: executing program 0 (id=22):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000f80)={[{@delalloc}, {@data_err_abort}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$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")
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)

35.047323233s ago: executing program 0 (id=23):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000640)='stack\x00')
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket(0x11, 0x803, 0x4)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

34.307859953s ago: executing program 0 (id=28):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="66b9b50000400f3266b93306000066b80028000066ba000000000f300f0d4f5266b9600000000f32baf80c66b826f0e48c66efbafc0cb000ee0f01c366b97e0200000f32d8d76526660f3881b41400ba410066b80008000066ef", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

33.996625658s ago: executing program 32 (id=28):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="66b9b50000400f3266b93306000066b80028000066ba000000000f300f0d4f5266b9600000000f32baf80c66b826f0e48c66efbafc0cb000ee0f01c366b97e0200000f32d8d76526660f3881b41400ba410066b80008000066ef", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

32.153132025s ago: executing program 3 (id=39):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

31.8568061s ago: executing program 3 (id=42):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x0)

31.471451325s ago: executing program 3 (id=43):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)

31.060745301s ago: executing program 3 (id=44):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100cc9a, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x1, 0x2af, &(0x7f0000000240)="$eJzs3UFr1E4Yx/HfJNvt/v8tNbYVQTxVBU+lrRcRRJF9B148idrdQnGpoBXUi9Vz8eCxd9+CL8KTeBa8efIFFDxEZpI0yW6S3XbZxq3fD3TJJvMk83SyyTwLSwTgn3Wv/ePTjZ/2z0i+fKkpyZPUkhqSLuhi6+XO7vZur9up2pHvIuyfURRpBtps7nSLQm2ci4gF9l1D85l1zeIgjKv1/dghPv/8s8eEYRgWrPek2exon5WR36u7AzUzhzrUbN29AADUzc3+o4m/L/nz8fzd86Rr8W3fbk/v/9N7A/0dRuruR63c/f+VFpLKKzR2fM+5TWm950o4u91LqsTKnXrFq5vxNj/XgWFVpeuL99/Wdq+7uvms1/H0XndimWbL7rWTP3i2t+8Gd71SUJtWGCn3I28zJ9acy2HG5rBR0v+l8Y/ozJRu6RsV88V8NQ9NoAN13PhbjdDYYXIjFfSNVNT/NeWL9AyXZRC1KsnyvIu+lC/kK7P01deNrGa8z0Y2+SDtZ0XUYl8WUXbrQ6KWCqM2hkQt90elZ3N55KSZD+aBWdEvfVb7aPztWeJHl/rhn0zbxrWMz4zKfBquZeDuJ/Gnbu9yYcuSqwcmYl9PdFMLL16/efq41+s+Z2G0heQ6+7f050QLyUlw6kf33cJHSXXkvr96e8um7dYonuJO9KAazNTXiOGNcY6e3HdO3vkarkk4demgHzOweCqI6eO5r/9d/ZepV9bcZM2+BBXz9KFFdGaP6yW1waJ7/b+8gssx7quHufIKbtSa68p16WrJEdsHA7sN4n5OtbtKvsIxbX3To8z8HwAAAAAAAAAAAAAAAAAAAFNhvJ83hGH684aWyhrXnSMAAAAAAAAAAAAAAAAAAAAAANNu8Pm/ulXr83/vK3qXf/4vgAn4EwAA////Xngs")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

30.546400809s ago: executing program 3 (id=46):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x20)
r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0)
dup3(r1, r0, 0x0)
io_setup(0x2, &(0x7f0000000400)=<r2=>0x0)
mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0)
io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}])

29.960476327s ago: executing program 3 (id=49):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000180)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

29.577749523s ago: executing program 33 (id=49):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000180)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

10.044956381s ago: executing program 2 (id=101):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x80000)
ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0)
fcntl$getown(r1, 0x9)
syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xb9, 0x8}, {0x200, 0x8, 0x4, 0x1}}}}, 0x15)
syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_PERIODIC_INQ={{0xda}, 0xb}}}, 0x7)
ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0)

9.740696616s ago: executing program 2 (id=103):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x4, 0xf, 0x5}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.321477462s ago: executing program 2 (id=106):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000025c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800)

8.898233148s ago: executing program 2 (id=109):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10)
move_mount(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file0/../file0/../file0/../file0\x00', 0x270)

8.564009903s ago: executing program 2 (id=110):
socket$l2tp(0x2, 0x2, 0x73)
r0 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x2000082e}, 0x0)

8.204006429s ago: executing program 2 (id=112):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0xff}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r2, 0x0, {0x0, 0xff, 0x3}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24000044}, 0x4008010)

7.652923937s ago: executing program 34 (id=112):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0xff}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r2, 0x0, {0x0, 0xff, 0x3}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24000044}, 0x4008010)

6.288020597s ago: executing program 4 (id=121):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340", 0x9}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.006307011s ago: executing program 4 (id=123):
r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000100)='io\x00')
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xffffb9e3, 0x5})
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x9)

5.789602734s ago: executing program 4 (id=124):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)
sendto$inet6(r0, &(0x7f00000000c0)="1a", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x10000}, 0x1c)
sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="d7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="85", 0x1}], 0x1}}], 0x2, 0x40448c0)
shutdown(r0, 0x1)

5.495063129s ago: executing program 4 (id=125):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="090a0e"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x4, 0xe0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x7fff, 0xe, 0x6}, {0x6, 0x24, 0x1a, 0x4, 0xe}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xe9, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xb, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0xfd, 0x6}}}}}}}]}}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)

4.825879069s ago: executing program 1 (id=127):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

3.868862733s ago: executing program 5 (id=129):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000b40)=""/263, 0x107, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000780)=""/212, 0xd4, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000680)=""/215, 0xd7, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000500)=""/254, 0xfe, 0x0, 0x5, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48)

3.710576046s ago: executing program 5 (id=130):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)

3.36986839s ago: executing program 1 (id=131):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140))

3.322874541s ago: executing program 5 (id=132):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0xa}, 0x90)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x5, 0x10001, 0x7fff, 0x2, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8, r0}, 0x38)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)

3.134255414s ago: executing program 4 (id=133):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0xb}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x7fd}, @TCA_U32_CLASSID={0x8, 0x1, {0x10, 0x6}}, @TCA_U32_SEL={0xfffffeec, 0x5, {0x3, 0x7, 0x3, 0x4, 0x2, 0xfff5, 0x5, 0x0, [{0x1, 0x1, 0x4, 0x15}, {0x8, 0x100, 0x2, 0x1}, {0x4, 0x101, 0xe28, 0x6}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3.024057655s ago: executing program 5 (id=134):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

2.739859139s ago: executing program 1 (id=135):
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x3f}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f000000a5c0)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents64(r1, 0x0, 0x0)
fsync(r1)
renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
fsync(0xffffffffffffffff)

1.659379116s ago: executing program 1 (id=136):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c)
listen(r0, 0x0)

1.390966489s ago: executing program 1 (id=137):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003280)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x622da51a, 0x7, 0x80000000, 0x1ff, 0x5, 0xbb, 0x1ff, 0x9b7c, 0x4, 0x2, 0xfffffffe, 0xffffffff, 0x2, 0x2, 0x4, 0x80, 0x80, 0x0, 0x9, 0x5, 0x3d3f, 0x5, 0x5, 0xc201, 0x10001, 0x37, 0x7b8, 0x10, 0x1c1, 0x10, 0x8, 0x9, 0x3, 0x1, 0x6, 0x9, 0x5, 0xfffffffa, 0xa, 0xad, 0x3, 0x1, 0x7fff, 0x0, 0x8000, 0x3, 0x4, 0x2, 0x1d, 0x7fffffff, 0x81, 0xffffffff, 0x1, 0x100, 0x2, 0x9, 0xfc99, 0xfffffffe, 0x10000, 0xf5, 0x101, 0x3, 0x5, 0x3, 0x2, 0xe, 0xfff, 0xf, 0x6, 0x6, 0x5, 0x5, 0x3, 0x7f, 0x0, 0x3, 0x7fffffff, 0x7, 0xa, 0xffffffff, 0x9, 0x3, 0x8, 0x0, 0x6, 0x8, 0xfffffffb, 0x5, 0x1, 0x40, 0x8ba, 0x2, 0x10001, 0x100, 0xffff, 0xd4ad, 0x0, 0x5, 0x3, 0x71ba, 0x78, 0xff, 0xf44, 0x0, 0xfffeffff, 0x200, 0x7, 0xfffffff8, 0xa405, 0x3, 0xfff, 0x1, 0xfff, 0x97, 0x18b6, 0xd4, 0xfffffffc, 0xc, 0x5, 0x2ddd9865, 0xc49b, 0x9, 0x1, 0x2, 0x8, 0x5, 0x8001, 0x7ff, 0x4, 0x9, 0x0, 0x2, 0x3, 0x41, 0x2, 0x80000000, 0x0, 0x24000000, 0x2, 0x9, 0x9, 0x9, 0x4, 0x0, 0x9, 0x100, 0x1, 0x4, 0x9, 0x1, 0x4, 0x9, 0x2800, 0xf5, 0xfffffff7, 0x1, 0x4, 0x400, 0x9, 0x0, 0xf, 0x4, 0x2, 0x7fffffff, 0x3, 0xa, 0x7, 0x1ff, 0x1, 0x6, 0x4, 0x0, 0x3, 0x8000, 0x99f, 0x800, 0x3, 0x5, 0x1, 0x0, 0xf, 0x3, 0x3, 0x0, 0x5, 0xb, 0x4e65, 0x3ff, 0x7, 0xd0, 0x28, 0x4, 0x4, 0x4, 0x5, 0x6, 0x7e, 0x1141, 0x3, 0x81, 0xce13, 0xfffffff7, 0x8, 0x0, 0x0, 0x4, 0x52f0d2eb, 0x4, 0x5, 0x0, 0x8, 0x6587, 0xfffffffd, 0x2, 0x80, 0x800, 0xfffffff8, 0x0, 0xa2a7, 0x81, 0x6, 0xef, 0x7, 0xa2, 0xb1, 0x6, 0x7, 0x6, 0x7ff, 0x4, 0x10, 0x4, 0x3, 0x81, 0x4, 0xc, 0x5, 0x7, 0x4, 0x0, 0x0, 0xc00, 0x9, 0xe, 0xff, 0xfffffff9, 0x8, 0xc2b, 0x9, 0x9, 0x80000001, 0x7, 0xe0000000, 0x3d]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffa, 0x20000003, 0x1000, 0xffffffff, 0x6, {0x2, 0x2, 0x7f, 0xb, 0xfeff, 0x7}, {0x7, 0x2, 0x3, 0x1, 0x9}, 0x3, 0x7eb40b64, 0x3}}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804)

504.584543ms ago: executing program 4 (id=138):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x5, 0x8, 0x7, 0xe7}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c044}, 0x4044094)

390.515624ms ago: executing program 5 (id=139):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
getuid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4)
fadvise64(r0, 0xe0ffff, 0x9, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)

374.845894ms ago: executing program 1 (id=140):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800)

0s ago: executing program 5 (id=141):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
syz_usb_connect(0x2, 0x62, &(0x7f0000000340)=ANY=[@ANYBLOB="120110014f218508d6160100cdb2010203010902"], 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0xe0, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_NAT_SRC={0x4}, @CTA_TUPLE_REPLY={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x1c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x10}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xa}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x48890)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts.
[   82.718013][ T5773] cgroup: Unknown subsys name 'net'
[   82.850938][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.530970][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.249092][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.272238][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.282754][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.302827][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.323247][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.324154][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.353260][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.357715][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.368191][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.370239][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.375736][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   86.382541][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.390744][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.398413][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.404143][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.413065][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.421029][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.426520][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.432945][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   86.440792][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   86.445731][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.454311][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.467387][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   86.475711][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.041703][ T5796] chnl_net:caif_netlink_parms(): no params data found
[   87.054864][ T5787] chnl_net:caif_netlink_parms(): no params data found
[   87.164754][ T5791] chnl_net:caif_netlink_parms(): no params data found
[   87.207550][ T5786] chnl_net:caif_netlink_parms(): no params data found
[   87.309457][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.319816][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.330030][ T5787] bridge_slave_0: entered allmulticast mode
[   87.340965][ T5787] bridge_slave_0: entered promiscuous mode
[   87.414827][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.422570][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.429819][ T5787] bridge_slave_1: entered allmulticast mode
[   87.438463][ T5787] bridge_slave_1: entered promiscuous mode
[   87.446272][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.454101][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.461338][ T5796] bridge_slave_0: entered allmulticast mode
[   87.469353][ T5796] bridge_slave_0: entered promiscuous mode
[   87.537413][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.545743][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.554010][ T5796] bridge_slave_1: entered allmulticast mode
[   87.561456][ T5796] bridge_slave_1: entered promiscuous mode
[   87.594409][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.651299][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.659953][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.667671][ T5791] bridge_slave_0: entered allmulticast mode
[   87.675361][ T5791] bridge_slave_0: entered promiscuous mode
[   87.693465][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.720151][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.729903][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.737704][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.745303][ T5791] bridge_slave_1: entered allmulticast mode
[   87.753630][ T5791] bridge_slave_1: entered promiscuous mode
[   87.783262][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.821272][ T5787] team0: Port device team_slave_0 added
[   87.867559][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.878476][ T5787] team0: Port device team_slave_1 added
[   87.916380][ T5796] team0: Port device team_slave_0 added
[   87.925752][ T5796] team0: Port device team_slave_1 added
[   87.934340][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.961891][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.969524][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.977136][ T5786] bridge_slave_0: entered allmulticast mode
[   87.984730][ T5786] bridge_slave_0: entered promiscuous mode
[   87.993258][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.000504][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.007947][ T5786] bridge_slave_1: entered allmulticast mode
[   88.015288][ T5786] bridge_slave_1: entered promiscuous mode
[   88.060863][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.068235][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.094380][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.133559][ T5791] team0: Port device team_slave_0 added
[   88.140294][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.147428][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.173915][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.206828][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.220115][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.246539][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.259376][ T5791] team0: Port device team_slave_1 added
[   88.272169][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.282201][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.289176][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.315540][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.353852][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.420810][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.428505][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.454896][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.471925][ T5786] team0: Port device team_slave_0 added
[   88.484295][ T5787] hsr_slave_0: entered promiscuous mode
[   88.490892][ T5787] hsr_slave_1: entered promiscuous mode
[   88.521664][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.529027][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.555958][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.556063][ T5794] Bluetooth: hci0: command tx timeout
[   88.567124][ T5797] Bluetooth: hci1: command tx timeout
[   88.572321][ T5794] Bluetooth: hci2: command tx timeout
[   88.592601][ T5786] team0: Port device team_slave_1 added
[   88.616690][ T5796] hsr_slave_0: entered promiscuous mode
[   88.622513][ T5794] Bluetooth: hci3: command tx timeout
[   88.628559][ T5796] hsr_slave_1: entered promiscuous mode
[   88.634954][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.643044][ T5796] Cannot create hsr debugfs directory
[   88.709486][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.716618][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.743659][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.772132][ T5791] hsr_slave_0: entered promiscuous mode
[   88.778626][ T5791] hsr_slave_1: entered promiscuous mode
[   88.785821][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.793632][ T5791] Cannot create hsr debugfs directory
[   88.812403][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.819392][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.845647][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.003918][ T5786] hsr_slave_0: entered promiscuous mode
[   89.010317][ T5786] hsr_slave_1: entered promiscuous mode
[   89.017281][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.025061][ T5786] Cannot create hsr debugfs directory
[   89.339404][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.355782][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.369443][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.379431][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.465872][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.476939][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.487664][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.502581][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.597259][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.608668][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.619282][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.631559][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.730726][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.741820][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.761723][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.778005][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.875760][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.923964][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.950493][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   89.986555][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.994273][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.010339][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.017557][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.051568][ T5796] 8021q: adding VLAN 0 to HW filter on device team0
[   90.087513][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.094714][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.106668][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.113835][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.170271][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.188667][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.238753][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   90.289173][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.296439][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.318233][ T5791] 8021q: adding VLAN 0 to HW filter on device team0
[   90.352744][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.360022][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.391338][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.398565][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.410873][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.418247][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.615550][ T5797] Bluetooth: hci1: command tx timeout
[   90.621037][ T5797] Bluetooth: hci0: command tx timeout
[   90.633017][ T5794] Bluetooth: hci2: command tx timeout
[   90.694400][ T5797] Bluetooth: hci3: command tx timeout
[   90.857307][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.968568][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.038769][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.067958][ T5787] veth0_vlan: entered promiscuous mode
[   91.090146][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.116995][ T5787] veth1_vlan: entered promiscuous mode
[   91.136187][ T5796] veth0_vlan: entered promiscuous mode
[   91.207959][ T5796] veth1_vlan: entered promiscuous mode
[   91.259493][ T5791] veth0_vlan: entered promiscuous mode
[   91.288714][ T5786] veth0_vlan: entered promiscuous mode
[   91.301686][ T5791] veth1_vlan: entered promiscuous mode
[   91.324689][ T5787] veth0_macvtap: entered promiscuous mode
[   91.355590][ T5796] veth0_macvtap: entered promiscuous mode
[   91.379053][ T5786] veth1_vlan: entered promiscuous mode
[   91.398441][ T5796] veth1_macvtap: entered promiscuous mode
[   91.407004][ T5787] veth1_macvtap: entered promiscuous mode
[   91.440218][ T5791] veth0_macvtap: entered promiscuous mode
[   91.461072][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.480475][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.489722][ T5791] veth1_macvtap: entered promiscuous mode
[   91.515399][ T5796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.525060][ T5796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.534920][ T5796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.543810][ T5796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.591920][ T5786] veth0_macvtap: entered promiscuous mode
[   91.610384][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.624978][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.637734][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.658558][ T5786] veth1_macvtap: entered promiscuous mode
[   91.677089][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.688429][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.700331][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.723559][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.734615][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.744008][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.753574][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.784519][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.795642][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.807195][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.819968][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.831490][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.850101][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.860898][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.871268][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.882235][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.895162][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.936097][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.947387][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.956331][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.965107][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.977887][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.988726][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.999564][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.010339][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.020988][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.031567][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.043578][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.080942][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.092567][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.104278][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.115096][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.125098][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.136802][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.148962][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.176544][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.185588][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.194542][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.203430][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.279486][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.289158][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.299908][  T787] cfg80211: failed to load regulatory.db
[   92.399465][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.407785][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.437914][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.457248][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.530381][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.548430][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.603540][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.611451][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.695950][ T5797] Bluetooth: hci0: command tx timeout
[   92.701433][ T5797] Bluetooth: hci2: command tx timeout
[   92.703029][ T5794] Bluetooth: hci1: command tx timeout
[   92.754556][ T5879] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   92.793250][ T5794] Bluetooth: hci3: command tx timeout
[   92.808473][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.838305][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.863486][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.886373][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.967492][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.988762][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.212505][ T5889] syz.1.2[5889]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   93.305766][ T5889] loop1: detected capacity change from 0 to 128
[   93.323948][ T5889] EXT4-fs: Ignoring removed nobh option
[   93.417873][ T5889] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   93.512821][ T5898] netlink: 51 bytes leftover after parsing attributes in process `syz.0.8'.
[   93.530456][ T5889] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   93.546185][ T5899] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET)
[   93.798308][ T5791] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   94.051039][ T5896] loop2: detected capacity change from 0 to 32768
[   94.112979][ T5896] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.7 (5896)
[   94.193556][ T5896] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   94.222284][ T5896] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   94.246660][ T5896] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   94.277726][ T5896] BTRFS info (device loop2): use zstd compression, level 3
[   94.318375][ T5896] BTRFS info (device loop2): using free space tree
[   94.421902][ T5901] loop0: detected capacity change from 0 to 32768
[   94.469755][ T5901] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.10 (5901)
[   94.508209][ T5901] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   94.518618][ T5896] BTRFS info (device loop2): enabling ssd optimizations
[   94.518663][ T5896] BTRFS info (device loop2): auto enabling async discard
[   94.558531][ T5901] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   94.578723][ T5901] BTRFS info (device loop0): force clearing of disk cache
[   94.586655][ T5901] BTRFS info (device loop0): enabling auto defrag
[   94.593700][ T5901] BTRFS info (device loop0): max_inline at 0
[   94.599897][ T5901] BTRFS info (device loop0): enabling disk space caching
[   94.630343][ T5901] BTRFS info (device loop0): disk space caching is enabled
[   94.774748][ T5794] Bluetooth: hci1: command tx timeout
[   94.783065][ T5794] Bluetooth: hci2: command tx timeout
[   94.786095][ T5797] Bluetooth: hci0: command tx timeout
[   94.801461][ T5901] BTRFS info (device loop0): enabling ssd optimizations
[   94.826572][ T5901] BTRFS info (device loop0): rebuilding free space tree
[   94.852965][ T5797] Bluetooth: hci3: command tx timeout
[   94.920450][ T5901] BTRFS info (device loop0): disabling free space tree
[   94.939278][ T5901] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   94.992107][ T5901] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   95.166480][ T5787] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   95.412586][   T28] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   95.435032][ T5786] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   95.453454][ T5775] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   95.573092][ T5927] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop0 scanned by udevd (5927)
[   95.616739][   T28] usb 4-1: Using ep0 maxpacket: 16
[   95.634752][   T28] usb 4-1: too many configurations: 123, using maximum allowed: 8
[   95.683355][ T5775] usb 2-1: too many configurations: 9, using maximum allowed: 8
[   95.702700][   T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.733637][ T5775] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   95.755240][   T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.766782][ T5775] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   95.778928][ T5775] usb 2-1: config 0 interface 0 has no altsetting 0
[   95.788267][   T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.806352][ T5775] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   95.818578][ T5775] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   95.837663][   T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.858293][ T5775] usb 2-1: config 0 interface 0 has no altsetting 0
[   95.884648][   T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.907098][ T5775] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   95.923603][ T5775] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   95.937323][ T5775] usb 2-1: config 0 interface 0 has no altsetting 0
[   95.951712][   T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.978299][ T5775] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   95.987547][   T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   96.001947][ T5775] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   96.016299][ T5775] usb 2-1: config 0 interface 0 has no altsetting 0
[   96.025340][   T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   96.036919][ T5775] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   96.047892][   T28] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[   96.062089][ T5775] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   96.073254][   T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[   96.081385][   T28] usb 4-1: SerialNumber: syz
[   96.096433][ T5775] usb 2-1: config 0 interface 0 has no altsetting 0
[   96.117948][   T28] usb 4-1: config 0 descriptor??
[   96.126252][ T5775] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   96.145021][ T5775] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   96.164874][   T28] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5
[   96.175913][ T5775] usb 2-1: config 0 interface 0 has no altsetting 0
[   96.192333][ T5775] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   96.198241][ T5960] loop6: detected capacity change from 0 to 7
[   96.203676][ T5775] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   96.219667][ T5960] Dev loop6: unable to read RDB block 7
[   96.237285][ T5960]  loop6: AHDI p1 p2 p3
[   96.239449][ T5775] usb 2-1: config 0 interface 0 has no altsetting 0
[   96.241729][ T5960] loop6: partition table partially beyond EOD, truncated
[   96.260245][ T5960] loop6: p1 start 926365495 is beyond EOD, truncated
[   96.263200][ T5775] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   96.274389][ T5960] loop6: p2 size 116 extends beyond EOD, truncated
[   96.286313][ T5775] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   96.362830][ T5775] usb 2-1: config 0 interface 0 has no altsetting 0
[   96.374867][ T5775] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   96.384565][ T5775] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   96.412249][ T5950] input: syz1 as /devices/virtual/input/input6
[   96.414690][ T5775] usb 2-1: Product: syz
[   96.449694][ T5775] usb 2-1: Manufacturer: syz
[   96.458100][ T5927] udevd[5927]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[   96.475993][ T5775] usb 2-1: SerialNumber: syz
[   96.480850][ T5141] bcm5974 4-1:0.0: could not read from device
[   96.500427][ T5141] bcm5974 4-1:0.0: could not read from device
[   96.509008][ T5775] usb 2-1: config 0 descriptor??
[   96.554135][ T5775] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[   96.576323][ T5141] bcm5974 4-1:0.0: could not read from device
[   96.591767][   T28] usb 4-1: USB disconnect, device number 2
[   96.826710][ T5966] loop0: detected capacity change from 0 to 512
[   96.870556][ T5966] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   96.885209][ T5966] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   96.908299][ T5966] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   96.925548][ T5966] EXT4-fs (loop0): 1 truncate cleaned up
[   96.937330][ T5966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.031647][ T5927] udevd[5927]: incorrect jbd checksum on /dev/loop0
[   97.059394][ T5966] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[   97.073528][   T28] usb 2-1: USB disconnect, device number 2
[   97.095292][   T28] yurex 2-1:0.0: USB YUREX #0 now disconnected
[   97.117810][ T5786] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[   97.159047][ T5786] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 0 in block_group 0
[   97.178617][ T5786] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem
[   97.189002][ T5786] EXT4-fs error (device loop0): __ext4_unlink:3328: inode #2: comm syz-executor: mark_inode_dirty error
[   97.290221][ T5969] loop3: detected capacity change from 0 to 2048
[   97.378394][ T5969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.411730][   T27] audit: type=1800 audit(1752010120.723:2): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.24" name="bus" dev="loop3" ino=18 res=0 errno=0
[   97.520228][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.597685][ T5786] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 0 in block_group 0
[   97.633049][ T5786] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem
[   97.644974][ T5786] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #2: comm syz-executor: mark_inode_dirty error
[   97.669374][ T2964] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm kworker/u4:8: Invalid inode table block 0 in block_group 0
[   97.711841][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.718739][   T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.917990][   T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.026400][   T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.138753][   T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.253210][ T5981] Bluetooth: MGMT ver 1.22
[   98.458969][ T5987] loop1: detected capacity change from 0 to 256
[   98.505013][ T5987] exfat: Deprecated parameter 'namecase'
[   98.549503][ T5987] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[   99.166315][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   99.177893][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   99.187039][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   99.196958][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   99.206238][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   99.213994][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   99.390960][ T5996] loop1: detected capacity change from 0 to 4096
[  100.369627][ T6028] loop1: detected capacity change from 0 to 512
[  100.440468][ T6028] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  100.482898][ T6028] UDF-fs: Scanning with blocksize 512 failed
[  100.539710][ T6028] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  100.563247][ T6028] UDF-fs: Scanning with blocksize 1024 failed
[  100.579865][ T6028] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  100.600901][ T6028] UDF-fs: Scanning with blocksize 2048 failed
[  100.661252][ T6028] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  100.786475][ T6028] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.861793][ T6001] chnl_net:caif_netlink_parms(): no params data found
[  100.888880][ T6026] loop2: detected capacity change from 0 to 32768
[  100.909271][ T6026] =======================================================
[  100.909271][ T6026] WARNING: The mand mount option has been deprecated and
[  100.909271][ T6026]          and is ignored by this kernel. Remove the mand
[  100.909271][ T6026]          option from the mount to silence this warning.
[  100.909271][ T6026] =======================================================
[  100.958790][ T6037] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  101.063387][   T27] audit: type=1804 audit(1752010124.363:3): pid=6028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.40" name="/newroot/9/file0/file1" dev="loop1" ino=36 res=1 errno=0
[  101.189692][ T6026] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  101.270529][ T5794] Bluetooth: hci1: command tx timeout
[  101.295063][ T6050] loop3: detected capacity change from 0 to 64
[  101.449756][ T6026] XFS (loop2): Ending clean mount
[  101.947872][   T58] hsr_slave_0: left promiscuous mode
[  101.955852][   T58] hsr_slave_1: left promiscuous mode
[  101.962905][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.970421][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.985183][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.992726][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.004147][   T58] bridge_slave_1: left allmulticast mode
[  102.009847][   T58] bridge_slave_1: left promiscuous mode
[  102.018503][ T6026] syz.2.41 (6026) used greatest stack depth: 20624 bytes left
[  102.030569][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.047948][   T58] bridge_slave_0: left allmulticast mode
[  102.054866][   T58] bridge_slave_0: left promiscuous mode
[  102.061497][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.084102][ T5787] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  102.141404][   T58] veth1_macvtap: left promiscuous mode
[  102.151487][ T6068] loop1: detected capacity change from 0 to 128
[  102.159348][   T58] veth0_macvtap: left promiscuous mode
[  102.183458][   T58] veth1_vlan: left promiscuous mode
[  102.189815][   T58] veth0_vlan: left promiscuous mode
[  102.205403][ T6068] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  102.259676][ T6068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.840364][ T6076] netlink: 116 bytes leftover after parsing attributes in process `syz.1.51'.
[  103.054391][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  103.066604][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  103.078464][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  103.097346][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  103.113928][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  103.121576][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  103.336624][ T5794] Bluetooth: hci1: command tx timeout
[  103.348607][   T58] team0 (unregistering): Port device team_slave_1 removed
[  103.404441][   T58] team0 (unregistering): Port device team_slave_0 removed
[  103.499601][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.557168][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.658513][   T27] audit: type=1326 audit(1752010126.973:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.2.52" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9888b8e929 code=0x0
[  104.077276][   T58] bond0 (unregistering): Released all slaves
[  104.244981][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.253287][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.260676][ T6001] bridge_slave_0: entered allmulticast mode
[  104.268320][ T6001] bridge_slave_0: entered promiscuous mode
[  104.338774][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.351861][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.369698][ T6001] bridge_slave_1: entered allmulticast mode
[  104.380363][ T6001] bridge_slave_1: entered promiscuous mode
[  104.470098][ T6088] loop1: detected capacity change from 0 to 2048
[  104.485213][ T6088] EXT4-fs: Ignoring removed mblk_io_submit option
[  104.492215][ T6088] EXT4-fs: Ignoring removed nobh option
[  104.535393][ T6001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.577797][ T6001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.648525][ T6088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.710498][ T6001] team0: Port device team_slave_0 added
[  104.754277][ T6001] team0: Port device team_slave_1 added
[  104.895449][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.905151][ T1187] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  104.919595][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.939855][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.968792][ T6001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.031275][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.068964][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.138442][ T6001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.157438][ T1187] usb 3-1: Using ep0 maxpacket: 8
[  105.173568][ T5794] Bluetooth: hci3: command tx timeout
[  105.183105][ T1187] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  105.192713][ T1187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.200757][ T1187] usb 3-1: Product: syz
[  105.205379][ T1187] usb 3-1: Manufacturer: syz
[  105.210020][ T1187] usb 3-1: SerialNumber: syz
[  105.219299][ T1187] usb 3-1: config 0 descriptor??
[  105.341444][ T6001] hsr_slave_0: entered promiscuous mode
[  105.355197][ T6001] hsr_slave_1: entered promiscuous mode
[  105.361873][ T6001] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  105.376025][ T6001] Cannot create hsr debugfs directory
[  105.386629][ T6077] chnl_net:caif_netlink_parms(): no params data found
[  105.393833][  T787] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  105.422226][ T5794] Bluetooth: hci1: command tx timeout
[  105.458527][ T1187] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  105.586313][  T787] usb 2-1: Using ep0 maxpacket: 16
[  105.596377][  T787] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  105.626122][  T787] usb 2-1: config 0 has no interface number 0
[  105.643487][  T787] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  105.682172][  T787] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  105.700124][   T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.703961][  T787] usb 2-1: config 0 interface 41 has no altsetting 0
[  105.741431][  T787] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  105.759413][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.761317][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.769078][  T787] usb 2-1: Product: syz
[  105.787765][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.790848][  T787] usb 2-1: Manufacturer: syz
[  105.795860][ T6077] bridge_slave_0: entered allmulticast mode
[  105.800863][  T787] usb 2-1: SerialNumber: syz
[  105.808347][ T6077] bridge_slave_0: entered promiscuous mode
[  105.822650][  T787] usb 2-1: config 0 descriptor??
[  105.829266][ T6104] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  105.845777][ T6104] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  105.918645][   T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.938490][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.946362][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.953974][ T6077] bridge_slave_1: entered allmulticast mode
[  105.961846][ T6077] bridge_slave_1: entered promiscuous mode
[  106.039318][   T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.061059][ T6077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.085854][ T6077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.089141][ T6104] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  106.114602][ T6104] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  106.165540][   T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.244098][ T6077] team0: Port device team_slave_0 added
[  106.275886][ T6077] team0: Port device team_slave_1 added
[  106.386587][ T6001] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  106.400649][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.418711][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.453910][ T6077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.502826][ T6001] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  106.517296][ T6001] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  106.530252][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.539200][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.567522][  T787] Error reading MAC address
[  106.574082][ T6077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.585770][ T6104] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  106.594218][ T6104] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  106.626050][ T6001] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  106.678532][ T1187] gspca_sunplus: reg_w_riv err -71
[  106.688835][ T1187] sunplus: probe of 3-1:0.0 failed with error -71
[  106.726773][ T1187] usb 3-1: USB disconnect, device number 2
[  106.828636][ T6077] hsr_slave_0: entered promiscuous mode
[  106.836040][ T6077] hsr_slave_1: entered promiscuous mode
[  106.845457][ T6077] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  106.854266][ T6077] Cannot create hsr debugfs directory
[  107.253879][ T5794] Bluetooth: hci3: command tx timeout
[  107.386793][  T787] sr9700 2-1:0.41 eth9: register 'sr9700' at usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet, f2:9e:23:38:e4:79
[  107.443813][  T787] usb 2-1: USB disconnect, device number 3
[  107.469162][  T787] sr9700 2-1:0.41 eth9: unregister 'sr9700' usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet
[  107.492442][ T5794] Bluetooth: hci1: command tx timeout
[  107.698535][ T6001] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.789128][ T6001] 8021q: adding VLAN 0 to HW filter on device team0
[  107.816776][ T6077] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  107.837229][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.844487][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.886319][ T6077] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  107.920382][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.927643][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.949376][ T6077] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  107.968667][ T6143] loop1: detected capacity change from 0 to 256
[  108.010177][ T6143] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  108.048990][ T6143] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  108.055908][ T6077] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  108.098261][ T6143] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  108.385450][   T58] hsr_slave_0: left promiscuous mode
[  108.397066][   T58] hsr_slave_1: left promiscuous mode
[  108.418557][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.427988][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.440869][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.451792][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.462497][   T58] bridge_slave_1: left allmulticast mode
[  108.468302][   T58] bridge_slave_1: left promiscuous mode
[  108.501672][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.586287][   T58] bridge_slave_0: left allmulticast mode
[  108.593343][   T58] bridge_slave_0: left promiscuous mode
[  108.599175][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.673845][ T6161] capability: warning: `syz.1.59' uses deprecated v2 capabilities in a way that may be insecure
[  108.708276][   T58] veth1_macvtap: left promiscuous mode
[  108.731757][   T58] veth0_macvtap: left promiscuous mode
[  108.752562][   T58] veth1_vlan: left promiscuous mode
[  108.757994][   T58] veth0_vlan: left promiscuous mode
[  109.039740][ T6173] loop2: detected capacity change from 0 to 1024
[  109.333989][ T5794] Bluetooth: hci3: command tx timeout
[  109.963219][ T5775] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  110.008832][   T58] team0 (unregistering): Port device team_slave_1 removed
[  110.059573][   T58] team0 (unregistering): Port device team_slave_0 removed
[  110.110160][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.161722][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.179630][ T5775] usb 2-1: Using ep0 maxpacket: 32
[  110.187720][ T5775] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.198414][ T5775] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  110.207778][ T5775] usb 2-1: config 1 has no interface number 1
[  110.214376][ T5775] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  110.228555][ T5775] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  110.237765][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.245963][ T5775] usb 2-1: Product: syz
[  110.250186][ T5775] usb 2-1: Manufacturer: syz
[  110.254996][ T5775] usb 2-1: SerialNumber: syz
[  110.493686][ T5775] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  110.511066][ T5775] usb 2-1: 2:1 : format type 6 is not supported yet
[  110.561900][ T5775] usb 2-1: USB disconnect, device number 4
[  110.691405][ T5927] udevd[5927]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  111.120732][ T6198] loop2: detected capacity change from 0 to 1024
[  111.172333][ T6198] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  111.241161][   T58] bond0 (unregistering): Released all slaves
[  111.412120][ T5794] Bluetooth: hci3: command tx timeout
[  111.748444][ T6077] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.837199][ T6077] 8021q: adding VLAN 0 to HW filter on device team0
[  111.937350][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.944595][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.029673][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.036925][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.168071][ T6001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.316235][ T6077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.959222][ T6077] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.133929][ T6001] veth0_vlan: entered promiscuous mode
[  113.198436][ T6001] veth1_vlan: entered promiscuous mode
[  113.311279][ T6001] veth0_macvtap: entered promiscuous mode
[  113.341760][ T6001] veth1_macvtap: entered promiscuous mode
[  113.391054][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.404009][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.415389][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.436501][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.455915][ T6001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.495216][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.521138][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.532126][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.543364][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.574239][ T6001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.605571][ T6001] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.629908][ T6001] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.652230][ T6001] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.661607][ T6001] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.940662][ T6261] loop2: detected capacity change from 0 to 764
[  113.954118][  T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.983116][  T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.032622][ T6077] veth0_vlan: entered promiscuous mode
[  114.119930][ T6261] Symlink component flag not implemented
[  114.132440][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.147281][ T6261] Symlink component flag not implemented (7)
[  114.150985][ T6077] veth1_vlan: entered promiscuous mode
[  114.170403][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.322336][ T6077] veth0_macvtap: entered promiscuous mode
[  114.363847][ T6077] veth1_macvtap: entered promiscuous mode
[  114.444766][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.487953][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.522109][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.552142][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.592519][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.631011][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.662950][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.698220][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.721406][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.749602][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.785635][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.809228][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.826112][ T6257] loop1: detected capacity change from 0 to 32768
[  114.859945][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.872228][ T6257] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.74 (6257)
[  114.897646][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.930590][ T6077] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.940289][ T6257] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  114.968157][ T6077] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.977631][ T6257] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  114.991872][ T6077] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.000860][ T6257] BTRFS info (device loop1): metadata ratio 2
[  115.016619][ T6257] BTRFS info (device loop1): allowing degraded mounts
[  115.032212][ T6077] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.041087][ T6257] BTRFS info (device loop1): force zlib compression, level 3
[  115.071513][ T6257] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  115.115404][ T6257] BTRFS info (device loop1): use zstd compression, level 3
[  115.145699][ T6257] BTRFS info (device loop1): force clearing of disk cache
[  115.168421][ T6257] BTRFS info (device loop1): allowing degraded mounts
[  115.225918][ T6257] BTRFS info (device loop1): max_inline at 0
[  115.263119][ T6257] BTRFS info (device loop1): using free space tree
[  115.363524][  T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.371426][  T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.453943][ T6257] BTRFS info (device loop1): enabling ssd optimizations
[  115.539977][ T6257] BTRFS info (device loop1): rebuilding free space tree
[  115.554879][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.597380][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.870557][ T6268] loop2: detected capacity change from 0 to 40427
[  115.936951][ T6297] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  115.956491][ T6270] loop4: detected capacity change from 0 to 32768
[  115.962742][ T6268] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  116.025049][ T6268] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  116.066301][ T6268] F2FS-fs (loop2): invalid crc value
[  116.079772][ T5791] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  116.174651][ T6268] F2FS-fs (loop2): Found nat_bits in checkpoint
[  116.209163][ T6270] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  116.328399][  T132] (kworker/u4:5,132,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  116.665791][ T6268] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  116.693130][ T6268] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  116.892060][   T27] audit: type=1800 audit(1752010140.193:5): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.29" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  116.990458][ T6315] loop5: detected capacity change from 0 to 8192
[  117.120975][ T6001] ocfs2: Unmounting device (7,4) on (node local)
[  117.197770][   T27] audit: type=1800 audit(1752010140.513:6): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.78" name="file2" dev="loop5" ino=1048607 res=0 errno=0
[  117.272758][ T6315] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000ff12)
[  117.305503][ T6315] FAT-fs (loop5): Filesystem has been set read-only
[  117.337183][ T6315] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000ff12)
[  117.366845][ T6315] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000ff12)
[  117.413480][ T6315] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000ff12)
[  117.502095][ T6315] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000ff12)
[  117.510381][ T6315] syz.5.78: attempt to access beyond end of device
[  117.510381][ T6315] loop5: rw=0, sector=65368, nr_sectors = 1 limit=8192
[  117.595728][ T6315] Buffer I/O error on dev loop5, logical block 65368, async page read
[  117.632164][ T6315] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000ff12)
[  117.640352][ T6315] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000ff12)
[  117.682125][ T6315] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000ff12)
[  118.285012][ T6352] loop1: detected capacity change from 0 to 8
[  118.505423][ T5156] udevd[5156]: worker [5927] terminated by signal 33 (Unknown signal 33)
[  118.534184][ T5156] udevd[5156]: worker [5927] failed while handling '/devices/virtual/block/loop1'
[  119.232139][  T787] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  119.357734][ T6355] loop5: detected capacity change from 0 to 40427
[  119.395040][ T6355] F2FS-fs (loop5): invalid crc value
[  119.435047][ T6355] F2FS-fs (loop5): Found nat_bits in checkpoint
[  119.452950][  T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  119.455714][ T6362] xt_CT: No such helper "pptp"
[  119.482828][  T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 111, setting to 64
[  119.528073][  T787] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[  119.562174][  T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.601186][  T787] usb 2-1: config 0 descriptor??
[  119.616264][ T6361] loop4: detected capacity change from 0 to 32768
[  119.641835][ T6364] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  119.645670][ T6361] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.88 (6361)
[  119.693096][ T6355] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  119.736934][ T6361] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  119.778259][ T6361] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  119.815010][ T6361] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  119.847198][ T6361] BTRFS info (device loop4): use zstd compression, level 3
[  119.854798][  T787] rc_core: IR keymap rc-xbox-dvd not found
[  119.882108][  T787] Registered IR keymap rc-empty
[  119.889123][  T787] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  119.901879][ T6361] BTRFS info (device loop4): using free space tree
[  119.940406][  T787] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[  120.022984][  T787] usb 2-1: USB disconnect, device number 5
[  120.028933][    C1] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  120.066536][ T6077] syz-executor: attempt to access beyond end of device
[  120.066536][ T6077] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  120.093757][ T6361] BTRFS info (device loop4): enabling ssd optimizations
[  120.097001][ T6077] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  120.138876][ T6361] BTRFS info (device loop4): auto enabling async discard
[  120.311239][   T27] audit: type=1800 audit(1752010143.623:7): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.88" name="file1" dev="loop4" ino=260 res=0 errno=0
[  120.541582][ T6001] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  120.740338][ T6396] loop1: detected capacity change from 0 to 1024
[  120.763166][ T6396] EXT4-fs: Ignoring removed orlov option
[  120.768910][ T6396] EXT4-fs: Ignoring removed nomblk_io_submit option
[  120.805109][ T5801] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop4 scanned by udevd (5801)
[  120.901460][ T6396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.248010][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.833105][ T6404] loop4: detected capacity change from 0 to 32768
[  121.903327][ T6404] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  122.158893][ T6411] loop1: detected capacity change from 0 to 32768
[  122.200134][ T6404] XFS (loop4): Ending clean mount
[  122.223640][ T6411] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.97 (6411)
[  122.237362][ T6404] XFS (loop4): Quotacheck needed: Please wait.
[  122.275292][ T6411] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  122.307155][ T6411] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  122.330750][ T5794] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  122.338647][ T6411] BTRFS info (device loop1): using free space tree
[  122.486657][ T6404] XFS (loop4): Quotacheck: Done.
[  122.528547][ T6411] BTRFS info (device loop1): enabling ssd optimizations
[  122.548535][ T6411] BTRFS info (device loop1): auto enabling async discard
[  122.705059][   T27] audit: type=1800 audit(1752010146.023:8): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.93" name="file2" dev="loop4" ino=9287 res=0 errno=0
[  122.744404][ T5791] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  123.039148][ T6001] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  123.646786][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  123.909972][ T6469] loop1: detected capacity change from 0 to 256
[  123.917879][ T6469] exfat: Deprecated parameter 'namecase'
[  123.994618][ T6469] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  124.097949][   T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.193423][ T6471] loop4: detected capacity change from 0 to 1024
[  124.253467][ T6471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.368754][   T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.480751][ T6001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.523300][   T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.710891][   T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.955987][ T6219] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  124.973442][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  124.981926][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  124.991821][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  125.002848][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  125.010755][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  125.019773][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  125.169781][ T6219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.208443][ T6219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.230662][ T6219] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  125.250645][ T6219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.277546][ T6219] usb 6-1: config 0 descriptor??
[  125.528724][ T6496] loop1: detected capacity change from 0 to 512
[  125.613595][ T6496] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.120: bad orphan inode 11862016
[  125.650506][ T6496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  125.670202][ T6496] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.874492][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  126.011140][ T6484] chnl_net:caif_netlink_parms(): no params data found
[  126.326755][ T6219] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71
[  126.345585][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.346618][ T6219] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71
[  126.383003][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.389505][ T6219] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71
[  126.401286][ T6484] bridge_slave_0: entered allmulticast mode
[  126.411328][ T6219] uclogic 0003:256C:006D.0001: failed probing parameters: -71
[  126.423675][ T6484] bridge_slave_0: entered promiscuous mode
[  126.434200][ T6219] uclogic: probe of 0003:256C:006D.0001 failed with error -71
[  126.483680][ T6219] usb 6-1: USB disconnect, device number 2
[  126.508385][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.525722][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.541122][ T6484] bridge_slave_1: entered allmulticast mode
[  126.567328][ T6484] bridge_slave_1: entered promiscuous mode
[  126.749841][ T6484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.793645][ T6484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.844570][ T6505] loop1: detected capacity change from 0 to 40427
[  126.873806][ T6505] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  126.881615][ T6505] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  126.937771][ T6505] F2FS-fs (loop1): invalid crc value
[  126.940044][ T6484] team0: Port device team_slave_0 added
[  126.956378][ T6484] team0: Port device team_slave_1 added
[  126.979150][ T6505] F2FS-fs (loop1): Found nat_bits in checkpoint
[  126.982260][   T58] hsr_slave_0: left promiscuous mode
[  127.002673][    T8] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  127.062171][   T58] hsr_slave_1: left promiscuous mode
[  127.081333][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.089123][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.096854][ T5794] Bluetooth: hci0: command tx timeout
[  127.113600][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.133235][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.135561][ T6505] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  127.149361][ T6505] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  127.150266][   T58] bridge_slave_1: left allmulticast mode
[  127.177568][   T27] audit: type=1800 audit(1752010150.493:9): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.122" name="file1" dev="loop1" ino=10 res=0 errno=0
[  127.188499][   T58] bridge_slave_1: left promiscuous mode
[  127.201153][ T6505] syz.1.122: attempt to access beyond end of device
[  127.201153][ T6505] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  127.211082][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.224883][ T6505] syz.1.122: attempt to access beyond end of device
[  127.224883][ T6505] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  127.251385][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  127.262953][    T8] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  127.278185][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.291637][   T58] bridge_slave_0: left allmulticast mode
[  127.299136][    T8] usb 5-1: config 0 descriptor??
[  127.304251][   T58] bridge_slave_0: left promiscuous mode
[  127.312867][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.313345][ T6515] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  127.339309][ T5791] syz-executor: attempt to access beyond end of device
[  127.339309][ T5791] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  127.397010][ T5791] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  127.412886][   T58] veth1_macvtap: left promiscuous mode
[  127.418863][   T58] veth0_macvtap: left promiscuous mode
[  127.424833][   T58] veth1_vlan: left promiscuous mode
[  127.430390][   T58] veth0_vlan: left promiscuous mode
[  127.799306][    T8] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  127.824096][    T8] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  127.831059][    T8] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  127.858013][    T8] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  127.880753][    T8] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  127.916763][    T8] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[  128.114761][ T6515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.155180][ T6515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.195757][    T8] usb 5-1: USB disconnect, device number 2
[  128.326425][ T6527] loop1: detected capacity change from 0 to 2048
[  128.380320][ T6527] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  128.394889][ T6527] UDF-fs: Scanning with blocksize 512 failed
[  128.447771][ T6527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.590754][ T6531] nbd5: detected capacity change from 0 to 63
[  128.635432][ T6531] block nbd5: NBD_DISCONNECT
[  128.646233][ T6531] block nbd5: Disconnected due to user request.
[  128.676371][ T6531] block nbd5: shutting down sockets
[  128.709080][    C1] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  128.718312][    C1] Buffer I/O error on dev nbd5, logical block 0, async page read
[  128.727050][    C1] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  128.736206][    C1] Buffer I/O error on dev nbd5, logical block 1, async page read
[  128.744076][    C1] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  128.753211][    C1] Buffer I/O error on dev nbd5, logical block 2, async page read
[  128.761088][    C1] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  128.770250][    C1] Buffer I/O error on dev nbd5, logical block 3, async page read
[  128.778280][   T54] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  128.800776][   T54] Buffer I/O error on dev nbd5, logical block 0, async page read
[  128.809911][   T54] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  128.819907][   T54] Buffer I/O error on dev nbd5, logical block 1, async page read
[  128.830057][   T54] Buffer I/O error on dev nbd5, logical block 2, async page read
[  128.838061][   T54] Buffer I/O error on dev nbd5, logical block 3, async page read
[  128.866269][   T95] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  128.875753][   T95] Buffer I/O error on dev nbd5, logical block 0, async page read
[  128.887018][   T95] Buffer I/O error on dev nbd5, logical block 1, async page read
[  128.895958][   T95] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  128.905548][   T95] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  128.915813][   T95] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  128.925587][ T5801] ldm_validate_partition_table(): Disk read failed.
[  128.934310][ T5801] Dev nbd5: unable to read RDB block 0
[  128.947773][ T5801]  nbd5: unable to read partition table
[  128.962318][ T5801] ldm_validate_partition_table(): Disk read failed.
[  128.970969][ T5801] Dev nbd5: unable to read RDB block 0
[  128.978739][ T5801]  nbd5: unable to read partition table
[  129.176821][ T5794] Bluetooth: hci0: command tx timeout
[  129.292535][   T58] team0 (unregistering): Port device team_slave_1 removed
[  129.404315][   T58] team0 (unregistering): Port device team_slave_0 removed
[  129.472244][ T5838] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  129.515596][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.585092][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.692237][ T5838] usb 6-1: Using ep0 maxpacket: 32
[  129.707447][ T5838] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  129.719656][ T5838] usb 6-1: config 0 has no interface number 0
[  129.741316][ T5838] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  129.761257][ T5838] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  129.770676][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.795893][ T5838] usb 6-1: Product: syz
[  129.800236][ T5838] usb 6-1: Manufacturer: syz
[  129.807465][ T5838] usb 6-1: SerialNumber: syz
[  129.825452][ T5838] usb 6-1: config 0 descriptor??
[  129.845992][ T5838] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  129.859409][ T5838] em28xx 6-1:0.132: Video interface 132 found:
[  129.985786][ T6551] loop1: detected capacity change from 0 to 32768
[  130.001711][ T6551] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.135 (6551)
[  130.022920][ T6551] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.034877][ T6551] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  130.045327][ T6551] BTRFS info (device loop1): turning off barriers
[  130.051825][ T6551] BTRFS info (device loop1): setting nodatasum
[  130.059580][ T6551] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  130.078362][ T6551] BTRFS info (device loop1): use zstd compression, level 3
[  130.089828][ T6551] BTRFS info (device loop1): using free space tree
[  130.318050][ T5838] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  130.519908][ T5791] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.748722][ T5838] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  130.766883][ T5961] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (5961)
[  130.790194][ T5838] em28xx 6-1:0.132: board has no eeprom
[  130.902243][ T5838] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  130.910184][ T5838] em28xx 6-1:0.132: analog set to bulk mode.
[  130.950902][ T5839] em28xx 6-1:0.132: Registering V4L2 extension
[  131.117141][   T58] bond0 (unregistering): Released all slaves
[  131.131487][ T6219] usb 6-1: USB disconnect, device number 3
[  131.149635][ T5839] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-19)
[  131.151050][ T6219] em28xx 6-1:0.132: Disconnecting em28xx
[  131.252208][ T5794] Bluetooth: hci0: command tx timeout
[  131.392590][ T5839] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  131.407380][ T5839] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  131.415905][ T5839] em28xx 6-1:0.132: No AC97 audio processor
[  131.437035][ T5839] usb 6-1: Decoder not found
[  131.441671][ T5839] em28xx 6-1:0.132: failed to create media graph
[  131.452044][ T5839] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  131.481601][ T5839] em28xx 6-1:0.132: Remote control support is not available for this card.
[  131.495963][ T6219] em28xx 6-1:0.132: Closing input extension
[  131.544020][ T6219] em28xx 6-1:0.132: Freeing device
[  131.564669][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.593417][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.637128][ T6484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.651934][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.661348][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.766755][ T6484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.898352][ T6586] loop5: detected capacity change from 0 to 16
[  131.950769][ T6586] erofs: (device loop5): mounted with root inode @ nid 36.
[  132.016418][ T6586] syz.5.139: attempt to access beyond end of device
[  132.016418][ T6586] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16
[  132.048738][ T6586] syz.5.139: attempt to access beyond end of device
[  132.048738][ T6586] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16
[  132.060047][ T6484] hsr_slave_0: entered promiscuous mode
[  132.080191][ T6484] hsr_slave_1: entered promiscuous mode
[  132.088581][ T6591] syz.5.139: attempt to access beyond end of device
[  132.088581][ T6591] loop5: rw=0, sector=8, nr_sectors = 16 limit=16
[  132.182488][ T6589] page:ffffea00017d7240 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f5c9
[  132.194270][ T6589] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  132.201463][ T6589] page_type: 0xffffffff()
[  132.206075][ T6589] raw: 00fff00000000000 ffffea00019c3408 ffffea000174b488 0000000000000000
[  132.214817][ T6589] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  132.223620][ T6589] page dumped because: VM_WARN_ON_ONCE_FOLIO(!memcg && !mem_cgroup_disabled())
[  132.232796][ T6589] page_owner tracks the page as freed
[  132.238530][ T6589] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6586, tgid 6585 (syz.5.139), ts 132016012256, free_ts 132177114527
[  132.260577][ T6589]  post_alloc_hook+0x1cd/0x210
[  132.265480][ T6589]  get_page_from_freelist+0x195c/0x19f0
[  132.271089][ T6589]  __alloc_pages+0x1e3/0x460
[  132.275835][ T6589]  pte_alloc_one+0x89/0x540
[  132.280394][ T6589]  __pte_alloc+0x22/0x2a0
[  132.285007][ T6589]  copy_page_range+0x2d72/0x3600
[  132.290003][ T6589]  copy_mm+0x1124/0x1c20
[  132.295118][ T6589]  copy_process+0x16d3/0x3d70
[  132.299826][ T6589]  kernel_clone+0x21b/0x840
[  132.304577][ T6589]  __x64_sys_clone+0x18c/0x1e0
[  132.309389][ T6589]  do_syscall_64+0x55/0xb0
[  132.313912][ T6589]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  132.319865][ T6589] page last free stack trace:
[  132.324613][ T6589]  free_unref_page_prepare+0x7ce/0x8e0
[  132.330131][ T6589]  free_unref_page_list+0xbe/0x860
[  132.335378][ T6589]  release_pages+0x1fa0/0x2220
[  132.340282][ T6589]  __folio_batch_release+0x71/0xe0
[  132.345508][ T6589]  truncate_inode_pages_range+0x358/0xf00
[  132.351291][ T6589]  evict+0x499/0x870
[  132.355264][ T6589]  erofs_put_super+0x7b/0x150
[  132.359955][ T6589]  generic_shutdown_super+0x134/0x2b0
[  132.365451][ T6589]  kill_block_super+0x44/0x90
[  132.370167][ T6589]  erofs_kill_sb+0x4c/0x140
[  132.374763][ T6589]  deactivate_locked_super+0x97/0x100
[  132.380170][ T6589]  cleanup_mnt+0x429/0x4c0
[  132.384679][ T6589]  task_work_run+0x1ce/0x250
[  132.389306][ T6589]  exit_to_user_mode_loop+0xe6/0x110
[  132.394709][ T6589]  exit_to_user_mode_prepare+0xb1/0x140
[  132.400818][ T6589]  syscall_exit_to_user_mode+0x1a/0x50
[  132.406846][ T6589] ------------[ cut here ]------------
[  132.412416][ T6589] WARNING: CPU: 0 PID: 6589 at include/linux/memcontrol.h:764 folio_lruvec_lock_irqsave+0x212/0x270
[  132.423326][ T6589] Modules linked in:
[  132.427269][ T6589] CPU: 0 PID: 6589 Comm: syz.4.138 Not tainted 6.6.96-syzkaller #0
[  132.435261][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  132.445508][ T6589] RIP: 0010:folio_lruvec_lock_irqsave+0x212/0x270
[  132.452256][ T6589] Code: 4c 89 f7 e8 10 20 f9 ff 48 8b 04 24 49 89 06 e9 1c ff ff ff 48 89 df 48 c7 c6 00 c7 b6 8a e8 75 9a e1 ff c6 05 af ff 4f 0c 01 <0f> 0b e9 1b fe ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 9d fe
[  132.472051][ T6589] RSP: 0018:ffffc900048ff1d8 EFLAGS: 00010246
[  132.478175][ T6589] RAX: 6f229c8ad52aa000 RBX: ffffea00017d7240 RCX: 6f229c8ad52aa000
[  132.486234][ T6589] RDX: 0000000000000002 RSI: ffffffff8aaac440 RDI: ffffffff8afc6d00
[  132.494399][ T6589] RBP: ffffc900048ff280 R08: ffffffff8e4a7faf R09: 1ffffffff1c94ff5
[  132.503165][ T6589] R10: dffffc0000000000 R11: fffffbfff1c94ff6 R12: ffff8880b8e36e48
[  132.511171][ T6589] R13: dffffc0000000000 R14: ffff888077472000 R15: 0000000000000000
[  132.519371][ T6589] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  132.528392][ T6589] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.535187][ T6589] CR2: 0000001b2f711ff8 CR3: 000000005abad000 CR4: 00000000003506f0
[  132.543257][ T6589] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  132.551251][ T6589] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  132.552361][ T5838] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  132.559294][ T6589] Call Trace:
[  132.570144][ T6589]  <TASK>
[  132.573218][ T6589]  ? folio_memcg+0x127/0x480
[  132.577878][ T6589]  folio_batch_move_lru+0x2d8/0x6b0
[  132.583205][ T6589]  ? folio_add_lru+0xd50/0xd50
[  132.588013][ T6589]  ? lru_add_drain_cpu+0x8c0/0x8c0
[  132.593235][ T6589]  ? mark_lock+0x94/0x320
[  132.597632][ T6589]  lru_add_drain_cpu+0x10e/0x8c0
[  132.603428][ T6589]  ? folio_add_lru_vma+0x1f0/0x1f0
[  132.608611][ T6589]  ? lru_add_drain+0x79/0x3e0
[  132.613516][ T6589]  ? lru_add_drain+0x79/0x3e0
[  132.618847][ T6589]  lru_add_drain+0x121/0x3e0
[  132.623566][ T6589]  free_pages_and_swap_cache+0x1c/0xa0
[  132.629099][ T6589]  tlb_flush_mmu+0x368/0x4f0
[  132.634744][ T6589]  unmap_page_range+0x26d4/0x2fe0
[  132.639875][ T6589]  ? copy_page_range+0x3600/0x3600
[  132.645099][ T6589]  ? unmap_single_vma+0x1b0/0x2a0
[  132.650183][ T6589]  unmap_vmas+0x25e/0x3a0
[  132.654620][ T6589]  ? unmap_page_range+0x2fe0/0x2fe0
[  132.659883][ T6589]  ? __lock_acquire+0x7c80/0x7c80
[  132.665141][ T6589]  exit_mmap+0x200/0xb50
[  132.669442][ T6589]  ? exit_mm_release+0x1a/0x30
[  132.674319][ T6589]  ? vm_brk+0x30/0x30
[  132.678348][ T6589]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  132.684236][ T6589]  ? uprobe_clear_state+0x278/0x290
[  132.689481][ T6589]  ? mm_update_next_owner+0x562/0x6c0
[  132.695085][ T6589]  __mmput+0x118/0x3c0
[  132.699216][ T6589]  exit_mm+0x1da/0x2c0
[  132.703398][ T6589]  ? do_exit+0x23c0/0x23c0
[  132.708420][ T6589]  ? taskstats_exit+0x35e/0x9e0
[  132.713511][ T6589]  do_exit+0x88e/0x23c0
[  132.717736][ T6589]  ? put_task_struct+0xc0/0xc0
[  132.722635][ T6589]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  132.728679][ T6589]  ? get_signal+0x1068/0x1400
[  132.733523][ T6589]  ? lock_chain_count+0x20/0x20
[  132.738430][ T6589]  ? _raw_spin_lock_irq+0xaf/0xe0
[  132.743578][ T6589]  do_group_exit+0x21b/0x2d0
[  132.748236][ T6589]  ? lockdep_hardirqs_on+0x98/0x150
[  132.753543][ T6589]  get_signal+0x12fc/0x1400
[  132.757268][ T5838] usb 6-1: config 0 has no interfaces?
[  132.758225][ T6589]  arch_do_signal_or_restart+0x96/0x780
[  132.769402][ T6589]  ? fput+0x154/0x1a0
[  132.773532][ T6589]  ? get_sigframe_size+0x20/0x20
[  132.776708][ T5838] usb 6-1: New USB device found, idVendor=16d6, idProduct=0001, bcdDevice=b2.cd
[  132.778543][ T6589]  ? exit_to_user_mode_loop+0x3b/0x110
[  132.793176][ T6589]  exit_to_user_mode_loop+0x70/0x110
[  132.795927][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.798497][ T6589]  exit_to_user_mode_prepare+0xb1/0x140
[  132.798536][ T6589]  syscall_exit_to_user_mode+0x1a/0x50
[  132.817461][ T5838] usb 6-1: Product: syz
[  132.818624][ T6589]  do_syscall_64+0x61/0xb0
[  132.818658][ T6589]  ? clear_bhb_loop+0x40/0x90
[  132.818685][ T6589]  ? clear_bhb_loop+0x40/0x90
[  132.826110][ T5838] usb 6-1: Manufacturer: syz
[  132.827348][ T6589]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  132.836079][ T5838] usb 6-1: SerialNumber: syz
[  132.836901][ T6589] RIP: 0033:0x7f8d0b58e929
[  132.849985][ T5838] usb 6-1: config 0 descriptor??
[  132.852118][ T6589] Code: Unable to access opcode bytes at 0x7f8d0b58e8ff.
[  132.852133][ T6589] RSP: 002b:00007f8d0c3e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  132.852159][ T6589] RAX: fffffffffffffe00 RBX: 00007f8d0b7b6088 RCX: 00007f8d0b58e929
[  132.852175][ T6589] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8d0b7b6088
[  132.852189][ T6589] RBP: 00007f8d0b7b6080 R08: 0000000000000000 R09: 0000000000000000
[  132.852203][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d0b7b608c
[  132.852217][ T6589] R13: 0000000000000000 R14: 00007fffaab67970 R15: 00007fffaab67a58
[  132.852278][ T6589]  </TASK>
[  132.852289][ T6589] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  132.852299][ T6589] CPU: 0 PID: 6589 Comm: syz.4.138 Not tainted 6.6.96-syzkaller #0
[  132.852318][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  132.852328][ T6589] Call Trace:
[  132.852336][ T6589]  <TASK>
[  132.852347][ T6589]  dump_stack_lvl+0x16c/0x230
[  132.852385][ T6589]  ? show_regs_print_info+0x20/0x20
[  132.852417][ T6589]  ? load_image+0x3b0/0x3b0
[  132.852461][ T6589]  panic+0x2c0/0x710
[  132.852490][ T6589]  ? bpf_jit_dump+0xd0/0xd0
[  132.852536][ T6589]  __warn+0x2e0/0x470
[  132.852555][ T6589]  ? folio_lruvec_lock_irqsave+0x212/0x270
[  132.852588][ T6589]  ? folio_lruvec_lock_irqsave+0x212/0x270
[  132.852626][ T6589]  report_bug+0x2be/0x4f0
[  132.852657][ T6589]  ? folio_lruvec_lock_irqsave+0x212/0x270
[  132.852687][ T6589]  ? folio_lruvec_lock_irqsave+0x212/0x270
[  132.852715][ T6589]  ? folio_lruvec_lock_irqsave+0x214/0x270
[  132.852743][ T6589]  handle_bug+0xcf/0x120
[  132.852776][ T6589]  exc_invalid_op+0x1a/0x50
[  132.852807][ T6589]  asm_exc_invalid_op+0x1a/0x20
[  132.852831][ T6589] RIP: 0010:folio_lruvec_lock_irqsave+0x212/0x270
[  132.852861][ T6589] Code: 4c 89 f7 e8 10 20 f9 ff 48 8b 04 24 49 89 06 e9 1c ff ff ff 48 89 df 48 c7 c6 00 c7 b6 8a e8 75 9a e1 ff c6 05 af ff 4f 0c 01 <0f> 0b e9 1b fe ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 9d fe
[  132.852879][ T6589] RSP: 0018:ffffc900048ff1d8 EFLAGS: 00010246
[  132.852898][ T6589] RAX: 6f229c8ad52aa000 RBX: ffffea00017d7240 RCX: 6f229c8ad52aa000
[  132.852913][ T6589] RDX: 0000000000000002 RSI: ffffffff8aaac440 RDI: ffffffff8afc6d00
[  132.852929][ T6589] RBP: ffffc900048ff280 R08: ffffffff8e4a7faf R09: 1ffffffff1c94ff5
[  132.852944][ T6589] R10: dffffc0000000000 R11: fffffbfff1c94ff6 R12: ffff8880b8e36e48
[  132.852960][ T6589] R13: dffffc0000000000 R14: ffff888077472000 R15: 0000000000000000
[  132.852995][ T6589]  ? folio_lruvec_lock_irqsave+0x20b/0x270
[  132.853023][ T6589]  ? folio_memcg+0x127/0x480
[  132.853056][ T6589]  folio_batch_move_lru+0x2d8/0x6b0
[  132.853088][ T6589]  ? folio_add_lru+0xd50/0xd50
[  132.853116][ T6589]  ? lru_add_drain_cpu+0x8c0/0x8c0
[  132.853140][ T6589]  ? mark_lock+0x94/0x320
[  132.853178][ T6589]  lru_add_drain_cpu+0x10e/0x8c0
[  132.853213][ T6589]  ? folio_add_lru_vma+0x1f0/0x1f0
[  132.853252][ T6589]  ? lru_add_drain+0x79/0x3e0
[  132.853278][ T6589]  ? lru_add_drain+0x79/0x3e0
[  132.853307][ T6589]  lru_add_drain+0x121/0x3e0
[  132.853338][ T6589]  free_pages_and_swap_cache+0x1c/0xa0
[  132.853366][ T6589]  tlb_flush_mmu+0x368/0x4f0
[  132.853396][ T6589]  unmap_page_range+0x26d4/0x2fe0
[  132.853457][ T6589]  ? copy_page_range+0x3600/0x3600
[  132.853485][ T6589]  ? unmap_single_vma+0x1b0/0x2a0
[  132.853517][ T6589]  unmap_vmas+0x25e/0x3a0
[  132.853547][ T6589]  ? unmap_page_range+0x2fe0/0x2fe0
[  132.853575][ T6589]  ? __lock_acquire+0x7c80/0x7c80
[  132.853631][ T6589]  exit_mmap+0x200/0xb50
[  132.853665][ T6589]  ? exit_mm_release+0x1a/0x30
[  132.853694][ T6589]  ? vm_brk+0x30/0x30
[  132.853724][ T6589]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  132.853790][ T6589]  ? uprobe_clear_state+0x278/0x290
[  132.853820][ T6589]  ? mm_update_next_owner+0x562/0x6c0
[  132.853859][ T6589]  __mmput+0x118/0x3c0
[  132.853884][ T6589]  exit_mm+0x1da/0x2c0
[  132.853920][ T6589]  ? do_exit+0x23c0/0x23c0
[  132.853953][ T6589]  ? taskstats_exit+0x35e/0x9e0
[  132.853995][ T6589]  do_exit+0x88e/0x23c0
[  132.854038][ T6589]  ? put_task_struct+0xc0/0xc0
[  132.854075][ T6589]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  132.854099][ T6589]  ? get_signal+0x1068/0x1400
[  132.854135][ T6589]  ? lock_chain_count+0x20/0x20
[  132.854162][ T6589]  ? _raw_spin_lock_irq+0xaf/0xe0
[  132.854191][ T6589]  do_group_exit+0x21b/0x2d0
[  132.854224][ T6589]  ? lockdep_hardirqs_on+0x98/0x150
[  132.854251][ T6589]  get_signal+0x12fc/0x1400
[  132.854311][ T6589]  arch_do_signal_or_restart+0x96/0x780
[  132.854346][ T6589]  ? fput+0x154/0x1a0
[  132.854370][ T6589]  ? get_sigframe_size+0x20/0x20
[  132.854424][ T6589]  ? exit_to_user_mode_loop+0x3b/0x110
[  132.854461][ T6589]  exit_to_user_mode_loop+0x70/0x110
[  132.854494][ T6589]  exit_to_user_mode_prepare+0xb1/0x140
[  132.854526][ T6589]  syscall_exit_to_user_mode+0x1a/0x50
[  132.854550][ T6589]  do_syscall_64+0x61/0xb0
[  132.854578][ T6589]  ? clear_bhb_loop+0x40/0x90
[  132.854602][ T6589]  ? clear_bhb_loop+0x40/0x90
[  132.854638][ T6589]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  132.854663][ T6589] RIP: 0033:0x7f8d0b58e929
[  132.854682][ T6589] Code: Unable to access opcode bytes at 0x7f8d0b58e8ff.
[  132.854692][ T6589] RSP: 002b:00007f8d0c3e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  132.854713][ T6589] RAX: fffffffffffffe00 RBX: 00007f8d0b7b6088 RCX: 00007f8d0b58e929
[  132.854729][ T6589] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8d0b7b6088
[  132.854744][ T6589] RBP: 00007f8d0b7b6080 R08: 0000000000000000 R09: 0000000000000000
[  132.854757][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d0b7b608c
[  132.854771][ T6589] R13: 0000000000000000 R14: 00007fffaab67970 R15: 00007fffaab67a58
[  132.854805][ T6589]  </TASK>
[  132.857057][ T6589] Kernel Offset: disabled