last executing test programs:

2m23.514051558s ago: executing program 1 (id=27):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x3c, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$uinput_user_dev(r1, &(0x7f0000000bc0)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x70, 0x8, 0x5f, 0x1, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x40000000, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x80000001, 0x7, 0x3, 0x7fff, 0x4c74, 0x8eff, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x9, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xcbc1, 0x7ff, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x400001, 0x8000, 0xffff, 0x7f, 0x7f, 0x7, 0x5, 0x4003, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xffff7dfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x20000b, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x88, 0x3, 0x10000009, 0x3e7, 0x6, 0x5, 0x2, 0x2, 0x5, 0x8, 0x990, 0x6d01, 0x5, 0x803b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x86, 0x10005, 0x6, 0x54fe12d2, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x7d731dd2, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x7, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0x5, 0x6, 0xfffffff8, 0x1, 0x5, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000002, 0x10005, 0x8, 0x8c8, 0x3, 0x9, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b8e, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x8000000, 0xb20, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c)

2m22.788544384s ago: executing program 1 (id=30):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x490267a0}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000001c40)={'IDLETIMER\x00'}, &(0x7f0000004580)=0x1e)

2m21.441923683s ago: executing program 1 (id=33):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x100000000, 0x8, 0x1, 0x1, 0x5, 0xffffffffffffffff, 0x6, 0x5, 0x4, 0x4, 0xf77, 0x80000001, 0x0, 0x5, 0x35], 0x4, 0x85a15})
syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0)
r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2ec, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x10000002, 0x8, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x3], 0x0, 0x41901})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m18.16552584s ago: executing program 1 (id=36):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$inet(0x2, 0x3, 0x1)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000000)={[{@errors_continue}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nodiscard}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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")

2m13.470704769s ago: executing program 1 (id=42):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1d8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

2m6.706832138s ago: executing program 1 (id=48):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
unshare(0x24060400)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

1m50.269249948s ago: executing program 32 (id=48):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
unshare(0x24060400)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

38.050554187s ago: executing program 0 (id=150):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$sock_netdev_private(r0, 0x8924, &(0x7f0000000000)="fa7c813a")

35.921735496s ago: executing program 0 (id=157):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311a22b58a46ed495465703756e040dd900", 0x4d}], 0x1, &(0x7f0000001800)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000580)=""/66, 0x42}], 0x1}, 0xc}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1}, 0x10001}], 0x2, 0x10000, 0x0)

33.171568476s ago: executing program 0 (id=162):
socket$inet6(0xa, 0x40000080806, 0x0)
socket$inet6(0xa, 0x6, 0x0)
r0 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x7e05, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0)

30.380579106s ago: executing program 0 (id=164):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f7, &(0x7f0000002a80)="$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")
open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)

27.402886221s ago: executing program 0 (id=169):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/if_inet6\x00')
lseek(r0, 0x8eb, 0x0)

26.355289966s ago: executing program 0 (id=171):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0xfffffff8, 0x6000000}, 0xc)

24.401678856s ago: executing program 33 (id=171):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0xfffffff8, 0x6000000}, 0xc)

24.041281695s ago: executing program 4 (id=174):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000000b03000000000000000000030000040800272b2521252d2100080003400000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1f230e12abf1efb1}, 0x4000000)

23.266308105s ago: executing program 2 (id=176):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\x00', "c0b67cb29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28)
poll(&(0x7f0000000080)=[{r0, 0x9040}], 0x1, 0x2)

22.738103136s ago: executing program 4 (id=178):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)

21.119534299s ago: executing program 2 (id=179):
r0 = syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@user_subvol_rm}, {@autodefrag}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0xc40, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0xb2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000001c0)={0x1})
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000001600)={{r0}, "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"})

19.596906633s ago: executing program 3 (id=180):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x32, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, &(0x7f00000000c0))
r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r5, 0x0, 0xb0)
dup3(0xffffffffffffffff, r5, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x10)
creat(0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

18.193448701s ago: executing program 4 (id=182):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_submit(0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0)
r1 = epoll_create(0x1fffffe)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r3, 0xffff)
fcntl$addseals(r3, 0x409, 0x7)
getrandom(0x0, 0x0, 0x0)
r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000080)={0x2025})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0xc0000019})
epoll_pwait2(r1, &(0x7f0000000540)=[{}], 0xfffc, 0x0, 0x0, 0x0)
open(0x0, 0x60142, 0x0)
syz_io_uring_setup(0x23b, 0x0, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCFLSH(r5, 0x8910, 0xffffffffffffffd)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)

17.657925475s ago: executing program 5 (id=183):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r0 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x4089, 0x80}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0})
io_uring_enter(r0, 0x47f6, 0xb277, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011)
recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
sendmsg$inet(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x0)

14.748690849s ago: executing program 3 (id=184):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
io_uring_setup(0x6281, &(0x7f0000000080)={0x0, 0xe5d4, 0x1000})
fcntl$getown(0xffffffffffffffff, 0x9)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_PIE_ON(r0, 0x7005)
syz_io_uring_setup(0x3bd6, &(0x7f0000000000)={0x0, 0xfffffffc, 0x2, 0xfffffff7, 0x10330}, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0)

13.490173471s ago: executing program 3 (id=185):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r3 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x5, @raw_data="2fb04a43cb4edbb2f8c11d55fe7e39d98cc683907ce4751204e83d1785190479f3c5d378bed2c1fc92e0629a4fffd9a52b7a93d12eb198729676b0d892c9c02879d5700ed2ea2a5352518f772c3d9d2809911d42843bd3931a529ac577f811f21e91d3e16bb79748df00c9b6882ccd692b1170aa76a9de8d4bd5f8690cc3edf408d220b7d5916b3eba2d13f751cb46d2cf9034ed3d98a91172eea90e991030a3af605efb6671b50a33e46fdc5695084f7cc34d71ea422e337bf362d643c2827ae8e7f38afa894e0c"})

12.50616996s ago: executing program 5 (id=186):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x12}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

12.278377587s ago: executing program 2 (id=187):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x11, 0x7efffeff00000000)

8.452025141s ago: executing program 3 (id=188):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x78)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$kcm(0x2, 0xa, 0x2)
r2 = accept4(r0, 0x0, 0x0, 0x800)
recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

7.847017836s ago: executing program 4 (id=189):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1, 0x173, &(0x7f0000000240)="$eJzs20tO8mAUxvGnXL+P7+J94sjEgU6kCiTKkAW4AWcEKiEWNeIEYmJcijtxJ24AEt2ANZRGhTiofQOvkf8vAc7k6XuacOAwQAAW1nL47MhRNqyCILjdknRyLCljuTkAMxXoJQCwqNJPtjsAYMewlg73gAdHeny+aQyiRzbm/jCspcaFIw0+5HNx83dO+LqZmcznJf2Ks7/cj/M7msz//uL5hal8IXZ+fP+725P5P5L+Svon6b+kpei31oqk1U/Ob06dvxHzfMDE6N1XNM0bXGA0Padt39tPmM9G+YOE+VyULxnmywnz+ShfbFz4zYTXAJJKWZ7/tOH8ZwznH1hk3V7/rO773hUFBQXFW2H7kwnArLnXnUu32+vvtTv1ltfyzkuV6lGlXKocVt1wL3dNtnMA39n7l77tTgAAAAAAAAAAAAAAQFJrktZtNwEAAABgLubxdyLb9wgAAAAAAAAAAAAAAAAAAAD8FK8BAAD//09LUMs=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x40)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1a7042, 0x8)

7.824285771s ago: executing program 5 (id=190):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xa, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x8}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)

7.607460232s ago: executing program 2 (id=191):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000034c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@nodelalloc}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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")
r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0)
write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x1, 0xd}}}, 0x78)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)
sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0xe0, 0x11, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa5, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff28282973882fbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336"}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}]}]}, 0xe0}], 0x1}, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

6.71493897s ago: executing program 5 (id=192):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}}, 0x0)
syz_genetlink_get_family_id$tipc(0x0, r1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x1}, 0x18)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/softnet_stat\x00')
read$FUSE(r4, &(0x7f0000000f40)={0x2020}, 0x2020)
preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000040)=""/95, 0x5f}], 0x1, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000002f80)={0x2020}, 0x2020)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0xa, 0x0, 0x0, 0x10, 0xc}]}}, &(0x7f00000003c0)=""/222, 0x26, 0xde, 0x41, 0x0, 0x10000, @value=r4}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
dup(0xffffffffffffffff)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
dup(r5)

6.255890778s ago: executing program 4 (id=193):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r3, 0x10d, 0xa9, &(0x7f00000003c0), &(0x7f0000000200)=0x4)

5.698302573s ago: executing program 5 (id=194):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_read_part_table(0x59d, &(0x7f0000000000)="$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")
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341)
ioctl$USBDEVFS_IOCTL(r4, 0xc00c5512, &(0x7f0000000200))
ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x7b12d845, &(0x7f0000000040)})
ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000240)={{{0x1, 0x1}}, 0x28, 0xfffffffc, 0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
fcntl$dupfd(r4, 0x406, r4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_destroy(0x0)

5.506288368s ago: executing program 2 (id=195):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0xc090002)
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xfce1)

5.447790081s ago: executing program 3 (id=196):
rt_sigaction(0x12, &(0x7f0000000140)={&(0x7f0000000400)="2437460f1c2bdfd5c4a2f10027c6c43b660feb2841d3ca0f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0, {[0x7fffffff]}}, 0x0, 0x8, &(0x7f0000000380))
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0)

1.434459894s ago: executing program 4 (id=197):
ioperm(0x0, 0x4, 0x8)
delete_module(0x0, 0x0)

1.106861691s ago: executing program 2 (id=198):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000005a40)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x67, 0x2d, 0x33, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x1000)
fallocate(r1, 0x0, 0x0, 0x1000f4)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000280)={0x0, 0xffffffff000, 0x0, 0x0, 0x2})

1.106659706s ago: executing program 3 (id=199):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x20, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0)
r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x11, r7, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}})
io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0x0)

0s ago: executing program 5 (id=200):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts.
[  170.022485][ T5767] cgroup: Unknown subsys name 'net'
[  170.213194][ T5767] cgroup: Unknown subsys name 'cpuset'
[  170.226800][ T5767] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  215.361354][ T5767] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  219.174856][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  219.206118][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  219.212968][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  219.214412][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  219.231292][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  219.252001][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  219.260443][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  219.269235][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  219.280954][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  219.290444][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  219.303163][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  219.315269][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  219.330262][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  219.342276][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  219.345692][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  219.358020][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  219.371964][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  219.387017][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  219.390078][ T5082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  219.396128][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  219.409386][ T5082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  219.410502][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  219.418589][ T5082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  219.429400][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  219.432368][ T5082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  219.442234][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  219.456481][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  219.463669][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  219.506458][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  219.519803][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  219.544085][ T5785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  219.553410][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  220.693951][ T5789] chnl_net:caif_netlink_parms(): no params data found
[  221.099962][ T5795] chnl_net:caif_netlink_parms(): no params data found
[  221.123174][ T5793] chnl_net:caif_netlink_parms(): no params data found
[  221.360804][ T5783] chnl_net:caif_netlink_parms(): no params data found
[  221.493009][ T5785] Bluetooth: hci0: command tx timeout
[  221.573507][ T5785] Bluetooth: hci4: command tx timeout
[  221.579170][ T5785] Bluetooth: hci2: command tx timeout
[  221.583798][ T5787] Bluetooth: hci1: command tx timeout
[  221.587937][ T5786] chnl_net:caif_netlink_parms(): no params data found
[  221.658420][ T5791] Bluetooth: hci3: command tx timeout
[  222.107115][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.116198][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.124526][ T5789] bridge_slave_0: entered allmulticast mode
[  222.133982][ T5789] bridge_slave_0: entered promiscuous mode
[  222.196493][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.204330][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.211999][ T5789] bridge_slave_1: entered allmulticast mode
[  222.222895][ T5789] bridge_slave_1: entered promiscuous mode
[  222.237379][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.245171][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.253033][ T5795] bridge_slave_0: entered allmulticast mode
[  222.261947][ T5795] bridge_slave_0: entered promiscuous mode
[  222.406073][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.415378][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.423334][ T5795] bridge_slave_1: entered allmulticast mode
[  222.431786][ T5795] bridge_slave_1: entered promiscuous mode
[  222.441845][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.449695][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.457587][ T5793] bridge_slave_0: entered allmulticast mode
[  222.465767][ T5793] bridge_slave_0: entered promiscuous mode
[  222.587240][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.595196][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.603637][ T5793] bridge_slave_1: entered allmulticast mode
[  222.611621][ T5793] bridge_slave_1: entered promiscuous mode
[  222.629243][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.701100][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.708862][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.716680][ T5783] bridge_slave_0: entered allmulticast mode
[  222.725618][ T5783] bridge_slave_0: entered promiscuous mode
[  222.805383][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.841884][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.849930][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.857792][ T5783] bridge_slave_1: entered allmulticast mode
[  222.866029][ T5783] bridge_slave_1: entered promiscuous mode
[  222.915449][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.925412][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.933375][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.941070][ T5786] bridge_slave_0: entered allmulticast mode
[  222.950592][ T5786] bridge_slave_0: entered promiscuous mode
[  223.085241][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.164055][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.207338][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.217599][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.225535][ T5786] bridge_slave_1: entered allmulticast mode
[  223.233818][ T5786] bridge_slave_1: entered promiscuous mode
[  223.248603][ T5789] team0: Port device team_slave_0 added
[  223.295307][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.348429][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.423198][ T5789] team0: Port device team_slave_1 added
[  223.464921][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.484611][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.532460][ T5793] team0: Port device team_slave_0 added
[  223.547381][ T5795] team0: Port device team_slave_0 added
[  223.561525][ T5793] team0: Port device team_slave_1 added
[  223.573934][ T5791] Bluetooth: hci0: command tx timeout
[  223.605450][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.652968][ T5791] Bluetooth: hci1: command tx timeout
[  223.663605][ T5791] Bluetooth: hci2: command tx timeout
[  223.669470][ T5787] Bluetooth: hci4: command tx timeout
[  223.689213][ T5795] team0: Port device team_slave_1 added
[  223.733093][ T5787] Bluetooth: hci3: command tx timeout
[  223.793273][ T5783] team0: Port device team_slave_0 added
[  223.857412][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.864800][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.891303][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.911101][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.918650][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.945166][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.965359][ T5786] team0: Port device team_slave_0 added
[  223.992648][ T5783] team0: Port device team_slave_1 added
[  224.030845][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.038330][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.064867][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.108248][ T5786] team0: Port device team_slave_1 added
[  224.117473][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.124788][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.151575][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.201833][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.209214][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.235654][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.249253][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.256709][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.284243][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.462379][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.470886][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.498203][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.516664][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.523962][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.550302][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.580669][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.588255][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.614654][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.639713][ T5789] hsr_slave_0: entered promiscuous mode
[  224.648904][ T5789] hsr_slave_1: entered promiscuous mode
[  224.731054][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.738413][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.765295][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.837768][ T5793] hsr_slave_0: entered promiscuous mode
[  224.848349][ T5793] hsr_slave_1: entered promiscuous mode
[  224.857320][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.865914][ T5793] Cannot create hsr debugfs directory
[  225.052939][ T5795] hsr_slave_0: entered promiscuous mode
[  225.061975][ T5795] hsr_slave_1: entered promiscuous mode
[  225.071418][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  225.079294][ T5795] Cannot create hsr debugfs directory
[  225.138013][ T5786] hsr_slave_0: entered promiscuous mode
[  225.148278][ T5786] hsr_slave_1: entered promiscuous mode
[  225.157039][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  225.165072][ T5786] Cannot create hsr debugfs directory
[  225.214494][ T5783] hsr_slave_0: entered promiscuous mode
[  225.224832][ T5783] hsr_slave_1: entered promiscuous mode
[  225.232853][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  225.240589][ T5783] Cannot create hsr debugfs directory
[  225.654753][ T5787] Bluetooth: hci0: command tx timeout
[  225.733004][ T5787] Bluetooth: hci2: command tx timeout
[  225.738683][ T5787] Bluetooth: hci4: command tx timeout
[  225.744646][ T5787] Bluetooth: hci1: command tx timeout
[  225.813405][ T5787] Bluetooth: hci3: command tx timeout
[  226.458872][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  226.482397][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  226.545261][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  226.602703][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  226.627562][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  226.649153][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  226.757730][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  226.809411][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  226.842993][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  226.868122][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  226.920019][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  226.949192][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  227.147570][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  227.209638][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  227.309150][ T5795] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  227.335598][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  227.391766][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  227.419158][ T5795] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  227.458919][ T5795] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  227.568239][ T5795] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  227.749468][ T5787] Bluetooth: hci0: command tx timeout
[  227.817127][ T5787] Bluetooth: hci4: command tx timeout
[  227.817245][ T5785] Bluetooth: hci2: command tx timeout
[  227.822672][ T5787] Bluetooth: hci1: command tx timeout
[  227.895462][ T5787] Bluetooth: hci3: command tx timeout
[  227.932267][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.189537][ T5793] 8021q: adding VLAN 0 to HW filter on device team0
[  228.285640][ T3746] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.293438][ T3746] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.358954][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.390769][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.398521][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.512671][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.627600][ T5789] 8021q: adding VLAN 0 to HW filter on device team0
[  228.760720][ T1888] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.768479][ T1888] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.837861][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[  228.868258][ T1888] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.875836][ T1888] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.941986][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.025295][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.033125][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.048478][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.056350][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.112685][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.297123][ T5795] 8021q: adding VLAN 0 to HW filter on device team0
[  229.401011][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[  229.491414][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.528381][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.536124][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.565592][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.573356][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.648359][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.656259][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.851276][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.859034][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.051683][ T5795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  230.063858][ T5795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  230.189061][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  231.187998][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.567151][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.587140][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.788799][ T5793] veth0_vlan: entered promiscuous mode
[  231.881393][ T5793] veth1_vlan: entered promiscuous mode
[  232.108725][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.174383][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.205680][ T5786] veth0_vlan: entered promiscuous mode
[  232.241703][ T5789] veth0_vlan: entered promiscuous mode
[  232.290077][ T5793] veth0_macvtap: entered promiscuous mode
[  232.370666][ T5793] veth1_macvtap: entered promiscuous mode
[  232.394894][ T5786] veth1_vlan: entered promiscuous mode
[  232.529049][ T5789] veth1_vlan: entered promiscuous mode
[  232.564795][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.662903][ T5786] veth0_macvtap: entered promiscuous mode
[  232.698409][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.736994][ T5786] veth1_macvtap: entered promiscuous mode
[  232.809891][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.820764][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.830004][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.839195][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.948845][ T5783] veth0_vlan: entered promiscuous mode
[  233.043935][ T5789] veth0_macvtap: entered promiscuous mode
[  233.091172][ T5783] veth1_vlan: entered promiscuous mode
[  233.117349][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.128373][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.142562][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.168534][ T5789] veth1_macvtap: entered promiscuous mode
[  233.247307][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.259013][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.273305][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.386953][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.398503][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.408711][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.419550][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.433807][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.463540][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.474626][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.484790][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.495600][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.509873][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.555906][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.565425][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.574683][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.583792][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.631649][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.640961][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.650174][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.659384][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.681475][ T5783] veth0_macvtap: entered promiscuous mode
[  233.730997][ T5783] veth1_macvtap: entered promiscuous mode
[  233.899261][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.912374][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.922545][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.933335][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.943511][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.954252][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.968433][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.211185][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.222295][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.232524][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.243293][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.253423][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.264191][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.278457][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.474453][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.486335][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.495877][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.505047][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.184165][ T5795] veth0_vlan: entered promiscuous mode
[  235.309156][ T5795] veth1_vlan: entered promiscuous mode
[  235.756776][ T5795] veth0_macvtap: entered promiscuous mode
[  235.818789][ T5795] veth1_macvtap: entered promiscuous mode
[  236.005792][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.018507][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.028934][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.039744][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.049884][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.062034][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.073212][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.084033][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.098405][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.189900][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.200895][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.211132][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.223322][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.234132][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.244962][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.255169][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.266009][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.280260][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.583360][ T5795] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.592440][ T5795] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.602179][ T5795] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.611396][ T5795] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.738666][ T3614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.746910][ T3614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.915327][ T3950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.924631][ T3950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.241373][ T5793] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  240.307703][ T4803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.317098][ T4803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.562218][ T3859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.570734][ T3859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.602553][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.610784][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.750467][ T3859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.758656][ T3859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.306313][ T5968] fuse: Bad value for 'fd'
[  241.887707][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.896742][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.313904][ T5971] loop2: detected capacity change from 0 to 32768
[  242.406097][ T1888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.414330][ T1888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.775769][ T5971] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,norecovery,reconstruct_alloc
[  242.790601][ T5971] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  242.799159][ T5971] bcachefs (loop2): superblock requires following recovery passes to be run:
[  242.799159][ T5971]   check_directory_structure
[  242.814353][ T5971] bcachefs (loop2): Version upgrade required:
[  242.814353][ T5971] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  242.814353][ T5971] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  242.814353][ T5971]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_nlinks,set_fs_needs_rebalance
[  243.060112][ T5976] loop1: detected capacity change from 0 to 32768
[  243.086341][ T5971] bcachefs (loop2): dropping and reconstructing all alloc info
[  243.250621][ T5976] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open
[  243.263815][ T5976] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  243.308371][ T5971] bcachefs (loop2): accounting_read... done
[  243.389805][ T5971] bcachefs (loop2): alloc_read... done
[  243.396805][ T5971] bcachefs (loop2): stripes_read... done
[  243.403059][ T5971] bcachefs (loop2): snapshots_read... done
[  243.409675][ T5971] bcachefs (loop2): check_allocations... done
[  243.612852][ T5976] bcachefs: bch2_fs_get_tree() error: EINVAL
[  243.613262][ T5971] bcachefs (loop2): going read-write
[  243.631509][   T29] audit: type=1326 audit(1735658844.704:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb34d85d29 code=0x7ffc0000
[  243.653956][   T29] audit: type=1326 audit(1735658844.704:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb34d85d29 code=0x7ffc0000
[  243.700201][   T29] audit: type=1326 audit(1735658844.794:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb34d85d29 code=0x7ffc0000
[  243.842589][ T3746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.851098][ T3746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.008298][   T29] audit: type=1326 audit(1735658844.834:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb34d85d29 code=0x7ffc0000
[  244.032376][   T29] audit: type=1326 audit(1735658844.844:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdb34d85d29 code=0x7ffc0000
[  244.055222][   T29] audit: type=1326 audit(1735658844.844:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb34d85d29 code=0x7ffc0000
[  244.077640][   T29] audit: type=1326 audit(1735658844.954:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb34d85d29 code=0x7ffc0000
[  244.123490][ T3950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.131823][ T3950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.152596][ T5998] Zero length message leads to an empty skb
[  244.259813][ T5971] bcachefs (loop2): done starting filesystem
[  244.704376][ T5789] bcachefs (loop2): shutting down
[  244.709649][ T5789] bcachefs (loop2): going read-only
[  244.715518][ T5789] bcachefs (loop2): finished waiting for writes to stop
[  244.864124][   T29] audit: type=1326 audit(1735658845.914:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaad85d29 code=0x7ffc0000
[  244.886804][   T29] audit: type=1326 audit(1735658845.914:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaad85d29 code=0x7ffc0000
[  244.914232][   T29] audit: type=1326 audit(1735658845.914:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfaad85d29 code=0x7ffc0000
[  244.979199][ T5789] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10
[  244.995623][ T5789] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10
[  245.297910][ T5789] bcachefs (loop2): unshutdown complete, journal seq 11
[  245.306286][ T5789] bcachefs (loop2): done going read-only, filesystem not clean
[  245.749052][ T5789] bcachefs (loop2): shutdown complete
[  245.783257][ T6005] loop3: detected capacity change from 0 to 32768
[  245.793529][ T6005] XFS (loop3): invalid logbufsize: 67108864 [not 16k,32k,64k,128k or 256k]
[  246.111394][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.120547][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.135433][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.147666][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.156679][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.165453][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.173628][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.181329][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.189197][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.197155][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.205144][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.213015][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.220736][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.228638][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.242688][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.252083][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.259913][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.267975][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.276658][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.285975][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.293915][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.301611][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.309490][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.317315][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.325263][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.338849][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.348374][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.356236][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.364728][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.372443][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.380286][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.388124][ T5847] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0
[  246.565292][ T5847] hid-generic 0000:0000:0003.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  247.003017][ T1984] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  247.167990][ T1984] usb 1-1: no configurations
[  247.173975][ T1984] usb 1-1: can't read configurations, error -22
[  247.373365][ T1984] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  247.690118][ T1984] usb 1-1: no configurations
[  247.695370][ T1984] usb 1-1: can't read configurations, error -22
[  247.723625][ T1984] usb usb1-port1: attempt power cycle
[  247.876418][ T6045] loop1: detected capacity change from 0 to 1024
[  247.895802][ T6045] hfsplus: Unknown parameter ''
[  248.017384][ T6045] netlink: 144 bytes leftover after parsing attributes in process `syz.1.20'.
[  248.083205][ T1984] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  248.149613][ T1984] usb 1-1: no configurations
[  248.154765][ T1984] usb 1-1: can't read configurations, error -22
[  248.304860][ T1984] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  248.396072][ T1984] usb 1-1: no configurations
[  248.400949][ T1984] usb 1-1: can't read configurations, error -22
[  248.453586][ T1984] usb usb1-port1: unable to enumerate USB device
[  248.603134][ T5862] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  248.842999][ T5862] usb 4-1: Using ep0 maxpacket: 16
[  248.884441][ T6052] loop1: detected capacity change from 0 to 8
[  248.884898][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.905391][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  248.919673][ T5862] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00
[  248.929283][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.125971][ T5862] usb 4-1: config 0 descriptor??
[  249.225799][ T6052] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22'.
[  249.636699][ T6048] netlink: 'syz.3.21': attribute type 1 has an invalid length.
[  249.785480][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'.
[  249.809303][ T6058] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  249.876835][ T5862] wacom 0003:056A:0045.0002: Unknown device_type for 'HID 056a:0045'. Assuming pen.
[  249.933715][ T5862] wacom 0003:056A:0045.0002: hidraw0: USB HID v0.00 Device [HID 056a:0045] on usb-dummy_hcd.3-1/input0
[  249.949963][ T5862] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0045.0002/input/input5
[  250.062318][ T6059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.072140][ T6059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.667175][ T5862] usb 4-1: USB disconnect, device number 2
[  253.511249][ T1984] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  253.669006][ T1984] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  253.679624][ T1984] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  253.691343][ T1984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  253.702838][ T1984] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  253.861840][ T6080] loop3: detected capacity change from 0 to 4096
[  253.933096][ T6080] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  254.967657][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34'.
[  255.220211][ T6080] ntfs3(loop3): Failed to read $UpCase (-4).
[  255.882225][ T1984] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  255.891828][ T1984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.908850][ T1984] usb 3-1: config 0 descriptor??
[  255.915518][ T1984] usb 3-1: can't set config #0, error -71
[  255.949382][ T1984] usb 3-1: USB disconnect, device number 2
[  257.455469][ T6101] loop1: detected capacity change from 0 to 4096
[  257.464594][ T6101] =======================================================
[  257.464594][ T6101] WARNING: The mand mount option has been deprecated and
[  257.464594][ T6101]          and is ignored by this kernel. Remove the mand
[  257.464594][ T6101]          option from the mount to silence this warning.
[  257.464594][ T6101] =======================================================
[  259.003111][ T6102] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  259.938603][ T6104] loop0: detected capacity change from 0 to 32768
[  260.084264][ T6104] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.39 (6104)
[  260.323415][ T6104] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  260.334781][ T6104] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[  260.346294][ T6104] BTRFS info (device loop0): using free-space-tree
[  260.773115][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  260.782088][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  260.791032][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  260.793740][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  260.809209][ T5862] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  260.875798][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  261.162672][ T5862] usb 4-1: device descriptor read/64, error -71
[  261.208104][ T6104] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  261.209655][ T6104] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  261.286521][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  261.713622][ T5862] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  262.805192][ T6130] Bluetooth: MGMT ver 1.23
[  263.432506][ T5862] usb 4-1: device descriptor read/64, error -71
[  264.444896][ T5862] usb usb4-port1: attempt power cycle
[  264.567596][ T6104] BTRFS error (device loop0): open_ctree failed
[  264.667442][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  264.766771][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  264.869128][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  265.005378][ T5785] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  265.012635][ T5785] Bluetooth: hci0: command 0x0401 tx timeout
[  265.220598][ T5862] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  265.360928][ T5862] usb 4-1: device descriptor read/8, error -71
[  265.404674][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  267.521497][ T6136] loop3: detected capacity change from 0 to 32768
[  269.189988][   T29] kauditd_printk_skb: 14 callbacks suppressed
[  269.190064][   T29] audit: type=1326 audit(1735658870.284:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaad85d29 code=0x7ffc0000
[  269.329092][ T6136] JBD2: journal reset failed
[  269.334577][ T6136] (syz.3.45,6136,0):ocfs2_journal_load:1145 ERROR: Failed to load journal!
[  269.343766][ T6136] (syz.3.45,6136,0):ocfs2_check_volume:2428 ERROR: ocfs2 journal load failed! -4
[  269.448009][   T29] audit: type=1326 audit(1735658870.364:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fbfaad85d29 code=0x7ffc0000
[  269.672638][   T29] audit: type=1326 audit(1735658870.644:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaad85d29 code=0x7ffc0000
[  269.698374][   T29] audit: type=1326 audit(1735658870.644:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaad85d29 code=0x7ffc0000
[  269.722035][   T29] audit: type=1326 audit(1735658870.764:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfaad85d29 code=0x7ffc0000
[  269.744630][   T29] audit: type=1326 audit(1735658870.764:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaad85d29 code=0x7ffc0000
[  269.767129][   T29] audit: type=1326 audit(1735658870.764:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaad85d29 code=0x7ffc0000
[  271.055863][ T6152] loop4: detected capacity change from 0 to 256
[  272.807624][ T6171] loop3: detected capacity change from 0 to 128
[  273.094942][ T6171] netlink: 104 bytes leftover after parsing attributes in process `syz.3.56'.
[  280.655896][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  280.662659][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  284.092024][ T6201] loop0: detected capacity change from 0 to 1024
[  284.154399][ T5785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  284.167864][ T5785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  284.381483][ T6210] loop4: detected capacity change from 0 to 2048
[  284.435246][ T5785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  284.464365][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  284.478433][ T5785] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  284.496351][ T5785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  284.746876][ T6210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.644740][ T5787] Bluetooth: hci5: command tx timeout
[  286.648681][ T4803] hfsplus: b-tree write err: -5, ino 4
[  288.693546][ T5787] Bluetooth: hci5: command tx timeout
[  288.825998][ T6206] chnl_net:caif_netlink_parms(): no params data found
[  288.903039][ T5795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.660602][ T6234] netlink: 'syz.2.76': attribute type 1 has an invalid length.
[  290.668579][ T6234] netlink: 224 bytes leftover after parsing attributes in process `syz.2.76'.
[  290.780693][ T5787] Bluetooth: hci5: command tx timeout
[  292.853949][ T5787] Bluetooth: hci5: command tx timeout
[  293.103183][ T6239] loop0: detected capacity change from 0 to 1024
[  293.605721][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.614654][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.623645][ T6206] bridge_slave_0: entered allmulticast mode
[  293.637774][ T6206] bridge_slave_0: entered promiscuous mode
[  294.002298][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.011303][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.020337][ T6206] bridge_slave_1: entered allmulticast mode
[  294.035573][ T6206] bridge_slave_1: entered promiscuous mode
[  297.297224][ T6206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.394346][ T6206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.280059][ T6206] team0: Port device team_slave_0 added
[  299.451783][ T6206] team0: Port device team_slave_1 added
[  300.255834][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.263207][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.289704][ T6206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.711045][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.718764][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.746049][ T6206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.375970][ T6206] hsr_slave_0: entered promiscuous mode
[  301.446872][ T6269] loop4: detected capacity change from 0 to 256
[  301.484717][ T6206] hsr_slave_1: entered promiscuous mode
[  301.533322][ T6269] exfat: Deprecated parameter 'namecase'
[  301.539574][ T6269] exfat: Deprecated parameter 'namecase'
[  301.548040][ T6206] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  301.555949][ T6206] Cannot create hsr debugfs directory
[  301.772218][ T6269] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x1380c30a, utbl_chksum : 0xe619d30d)
[  302.008057][ T6262] loop2: detected capacity change from 0 to 32768
[  302.077267][ T6262] read_mapping_page failed!
[  302.082060][ T6262] diRead: diIAGRead returned -5
[  302.349515][ T6270] loop3: detected capacity change from 0 to 4096
[  304.131154][ T6270] ntfs3(loop3): Failed to read $UpCase (-4).
[  305.327559][ T6206] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  305.505922][ T6206] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  305.615115][ T6206] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  305.787921][ T6206] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  305.945811][ T6280] loop2: detected capacity change from 0 to 1024
[  306.898896][ T6206] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.988686][ T6206] 8021q: adding VLAN 0 to HW filter on device team0
[  307.065032][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.072925][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.088841][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.096588][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.106378][ T1888] hfsplus: b-tree write err: -5, ino 4
[  307.627206][ T6295] loop0: detected capacity change from 0 to 16
[  307.760586][ T6295] erofs (device loop0): mounted with root inode @ nid 36.
[  307.859418][ T6295] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[  307.951149][ T6295] erofs (device loop0): failed to decompress -7 in[50, 4046] out[1851]
[  307.960628][ T6295] erofs (device loop0): read error -117 @ 43 of nid 36
[  308.655248][ T5842] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  308.913936][ T5842] usb 3-1: Using ep0 maxpacket: 8
[  308.985885][ T5842] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  308.994544][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  309.007574][ T5842] usb 3-1: config 0 has no interface number 0
[  309.014921][ T5842] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  309.027737][ T5842] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  309.038809][ T5842] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  309.052268][ T5842] usb 3-1: config 0 interface 52 has no altsetting 0
[  309.142439][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.283884][ T5842] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  309.293592][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  309.302195][ T5842] usb 3-1: Product: syz
[  309.307145][ T5842] usb 3-1: SerialNumber: syz
[  309.383773][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.586293][ T6304] netlink: 332 bytes leftover after parsing attributes in process `syz.0.97'.
[  309.595751][ T6304] netlink: 'syz.0.97': attribute type 9 has an invalid length.
[  309.603758][ T6304] netlink: 160 bytes leftover after parsing attributes in process `syz.0.97'.
[  309.671763][ T5842] usb 3-1: config 0 descriptor??
[  309.841553][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.053318][ T5842] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input8
[  310.076507][ T5129] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  310.125457][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.153641][ T5129] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  310.254651][ T5129] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  310.315068][ T5129] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  310.359331][ T5842] usb 3-1: USB disconnect, device number 3
[  310.793543][ T6206] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.806774][   T11] bridge_slave_1: left allmulticast mode
[  310.813014][   T11] bridge_slave_1: left promiscuous mode
[  310.819616][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.273759][   T11] bridge_slave_0: left allmulticast mode
[  311.279834][   T11] bridge_slave_0: left promiscuous mode
[  311.286843][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.434655][ T6323] loop2: detected capacity change from 0 to 1024
[  316.762399][ T6327] syz.2.100: attempt to access beyond end of device
[  316.762399][ T6327] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  316.776626][ T6327] Buffer I/O error on dev loop2, logical block 100663296, async page read
[  316.795818][ T6327] syz.2.100: attempt to access beyond end of device
[  316.795818][ T6327] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  316.809948][ T6327] Buffer I/O error on dev loop2, logical block 100663296, async page read
[  317.117143][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  317.262507][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  317.342593][   T11] bond0 (unregistering): Released all slaves
[  319.616073][ T6336] loop2: detected capacity change from 0 to 256
[  321.423176][ T6336] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  321.444981][   T11] hsr_slave_0: left promiscuous mode
[  321.536221][   T11] hsr_slave_1: left promiscuous mode
[  321.634810][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.642638][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.773567][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.781369][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.043659][ T6348] loop3: detected capacity change from 0 to 128
[  323.063393][ T6353] loop4: detected capacity change from 0 to 32768
[  323.083065][   T11] veth1_macvtap: left promiscuous mode
[  323.088983][   T11] veth0_macvtap: left promiscuous mode
[  323.095034][   T11] veth1_vlan: left promiscuous mode
[  323.100600][   T11] veth0_vlan: left promiscuous mode
[  324.548118][   T11] team0 (unregistering): Port device team_slave_1 removed
[  324.594712][ T6348] process 'syz.3.109' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  324.632295][ T6348] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /usr/sbin/sshd /usr/sbin/sshd /bin/sh /root/syz-executor /root/syz-executor /newroot/27/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  324.917245][   T11] team0 (unregistering): Port device team_slave_0 removed
[  325.197458][ T6353] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,str_hash=crc64,norecovery,nojournal_transaction_names,reconstruct_alloc
[  325.218820][ T6353] invalid bkey u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key 7696581394432:0:0 durability: 0 (invalid extent entry 0000000000000000)
[  325.218942][ T6353]   invalid extent entry type (got 6, max 6): deleting
[  326.021145][ T6353] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  326.031014][ T6353] bcachefs (loop4): Version upgrade required:
[  326.031014][ T6353] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  326.031014][ T6353] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  326.031014][ T6353]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  326.614652][ T6353] bcachefs (loop4): dropping and reconstructing all alloc info
[  326.671743][ T6206] veth0_vlan: entered promiscuous mode
[  326.691750][ T6353] bcachefs (loop4): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[  326.703285][ T6353] bcachefs (loop4): bch2_fs_recovery(): error EINTR
[  326.710122][ T6353] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR
[  326.719524][ T6353] bcachefs (loop4): shutting down
[  326.897872][ T6353] bcachefs (loop4): shutdown complete
[  326.906336][ T6206] veth1_vlan: entered promiscuous mode
[  327.060973][ T6206] veth0_macvtap: entered promiscuous mode
[  327.080726][ T6206] veth1_macvtap: entered promiscuous mode
[  327.148467][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.159822][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.170012][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.180859][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.191121][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.201996][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.212235][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.223077][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.246801][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.265272][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.276511][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.286758][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.297532][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.307804][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.318555][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.328791][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.346552][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.362876][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.385148][ T6206] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.394847][ T6206] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.403954][ T6206] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.413132][ T6206] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.610668][ T6381] loop2: detected capacity change from 0 to 40427
[  328.674171][ T6381] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff
[  328.683280][ T6381] F2FS-fs (loop2): Image doesn't support compression
[  328.690570][ T6381] F2FS-fs (loop2): Image doesn't support compression
[  328.771710][ T6381] F2FS-fs (loop2): invalid crc value
[  329.422482][ T6381] F2FS-fs (loop2): Found nat_bits in checkpoint
[  329.848649][ T6381] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  331.374351][ T5789] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x860/0x3da0
[  331.386200][ T5789] F2FS-fs (loop2): invalid blkaddr: 1535, type: 10, run fsck to fix.
[  333.034396][ T6353] bcachefs: bch2_fs_get_tree() error: EINTR
[  335.581299][ T6460] loop2: detected capacity change from 0 to 1024
[  335.607752][ T6458] loop4: detected capacity change from 0 to 16
[  335.683552][ T4618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.691722][ T4618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.793842][ T6458] erofs (device loop4): mounted with root inode @ nid 36.
[  335.811528][ T3950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.819803][ T3950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.921410][ T6460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.730860][ T6470] loop4: detected capacity change from 0 to 256
[  338.425340][ T6476] EXT4-fs warning (device loop2): empty_inline_dir:1839: bad inline directory (dir #12) - no `..'
[  340.815637][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.093214][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  342.100017][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  342.252406][ T6483] loop0: detected capacity change from 0 to 4096
[  342.314920][ T6483] NILFS (loop0): invalid segment: Checksum error in segment payload
[  342.323387][ T6483] NILFS (loop0): trying rollback from an earlier position
[  344.288473][ T6483] NILFS (loop0): invalid segment: Inconsistency found
[  344.295905][ T6483] NILFS (loop0): error -22 while searching super root
[  344.340702][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  344.348577][   T51] Bluetooth: hci0: command 0x0401 tx timeout
[  344.355067][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  345.579658][ T6504] loop4: detected capacity change from 0 to 64
[  346.726521][ T6517] syz.5.143 uses obsolete (PF_INET,SOCK_PACKET)
[  350.151455][ T6527] loop4: detected capacity change from 0 to 128
[  350.437748][ T6527] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  350.566856][ T6527] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  350.906314][ T6538] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.144: No space for directory leaf checksum. Please run e2fsck -D.
[  350.922126][ T6538] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.144: Directory block failed checksum
[  356.231407][ T5795] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  356.431028][ T6563] loop5: detected capacity change from 0 to 256
[  356.677604][ T6563] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d)
[  358.858436][ T6577] loop5: detected capacity change from 0 to 512
[  358.866344][ T6577] journal_path: Non-blockdev passed as './file0'
[  358.874208][ T6577] EXT4-fs: error: could not find journal device path
[  359.628173][ T6566] loop2: detected capacity change from 0 to 32768
[  359.672454][ T6593] netlink: 60 bytes leftover after parsing attributes in process `syz.5.160'.
[  359.831814][ T6571] loop3: detected capacity change from 0 to 32768
[  359.843315][ T6566] JBD2: journal reset failed
[  359.848279][ T6566] (syz.2.154,6566,1):ocfs2_journal_load:1145 ERROR: Failed to load journal!
[  359.857393][ T6566] (syz.2.154,6566,1):ocfs2_check_volume:2428 ERROR: ocfs2 journal load failed! -4
[  359.874865][ T6571] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.155 (6571)
[  360.066200][ T6571] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  360.076998][ T6571] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm
[  360.087268][ T6571] BTRFS info (device loop3): using free-space-tree
[  360.510122][ T6571] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  360.511218][ T6571] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  360.522525][ T6571] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  360.533052][ T6571] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  360.543225][ T6571] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  360.553189][ T6571] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  360.563534][ T6571] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  360.573785][ T6571] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  360.584583][ T6571] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  360.596143][ T6571] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  360.607561][ T6571] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  363.679772][ T6571] BTRFS error (device loop3): open_ctree failed
[  364.636472][ T6629] loop0: detected capacity change from 0 to 256
[  365.101899][ T6629] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001213e, chksum : 0x32070be0, utbl_chksum : 0xe619d30d)
[  365.703140][ T6629] loop0: detected capacity change from 256 to 0
[  366.505796][ T5783] syz-executor: attempt to access beyond end of device
[  366.505796][ T5783] loop0: rw=524288, sector=160, nr_sectors = 1 limit=0
[  366.519817][ T5783] syz-executor: attempt to access beyond end of device
[  366.519817][ T5783] loop0: rw=524288, sector=161, nr_sectors = 1 limit=0
[  366.533873][ T5783] syz-executor: attempt to access beyond end of device
[  366.533873][ T5783] loop0: rw=524288, sector=162, nr_sectors = 1 limit=0
[  366.547852][ T5783] syz-executor: attempt to access beyond end of device
[  366.547852][ T5783] loop0: rw=524288, sector=163, nr_sectors = 1 limit=0
[  366.563662][ T5783] syz-executor: attempt to access beyond end of device
[  366.563662][ T5783] loop0: rw=524288, sector=164, nr_sectors = 1 limit=0
[  366.577731][ T5783] syz-executor: attempt to access beyond end of device
[  366.577731][ T5783] loop0: rw=524288, sector=165, nr_sectors = 1 limit=0
[  366.591740][ T5783] syz-executor: attempt to access beyond end of device
[  366.591740][ T5783] loop0: rw=524288, sector=166, nr_sectors = 1 limit=0
[  366.606376][ T5783] syz-executor: attempt to access beyond end of device
[  366.606376][ T5783] loop0: rw=524288, sector=167, nr_sectors = 1 limit=0
[  366.620379][ T5783] syz-executor: attempt to access beyond end of device
[  366.620379][ T5783] loop0: rw=0, sector=160, nr_sectors = 1 limit=0
[  366.692142][ T5783] syz-executor: attempt to access beyond end of device
[  366.692142][ T5783] loop0: rw=0, sector=161, nr_sectors = 1 limit=0
[  367.235932][ T5783] Buffer I/O error on dev loop0, logical block 0, lost sync page write
[  367.603408][ T3859] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.827373][ T3859] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.049701][ T3859] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.306446][ T3859] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.903566][ T3859] bridge_slave_1: left allmulticast mode
[  368.919378][ T3859] bridge_slave_1: left promiscuous mode
[  368.926340][ T3859] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.093818][ T3859] bridge_slave_0: left allmulticast mode
[  369.099733][ T3859] bridge_slave_0: left promiscuous mode
[  369.106450][ T3859] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.143481][ T6659] loop2: detected capacity change from 0 to 64
[  370.200357][ T3859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  370.286114][ T3859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  370.375225][ T6661] netlink: 24 bytes leftover after parsing attributes in process `syz.4.174'.
[  370.396428][ T3859] bond0 (unregistering): Released all slaves
[  371.083525][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  371.143236][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  371.209494][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  371.305201][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  371.324487][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  371.336614][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  373.539246][ T6685] loop5: detected capacity change from 0 to 1024
[  373.634768][ T5791] Bluetooth: hci0: command tx timeout
[  373.938915][ T6685] EXT4-fs warning (device loop5): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop5.
[  374.145142][ T3859] hsr_slave_0: left promiscuous mode
[  374.178064][ T3859] hsr_slave_1: left promiscuous mode
[  374.197486][ T3859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  374.205918][ T3859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  374.457261][ T3859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  374.465281][ T3859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  374.803595][ T3859] veth1_macvtap: left promiscuous mode
[  374.809372][ T3859] veth0_macvtap: left promiscuous mode
[  374.815907][ T3859] veth1_vlan: left promiscuous mode
[  374.821478][ T3859] veth0_vlan: left promiscuous mode
[  374.992948][ T5842] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  375.267897][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.279452][ T5842] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00
[  375.289073][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.475799][ T6697] loop5: detected capacity change from 0 to 1024
[  375.533875][ T5842] usb 4-1: config 0 descriptor??
[  375.654447][ T5791] Bluetooth: hci0: command tx timeout
[  376.274735][ T3950] hfsplus: b-tree write err: -5, ino 4
[  376.607502][ T3859] team0 (unregistering): Port device team_slave_1 removed
[  377.197760][ T3859] team0 (unregistering): Port device team_slave_0 removed
[  377.738868][ T5791] Bluetooth: hci0: command tx timeout
[  378.659959][ T6701] ALSA: mixer_oss: invalid OSS volume ''
[  378.732400][ T5842] usbhid 4-1:0.0: can't add hid device: -71
[  378.740441][ T5842] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  379.073766][ T5842] usb 4-1: USB disconnect, device number 7
[  379.953238][ T5791] Bluetooth: hci0: command tx timeout
[  380.964780][ T6665] chnl_net:caif_netlink_parms(): no params data found
[  386.187150][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.195620][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.203662][ T6665] bridge_slave_0: entered allmulticast mode
[  386.221449][ T6665] bridge_slave_0: entered promiscuous mode
[  386.294035][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.301737][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.309787][ T6665] bridge_slave_1: entered allmulticast mode
[  386.327417][ T6665] bridge_slave_1: entered promiscuous mode
[  386.966642][ T6665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.074399][ T6665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  387.101608][ T6742] loop2: detected capacity change from 0 to 512
[  387.193705][ T6742] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  387.207146][ T6742] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  387.221225][ T6743] loop4: detected capacity change from 0 to 64
[  387.390847][ T6665] team0: Port device team_slave_0 added
[  387.433163][   T29] audit: type=1800 audit(1735658988.444:33): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.189" name="file1" dev="loop4" ino=5 res=0 errno=0
[  387.454882][   T29] audit: type=1800 audit(1735658988.444:34): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.189" name="file1" dev="loop4" ino=5 res=0 errno=0
[  387.505779][ T6665] team0: Port device team_slave_1 added
[  387.607163][ T6742] EXT4-fs (loop2): 1 orphan inode deleted
[  387.613514][ T6742] EXT4-fs (loop2): 1 truncate cleaned up
[  387.673807][ T6742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  387.858294][ T6742] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  387.895995][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_0
[  387.904160][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.930475][ T6665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.947585][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.956934][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.984100][ T6665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  388.007061][ T6742] EXT4-fs (loop2): Remounting filesystem read-only
[  388.427350][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.969644][ T6665] hsr_slave_0: entered promiscuous mode
[  389.808050][ T6764] loop5: detected capacity change from 0 to 2048
[  389.828685][ T6665] hsr_slave_1: entered promiscuous mode
[  391.123354][ T6767] usb usb4: usbfs: process 6767 (syz.5.194) did not claim interface 0 before use
[  391.335096][ T6767] usb usb4: usbfs: process 6767 (syz.5.194) did not claim interface 0 before use
[  392.064801][   T29] audit: type=1326 audit(1735658992.604:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.5.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9fd85d29 code=0x7ffc0000
[  392.089416][   T29] audit: type=1326 audit(1735658992.604:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.5.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9fd85d29 code=0x7ffc0000
[  392.112121][   T29] audit: type=1326 audit(1735658992.774:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.5.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0d9fd85d29 code=0x7ffc0000
[  392.135446][   T29] audit: type=1326 audit(1735658992.774:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.5.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9fd85d29 code=0x7ffc0000
[  392.163246][   T29] audit: type=1326 audit(1735658992.774:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.5.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9fd85d29 code=0x7ffc0000
[  392.187652][   T29] audit: type=1326 audit(1735658992.924:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.5.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d9fd85d29 code=0x7ffc0000
[  392.210299][   T29] audit: type=1326 audit(1735658992.924:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.5.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9fd85d29 code=0x7ffc0000
[  392.233423][   T29] audit: type=1326 audit(1735658992.924:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.5.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9fd85d29 code=0x7ffc0000
[  392.432564][ T6764]  loop5: unable to read partition table
[  392.439378][ T6764] loop_reread_partitions: partition scan of loop5 () failed (rc=-5)
[  392.587425][ T6665] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  392.595435][ T6665] Cannot create hsr debugfs directory
[  392.922255][ T5144] Alternate GPT is invalid, using primary GPT.
[  392.930056][ T5144]  loop5: p2 p3 p7
[  394.230426][ T6776] =====================================================
[  394.237857][ T6776] BUG: KMSAN: uninit-value in io_recv+0x930/0x1f90
[  394.245124][ T6776]  io_recv+0x930/0x1f90
[  394.249481][ T6776]  io_issue_sqe+0x420/0x2130
[  394.254396][ T6776]  io_req_task_submit+0xfa/0x1d0
[  394.259526][ T6776]  io_handle_tw_list+0x55f/0x5c0
[  394.264757][ T6776]  tctx_task_work_run+0x109/0x3e0
[  394.269971][ T6776]  tctx_task_work+0x6d/0xc0
[  394.275238][ T6776]  task_work_run+0x268/0x310
[  394.280016][ T6776]  io_run_task_work+0x43a/0x4a0
[  394.285606][ T6776]  __se_sys_io_uring_enter+0x204f/0x4ce0
[  394.291465][ T6776]  __x64_sys_io_uring_enter+0x11f/0x1a0
[  394.297939][ T6776]  x64_sys_call+0xce5/0x3c30
[  394.309250][ T6776]  do_syscall_64+0xcd/0x1e0
[  394.315838][ T6776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.321960][ T6776] 
[  394.324476][ T6776] Uninit was created at:
[  394.328986][ T6776]  __kmalloc_noprof+0x923/0x1230
[  394.335836][ T6776]  io_alloc_async_data+0xc0/0x220
[  394.341067][ T6776]  io_recvmsg_prep+0xbe8/0x1a20
[  394.346217][ T6776]  io_submit_sqes+0x1082/0x2f80
[  394.351264][ T6776]  __se_sys_io_uring_enter+0x409/0x4ce0
[  394.357146][ T6776]  __x64_sys_io_uring_enter+0x11f/0x1a0
[  394.363077][ T6776]  x64_sys_call+0xce5/0x3c30
[  394.367883][ T6776]  do_syscall_64+0xcd/0x1e0
[  394.372546][ T6776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.378782][ T6776] 
[  394.381229][ T6776] CPU: 1 UID: 0 PID: 6776 Comm: syz.3.199 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0
[  394.392134][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  394.408836][ T6776] =====================================================
[  394.417760][ T6776] Disabling lock debugging due to kernel taint
[  394.424208][ T6776] Kernel panic - not syncing: kmsan.panic set ...
[  394.430761][ T6776] CPU: 1 UID: 0 PID: 6776 Comm: syz.3.199 Tainted: G    B              6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0
[  394.443047][ T6776] Tainted: [B]=BAD_PAGE
[  394.447303][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  394.457506][ T6776] Call Trace:
[  394.460898][ T6776]  <TASK>
[  394.463936][ T6776]  dump_stack_lvl+0x216/0x2d0
[  394.468829][ T6776]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  394.474830][ T6776]  dump_stack+0x1e/0x24
[  394.479183][ T6776]  panic+0x4e2/0xcf0
[  394.483277][ T6776]  ? kmsan_get_metadata+0x111/0x1c0
[  394.488681][ T6776]  kmsan_report+0x2c7/0x2d0
[  394.493365][ T6776]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  394.499366][ T6776]  ? __msan_warning+0x95/0x120
[  394.504341][ T6776]  ? io_recv+0x930/0x1f90
[  394.508868][ T6776]  ? io_issue_sqe+0x420/0x2130
[  394.513829][ T6776]  ? io_req_task_submit+0xfa/0x1d0
[  394.519136][ T6776]  ? io_handle_tw_list+0x55f/0x5c0
[  394.524436][ T6776]  ? tctx_task_work_run+0x109/0x3e0
[  394.529829][ T6776]  ? tctx_task_work+0x6d/0xc0
[  394.534689][ T6776]  ? task_work_run+0x268/0x310
[  394.539648][ T6776]  ? io_run_task_work+0x43a/0x4a0
[  394.544872][ T6776]  ? __se_sys_io_uring_enter+0x204f/0x4ce0
[  394.550891][ T6776]  ? __x64_sys_io_uring_enter+0x11f/0x1a0
[  394.556822][ T6776]  ? x64_sys_call+0xce5/0x3c30
[  394.561808][ T6776]  ? do_syscall_64+0xcd/0x1e0
[  394.566658][ T6776]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.572957][ T6776]  ? kmsan_get_metadata+0x13e/0x1c0
[  394.578333][ T6776]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  394.584915][ T6776]  ? kmsan_get_metadata+0x13e/0x1c0
[  394.590292][ T6776]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  394.596288][ T6776]  ? _raw_spin_unlock_irqrestore+0x3f/0x60
[  394.602312][ T6776]  ? stack_depot_save_flags+0x6db/0x750
[  394.608080][ T6776]  ? kmsan_get_metadata+0x13e/0x1c0
[  394.613467][ T6776]  ? kmsan_get_metadata+0x13e/0x1c0
[  394.618851][ T6776]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  394.625412][ T6776]  ? kmsan_get_metadata+0x13e/0x1c0
[  394.630786][ T6776]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  394.636779][ T6776]  __msan_warning+0x95/0x120
[  394.641586][ T6776]  io_recv+0x930/0x1f90
[  394.645989][ T6776]  ? __pfx_io_recv+0x10/0x10
[  394.650778][ T6776]  io_issue_sqe+0x420/0x2130
[  394.655573][ T6776]  ? kmsan_get_metadata+0x13e/0x1c0
[  394.660964][ T6776]  io_req_task_submit+0xfa/0x1d0
[  394.666098][ T6776]  ? __pfx_io_req_task_submit+0x10/0x10
[  394.671844][ T6776]  io_handle_tw_list+0x55f/0x5c0
[  394.676989][ T6776]  tctx_task_work_run+0x109/0x3e0
[  394.682213][ T6776]  ? __pfx_tctx_task_work+0x10/0x10
[  394.687610][ T6776]  tctx_task_work+0x6d/0xc0
[  394.692303][ T6776]  task_work_run+0x268/0x310
[  394.697097][ T6776]  io_run_task_work+0x43a/0x4a0
[  394.702157][ T6776]  __se_sys_io_uring_enter+0x204f/0x4ce0
[  394.708015][ T6776]  ? futex_wait+0x2bf/0x360
[  394.712723][ T6776]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  394.719298][ T6776]  ? kmsan_get_metadata+0x13e/0x1c0
[  394.724734][ T6776]  __x64_sys_io_uring_enter+0x11f/0x1a0
[  394.730510][ T6776]  x64_sys_call+0xce5/0x3c30
[  394.735334][ T6776]  do_syscall_64+0xcd/0x1e0
[  394.740009][ T6776]  ? clear_bhb_loop+0x25/0x80
[  394.744905][ T6776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.751026][ T6776] RIP: 0033:0x7fdb34d85d29
[  394.755588][ T6776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  394.775404][ T6776] RSP: 002b:00007fdb35c52038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  394.784019][ T6776] RAX: ffffffffffffffda RBX: 00007fdb34f76160 RCX: 00007fdb34d85d29
[  394.792152][ T6776] RDX: 0000000000003900 RSI: 00000000000006e2 RDI: 0000000000000005
[  394.800272][ T6776] RBP: 00007fdb34e01b08 R08: 0000000000000000 R09: 0000000000000000
[  394.808391][ T6776] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  394.816509][ T6776] R13: 0000000000000000 R14: 00007fdb34f76160 R15: 00007fff1eaeb858
[  394.824670][ T6776]  </TASK>
[  394.828132][ T6776] Kernel Offset: disabled
[  394.832520][ T6776] Rebooting in 86400 seconds..