last executing test programs: 7.918907008s ago: executing program 4 (id=138): socket(0x840000000002, 0x3, 0xff) syz_emit_ethernet(0x32, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x100, 0xc656}}}}}}, 0x0) 7.091861046s ago: executing program 4 (id=142): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm9yWSZJIklySZIkSXJLSJrkSEJiyC1pSJLkMiSXISSXaUwa9/tdEpKkSZKQ3JL1/wh/p1Pndzq/0zl+nzPP9/PZn1nPu/ez9trv8+733Xu9M/Ntl6E1G9eq1pCI4F+C538kA0AsAAwEgKsAIACA8vHl48+tzy0x+V/bCftzPZh2uUfALieuf87G9c/ZuP45G9c/Z+P652xc/5yN65+zcf0Zy8k2Tit0NS85d+H5/5yMP///i2SXGfPl6jLXdgWI+aMpXP+cjev/Xyv4Ixtx/XM2rn9OFXu5B8D+D+DzPyfI9XfXcP1zNq4/YznZv3+OWbnLPcf9Py0QydnfgVzu1x9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsZzhpL9EAcDF9uUeF2OMMcYYY4wxxv48PtflHgFjjDHGGGOMMcb+/RAESFAQQAzkgljIDXEgAOBKyAtXQQSuhni4BvLBtZAfCkBBKAQJUBiKgAYDFghCKArFIArXQXG4HkpASSgFpcFBGUiEG6As3Ajl4CYoDzdDBbgFKkIluBUqw21QBW6HqnAHVIM7oTrUgJpQC+6C2nA31IF7oC7cC/XgPqgP90MDeAAawoPQCB6CxvAwNIFHoCk0g+bQAlr+r/Kfhx7wAvSEXpAMvaEPvAh9oR/0hwEwEF6CQfAyDIZXIAWGwFB4FYbBazAcXocR8AaMhDdhFLwFo2EMjIVxkArjYQK8DRPhHZgEk2EKTIU0mAbT4V2YATNhFrwHs+F9mANzYR7Mh3T4ADJgAWTCh7AQPoIsWASLYQkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFj2EbfALb4VPYATthF3wGu+HzfzL/xN/kd0VAQIECFSqMwRiMxViMwzjMg3kwL+bFCEYwHuMxH+bD/JgfC2JBTMAELIJF0KBByk1YFItiFKNYHItjCSyBpbAUOnSYiIlYFm/EclgOy2N5rIAVsCJWwkpYGStjFayCVbEqVsNqWB2rY02siXfhXdgb62AdrIt1sR7Wuzg9hQ2xITbCRtgYG2MTbIJNsSk2x+bYEltiK2yFrbE1tsW22A7bYXtsj0mYhB2wA3bEjtgJO2Fn7IxdsAt2xW7YLfv5XIAv4AvYC6uL3tgH+2BfTMnVHwfgAHwJB+HL+DK+gik4BIfiq/gqvobD8TiOwDdwJI7EKuItHI1jkMQ4TMVUnIATcCJOxEk4GSfjVEzDaTgdp+MMnIkz8T2cje/j+zgX5+J8TMd0zMAFmImZuBBPYBYuwsW4BJfiMlyKK3AlrsDVuAZX4zpchxtwA27CTbgFL56sCgA/xZ24E1NwN+7GPbgH9+Je3If7MBuzcT/uxwMW8CAexEN4CA/jETyKR/AYHsPjeAJPYr8LXT2b8HWjT0quSgFxjhJKxIgYEStiRZyIE3lEHpFX5BURERHxIl7kE/lEfpFfFBQFRYJIEEVEEWGEESTCGAAQUREVxUVxUUKUEKVEKeGEE4kiUZQVZUU5UU6UFzeLCuIWUVFUEm1cZVFZVBFtXVVxh6gmqonqooaoKWqJWqK2qC3qiDqirqgr6ol6or64XzQQvbE/PijOVaaxGIJNxFBsKpoJeeFIWonh2Fq0EW3F4+INHIHtRSuXJJ4SHcRo7Cj+IsbgM6KzGIddxHOiq+gmuovnRQ/R2vUUvcQk7C36iKnYV/QT/cUAMQNriPdwdu6a4hWRIoaIoeJVMR9fE8PF62JEbxAjxZtilHhLjBZjxFgxTqSK8WKCeFtMFO+ISWKymCKmijQxTUwX74oZYqaYJd4Ts8X7Yo6YK+aJ+SJdfCAyxAKRKT4UC8VHIkssEovFErFULBPLxQqRG1aJ1WKNWCvWifVig9goNonNYovYKj4W28QnYrv4VOwQO8Uu8ZnYLT4Xe8QXYq/4UuwTX4ls8bXYL74RB8S34qD4ThwS34vD4og4Kn4Qx8SP4rg4IU6KU+K0+EmcET+Ls8ILkCiFlFLJQMbIXDJW5pZx8gqZRwYXnt2rZby8RuaT18r8soAsKAvJBFlYFpFaGmklyVAWlcVkVF4ni8vrZQlZUpaSpaWTZWSivEGWlTfKcvImWV7eLCvIW2RFWUneKivL22QVebuEyPl9VJc1ZE1ZS94lk+FuWUfeI+vKe2U9eZ+sL++XDeQDsqF8UDaSD8nG8mHZRD4im8pmsrlsIVvKR2Ur+ZhsLdvItvJx2U4+IdvLJ2WSfEp2kP7CS+QZ2Vk+K7vI52RX2U12lz/Ls9LLnrKXhN4g+8gXZV/ZT/aXA+RA+ZIcJF+Wg+UrMkUOkUPlq3KYfE0Ol6/LEfINOVK+KUfJt+RoOUaOleNkqhwvJ8i35UT5jpwkJ8spcqpMk9Nk/ws9zZLyH+a//Tv5g3/Z+wa5UW6Sm+UWuVV+LLfJT+R2uV3ukDvkLrlL7pa75R65R+6Ve+U+uU9myzvkfrlfHpAH5EF5UB6Sh+RheUSekj/IY/JHeVyekCfkKXlanpZnLjwHoFAJJZVSgYpRuVSsyq3i1BUqj7pS5VVXqYi6WsWra1Q+da3KrwqogqqQSlCFVRGllVFWkQpVUVVMRdV1F9+jVClVWjlVRiWqG/6ZfFVcXa9KqJK/yr84vuS/M76WqqVqpVqp1qq1aqvaqnaqnWqv2qsklaQ6qA6qo+qoOqlOqrPqrLqoLqqr6qq6q+6qh+qheqqeKlklqz7qRdVX9VP91QA1UL2kBqlBarAarFJUihqqhqphapgaroarEWqEGqlGqlFqlBqtRquxaqxKValqgpqgJqqJapKapKaoKSpNpanparqaoWaoWWqWmq1mqzlqjpqn5ql0la4yVIbKVJlqoVqostQitUgtUUvUMrVMrVAr1Cq1Sq1Ra9Q6tU5lqY1qo9qsNqutaqvaprap7Wq72qF2qF1ql9qtdqs9ao/aq/aqfWqfylbZar/arw6oA+qgOqgOqUPqsDqsjqqj6pg6po6r4+qkOqlOq9PqjDqjzqqz5y77AhGIQAUqiAligtggNogL4oI8QZ4gb5A3iASRID6ID/IF1wb5gwJBwaBQkBAUDooEOjCBDcSFokeD64LiwfVBiaBkUCooHbigTJAY3BCUDW4MygU3BeWDm4MKwS1BxaBScGtQObgtqBLcHlQN7giqBXcG1YMaQc2gVnBXUDu4O6gT3BPUDe4N6gX3BfWD+4MGwQNBw+DBoFHwUNA4eDhoEjwSNA2aBc2DFkHLP7V/748XeMz11L10su6t++gXdV/dT/fXA/RA/ZIepF/Wg/UrOkUP0UP1q3qYfk0P16/rEfoNPVK/qUfpt/RoPUaP1eN0qh6vJ+i39UT9jp6kJ+speqpO09P0dP2unqFn6ln6PT1bv6/n6Ll6np6v0/UHOkMv0Jn6Q71Qf6Sz9CK9WC/RS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1x3qb/kRv15/qHXqn3qU/07v153qP/kLv1V/qfforna2/1vv1N/qA/lYf1N/pQ/p7fVgf0Uf1D/qY/lEf1yf0SX1Kn9Y/6TP6Z31W+3MX9+c+3o0yysSYGBNrYk2ciTN5TB6T1+Q1ERMx8Sbe5DP5TH6T3xQ0BU2CSTBFTBFzDhkyRU1REzVRU9wUNyVMCVPKlDLOOJNoEk1ZU9aUM+VMeVPeVDAVTEVT0dxqbjW3mdvM7eZ2c4e5w9xp7jQ1TA1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDFNTVPT3DQ3LU1L08q0Mq1Na9PWtDXtTDvT3rQ3SSbJdDAdTEfT0XQynUxn09l0MV1MV9PVdDfdTQ/Tw/Q0PU2ySTZ9TB/T1/Q1/U1/M9AMNIPMIDPYDDYpJsUMNUPNMDPMDDfDzQjzhhl57kLVvGVGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbDJNhMk2mWWgWmiyTZRabxWapWWqWm+VmpVlpVpvVZi2sNevNerPRbDSbzWaz1Ww128w2s91sNzvMDrPL7DK7zW6zx+wxe81es8/sM9km2+w3+80Bc8AcNAfNIXPIHDaHzVFz1Bwzx8xxc9ycNCfNaVPgwuelN7E2t42zV9g89kqb115l/zYuaAvZBFvYFrHa5rcFfhUba20JW9KWsqWts2Vsor3hN3FFW8neaivb22wVe7ut+pu4tr3b1rH32Lr2XlvL3vWruJ69z9a3D9sGiAC2mW1kW9jG9mHbxD5im9pmtrltYdvZJ2x7+6RNsk/ZDvbp38QZdoFdaVfZ1XaN3WF32pP2lD1gv7Wn7U+2p+1lB9qX7CD7sh1sX7Epdshv4pH2TTvKvmVH2zF2rB33m3iKnWrT7DQ73b5rZ9iZv4nT7Qd2ts20c+xcO8/O/yXOsGgz7Yd2of3IZtkAFtsldqldZpfbFf9/rEvsOrvebrDb7ad2s91it9qP7baLF8J2p91lP7O77ed2v/3G7rVf2n32oM22X/8Snzu+g/Y7e8h+bw/bI/ao/cEesz+qi9nnjv0H+7M9a70FQgKSpCigGMpFsZSb4ugKykNXUl66iiJ0NcXTNZSPrqX8VIAKUiFKoMJUhDQZskQUUlEqRlG6ji4OrxSVJkdlKJFuoLJ0I5Wjm6g83UwV6BaqSJVyX9iMbqeqdAdVozupOtWgmlSL7qLadDfVoXuoLt1L9eg+qk/3UwN6gBrSg9SIHqLG9DA1oUeoKTWj5tSCWtKj1Ioeo9bUhtrS49SOnqD29CQl0VPUgZ6mjvQX6kTPUGd6lrrQc9SVulF3ep560AvUk3pRMvWmPvQi9aV+1J8G0EB6iQbRyzSYXqEUGkJD6VUaRq/RcHqdRtAbNJLepFH0Fo2mMTSWxlEqjacJ9DZNpHdoEk2mKTSV0mgaTad3aQbNpFn0Hs2m92kOzaV5NJ/S6QPKoAWUSR/SQvqIsmgRLaYltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6mbfQJbadPaQftpF30Ge2mz2kPfUF76UvaR19RNn1N++kbOkDf0kH6zvei7+kwHaGj9AMdox/pOJ2gk3SKTtNPdIZ+prPkCUIMRShDFQZhTJgrjA1zh3HhFWGe8Mowb3hVGAmvDuPDa8J84bVh/rBAWDAsFCaEhcMioQ5NaEMKw7BoWCyMhteFxcPrwxJhybBUWDp0YZkwMbwhLBveGJYLbwrLhzeHFcJbwophpfDheyuHt4VVwtvDquEdYbXwzrB6WCOsGdYK7wprh3eHdcJ7wrrhvWG58L6wfnh/2CB8IGwYPhg2Ch8KG4cPh03CR8KmYbOwedgibBk+GrYKHwtbh23CtuHjYbvwibB9+GSYFD4Vdgif/mX9fQv+/vrksHfYJ3wxfDH0/h45Lzo/mh79IJoRXRDNjH4YXRj9KJoVXRRdHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q9b5WLnDohJNOucDFuFwu1uV2ce4Kl8dd6fK6q1zEXe3i3TUun7vW5XcFXEFXyCW4wq6I084468iFrqgr5qLuOlfcXe9KuJKulCvtnCvjEl0L19K1dK3cY661a+Pausfd4+4J94R70j3pnnId3NOuo/uL6+SecZ3ds+5Z95zr6rq57u5518ONz3v+ZEt2fVwf19f1df1dfzfQDXSD3CA32A12KS7FDXVD3TA3zA13w90IN8KNdCPd3QpgtBvtxrqxLtWluglugpvoJrpJbpKb4qa4NJfmprvpboab4arMPL+XOW6Om+fmuXSX7jLcuWvGTLfQLXRZLsstdovdUrfULXfL3Uq30q12q91at9atd+vdRrfRbXab3Va31W1z29x2t93t8Fed79TtdnvcHrfX7XX73Fcu233t9rtv3AH3rTvovnOH3PfusDvijrof3DH3ozvuTriT7pQ77X5yZ9zP7qzzLjUyPjIh8nZkYuSdyKTI5MiUyNRIWmRaZHrk3ciMyMzIrMh7kdmR9yNzInMj8yLzI+mRDyIZkQWRzMiHkYWRjyJZkUWRxZElkaWRZRHvC28OfVFfzEf9db64v96X8CV9KV/aO1/GJ/obfFl/oy/nb/Ll/c2+gr/FV/SV/K3+Ed/UN/PNfQvf0j/qW/nHfGvfxrf1j/t2/gnf3j/pk/xTvoN/2nf0f/Gd/DO+s3/Wd/HP+a6+m+/un/c9/Au+p+/lk31v38e/6Pv6fr6/H+AH+pf8IP+yH+xf8Sl+iB/qX/XD/Gt+uH/dj/Bv+JExb/pRF2+RYZxP9eP9BP+2n+jf8ZP8ZD/FT/Vpfpqf7t/1M/xMP8u/52f79/0cP9fP8/N9uv/AZ/gFPtN/6Bf6j3yWX3RxUtkv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vv+x3+Y/8dv9p36H3+l3+c/8bv+53+O/8Hv9l36f/8pn+6/9fv+NP+C/9Qf9d/6Q/94f9kf8Uf+DP+Z/9Mf9CX/Sn/Kn/U/+jP/Zn+W/WWOMMcYY+0PGX2qKX685P53f+3dyxF9t3AcArtxSKPuv15+7olyb/3y7n0hoFwGAp3p1efDiUr16cnLyhW2zJATF5gJc/CbonBi4FC+CtvAEJEEbKPu74+8nup2mf9B/9GaAuL/KiYVL8aX+vwDA5N/p/9HHR2ZUCE/G/w/9zwUoUexSTm64FC+Ctr/Mr7SBcn9n/AVa/YPx5/4yFaD1X+XkgUvxpfEnwmPwNCT9akvGGGOMMcYYY+y8fuLWThfvPy/+xufv3Z8nqEs5ueBS/I/uzxljjDHGGGOMMXb5PdOt+5OPJiW16fTPN6r+r7L+cKMJ/Lt65sbvNrwHuPiIAoB/sUOAcw35nzyKTf+RfaVcOHX+dtXSUz6A/xul/DMal/mNiTHGGGOMMfanu3TR/+vH1eUaEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlgP9J/6d2OU+RsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xy+38BAAD//3lG9tE=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 6.58245903s ago: executing program 1 (id=144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="150500000000ffdbdf2503"], 0x140}}, 0x0) 6.525460939s ago: executing program 0 (id=145): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000180)='@\x00\xcd\xb7\a', &(0x7f0000000080)='./file1\x00', &(0x7f0000000500), 0x20040c3, 0x0) 5.70069677s ago: executing program 0 (id=148): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000880)='./file1\x00', 0x4897, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@grpid}, {@acl}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}]}, 0x3, 0x449, &(0x7f0000000280)="$eJzs3MtPXNUfAPDvnWHor6Ut/Gp9tT7QaiQ+oNCqXbjRaHShiYku6hKBNpVpMQUT25CIxtSlaeLeuDTxL3ClG6OuTNzq3jRpDBurqzF35l4YhhlgcGBo5/NJLpxzH3POd849c8+9hyGAnjWc/kgiDkbEbxExWMuu3WG49uvW8uLU38uLU0lUKm/9mVT3+2t5cSrfNT9uIMuMFCIKnyZxvEm581euzk6WyzOXs/zYwsX3x+avXH3mwsXJ8zPnZy5NnDlz+tT4889NPBv7OxDnQOzLUq+9c/2NqbPX3/3pmySPvyGODhneaOPjlUqHi+uuQ3XppK+LFaEtxYhIm6tU7f+DUYzVxhuMVz5pfeSrh3enhsBOqVQqlYHWm5fyq3oFuAMlW+7bsz4H4I6SX+jT+9982ZWBxx5x88XaDVAa961sqW3pi0K2T6nh/raThiPi7NI/X6ZLrD6HKO1QcQAA8V06/nl68/Hf4WxuaCgi/h8RRyLirog4GhF3R8Q9lYh7I+K+NstvnCRZX37hRpsv2ZZ0/PdCNre1dvyXj/5iqJjlDlXjLyXnLpRnTmbvyUiU9qX58Q3K+P7lXz9vta1+/Jcuafn5WDCrx42+fWuPmZ5cmPwvMde7+XHEsb5m8ScrMwFJRNwfEce2WcaFJ79+oNW2VvFvaQDcgXmmylcRT9Tafyka4s8lG89Pjv0vyjMnx/KzYr2ff7n2ZqvyN2//nZW2/4Gm5/9K/ENJ/XztfPtlXPv9s5b3lNs9//uTt6vp/mzdh5MLC5fHI/qT12uVrl8/sXpsns/3T+MfOdG8/x+J1XfieESkJ/GDEfFQRDyc1f2RiHg0Ik5sEP+PLz323vbj31lp/NNttf9qoj8a1zRPFGd/+HZNoUNr67B5+5+upkayNVv5/NtKvbZ3NgMAAMDtpxARByMpjK6kC4XR0drf8B+NA4Xy3PzCU+fmPrg0XfuOwFCUCvmTrsG656Hj2W19np9oyJ/Knht/UdxfzY9OzZWnux089LiBFv0/9Uex27UDdpzva0Hv0v+hd+n/0Lv0f+hdTfp/J/7nDnAbaHb9/6gL9QB2X0P/N+0HPcT9P/Qu/R96l/4PPWl+f2z+JXkJiXWJKOyJauy9RH417VY1ihHRgdfp8gcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAh/wbAAD//6u41Q8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) 5.661796781s ago: executing program 4 (id=149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7000000018000500000000000000000002000000000200090000000006001500040000004c0016804800088044000180"], 0x70}}, 0x0) 5.588696419s ago: executing program 2 (id=150): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) read$FUSE(r0, &(0x7f0000000a80)={0x2020}, 0x2020) 5.433720657s ago: executing program 1 (id=151): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xfdcd) 5.040633705s ago: executing program 3 (id=152): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000340)="a6", 0x58) setsockopt$inet_buf(r0, 0x0, 0x26, 0x0, 0x0) 4.82594801s ago: executing program 2 (id=153): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={r1, 0x0, 0x0, 0x0, 0x0}) 4.682222904s ago: executing program 4 (id=154): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0xa, "0f"}, @global=@item_012={0x2, 0x1, 0x2, "1a26"}]}}, 0x0}, 0x0) 4.477431867s ago: executing program 0 (id=155): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000cc0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3.94800249s ago: executing program 2 (id=156): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000002c0)={[{@errors_remount}, {@discard}, {@gid}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@zero_size_dir}, {@errors_remount}, {@errors_continue}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0x9}}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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") mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1, 0x0) 3.940997675s ago: executing program 1 (id=157): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='timers\x00') pread64(r0, &(0x7f0000001600)=""/4103, 0x1007, 0x99) pread64(r0, &(0x7f0000000040)=""/44, 0x2c, 0x40) 3.665525748s ago: executing program 3 (id=158): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'lo\x00'}}) 3.022835754s ago: executing program 1 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$tun(r0, &(0x7f0000007fc0)={@void, @val={0x0, 0x1, 0x5, 0x7ff, 0x5, 0x7fff}, @ipv6=@udp={0x2, 0x6, "6a64c4", 0x8, 0x11, 0x1, @mcast2, @mcast1, {[], {0x4e23, 0x4e22, 0x8}}}}, 0x3a) 2.809728183s ago: executing program 3 (id=160): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) copy_file_range(r0, 0x0, r0, 0x0, 0x9, 0x0) 2.716506789s ago: executing program 0 (id=161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x28e3}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}}, 0x1c) 2.122755074s ago: executing program 2 (id=162): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5423, 0x0) 1.824646296s ago: executing program 4 (id=163): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x52, 0xa01}, 0x14}}, 0x0) 1.768273802s ago: executing program 1 (id=164): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x4, 0x1, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x5, &(0x7f00000000c0)=0xfffffff8, 0x0, 0x4) io_uring_enter(r0, 0x6e2, 0x600, 0x1, 0x0, 0x0) 1.713625371s ago: executing program 3 (id=165): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000a0"], 0x8) 1.548592197s ago: executing program 0 (id=166): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000002040)=0x4, 0x4) 1.129618781s ago: executing program 2 (id=167): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 804.774703ms ago: executing program 3 (id=168): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x43, 0x0, 0x0) 769.221526ms ago: executing program 0 (id=169): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000a00)="10204305", 0x5e0, 0x4, &(0x7f0000000940)={0x11, 0x8100, r1, 0x1, 0x9, 0x6, @remote}, 0x14) 680.422445ms ago: executing program 4 (id=170): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x25dfdbff, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x854) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000430007010000000000000000047c000008"], 0x1c}}, 0x48844) 503.712379ms ago: executing program 1 (id=171): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb0094401e0", 0x2a}, {0x0, 0x5e}], 0x2}, 0x20000884) 365.87662ms ago: executing program 2 (id=172): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001180)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) 0s ago: executing program 3 (id=173): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x77f6953e9013251d, 0x2, 0xd59f80, 0x1019ef, 0x7, 0x2, 0x2008, 0x6, 0x277c, 0x2800, 0x2, 0xbb6, 0x0, 0x43, {0x8, 0xf4}, 0xd0, 0x9}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. [ 203.215427][ T5785] cgroup: Unknown subsys name 'net' [ 203.362440][ T5785] cgroup: Unknown subsys name 'cpuset' [ 203.379130][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.680739][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.687715][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.580221][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 263.222953][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.232884][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.241941][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.259268][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.267539][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.278834][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.287907][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.302949][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.317479][ T5103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.328192][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.348490][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.363014][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.372492][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.387000][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.397157][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.406469][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.415587][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.429603][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.439327][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.452216][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.473305][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.487467][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.501463][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.511529][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.590963][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 264.853591][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 265.326086][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 265.430091][ T5813] Bluetooth: hci0: command tx timeout [ 265.506757][ T5813] Bluetooth: hci1: command tx timeout [ 265.669526][ T5813] Bluetooth: hci2: command tx timeout [ 265.675967][ T5813] Bluetooth: hci4: command tx timeout [ 265.702577][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 265.742372][ T5813] Bluetooth: hci3: command tx timeout [ 265.949129][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 266.248261][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.259720][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.267856][ T5807] bridge_slave_0: entered allmulticast mode [ 266.277884][ T5807] bridge_slave_0: entered promiscuous mode [ 266.296311][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.304244][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.312289][ T5807] bridge_slave_1: entered allmulticast mode [ 266.322430][ T5807] bridge_slave_1: entered promiscuous mode [ 266.333679][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 266.694596][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.705464][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.715579][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.723599][ T5811] bridge_slave_0: entered allmulticast mode [ 266.733584][ T5811] bridge_slave_0: entered promiscuous mode [ 266.870982][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.881836][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.889583][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.898160][ T5811] bridge_slave_1: entered allmulticast mode [ 266.908481][ T5811] bridge_slave_1: entered promiscuous mode [ 267.256730][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.265012][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.272986][ T5815] bridge_slave_0: entered allmulticast mode [ 267.282987][ T5815] bridge_slave_0: entered promiscuous mode [ 267.355825][ T5807] team0: Port device team_slave_0 added [ 267.365793][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.376110][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.384609][ T5815] bridge_slave_1: entered allmulticast mode [ 267.394619][ T5815] bridge_slave_1: entered promiscuous mode [ 267.469885][ T5807] team0: Port device team_slave_1 added [ 267.490337][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.503378][ T5813] Bluetooth: hci0: command tx timeout [ 267.608631][ T5813] Bluetooth: hci1: command tx timeout [ 267.677161][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.730096][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.739833][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.741863][ T5813] Bluetooth: hci4: command tx timeout [ 267.747947][ T5820] bridge_slave_0: entered allmulticast mode [ 267.752783][ T5810] Bluetooth: hci2: command tx timeout [ 267.763788][ T5820] bridge_slave_0: entered promiscuous mode [ 267.826378][ T5813] Bluetooth: hci3: command tx timeout [ 267.916130][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.926234][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.934159][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.942318][ T5820] bridge_slave_1: entered allmulticast mode [ 267.952551][ T5820] bridge_slave_1: entered promiscuous mode [ 268.011854][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.019096][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.046195][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.105792][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.192704][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.200520][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.208504][ T5816] bridge_slave_0: entered allmulticast mode [ 268.218335][ T5816] bridge_slave_0: entered promiscuous mode [ 268.233321][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.240605][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.268885][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.288163][ T5811] team0: Port device team_slave_0 added [ 268.369796][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.377625][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.385782][ T5816] bridge_slave_1: entered allmulticast mode [ 268.395515][ T5816] bridge_slave_1: entered promiscuous mode [ 268.436745][ T5811] team0: Port device team_slave_1 added [ 268.495479][ T5815] team0: Port device team_slave_0 added [ 268.514680][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.649141][ T5815] team0: Port device team_slave_1 added [ 268.659443][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.667138][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.694107][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.716865][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.827255][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.876579][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.884158][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.910830][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.037809][ T5820] team0: Port device team_slave_0 added [ 269.056807][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.074774][ T5820] team0: Port device team_slave_1 added [ 269.125735][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.133179][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.159733][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.208690][ T5807] hsr_slave_0: entered promiscuous mode [ 269.219531][ T5807] hsr_slave_1: entered promiscuous mode [ 269.355237][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.363139][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.389891][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.514039][ T5816] team0: Port device team_slave_0 added [ 269.573243][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.580549][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.581488][ T5813] Bluetooth: hci0: command tx timeout [ 269.607216][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.661721][ T5813] Bluetooth: hci1: command tx timeout [ 269.679073][ T5816] team0: Port device team_slave_1 added [ 269.703885][ T5811] hsr_slave_0: entered promiscuous mode [ 269.716025][ T5811] hsr_slave_1: entered promiscuous mode [ 269.727752][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.735970][ T5811] Cannot create hsr debugfs directory [ 269.767848][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.775237][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.801945][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.831476][ T5813] Bluetooth: hci4: command tx timeout [ 269.837191][ T5813] Bluetooth: hci2: command tx timeout [ 269.901498][ T5813] Bluetooth: hci3: command tx timeout [ 270.048796][ T5815] hsr_slave_0: entered promiscuous mode [ 270.059660][ T5815] hsr_slave_1: entered promiscuous mode [ 270.069248][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.077522][ T5815] Cannot create hsr debugfs directory [ 270.090067][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.098090][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.124943][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.140672][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.148218][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.175172][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.700422][ T5820] hsr_slave_0: entered promiscuous mode [ 270.714221][ T5820] hsr_slave_1: entered promiscuous mode [ 270.723462][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.731668][ T5820] Cannot create hsr debugfs directory [ 270.955789][ T5816] hsr_slave_0: entered promiscuous mode [ 270.967482][ T5816] hsr_slave_1: entered promiscuous mode [ 270.975840][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.983789][ T5816] Cannot create hsr debugfs directory [ 271.661520][ T5813] Bluetooth: hci0: command tx timeout [ 271.750002][ T5813] Bluetooth: hci1: command tx timeout [ 271.772333][ T5807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.890152][ T5807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.912645][ T5813] Bluetooth: hci2: command tx timeout [ 271.918429][ T5810] Bluetooth: hci4: command tx timeout [ 271.935612][ T5807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.963164][ T5807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 271.991692][ T5813] Bluetooth: hci3: command tx timeout [ 272.387177][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 272.462884][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 272.507621][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 272.588253][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 272.656691][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.746061][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.794160][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.857806][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.920814][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 272.992487][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.086901][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.118107][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.408862][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.441428][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.469446][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.500449][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.870178][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.188866][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.213918][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.352811][ T1859] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.360798][ T1859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.421965][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.488932][ T1859] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.496689][ T1859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.531078][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.646264][ T1859] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.654008][ T1859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.687551][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.789468][ T1859] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.797282][ T1859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.823133][ T1859] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.830728][ T1859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.911256][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.918900][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.950144][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.277083][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.467863][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.500299][ T4636] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.508011][ T4636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.524542][ T4636] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.532240][ T4636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.681874][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.906666][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.064291][ T3745] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.072037][ T3745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.214196][ T3745] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.221927][ T3745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.618032][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.838112][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.112114][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.365183][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.455559][ T5807] veth0_vlan: entered promiscuous mode [ 278.603718][ T5811] veth0_vlan: entered promiscuous mode [ 278.646431][ T5807] veth1_vlan: entered promiscuous mode [ 278.691911][ T5815] veth0_vlan: entered promiscuous mode [ 278.833570][ T5815] veth1_vlan: entered promiscuous mode [ 278.868644][ T5811] veth1_vlan: entered promiscuous mode [ 278.942546][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.159955][ T5807] veth0_macvtap: entered promiscuous mode [ 279.263030][ T5815] veth0_macvtap: entered promiscuous mode [ 279.299904][ T5807] veth1_macvtap: entered promiscuous mode [ 279.387116][ T5815] veth1_macvtap: entered promiscuous mode [ 279.405064][ T5811] veth0_macvtap: entered promiscuous mode [ 279.553347][ T5811] veth1_macvtap: entered promiscuous mode [ 279.610364][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.675318][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.751559][ T5816] veth0_vlan: entered promiscuous mode [ 279.767822][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.863718][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.909010][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.938127][ T5816] veth1_vlan: entered promiscuous mode [ 279.972362][ T5807] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.982922][ T5807] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.992289][ T5807] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.001516][ T5807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.079676][ T5815] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.090684][ T5815] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.100310][ T5815] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.109622][ T5815] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.199138][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.279544][ T5811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.288986][ T5811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.298488][ T5811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.308964][ T5811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.552833][ T5816] veth0_macvtap: entered promiscuous mode [ 280.661829][ T5816] veth1_macvtap: entered promiscuous mode [ 280.885510][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.016346][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.183483][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.194497][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.204192][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.213582][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.722058][ T5820] veth0_vlan: entered promiscuous mode [ 281.861001][ T5820] veth1_vlan: entered promiscuous mode [ 282.363597][ T5820] veth0_macvtap: entered promiscuous mode [ 282.458992][ T5820] veth1_macvtap: entered promiscuous mode [ 282.769267][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.903178][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.995995][ T5820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.005689][ T5820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.014955][ T5820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.024453][ T5820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.800578][ T3947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.809161][ T3947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.945490][ T3947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.954304][ T3947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.082743][ T1859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.090892][ T1859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.108114][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.117454][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.264587][ T3745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.272895][ T3745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.429172][ T4024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.437828][ T4024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.560358][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 289.530617][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.538907][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.963857][ T3947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.972412][ T3947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.666668][ T3947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.675075][ T3947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.987467][ T4024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.995869][ T4024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.156587][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.163607][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.420502][ T6009] loop3: detected capacity change from 0 to 1024 [ 292.272814][ T3947] hfsplus: b-tree write err: -5, ino 8 [ 292.579836][ T30] audit: type=1400 audit(1749254642.062:2): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6019 comm="syz.4.5" [ 292.986132][ T6024] tipc: Enabling of bearer rejected, failed to enable media [ 293.248838][ T5863] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 293.451880][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 293.508238][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.519826][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.530222][ T5863] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 293.540433][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.784940][ T5863] usb 3-1: config 0 descriptor?? [ 294.418166][ T5863] wacom 0003:056A:0084.0001: unbalanced delimiter at end of report description [ 294.475876][ T5863] wacom 0003:056A:0084.0001: parse failed [ 294.482639][ T5863] wacom 0003:056A:0084.0001: probe with driver wacom failed with error -22 [ 294.593732][ T5863] usb 3-1: USB disconnect, device number 2 [ 294.648579][ T6037] loop0: detected capacity change from 0 to 256 [ 296.213974][ T6044] loop4: detected capacity change from 0 to 4096 [ 296.332025][ T5859] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 296.546883][ T5859] usb 3-1: Using ep0 maxpacket: 8 [ 296.612127][ T5859] usb 3-1: config 0 has no interfaces? [ 296.618106][ T5859] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 296.627893][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.747613][ T5859] usb 3-1: config 0 descriptor?? [ 296.827153][ T6044] ntfs3(loop4): ino=1a, mi_enum_attr [ 296.833315][ T6044] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 297.048339][ T5859] usb 3-1: USB disconnect, device number 3 [ 298.097427][ T6068] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan1, syncid = 4, id = 0 [ 298.467336][ T6071] capability: warning: `syz.2.35' uses deprecated v2 capabilities in a way that may be insecure [ 298.947840][ T6075] loop3: detected capacity change from 0 to 764 [ 299.075476][ T6075] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 299.588633][ T6082] loop2: detected capacity change from 0 to 512 [ 299.645082][ T6082] EXT4-fs: Ignoring removed oldalloc option [ 299.692400][ T6082] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 299.845876][ T6082] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 299.894132][ T6084] loop0: detected capacity change from 0 to 1024 [ 299.907420][ T6082] System zones: 1-12 [ 299.958772][ T6082] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.40: corrupted in-inode xattr: e_value size too large [ 300.045009][ T6082] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.40: couldn't read orphan inode 15 (err -117) [ 300.126196][ T6082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.171867][ T5863] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 300.374449][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 300.410115][ T5863] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 300.418682][ T5863] usb 2-1: config 0 has no interface number 0 [ 300.425292][ T5863] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.436732][ T5863] usb 2-1: config 0 interface 85 has no altsetting 0 [ 300.644720][ T5863] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 300.657202][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.666715][ T5863] usb 2-1: Product: syz [ 300.671317][ T5863] usb 2-1: Manufacturer: syz [ 300.676318][ T5863] usb 2-1: SerialNumber: syz [ 300.782945][ T5807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.911683][ T5863] usb 2-1: config 0 descriptor?? [ 302.133125][ T6106] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 302.974723][ T5863] appletouch 2-1:0.85: Failed to read mode from device. [ 302.983486][ T5863] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 303.163083][ T5863] usb 2-1: USB disconnect, device number 2 [ 304.496619][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'. [ 305.350055][ T6127] loop1: detected capacity change from 0 to 4096 [ 305.439158][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.64'. [ 305.449085][ T6137] netlink: 'syz.4.64': attribute type 2 has an invalid length. [ 305.457249][ T6137] netlink: 36 bytes leftover after parsing attributes in process `syz.4.64'. [ 305.907025][ T6127] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 305.944109][ T6135] loop0: detected capacity change from 0 to 4096 [ 305.967743][ T6135] ======================================================= [ 305.967743][ T6135] WARNING: The mand mount option has been deprecated and [ 305.967743][ T6135] and is ignored by this kernel. Remove the mand [ 305.967743][ T6135] option from the mount to silence this warning. [ 305.967743][ T6135] ======================================================= [ 306.072345][ T6127] ntfs3(loop1): ino=1b, "file0" ntfs_readdir [ 306.157330][ T6135] ntfs3(loop0): It is recommened to use chkdsk. [ 306.210840][ T6141] loop2: detected capacity change from 0 to 1024 [ 306.243021][ T6135] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 306.251559][ T6135] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 306.259853][ T6135] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 306.269363][ T6135] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 306.279481][ T6135] ntfs3(loop0): try to read out of volume at offset 0x3fffffc1c00 [ 306.291512][ T6135] ntfs3(loop0): try to read out of volume at offset 0x3fffffc2c00 [ 306.299816][ T6135] ntfs3(loop0): try to read out of volume at offset 0x3fffffc4c00 [ 306.309332][ T6135] ntfs3(loop0): try to read out of volume at offset 0x3fffffc8c00 [ 306.317794][ T6135] ntfs3(loop0): try to read out of volume at offset 0x3fffffd0c00 [ 306.618218][ T5811] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22. [ 306.721480][ T5863] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 306.922466][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 306.996622][ T5863] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 307.009405][ T5863] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE [ 307.025196][ T5863] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0xE has an invalid bInterval 170, changing to 11 [ 307.036866][ T5863] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0xE has invalid maxpacket 34661, setting to 1024 [ 307.048406][ T5863] usb 5-1: config 0 interface 0 has no altsetting 0 [ 307.072076][ T4339] hfsplus: b-tree write err: -5, ino 4 [ 307.200460][ T5863] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 307.213306][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.222762][ T5863] usb 5-1: Product: syz [ 307.227221][ T5863] usb 5-1: Manufacturer: syz [ 307.232338][ T5863] usb 5-1: SerialNumber: syz [ 307.358550][ T5863] usb 5-1: config 0 descriptor?? [ 307.367922][ T6143] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 307.655456][ T6143] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 307.913043][ T5859] usb 5-1: USB disconnect, device number 2 [ 308.552096][ T6152] loop3: detected capacity change from 0 to 1764 [ 309.197960][ T6156] loop0: detected capacity change from 0 to 256 [ 309.602195][ T6159] loop4: detected capacity change from 0 to 2048 [ 309.776175][ T6159] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576 [ 309.911779][ T6159] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.412397][ T6166] netlink: 'syz.2.78': attribute type 28 has an invalid length. [ 311.257979][ T6171] process 'syz.2.81' launched '/dev/fd/3' with NULL argv: empty string added [ 311.788296][ T6178] mmap: syz.3.84 (6178) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 314.551818][ T6202] program syz.2.96 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.340721][ T6214] netlink: 10 bytes leftover after parsing attributes in process `syz.2.100'. [ 316.136774][ T6221] loop4: detected capacity change from 0 to 24 [ 316.176652][ T6221] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 316.404317][ T6225] loop1: detected capacity change from 0 to 1024 [ 316.672841][ T6225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.963421][ T6225] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 316.971885][ T6225] EXT4-fs: can't change dax mount option while remounting [ 317.305599][ T5811] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.376048][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 317.415830][ T6240] bridge0: port 3(macvlan2) entered blocking state [ 317.423302][ T6240] bridge0: port 3(macvlan2) entered disabled state [ 317.430630][ T6240] macvlan2: entered allmulticast mode [ 317.436615][ T6240] bridge0: entered allmulticast mode [ 317.463386][ T6238] loop3: detected capacity change from 0 to 1024 [ 317.571808][ T6238] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 317.583074][ T6238] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 317.610986][ T6240] macvlan2: left allmulticast mode [ 317.616659][ T6240] bridge0: left allmulticast mode [ 317.707667][ T6238] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #32: comm syz.3.111: iget: special inode unallocated [ 317.802503][ T6238] EXT4-fs (loop3): no journal found [ 317.808019][ T6238] EXT4-fs (loop3): can't get journal size [ 317.908315][ T6238] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c19c, mo2=0002] [ 317.950252][ T6238] EXT4-fs error (device loop3): ext4_protect_reserved_inode:160: inode #32: comm syz.3.111: iget: special inode unallocated [ 318.074155][ T6238] EXT4-fs (loop3): failed to initialize system zone (-117) [ 318.149747][ T6238] EXT4-fs (loop3): mount failed [ 318.846426][ T6250] loop4: detected capacity change from 0 to 16 [ 318.925989][ T6250] erofs (device loop4): mounted with root inode @ nid 36. [ 321.352658][ T5859] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 321.497762][ T6285] loop3: detected capacity change from 0 to 256 [ 321.525534][ T6286] loop2: detected capacity change from 0 to 8 [ 321.608135][ T5859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.618902][ T5859] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 321.628551][ T5859] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 321.638104][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.778222][ T5859] usb 2-1: config 0 descriptor?? [ 321.814071][ T5980] udevd[5980]: incorrect cramfs checksum on /dev/loop2 [ 321.823917][ T5859] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 321.830940][ T5859] dvb-usb: bulk message failed: -22 (3/0) [ 322.013420][ T5859] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 322.020060][ T6285] FAT-fs (loop3): Directory bread(block 64) failed [ 322.028976][ T6285] FAT-fs (loop3): Directory bread(block 65) failed [ 322.036896][ T6285] FAT-fs (loop3): Directory bread(block 66) failed [ 322.044003][ T6285] FAT-fs (loop3): Directory bread(block 67) failed [ 322.054568][ T6285] FAT-fs (loop3): Directory bread(block 68) failed [ 322.062468][ T6285] FAT-fs (loop3): Directory bread(block 69) failed [ 322.066434][ T6282] dvb-usb: bulk message failed: -22 (4/0) [ 322.069370][ T6285] FAT-fs (loop3): Directory bread(block 70) failed [ 322.082253][ T6285] FAT-fs (loop3): Directory bread(block 71) failed [ 322.089349][ T6285] FAT-fs (loop3): Directory bread(block 72) failed [ 322.096327][ T6285] FAT-fs (loop3): Directory bread(block 73) failed [ 322.116358][ T5859] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 322.125713][ T5859] usb 2-1: media controller created [ 322.236477][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.333913][ T5859] dvb-usb: bulk message failed: -22 (6/0) [ 322.340281][ T5859] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 322.405472][ T5859] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 322.483382][ T5859] dvb-usb: schedule remote query interval to 150 msecs. [ 322.491075][ T5859] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 322.622038][ T5859] usb 2-1: USB disconnect, device number 3 [ 322.848006][ T5859] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 324.333855][ T6309] loop4: detected capacity change from 0 to 256 [ 324.442430][ T6309] exfat: Deprecated parameter 'utf8' [ 324.448214][ T6309] exfat: Deprecated parameter 'utf8' [ 324.454399][ T6309] exfat: Deprecated parameter 'utf8' [ 324.684155][ T6309] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 324.948676][ T6315] netlink: 300 bytes leftover after parsing attributes in process `syz.1.144'. [ 325.655654][ T6321] loop0: detected capacity change from 0 to 512 [ 325.707194][ T6321] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 325.721262][ T6321] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 325.792831][ T6325] netlink: 'syz.4.149': attribute type 2 has an invalid length. [ 325.804097][ T6321] EXT4-fs (loop0): orphan cleanup on readonly fs [ 325.810885][ T6321] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.148: bad orphan inode 458763 [ 325.875229][ T6321] EXT4-fs (loop0): Remounting filesystem read-only [ 325.884497][ T6321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 326.427403][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.842196][ T5859] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 327.051608][ T5859] usb 5-1: Using ep0 maxpacket: 8 [ 327.106245][ T5859] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.119856][ T5859] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 327.129640][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.229860][ T6338] loop0: detected capacity change from 0 to 2048 [ 327.284107][ T5859] usb 5-1: config 0 descriptor?? [ 327.527396][ T6342] loop2: detected capacity change from 0 to 256 [ 327.643765][ T6338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.759790][ T6342] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 327.835988][ T5859] kye 0003:0458:4018.0002: unbalanced delimiter at end of report description [ 327.943384][ T5859] kye 0003:0458:4018.0002: parse failed [ 327.949755][ T5859] kye 0003:0458:4018.0002: probe with driver kye failed with error -22 [ 328.152808][ T5859] usb 5-1: USB disconnect, device number 3 [ 328.263958][ T5816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.909204][ T3495] ===================================================== [ 330.917812][ T3495] BUG: KMSAN: uninit-value in xas_load+0xd20/0xd70 [ 330.924939][ T3495] xas_load+0xd20/0xd70 [ 330.929355][ T3495] xas_find+0x2c8/0xd40 [ 330.934030][ T3495] xa_find+0x15a/0x2a0 [ 330.938388][ T3495] io_unregister_zcrx_ifqs+0x75/0x1d0 [ 330.946593][ T3495] io_ring_ctx_free+0x61/0x740 [ 330.951885][ T3495] io_ring_exit_work+0xdec/0xe20 [ 330.957093][ T3495] process_scheduled_works+0xb8e/0x1d80 [ 330.970134][ T3495] worker_thread+0xedf/0x1590 [ 330.978063][ T3495] kthread+0xd5c/0xf00 [ 330.982619][ T3495] ret_from_fork+0x1e3/0x310 [ 330.987444][ T3495] ret_from_fork_asm+0x1a/0x30 [ 330.992766][ T3495] [ 330.995247][ T3495] Uninit was stored to memory at: [ 331.000613][ T3495] xa_find+0x26c/0x2a0 [ 331.005092][ T3495] io_unregister_zcrx_ifqs+0x75/0x1d0 [ 331.010741][ T3495] io_ring_ctx_free+0x61/0x740 [ 331.016038][ T3495] io_ring_exit_work+0xdec/0xe20 [ 331.023107][ T3495] process_scheduled_works+0xb8e/0x1d80 [ 331.029066][ T3495] worker_thread+0xedf/0x1590 [ 331.034625][ T3495] kthread+0xd5c/0xf00 [ 331.038924][ T3495] ret_from_fork+0x1e3/0x310 [ 331.043956][ T3495] ret_from_fork_asm+0x1a/0x30 [ 331.049016][ T3495] [ 331.051649][ T3495] Local variable id created at: [ 331.056663][ T3495] io_unregister_zcrx_ifqs+0x3d/0x1d0 [ 331.069715][ T3495] io_ring_ctx_free+0x61/0x740 [ 331.077021][ T3495] [ 331.079548][ T3495] CPU: 0 UID: 0 PID: 3495 Comm: kworker/u8:11 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(undef) [ 331.092185][ T3495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.103336][ T3495] Workqueue: iou_exit io_ring_exit_work [ 331.109187][ T3495] ===================================================== [ 331.116534][ T3495] Disabling lock debugging due to kernel taint [ 331.123032][ T3495] Kernel panic - not syncing: kmsan.panic set ... [ 331.129670][ T3495] CPU: 0 UID: 0 PID: 3495 Comm: kworker/u8:11 Tainted: G B 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(undef) [ 331.143525][ T3495] Tainted: [B]=BAD_PAGE [ 331.147848][ T3495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.158097][ T3495] Workqueue: iou_exit io_ring_exit_work [ 331.163925][ T3495] Call Trace: [ 331.167378][ T3495] [ 331.170452][ T3495] __dump_stack+0x26/0x30 [ 331.175014][ T3495] dump_stack_lvl+0x53/0x270 [ 331.179851][ T3495] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 331.185938][ T3495] dump_stack+0x1e/0x25 [ 331.190326][ T3495] panic+0x4bd/0xd50 [ 331.194511][ T3495] kmsan_report+0x31c/0x320 [ 331.199274][ T3495] ? __msan_warning+0x1b/0x30 [ 331.204179][ T3495] ? xas_load+0xd20/0xd70 [ 331.208724][ T3495] ? xas_find+0x2c8/0xd40 [ 331.213283][ T3495] ? xa_find+0x15a/0x2a0 [ 331.217757][ T3495] ? io_unregister_zcrx_ifqs+0x75/0x1d0 [ 331.223526][ T3495] ? io_ring_ctx_free+0x61/0x740 [ 331.228688][ T3495] ? io_ring_exit_work+0xdec/0xe20 [ 331.234029][ T3495] ? process_scheduled_works+0xb8e/0x1d80 [ 331.240003][ T3495] ? worker_thread+0xedf/0x1590 [ 331.245189][ T3495] ? kthread+0xd5c/0xf00 [ 331.249635][ T3495] ? ret_from_fork+0x1e3/0x310 [ 331.254596][ T3495] ? ret_from_fork_asm+0x1a/0x30 [ 331.259794][ T3495] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 331.265817][ T3495] ? stack_depot_save_flags+0x60f/0x7b0 [ 331.271623][ T3495] ? stack_depot_save+0x12/0x20 [ 331.276724][ T3495] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 331.282797][ T3495] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 331.288866][ T3495] ? __msan_chain_origin+0xc3/0x140 [ 331.294314][ T3495] ? xa_find+0x26c/0x2a0 [ 331.298794][ T3495] ? io_unregister_zcrx_ifqs+0x75/0x1d0 [ 331.304574][ T3495] ? io_ring_ctx_free+0x61/0x740 [ 331.309766][ T3495] ? io_ring_exit_work+0xdec/0xe20 [ 331.315125][ T3495] ? process_scheduled_works+0xb8e/0x1d80 [ 331.321208][ T3495] ? worker_thread+0xedf/0x1590 [ 331.326345][ T3495] ? kthread+0xd5c/0xf00 [ 331.330814][ T3495] ? ret_from_fork+0x1e3/0x310 [ 331.335873][ T3495] ? ret_from_fork_asm+0x1a/0x30 [ 331.341137][ T3495] ? kmsan_get_metadata+0xfb/0x160 [ 331.346526][ T3495] ? kmsan_get_metadata+0xfb/0x160 [ 331.351910][ T3495] ? io_sqe_files_unregister+0xea/0x120 [ 331.357805][ T3495] __msan_warning+0x1b/0x30 [ 331.362565][ T3495] xas_load+0xd20/0xd70 [ 331.367203][ T3495] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 331.373536][ T3495] ? kmsan_get_metadata+0xfb/0x160 [ 331.378923][ T3495] ? io_sqe_files_unregister+0xea/0x120 [ 331.384724][ T3495] ? io_sqe_files_unregister+0xea/0x120 [ 331.390948][ T3495] xas_find+0x2c8/0xd40 [ 331.395421][ T3495] ? kmsan_get_metadata+0xfb/0x160 [ 331.400790][ T3495] ? kmsan_get_metadata+0xfb/0x160 [ 331.406167][ T3495] ? io_sqe_files_unregister+0xea/0x120 [ 331.411989][ T3495] ? io_sqe_files_unregister+0xea/0x120 [ 331.417771][ T3495] xa_find+0x15a/0x2a0 [ 331.422083][ T3495] ? io_sqe_files_unregister+0xea/0x120 [ 331.427886][ T3495] io_unregister_zcrx_ifqs+0x75/0x1d0 [ 331.433498][ T3495] ? io_sqe_files_unregister+0xea/0x120 [ 331.439326][ T3495] io_ring_ctx_free+0x61/0x740 [ 331.444371][ T3495] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 331.450472][ T3495] io_ring_exit_work+0xdec/0xe20 [ 331.455662][ T3495] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 331.461281][ T3495] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 331.467902][ T3495] ? __pfx_io_ring_exit_work+0x10/0x10 [ 331.473624][ T3495] process_scheduled_works+0xb8e/0x1d80 [ 331.479537][ T3495] worker_thread+0xedf/0x1590 [ 331.484516][ T3495] kthread+0xd5c/0xf00 [ 331.488799][ T3495] ? __pfx_worker_thread+0x10/0x10 [ 331.494209][ T3495] ? __pfx_kthread+0x10/0x10 [ 331.499011][ T3495] ret_from_fork+0x1e3/0x310 [ 331.503815][ T3495] ? __pfx_kthread+0x10/0x10 [ 331.508619][ T3495] ret_from_fork_asm+0x1a/0x30 [ 331.513660][ T3495] [ 331.517001][ T3495] Kernel Offset: disabled [ 331.521440][ T3495] Rebooting in 86400 seconds..