last executing test programs: 6.874711547s ago: executing program 3 (id=66): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, 0x0, 0x0, 0x0) 6.224120719s ago: executing program 0 (id=67): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000280), 0x2, 0x0) read(r1, &(0x7f0000001c40)=""/4096, 0x1000) 5.654863965s ago: executing program 1 (id=70): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x96, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) 5.058479326s ago: executing program 2 (id=71): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x20, 0x0, 0x8, 0xfd, @tick=0x8, {0xfd, 0x20}, {}, @ext={0x0, 0x0}}], 0x1c) 4.907914836s ago: executing program 0 (id=72): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0xb, 0x2, 0xb, 0x8c, 0xf, 0x4, 0x1, 0x6, 0xa, 0xf, 0x10, 0x2, 0xd, 0x8, 0x5, 0x9], 0x1, [0x809, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0x200, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x4, 0x3d3e, 0xff, 0x4, 0x2, 0x50ad, 0x81, 0xc5, 0x8000, 0xc, 0x3, 0x7, 0x8, 0xce]}}}}]}, 0x88}}, 0x0) 4.6955648s ago: executing program 4 (id=73): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000480)="f4416eb4e859495d589fb5f988fb", 0xe, 0x84, &(0x7f0000000100)={0x11, 0x3, r2, 0x1, 0x75, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) 4.428397255s ago: executing program 1 (id=74): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) 4.000268424s ago: executing program 3 (id=75): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000001240)={&(0x7f0000000540)={{@host=0x10}, {@hyper}, 0x400, "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"}, 0x418, 0x66f}) 3.974420512s ago: executing program 0 (id=76): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x14bf, 0x0, 0x1, 0x1, 0x78a4}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 3.970640078s ago: executing program 2 (id=77): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001100)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09f1b359b0e2d2e8b6074bb4119ea219d2055df8bab18280f3c3ea8e45510d60a28f7af2a9c471dbe0a88f57ae4580b0b420f5f90b70efb6805d81812d5d64c87c99f9c75e9f656dfd6e", 0x81}], 0x1}}], 0x1, 0x0) 3.891692418s ago: executing program 4 (id=78): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2244, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) 3.667298391s ago: executing program 1 (id=79): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.411530782s ago: executing program 2 (id=80): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) 3.202099021s ago: executing program 0 (id=81): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.087725831s ago: executing program 3 (id=82): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060200007ffee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) 2.848932554s ago: executing program 4 (id=83): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x80}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) 2.570756653s ago: executing program 1 (id=84): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x2, @aes256={0x1, 0xa}, 0x0, @desc2}) 2.516921696s ago: executing program 2 (id=85): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000000), 0x0}, 0x20) 2.261052397s ago: executing program 3 (id=86): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$TCFLSH(r0, 0x5608, 0x0) 1.824941933s ago: executing program 0 (id=87): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.772870105s ago: executing program 4 (id=88): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_sync_fs\x00', r0}, 0x18) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 1.741625914s ago: executing program 2 (id=89): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000440)={@local, @empty, @val={@val, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x3}}}}}}}, 0x0) 1.471877729s ago: executing program 3 (id=90): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) 1.117185766s ago: executing program 1 (id=91): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1.05568674s ago: executing program 4 (id=92): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000280)={0x11, 0x0, r1, 0x1, 0x1, 0x6, @local}, 0x14) bind$packet(r0, &(0x7f0000000100)={0x11, 0x3}, 0x14) 1.008777218s ago: executing program 2 (id=93): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000780)='net/tcp6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x3) 620.228926ms ago: executing program 3 (id=94): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = io_uring_setup(0x410e, &(0x7f0000000280)={0x0, 0x23cd, 0x40, 0xfffffffc, 0x29c}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 239.042951ms ago: executing program 0 (id=95): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x41d}, @TCA_FQ_CODEL_QUANTUM]}}]}, 0x50}}, 0x0) 188.372206ms ago: executing program 1 (id=96): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5c6f135252ce000800006f00"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x1, 0x7c1, 0x8001, 0x0, 0x13, "4cb8b210acdc716f64cf76062d59e56f2584c4"}) 0s ago: executing program 4 (id=97): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x5421, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.63' (ED25519) to the list of known hosts. [ 204.349798][ T5780] cgroup: Unknown subsys name 'net' [ 204.469199][ T5780] cgroup: Unknown subsys name 'cpuset' [ 204.485832][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.734975][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.741753][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.738594][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 264.239004][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.247866][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.264194][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.275530][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.284023][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.291790][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.303485][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.312582][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.326698][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.345719][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.346127][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.367437][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.376840][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.387492][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.405169][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.457244][ T5099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 264.467970][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 264.481928][ T5099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 264.497477][ T5099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 264.510941][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 264.695761][ T5099] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 264.783527][ T5099] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 264.843734][ T5099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 264.859635][ T5099] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 264.872716][ T5099] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 266.325595][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 266.433649][ T5099] Bluetooth: hci0: command tx timeout [ 266.445144][ T5099] Bluetooth: hci2: command tx timeout [ 266.498463][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 266.538676][ T5099] Bluetooth: hci1: command tx timeout [ 266.593277][ T5099] Bluetooth: hci3: command tx timeout [ 266.651582][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 266.975628][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 266.994729][ T5099] Bluetooth: hci4: command tx timeout [ 267.091088][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 268.060483][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.071421][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.079587][ T5808] bridge_slave_0: entered allmulticast mode [ 268.089880][ T5808] bridge_slave_0: entered promiscuous mode [ 268.114746][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.122430][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.130616][ T5808] bridge_slave_1: entered allmulticast mode [ 268.141514][ T5808] bridge_slave_1: entered promiscuous mode [ 268.301177][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.312236][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.320291][ T5803] bridge_slave_0: entered allmulticast mode [ 268.330227][ T5803] bridge_slave_0: entered promiscuous mode [ 268.481538][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.489766][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.498441][ T5803] bridge_slave_1: entered allmulticast mode [ 268.507935][ T5803] bridge_slave_1: entered promiscuous mode [ 268.513552][ T5099] Bluetooth: hci2: command tx timeout [ 268.519910][ T5813] Bluetooth: hci0: command tx timeout [ 268.593397][ T5099] Bluetooth: hci1: command tx timeout [ 268.605801][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.614597][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.622389][ T5802] bridge_slave_0: entered allmulticast mode [ 268.634053][ T5802] bridge_slave_0: entered promiscuous mode [ 268.683456][ T5099] Bluetooth: hci3: command tx timeout [ 268.762266][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.770435][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.779456][ T5814] bridge_slave_0: entered allmulticast mode [ 268.789712][ T5814] bridge_slave_0: entered promiscuous mode [ 268.803237][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.811017][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.819172][ T5802] bridge_slave_1: entered allmulticast mode [ 268.829620][ T5802] bridge_slave_1: entered promiscuous mode [ 268.897748][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.998862][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.006728][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.014836][ T5820] bridge_slave_0: entered allmulticast mode [ 269.024513][ T5820] bridge_slave_0: entered promiscuous mode [ 269.038430][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.046498][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.055419][ T5814] bridge_slave_1: entered allmulticast mode [ 269.065155][ T5814] bridge_slave_1: entered promiscuous mode [ 269.073621][ T5099] Bluetooth: hci4: command tx timeout [ 269.130048][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.149256][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.171655][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.226776][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.235465][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.243663][ T5820] bridge_slave_1: entered allmulticast mode [ 269.252223][ T5820] bridge_slave_1: entered promiscuous mode [ 269.315762][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.336889][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.477999][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.580805][ T5808] team0: Port device team_slave_0 added [ 269.597604][ T5803] team0: Port device team_slave_0 added [ 269.660836][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.682480][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.740012][ T5803] team0: Port device team_slave_1 added [ 269.756683][ T5802] team0: Port device team_slave_0 added [ 269.773229][ T5808] team0: Port device team_slave_1 added [ 269.789870][ T5802] team0: Port device team_slave_1 added [ 269.845783][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.060294][ T5814] team0: Port device team_slave_0 added [ 270.236168][ T5814] team0: Port device team_slave_1 added [ 270.247438][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.254844][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.281678][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.297817][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.305257][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.332804][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.348099][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.355910][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.383274][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.398586][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.406443][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.433947][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.453896][ T5820] team0: Port device team_slave_0 added [ 270.527510][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.535018][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.562888][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.593436][ T5099] Bluetooth: hci2: command tx timeout [ 270.599314][ T5813] Bluetooth: hci0: command tx timeout [ 270.623105][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.630312][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.657751][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.677566][ T5820] team0: Port device team_slave_1 added [ 270.681276][ T5813] Bluetooth: hci1: command tx timeout [ 270.730507][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.738102][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.764849][ T5813] Bluetooth: hci3: command tx timeout [ 270.764935][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.803980][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.811417][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.838439][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.083214][ T5808] hsr_slave_0: entered promiscuous mode [ 271.094494][ T5808] hsr_slave_1: entered promiscuous mode [ 271.150581][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.158577][ T5813] Bluetooth: hci4: command tx timeout [ 271.165532][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.192566][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.210962][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.218640][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.245545][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.468444][ T5803] hsr_slave_0: entered promiscuous mode [ 271.479670][ T5803] hsr_slave_1: entered promiscuous mode [ 271.489093][ T5803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.497369][ T5803] Cannot create hsr debugfs directory [ 271.561239][ T5814] hsr_slave_0: entered promiscuous mode [ 271.571988][ T5814] hsr_slave_1: entered promiscuous mode [ 271.581257][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.589414][ T5814] Cannot create hsr debugfs directory [ 271.661481][ T5802] hsr_slave_0: entered promiscuous mode [ 271.672353][ T5802] hsr_slave_1: entered promiscuous mode [ 271.681663][ T5802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.689896][ T5802] Cannot create hsr debugfs directory [ 272.035917][ T5820] hsr_slave_0: entered promiscuous mode [ 272.047371][ T5820] hsr_slave_1: entered promiscuous mode [ 272.055761][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.064119][ T5820] Cannot create hsr debugfs directory [ 272.691584][ T5813] Bluetooth: hci0: command tx timeout [ 272.697585][ T5813] Bluetooth: hci2: command tx timeout [ 272.783314][ T5099] Bluetooth: hci1: command tx timeout [ 272.833263][ T5099] Bluetooth: hci3: command tx timeout [ 273.243621][ T5099] Bluetooth: hci4: command tx timeout [ 273.572050][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.603224][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.689216][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.770406][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.836836][ T5803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.908159][ T5803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 274.030920][ T5803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 274.069003][ T5803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 274.220721][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 274.258122][ T5802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 274.306866][ T5802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 274.335751][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 274.361126][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 274.396936][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 274.511317][ T5802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 274.587689][ T5802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 274.665767][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 274.719954][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 274.752871][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 274.786136][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 275.690216][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.767793][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.993280][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.028558][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.083585][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.130746][ T3841] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.138648][ T3841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.156603][ T3841] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.164566][ T3841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.337723][ T3841] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.345674][ T3841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.415372][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.440829][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.494768][ T3841] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.502700][ T3841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.659339][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.701216][ T3841] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.709127][ T3841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.741111][ T3841] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.749110][ T3841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.796986][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.853563][ T3841] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.861419][ T3841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.022420][ T3841] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.030563][ T3841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.152516][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.376797][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.617168][ T3841] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.625122][ T3841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.660310][ T3841] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.668284][ T3841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.961047][ T5820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.975495][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.150103][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.739970][ T5808] veth0_vlan: entered promiscuous mode [ 279.800929][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.829317][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.917536][ T5808] veth1_vlan: entered promiscuous mode [ 280.270322][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.466376][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.482673][ T5808] veth0_macvtap: entered promiscuous mode [ 280.554721][ T5814] veth0_vlan: entered promiscuous mode [ 280.590687][ T5808] veth1_macvtap: entered promiscuous mode [ 280.769142][ T5814] veth1_vlan: entered promiscuous mode [ 280.880345][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.996774][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.144028][ T5808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.153846][ T5808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.163350][ T5808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.172550][ T5808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.222191][ T5820] veth0_vlan: entered promiscuous mode [ 281.230253][ T5802] veth0_vlan: entered promiscuous mode [ 281.392814][ T5802] veth1_vlan: entered promiscuous mode [ 281.408560][ T5814] veth0_macvtap: entered promiscuous mode [ 281.489697][ T5814] veth1_macvtap: entered promiscuous mode [ 281.510164][ T5820] veth1_vlan: entered promiscuous mode [ 281.774667][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.907274][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.940312][ T5802] veth0_macvtap: entered promiscuous mode [ 282.005153][ T5820] veth0_macvtap: entered promiscuous mode [ 282.028206][ T5814] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.039590][ T5814] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.049084][ T5814] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.058662][ T5814] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.130880][ T5802] veth1_macvtap: entered promiscuous mode [ 282.176064][ T5820] veth1_macvtap: entered promiscuous mode [ 282.380112][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.486151][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.523202][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.588882][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.599812][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.609274][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.618702][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.678893][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.811911][ T5802] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.822442][ T5802] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.832494][ T5802] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.844644][ T5802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.351896][ T5803] veth0_vlan: entered promiscuous mode [ 283.510783][ T5803] veth1_vlan: entered promiscuous mode [ 283.932042][ T5803] veth0_macvtap: entered promiscuous mode [ 284.020923][ T5803] veth1_macvtap: entered promiscuous mode [ 284.324595][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.442145][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.589010][ T5803] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.600827][ T5803] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.611080][ T5803] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.620776][ T5803] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.836006][ T4461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.845514][ T4461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.049213][ T3812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.058957][ T3812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.529804][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 290.699662][ T3883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.708614][ T3883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.040355][ T3812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.051534][ T3812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.220124][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.227185][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.552349][ T3812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.564750][ T3812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.757326][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.766896][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.994788][ T4072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.003168][ T4072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.084566][ T5991] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 292.217453][ T4461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.226297][ T4461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.432264][ T4461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.441013][ T4461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.786993][ T4072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.795716][ T4072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.637555][ T6010] loop0: detected capacity change from 0 to 512 [ 294.910956][ T6010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.924890][ T6010] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.087160][ T6022] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 295.342093][ T6011] loop2: detected capacity change from 0 to 32768 [ 295.367477][ T6011] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.10 (6011) [ 295.408391][ T6023] loop4: detected capacity change from 0 to 128 [ 295.461212][ T6011] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 295.472707][ T6011] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 295.485287][ T6011] BTRFS info (device loop2): using free-space-tree [ 295.509178][ T6023] udf: Unknown parameter 'ÿ00000000000000000000' [ 295.623811][ T6038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14'. [ 295.705806][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.813723][ T6011] BTRFS info (device loop2): rebuilding free space tree [ 295.840482][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 296.121293][ T5802] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 296.727729][ T6050] loop1: detected capacity change from 0 to 512 [ 296.756189][ T6050] ======================================================= [ 296.756189][ T6050] WARNING: The mand mount option has been deprecated and [ 296.756189][ T6050] and is ignored by this kernel. Remove the mand [ 296.756189][ T6050] option from the mount to silence this warning. [ 296.756189][ T6050] ======================================================= [ 297.025957][ T6050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 297.160251][ T6050] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.19: invalid block [ 297.234764][ T6050] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.19: invalid indirect mapped block 4294967295 (level 1) [ 297.310207][ T6050] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.19: invalid indirect mapped block 4294967295 (level 1) [ 297.427648][ T6050] EXT4-fs (loop1): 2 truncates cleaned up [ 297.436861][ T6050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.494786][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20'. [ 297.734757][ T6050] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.1.19: path /3/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 298.233858][ T6021] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 298.430444][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.816995][ T6067] loop4: detected capacity change from 0 to 4096 [ 300.011930][ T6077] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 300.631983][ T6082] loop2: detected capacity change from 0 to 2048 [ 300.793573][ T6084] loop0: detected capacity change from 0 to 256 [ 300.949255][ T6082] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.028889][ T6084] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 303.074265][ T6103] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 304.044530][ T6114] netlink: 'syz.0.44': attribute type 7 has an invalid length. [ 304.082542][ T6115] loop1: detected capacity change from 0 to 256 [ 304.250820][ T6115] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 304.267755][ T6115] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 304.537553][ T6115] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x108de57f, utbl_chksum : 0xe619d30d) [ 304.678115][ T30] audit: type=1800 audit(1749256473.145:2): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.45" name="file1" dev="loop1" ino=1048603 res=0 errno=0 [ 304.924013][ T30] audit: type=1800 audit(1749256473.435:3): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.49" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 305.455018][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 305.649415][ T6128] netlink: 95 bytes leftover after parsing attributes in process `syz.1.50'. [ 306.894336][ T5863] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 307.136459][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 307.199574][ T5863] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 307.209076][ T5863] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 307.218346][ T5863] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 307.234004][ T5863] usb 4-1: config 1 has no interface number 0 [ 307.240473][ T5863] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.254444][ T5863] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 307.268200][ T5863] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 307.277743][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.448836][ T6145] loop4: detected capacity change from 0 to 256 [ 307.577170][ T5863] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 307.806789][ T5863] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 308.152160][ T6131] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 308.160726][ T6131] FAT-fs (loop4): Filesystem has been set read-only [ 308.337413][ T5865] usb 4-1: USB disconnect, device number 2 [ 308.346094][ T5865] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 309.434682][ T6154] loop0: detected capacity change from 0 to 2048 [ 309.535699][ T6154] EXT4-fs: Ignoring removed mblk_io_submit option [ 309.542855][ T6154] EXT4-fs: Ignoring removed nobh option [ 309.780034][ T6154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.873421][ T6164] loop1: detected capacity change from 0 to 64 [ 310.165831][ T6166] loop4: detected capacity change from 0 to 256 [ 310.174388][ T6164] syz.1.64: attempt to access beyond end of device [ 310.174388][ T6164] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 310.188243][ T6164] Buffer I/O error on dev loop1, logical block 512, async page read [ 310.204782][ T6164] syz.1.64: attempt to access beyond end of device [ 310.204782][ T6164] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 310.220708][ T6164] Buffer I/O error on dev loop1, logical block 56576, async page read [ 310.526221][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.593734][ T5863] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 310.850772][ T5863] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 310.862478][ T5863] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 310.873193][ T5863] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 310.882595][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.023653][ T6169] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 311.142238][ T5863] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.506850][ T5863] usb 4-1: USB disconnect, device number 3 [ 312.195870][ T6179] udevd[6179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.092325][ T6193] warning: `syz.0.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 313.214562][ T6196] loop4: detected capacity change from 0 to 128 [ 313.407408][ T6198] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.416864][ T6198] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.426250][ T6198] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.435866][ T6198] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.657297][ T6198] Zero length message leads to an empty skb [ 314.031759][ T6204] netlink: 'syz.3.82': attribute type 6 has an invalid length. [ 314.319961][ T6206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.472500][ T6208] loop1: detected capacity change from 0 to 128 [ 314.592685][ T6208] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 314.765438][ T6208] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 315.075888][ T6208] fscrypt (loop1, inode 12): Unsupported log2_data_unit_size in encryption policy: 227 [ 315.616999][ T5820] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 316.870402][ T3812] ===================================================== [ 316.878504][ T3812] BUG: KMSAN: uninit-value in xas_load+0xd20/0xd70 [ 316.885574][ T3812] xas_load+0xd20/0xd70 [ 316.889982][ T3812] xas_find+0x2c8/0xd40 [ 316.894584][ T3812] xa_find+0x15a/0x2a0 [ 316.898938][ T3812] io_unregister_zcrx_ifqs+0x75/0x1d0 [ 316.904859][ T3812] io_ring_ctx_free+0x61/0x740 [ 316.909897][ T3812] io_ring_exit_work+0xdec/0xe20 [ 316.915399][ T3812] process_scheduled_works+0xb8e/0x1d80 [ 316.921310][ T3812] worker_thread+0xedf/0x1590 [ 316.926604][ T3812] kthread+0xd5c/0xf00 [ 316.930911][ T3812] ret_from_fork+0x1e3/0x310 [ 316.936723][ T3812] ret_from_fork_asm+0x1a/0x30 [ 316.941790][ T3812] [ 316.944431][ T3812] Uninit was stored to memory at: [ 316.949868][ T3812] xa_find+0x26c/0x2a0 [ 316.960698][ T3812] io_unregister_zcrx_ifqs+0x75/0x1d0 [ 316.968587][ T3812] io_ring_ctx_free+0x61/0x740 [ 316.973834][ T3812] io_ring_exit_work+0xdec/0xe20 [ 316.979143][ T3812] process_scheduled_works+0xb8e/0x1d80 [ 316.985127][ T3812] worker_thread+0xedf/0x1590 [ 316.990118][ T3812] kthread+0xd5c/0xf00 [ 316.994595][ T3812] ret_from_fork+0x1e3/0x310 [ 316.999422][ T3812] ret_from_fork_asm+0x1a/0x30 [ 317.004724][ T3812] [ 317.007188][ T3812] Local variable id created at: [ 317.012195][ T3812] io_unregister_zcrx_ifqs+0x3d/0x1d0 [ 317.018165][ T3812] io_ring_ctx_free+0x61/0x740 [ 317.023791][ T3812] [ 317.026463][ T3812] CPU: 0 UID: 0 PID: 3812 Comm: kworker/u8:12 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(undef) [ 317.038921][ T3812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.049405][ T3812] Workqueue: iou_exit io_ring_exit_work [ 317.055631][ T3812] ===================================================== [ 317.068902][ T3812] Disabling lock debugging due to kernel taint [ 317.077343][ T3812] Kernel panic - not syncing: kmsan.panic set ... [ 317.083987][ T3812] CPU: 0 UID: 0 PID: 3812 Comm: kworker/u8:12 Tainted: G B 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(undef) [ 317.098013][ T3812] Tainted: [B]=BAD_PAGE [ 317.102311][ T3812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.112741][ T3812] Workqueue: iou_exit io_ring_exit_work [ 317.118665][ T3812] Call Trace: [ 317.122089][ T3812] [ 317.125252][ T3812] __dump_stack+0x26/0x30 [ 317.129832][ T3812] dump_stack_lvl+0x53/0x270 [ 317.134760][ T3812] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 317.140868][ T3812] dump_stack+0x1e/0x25 [ 317.145374][ T3812] panic+0x4bd/0xd50 [ 317.149908][ T3812] kmsan_report+0x31c/0x320 [ 317.155197][ T3812] ? __msan_warning+0x1b/0x30 [ 317.160256][ T3812] ? xas_load+0xd20/0xd70 [ 317.164931][ T3812] ? xas_find+0x2c8/0xd40 [ 317.169712][ T3812] ? xa_find+0x15a/0x2a0 [ 317.174312][ T3812] ? io_unregister_zcrx_ifqs+0x75/0x1d0 [ 317.180426][ T3812] ? io_ring_ctx_free+0x61/0x740 [ 317.185642][ T3812] ? io_ring_exit_work+0xdec/0xe20 [ 317.191188][ T3812] ? process_scheduled_works+0xb8e/0x1d80 [ 317.197285][ T3812] ? worker_thread+0xedf/0x1590 [ 317.202550][ T3812] ? kthread+0xd5c/0xf00 [ 317.207012][ T3812] ? ret_from_fork+0x1e3/0x310 [ 317.211991][ T3812] ? ret_from_fork_asm+0x1a/0x30 [ 317.217225][ T3812] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 317.223302][ T3812] ? stack_depot_save_flags+0x60f/0x7b0 [ 317.229195][ T3812] ? stack_depot_save+0x12/0x20 [ 317.234366][ T3812] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 317.240469][ T3812] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 317.246724][ T3812] ? __msan_chain_origin+0xc3/0x140 [ 317.252451][ T3812] ? xa_find+0x26c/0x2a0 [ 317.256971][ T3812] ? io_unregister_zcrx_ifqs+0x75/0x1d0 [ 317.263151][ T3812] ? io_ring_ctx_free+0x61/0x740 [ 317.268704][ T3812] ? io_ring_exit_work+0xdec/0xe20 [ 317.274073][ T3812] ? process_scheduled_works+0xb8e/0x1d80 [ 317.280256][ T3812] ? worker_thread+0xedf/0x1590 [ 317.285489][ T3812] ? kthread+0xd5c/0xf00 [ 317.290065][ T3812] ? ret_from_fork+0x1e3/0x310 [ 317.295273][ T3812] ? ret_from_fork_asm+0x1a/0x30 [ 317.300513][ T3812] ? kmsan_get_metadata+0xfb/0x160 [ 317.306016][ T3812] ? io_sqe_files_unregister+0xea/0x120 [ 317.311907][ T3812] __msan_warning+0x1b/0x30 [ 317.316790][ T3812] xas_load+0xd20/0xd70 [ 317.321285][ T3812] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 317.327802][ T3812] ? kmsan_get_metadata+0xfb/0x160 [ 317.333380][ T3812] ? io_sqe_files_unregister+0xea/0x120 [ 317.339202][ T3812] ? io_sqe_files_unregister+0xea/0x120 [ 317.345013][ T3812] xas_find+0x2c8/0xd40 [ 317.349507][ T3812] ? kmsan_get_metadata+0xfb/0x160 [ 317.354905][ T3812] ? kmsan_get_metadata+0xfb/0x160 [ 317.360566][ T3812] ? io_sqe_files_unregister+0xea/0x120 [ 317.366393][ T3812] ? io_sqe_files_unregister+0xea/0x120 [ 317.372236][ T3812] xa_find+0x15a/0x2a0 [ 317.377260][ T3812] ? io_sqe_files_unregister+0xea/0x120 [ 317.383198][ T3812] io_unregister_zcrx_ifqs+0x75/0x1d0 [ 317.389101][ T3812] ? io_sqe_files_unregister+0xea/0x120 [ 317.394982][ T3812] io_ring_ctx_free+0x61/0x740 [ 317.400104][ T3812] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 317.406221][ T3812] io_ring_exit_work+0xdec/0xe20 [ 317.411411][ T3812] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 317.417191][ T3812] ? __pfx_io_ring_exit_work+0x10/0x10 [ 317.422919][ T3812] process_scheduled_works+0xb8e/0x1d80 [ 317.428909][ T3812] worker_thread+0xedf/0x1590 [ 317.434081][ T3812] kthread+0xd5c/0xf00 [ 317.438368][ T3812] ? __pfx_worker_thread+0x10/0x10 [ 317.444233][ T3812] ? __pfx_kthread+0x10/0x10 [ 317.449053][ T3812] ret_from_fork+0x1e3/0x310 [ 317.454040][ T3812] ? __pfx_kthread+0x10/0x10 [ 317.459036][ T3812] ret_from_fork_asm+0x1a/0x30 [ 317.464101][ T3812] [ 317.467705][ T3812] Kernel Offset: disabled [ 317.472167][ T3812] Rebooting in 86400 seconds..