last executing test programs: 31.05712992s ago: executing program 1 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x8000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) 30.528592971s ago: executing program 1 (id=9): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x11}, 0x800) 28.542297529s ago: executing program 1 (id=12): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 26.377037544s ago: executing program 1 (id=14): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r3 = dup2(r2, r1) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08006, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0xfe, 0x687, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)='B', 0x1}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x1}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r8, 0x101) r9 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r9, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) openat$cgroup_ro(r3, &(0x7f0000000180)='freezer.self_freezing\x00', 0x0, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, 0x0, 0x8, 0x30bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x40000004, 0x0, 0x4, 0x3}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}, 0x0) 24.09376002s ago: executing program 4 (id=16): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/4096, 0x1000}, 0x0) close(r6) syz_init_net_socket$rose(0xb, 0x5, 0x0) 23.606021722s ago: executing program 3 (id=17): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) 22.515758497s ago: executing program 4 (id=19): socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000bc0)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'cp857'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x110}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 22.397823897s ago: executing program 3 (id=20): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x40000000000, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x0, @empty}, r1}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {0x0, r1}}, 0x18) 21.343294781s ago: executing program 2 (id=22): r0 = syz_usb_connect$hid(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf0bd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0xa, {0xa, 0x0, "5de17f220e08f066"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 20.737409755s ago: executing program 3 (id=23): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 17.304427701s ago: executing program 0 (id=25): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f00000000c0)) 17.104746274s ago: executing program 2 (id=26): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001400000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 16.557523161s ago: executing program 4 (id=27): r0 = syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 16.478239465s ago: executing program 0 (id=28): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 11.574335064s ago: executing program 1 (id=29): socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0xb0, 0x0, 0xb, [{{0x1, 0x1, 0x7, 0x7fff, 0x9, 0x3b, {0x6, 0x0, 0x3, 0x5, 0x6198fb87, 0x8, 0xd, 0x1, 0xfffffff7, 0x4000, 0x4, 0x0, 0x0, 0x81, 0xffffffff}}, {0x5, 0xff, 0x6, 0x3, '-\x8c+@\xee\x9a'}}]}, 0x0, 0x0, &(0x7f0000000000)={0x130}}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 11.529238358s ago: executing program 3 (id=30): r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x80}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 11.164399686s ago: executing program 2 (id=31): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r5, 0x8b2c, &(0x7f0000000040)) 8.7457845s ago: executing program 2 (id=32): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000080), 0x3, 0x56d, &(0x7f0000000c00)="$eJzs3c+PG1cdAPDvzP6w86PdBHqAqpAAhYCieLNOG1W9NLmAUFUJUXFAHNJl11ktseMQe0t3icT2bwAJBCf4EzggcUDqiQM3jkgcEFI5IAWIQFkESEYznt04WVtxYq/d7H4+0mR+vHnzfU/O+D0/e+cFcGSdjYjtiJiPiHciYqE4nhRLXOku2Xn3791Z2bl3ZyWJTuftvyd5enYsevJkThTXLEfE178S8e1kf9zW5taN5Xq9drvYX2w3bi22NrcurDeW12prtZvV6uWlyxdfu/RqdWx1PdP45d0vr7/5jd/8+lMf/n77S9/PinWySOutxzh1qz63FyczGxFvHkSwKZgp1vP7Ul7qn+HKwZaHJ5NGxMci4rP5/b8QM/n/TgDgMOt0fhqdhd59AOCwyz7/nywnaSUi0rToBFS6Y3gvxPG03my1z19vbtxc7Y6VnYq59Pp6vXbxdOmP381Pnkuy/aU8LU/P96uP7F+KiNMR8aPSsXy/stKsr06nywMAR96J/Duwov2PiH+V0rRSGSprn2/1AIBnRnkKOQGA6eptxUtTLAcAMDk+xQPA0TNE+1982b994GUBACbD538AOHq0/wBw9Dxp++83ggDwTPvaW29lS2eneP716rubG3PNdy+s1lo3Ko2NlcpK8/atylqzuZY/s6fxUOZjPdtFn6DebN5aeiU23lts11rtxdbm1rVGc+Nm+1r+XO9rtbmJ1g4A6Of0mQ/+kETE9uvH8iV65nLQVsPhlk67AMDUzDzYrJ140sw6CPBMe7rZvv4z9nIAkzdUE553En534GUBpqPvw7zLfTcf9pMnCOJ3xvCRcu6Tw4//75/jGXiWGf+Ho2vmqXK9MfZyAJP3dOP/wGHQ6SSPzvk/v5cEABxKI/yEr/ODcXVCgKl63GTeY/n+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6ZkxHxnUjSSj4XeJr9m1YqEc9FxKmYS66v12sXI+L5OBMRc6Vsf2nahQYARpT+NSnm/zq38PLJR1Pnk3+X8nVEfO9nb//4veV2+/ZSdvwfe8dLu9OHVR/kG2FeQQBgOJ3SkCfm7Xe1WPd8kL9/787K7nJQhezn7tX4XzEV8crOvTv50k2ZjexgRDnvSxz/ZxKzRZ5yRLwYETNjiL/9fkR8ol/9k3xs5FQx82lv/ChiPzfR+OlD8dM8rbvOOl8fH0NZ4Kj54GpEXOl3/6VxNl/3v//L+TvU6O5e7V5s971vpyf+bBFppk/87J4/O2yMV3771X0HOwvdtPcjXpztFz/Zi58MiP/ykPH/9NKnf/jGgLTOzyPORf/4vbEW241bi63NrQvrjeW12lo5qtXLS5cvvnbp1epiPka9uDtSvd/fXj///KCyZfU/PiB+uW/95/fyfn7I+v/iv+986zMPdkuPxv/i5/q//i/0jd+VtYlfeDhMZ1D85eO/Gjh9dxZ/dUD9H/f6nx+m8hHx4V+2Voc8FQCYgNbm1o3ler12e6SNNHY647jOvo2siMOdvNtdHC3on+MgavGUG3MjV2daG7N7fcXxXvmb2RUnXJ107LUYaeP+pGJN7z0JmIwHN/20SwIAAAAAAAAAAAAAAAwyiT9dmnYdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLz+HwAA//+WydIx") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x126) getdents64(r0, &(0x7f0000000040)=""/184, 0xb8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 7.485346785s ago: executing program 4 (id=33): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x80, 0x5, 0x5, 0x0, 0x0, 0x4, 0x1c}, [@FRA_SRC={0x8, 0x2, @broadcast}]}, 0x24}, 0x1, 0xba01, 0x0, 0x4810}, 0x20000040) 1.88136639s ago: executing program 0 (id=34): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 1.796863154s ago: executing program 1 (id=35): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x1, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4c, 0xde, 0xb2, 0x8, 0x4b4, 0x5500, 0x3a7f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xd0, 0x3, [{{0x9, 0x4, 0xff, 0x0, 0x0, 0x67, 0x4b, 0xaf}}]}}]}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r2 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000040)=""/58, 0x3a}], 0x1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r2, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) lseek(r1, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @multicast1}], 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'xfrm0\x00', {0x1}, 0x50}) recvmsg(r0, &(0x7f0000000580)={0x0, 0x11, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 1.69804251s ago: executing program 2 (id=36): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x121802) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000180)={0x0, 0x2a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r2, r3, 0x1, 0x0, 0x4, 0x8, {0x6, 0xb, 0xe, 0x30b4, 0x8000, 0x8, 0x1, 0x4, 0x3e40, 0x4, 0x0, 0x9, 0x2, 0xfffffffc, "12d56163d7287bd287881d942450c7153a3243937ca9a58f1c702a4ccc476b15"}}) 1.311428616s ago: executing program 0 (id=37): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x70}}, 0x0) 1.203913465s ago: executing program 3 (id=38): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0x6, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="0000c339302c", 0xfffffffffffffffd, 0xfffffff3, 0x0, 0x0, 0x0}) 1.149739001s ago: executing program 4 (id=39): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x20000000) 923.271021ms ago: executing program 2 (id=40): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000180)=""/199) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000002c0)) 765.321887ms ago: executing program 0 (id=41): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x9, 0x0, 0x0}, 0x50) 605.177354ms ago: executing program 3 (id=42): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) getrlimit(0xf, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x84, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r3, &(0x7f0000000240), &(0x7f00000004c0)=""/200}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x10, 0x9, 0x2, 0xa, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x0, 0x80000000, {0x6, 0x32, 0x4, 0x4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty}}]}, 0x50}}, 0x2000c800) syz_emit_vhci(&(0x7f00000009c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xf8, 0xc9, @none, 0x2, 0xa, 0x6, 0x5, 0x74, 0x2}}}, 0x14) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x0) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) epoll_create(0xc) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) 604.622583ms ago: executing program 4 (id=43): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xb, 0xfc}}}}}]}}]}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=44): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0xc208}, {0xffffffffffffffff, 0x2a}], 0x2, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000674000/0x1000)=nil, 0x1000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. [ 174.472672][ T5767] cgroup: Unknown subsys name 'net' [ 174.607491][ T5767] cgroup: Unknown subsys name 'cpuset' [ 174.621645][ T5767] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 219.074666][ T5767] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 219.139889][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.146733][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 223.897628][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.907582][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.926648][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.946039][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.957118][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.969451][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.982237][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.993408][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.003843][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.020704][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.035385][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.068691][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.076758][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 224.087719][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.090692][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.106211][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.114571][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.115241][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.145306][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.153779][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.163880][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 224.173696][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 224.182287][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.195911][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.253238][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 224.263587][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.274468][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 224.302074][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.328470][ T5794] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 224.346039][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.361920][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 225.629153][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 225.769925][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 226.069453][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 226.176725][ T5788] Bluetooth: hci1: command tx timeout [ 226.177124][ T5794] Bluetooth: hci0: command tx timeout [ 226.245434][ T5794] Bluetooth: hci2: command tx timeout [ 226.327851][ T5794] Bluetooth: hci3: command tx timeout [ 226.394109][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 226.487079][ T5794] Bluetooth: hci4: command tx timeout [ 226.518955][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.526939][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.534664][ T5790] bridge_slave_0: entered allmulticast mode [ 226.543776][ T5790] bridge_slave_0: entered promiscuous mode [ 226.691301][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.702369][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.710261][ T5790] bridge_slave_1: entered allmulticast mode [ 226.719632][ T5790] bridge_slave_1: entered promiscuous mode [ 227.009926][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.019403][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.027233][ T5796] bridge_slave_0: entered allmulticast mode [ 227.036252][ T5796] bridge_slave_0: entered promiscuous mode [ 227.056412][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.068031][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.075836][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.083503][ T5783] bridge_slave_0: entered allmulticast mode [ 227.092460][ T5783] bridge_slave_0: entered promiscuous mode [ 227.134637][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.143016][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.151016][ T5796] bridge_slave_1: entered allmulticast mode [ 227.159993][ T5796] bridge_slave_1: entered promiscuous mode [ 227.186323][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.199022][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.206860][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.214538][ T5783] bridge_slave_1: entered allmulticast mode [ 227.223580][ T5783] bridge_slave_1: entered promiscuous mode [ 227.279538][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.287428][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.295089][ T5787] bridge_slave_0: entered allmulticast mode [ 227.303144][ T5787] bridge_slave_0: entered promiscuous mode [ 227.458572][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.466454][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.474157][ T5787] bridge_slave_1: entered allmulticast mode [ 227.483304][ T5787] bridge_slave_1: entered promiscuous mode [ 227.498887][ T5790] team0: Port device team_slave_0 added [ 227.560211][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.568135][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.575957][ T5793] bridge_slave_0: entered allmulticast mode [ 227.584892][ T5793] bridge_slave_0: entered promiscuous mode [ 227.629711][ T5790] team0: Port device team_slave_1 added [ 227.644921][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.665942][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.685660][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.697870][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.705681][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.713225][ T5793] bridge_slave_1: entered allmulticast mode [ 227.722406][ T5793] bridge_slave_1: entered promiscuous mode [ 227.853385][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.939559][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.008114][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.019909][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.027288][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.054259][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.129780][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.149397][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.188504][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.195744][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.222059][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.245430][ T5794] Bluetooth: hci0: command tx timeout [ 228.255262][ T5794] Bluetooth: hci1: command tx timeout [ 228.272366][ T5783] team0: Port device team_slave_0 added [ 228.325351][ T5794] Bluetooth: hci2: command tx timeout [ 228.370591][ T5796] team0: Port device team_slave_0 added [ 228.383040][ T5783] team0: Port device team_slave_1 added [ 228.395754][ T5796] team0: Port device team_slave_1 added [ 228.405391][ T5794] Bluetooth: hci3: command tx timeout [ 228.441063][ T5787] team0: Port device team_slave_0 added [ 228.453772][ T5793] team0: Port device team_slave_0 added [ 228.469915][ T5793] team0: Port device team_slave_1 added [ 228.537998][ T5787] team0: Port device team_slave_1 added [ 228.574223][ T5794] Bluetooth: hci4: command tx timeout [ 228.700228][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.707639][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.735267][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.822053][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.829373][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.855717][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.900776][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.908081][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.934522][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.948470][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.955868][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.982241][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.005738][ T5790] hsr_slave_0: entered promiscuous mode [ 229.016978][ T5790] hsr_slave_1: entered promiscuous mode [ 229.028396][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.035697][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.062145][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.076011][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.083191][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.109694][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.123699][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.131645][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.158077][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.233849][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.241198][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.267688][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.418451][ T5787] hsr_slave_0: entered promiscuous mode [ 229.429260][ T5787] hsr_slave_1: entered promiscuous mode [ 229.438110][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.447229][ T5787] Cannot create hsr debugfs directory [ 229.649677][ T5783] hsr_slave_0: entered promiscuous mode [ 229.659708][ T5783] hsr_slave_1: entered promiscuous mode [ 229.668614][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.677993][ T5783] Cannot create hsr debugfs directory [ 229.858862][ T5796] hsr_slave_0: entered promiscuous mode [ 229.868203][ T5796] hsr_slave_1: entered promiscuous mode [ 229.877348][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.885558][ T5796] Cannot create hsr debugfs directory [ 229.940232][ T5793] hsr_slave_0: entered promiscuous mode [ 229.950320][ T5793] hsr_slave_1: entered promiscuous mode [ 229.958854][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.966896][ T5793] Cannot create hsr debugfs directory [ 230.325636][ T5794] Bluetooth: hci1: command tx timeout [ 230.331364][ T5794] Bluetooth: hci0: command tx timeout [ 230.405779][ T5788] Bluetooth: hci2: command tx timeout [ 230.485464][ T5788] Bluetooth: hci3: command tx timeout [ 230.657178][ T5788] Bluetooth: hci4: command tx timeout [ 230.924910][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 231.031904][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 231.109207][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.140120][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 231.270646][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 231.295673][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 231.320189][ T5793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 231.344635][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 231.373664][ T5793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 231.396619][ T5793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 231.420445][ T5793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 231.441547][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 231.675776][ T5796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 231.721515][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.756574][ T5796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 231.811596][ T5796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 231.834465][ T5796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 231.853826][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.942673][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.039225][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.415952][ T5788] Bluetooth: hci0: command tx timeout [ 232.417850][ T5794] Bluetooth: hci1: command tx timeout [ 232.491731][ T5794] Bluetooth: hci2: command tx timeout [ 232.565290][ T5794] Bluetooth: hci3: command tx timeout [ 232.613261][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.738231][ T5794] Bluetooth: hci4: command tx timeout [ 232.778160][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.884632][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.903734][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.034732][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.049869][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.069433][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.111570][ T5068] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.119366][ T5068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.278588][ T5068] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.286373][ T5068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.303777][ T5068] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.311538][ T5068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.326915][ T5068] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.334599][ T5068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.350077][ T5068] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.357670][ T5068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.382493][ T5068] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.390099][ T5068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.531448][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.681219][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.733430][ T3981] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.741266][ T3981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.863833][ T3981] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.871624][ T3981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.078997][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.092486][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.129078][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.242172][ T3981] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.250088][ T3981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.378998][ T3981] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.386913][ T3981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.870718][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.018973][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.089463][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.132168][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.474872][ T5787] veth0_vlan: entered promiscuous mode [ 236.519405][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.540511][ T5793] veth0_vlan: entered promiscuous mode [ 236.621725][ T5787] veth1_vlan: entered promiscuous mode [ 236.656761][ T5790] veth0_vlan: entered promiscuous mode [ 236.708815][ T5793] veth1_vlan: entered promiscuous mode [ 236.813503][ T5790] veth1_vlan: entered promiscuous mode [ 237.066426][ T5787] veth0_macvtap: entered promiscuous mode [ 237.111224][ T5787] veth1_macvtap: entered promiscuous mode [ 237.142896][ T5793] veth0_macvtap: entered promiscuous mode [ 237.182535][ T5783] veth0_vlan: entered promiscuous mode [ 237.276574][ T5790] veth0_macvtap: entered promiscuous mode [ 237.289007][ T5793] veth1_macvtap: entered promiscuous mode [ 237.356339][ T5790] veth1_macvtap: entered promiscuous mode [ 237.379884][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.392591][ T5783] veth1_vlan: entered promiscuous mode [ 237.476185][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.553234][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.564460][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.578894][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.635488][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.646408][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.660695][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.669742][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.681903][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.693016][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.703828][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.720432][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.744635][ T5793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.755368][ T5793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.764392][ T5793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.773574][ T5793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.800563][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.809861][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.819764][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.828973][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.879065][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.890553][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.900857][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.911649][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.925786][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.031338][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.042171][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.052857][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.063228][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.145969][ T5783] veth0_macvtap: entered promiscuous mode [ 238.264796][ T5783] veth1_macvtap: entered promiscuous mode [ 238.479548][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.492822][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.505161][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.517550][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.530055][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.542015][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.556766][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.678816][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.689722][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.699977][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.710736][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.720897][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.732351][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.747049][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.939166][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.948463][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.957821][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.967084][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.054715][ T5796] veth0_vlan: entered promiscuous mode [ 239.191188][ T5796] veth1_vlan: entered promiscuous mode [ 239.513681][ T5796] veth0_macvtap: entered promiscuous mode [ 239.590576][ T5796] veth1_macvtap: entered promiscuous mode [ 239.810065][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.822895][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.833186][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.844014][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.854298][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.866486][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.877783][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.890013][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.905355][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.230380][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.242674][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.255210][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.266860][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.278096][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.290284][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.300940][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.312204][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.326486][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.622731][ T5796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.631999][ T5796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.641638][ T5796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.651542][ T5796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.466303][ T4970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.474409][ T4970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.586745][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.594835][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.817868][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.827471][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.867050][ T3627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.875287][ T3627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.978857][ T5068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.987203][ T5068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.108204][ T5787] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 245.249639][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.258618][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.027793][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.036139][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.297304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 247.869114][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.877758][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.127358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 249.213735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 249.227932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 249.683223][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.691691][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.887378][ T3627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.896699][ T3627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.802369][ T5990] Zero length message leads to an empty skb [ 251.616316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 251.617663][ T5849] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 251.696514][ T5794] Bluetooth: hci2: command tx timeout [ 252.359180][ T5849] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.371040][ T5849] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 252.381476][ T5849] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.382497][ T5992] loop2: detected capacity change from 0 to 32768 [ 252.390900][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.440540][ T5992] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.10 (5992) [ 252.581531][ T5992] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 252.594041][ T5992] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 252.614086][ T5992] BTRFS info (device loop2): using free-space-tree [ 253.125624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 253.136229][ T5996] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 253.165771][ T5849] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 253.871999][ T5992] BTRFS error (device loop2): open_ctree failed [ 256.295981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 256.398503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 256.989170][ T6018] loop1: detected capacity change from 0 to 1024 [ 257.143494][ T5844] usb 1-1: USB disconnect, device number 2 [ 258.295870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 258.773551][ T6033] loop4: detected capacity change from 0 to 1024 [ 260.286463][ T5849] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 260.545675][ T5849] usb 3-1: Using ep0 maxpacket: 8 [ 260.580166][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.593204][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.603976][ T5849] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 260.613519][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.807245][ T5849] usb 3-1: config 0 descriptor?? [ 261.010981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 263.791143][ T5849] usbhid 3-1:0.0: can't add hid device: -71 [ 263.798551][ T5849] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 263.921706][ T5849] usb 3-1: USB disconnect, device number 2 [ 264.336699][ T1121] hfsplus: b-tree write err: -5, ino 4 [ 265.195665][ T5849] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 266.355833][ T5849] usb 3-1: Using ep0 maxpacket: 32 [ 267.348949][ T5849] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 267.360035][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.370429][ T5849] usb 3-1: Product: syz [ 267.374845][ T5849] usb 3-1: Manufacturer: syz [ 267.379805][ T5849] usb 3-1: SerialNumber: syz [ 269.836751][ T5849] usb 3-1: can't set config #64, error -71 [ 269.846427][ T5849] usb 3-1: USB disconnect, device number 3 [ 271.762512][ T6066] warning: `syz.2.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 272.654603][ T6070] loop2: detected capacity change from 0 to 512 [ 272.814342][ T6070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.827977][ T6070] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 273.373188][ T6070] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.32: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 277.237044][ T6079] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 18: comm syz.2.32: lblock 23 mapped to illegal pblock 18 (length 1) [ 279.091125][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.138325][ T5844] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 280.267754][ T5849] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 280.353514][ T5844] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 280.368452][ T5844] usb 2-1: config 0 has no interface number 0 [ 280.377289][ T5844] usb 2-1: New USB device found, idVendor=04b4, idProduct=5500, bcdDevice=3a.7f [ 280.386918][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.417605][ T5844] usb 2-1: config 0 descriptor?? [ 280.442680][ T5844] cypress_m8 2-1:0.255: HID->COM RS232 Adapter converter detected [ 280.453895][ T5844] cyphidcom ttyUSB0: required endpoint is missing [ 280.470026][ T5849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.470173][ T5849] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 280.470374][ T5849] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 280.470530][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.476745][ T5849] usb 3-1: config 0 descriptor?? [ 280.633003][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.640258][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.643610][ T5849] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 280.653847][ T5849] dvb-usb: bulk message failed: -22 (3/0) [ 280.687130][ T1596] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 280.803110][ T5849] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 280.847674][ T5849] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 280.855272][ T5849] usb 3-1: media controller created [ 280.857008][ T5844] usb 2-1: USB disconnect, device number 2 [ 280.873189][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.895306][ T5844] cypress_m8 2-1:0.255: device disconnected [ 281.271713][ T1596] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 282.643445][ T1596] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 282.653568][ T1596] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.662552][ T1596] usb 5-1: Product: syz [ 282.668223][ T1596] usb 5-1: Manufacturer: syz [ 282.673116][ T1596] usb 5-1: SerialNumber: syz [ 282.862879][ T6104] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 282.992275][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 282.998890][ T5849] ===================================================== [ 283.006487][ T5849] BUG: KMSAN: uninit-value in dib3000mb_attach+0x2d8/0x3c0 [ 283.013930][ T5849] dib3000mb_attach+0x2d8/0x3c0 [ 283.021821][ T5849] dibusb_dib3000mb_frontend_attach+0x155/0x2f0 [ 283.029130][ T5849] dvb_usb_adapter_frontend_init+0xed/0x9a0 [ 283.035447][ T5849] dvb_usb_device_init+0x25a8/0x3760 [ 283.040960][ T5849] dibusb_probe+0x18c/0x250 [ 283.045896][ T5849] usb_probe_interface+0xd33/0x12e0 [ 283.051851][ T5849] really_probe+0x4db/0xd90 [ 283.056794][ T5849] __driver_probe_device+0x2ab/0x5d0 [ 283.062294][ T5849] driver_probe_device+0x72/0x890 [ 283.068377][ T5849] __device_attach_driver+0x568/0x9e0 [ 283.073993][ T5849] bus_for_each_drv+0x403/0x620 [ 283.079351][ T5849] __device_attach+0x3c1/0x650 [ 283.084330][ T5849] device_initial_probe+0x32/0x40 [ 283.089688][ T5849] bus_probe_device+0x3dc/0x5c0 [ 283.094723][ T5849] device_add+0x13aa/0x1ba0 [ 283.101853][ T5849] usb_set_configuration+0x31c9/0x38d0 [ 283.107865][ T5849] usb_generic_driver_probe+0x109/0x2a0 [ 283.113701][ T5849] usb_probe_device+0x3a7/0x690 [ 283.121410][ T5849] really_probe+0x4db/0xd90 [ 283.130810][ T5849] __driver_probe_device+0x2ab/0x5d0 [ 283.136485][ T5849] driver_probe_device+0x72/0x890 [ 283.141726][ T5849] __device_attach_driver+0x568/0x9e0 [ 283.147467][ T5849] bus_for_each_drv+0x403/0x620 [ 283.152494][ T5849] __device_attach+0x3c1/0x650 [ 283.157615][ T5849] device_initial_probe+0x32/0x40 [ 283.162850][ T5849] bus_probe_device+0x3dc/0x5c0 [ 283.168029][ T5849] device_add+0x13aa/0x1ba0 [ 283.172731][ T5849] usb_new_device+0x15f4/0x2470 [ 283.177958][ T5849] hub_event+0x4ffb/0x72d0 [ 283.182581][ T5849] process_scheduled_works+0xae0/0x1c40 [ 283.188837][ T5849] worker_thread+0xea7/0x14f0 [ 283.193758][ T5849] kthread+0x3e2/0x540 [ 283.198200][ T5849] ret_from_fork+0x6d/0x90 [ 283.202818][ T5849] ret_from_fork_asm+0x1a/0x30 [ 283.207997][ T5849] [ 283.210413][ T5849] Local variable rb created at: [ 283.215647][ T5849] dib3000_read_reg+0x86/0x4e0 [ 283.220626][ T5849] dib3000mb_attach+0x123/0x3c0 [ 283.228468][ T5849] [ 283.230933][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: kworker/1:4 Not tainted 6.13.0-rc3-syzkaller #0 [ 283.240968][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 283.251350][ T5849] Workqueue: usb_hub_wq hub_event [ 283.256718][ T5849] ===================================================== [ 283.263759][ T5849] Disabling lock debugging due to kernel taint [ 283.270205][ T5849] Kernel panic - not syncing: kmsan.panic set ... [ 283.276778][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: kworker/1:4 Tainted: G B 6.13.0-rc3-syzkaller #0 [ 283.287518][ T5849] Tainted: [B]=BAD_PAGE [ 283.291798][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 283.302025][ T5849] Workqueue: usb_hub_wq hub_event [ 283.307277][ T5849] Call Trace: [ 283.310677][ T5849] [ 283.313722][ T5849] dump_stack_lvl+0x216/0x2d0 [ 283.318651][ T5849] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 283.324677][ T5849] dump_stack+0x1e/0x24 [ 283.329052][ T5849] panic+0x4e2/0xcf0 [ 283.333167][ T5849] ? kmsan_get_metadata+0xf1/0x1c0 [ 283.338492][ T5849] kmsan_report+0x2c7/0x2d0 [ 283.343196][ T5849] ? __msan_warning+0x95/0x120 [ 283.348194][ T5849] ? dib3000mb_attach+0x2d8/0x3c0 [ 283.353444][ T5849] ? dibusb_dib3000mb_frontend_attach+0x155/0x2f0 [ 283.360100][ T5849] ? dvb_usb_adapter_frontend_init+0xed/0x9a0 [ 283.366413][ T5849] ? dvb_usb_device_init+0x25a8/0x3760 [ 283.372089][ T5849] ? dibusb_probe+0x18c/0x250 [ 283.376980][ T5849] ? usb_probe_interface+0xd33/0x12e0 [ 283.382581][ T5849] ? really_probe+0x4db/0xd90 [ 283.387473][ T5849] ? __driver_probe_device+0x2ab/0x5d0 [ 283.393156][ T5849] ? driver_probe_device+0x72/0x890 [ 283.398572][ T5849] ? __device_attach_driver+0x568/0x9e0 [ 283.404339][ T5849] ? bus_for_each_drv+0x403/0x620 [ 283.409540][ T5849] ? __device_attach+0x3c1/0x650 [ 283.414679][ T5849] ? device_initial_probe+0x32/0x40 [ 283.420090][ T5849] ? bus_probe_device+0x3dc/0x5c0 [ 283.425304][ T5849] ? device_add+0x13aa/0x1ba0 [ 283.430181][ T5849] ? usb_set_configuration+0x31c9/0x38d0 [ 283.436031][ T5849] ? usb_generic_driver_probe+0x109/0x2a0 [ 283.441970][ T5849] ? usb_probe_device+0x3a7/0x690 [ 283.447221][ T5849] ? really_probe+0x4db/0xd90 [ 283.452111][ T5849] ? __driver_probe_device+0x2ab/0x5d0 [ 283.457787][ T5849] ? driver_probe_device+0x72/0x890 [ 283.463210][ T5849] ? __device_attach_driver+0x568/0x9e0 [ 283.468984][ T5849] ? bus_for_each_drv+0x403/0x620 [ 283.474210][ T5849] ? __device_attach+0x3c1/0x650 [ 283.479355][ T5849] ? device_initial_probe+0x32/0x40 [ 283.484764][ T5849] ? bus_probe_device+0x3dc/0x5c0 [ 283.489975][ T5849] ? device_add+0x13aa/0x1ba0 [ 283.494854][ T5849] ? usb_new_device+0x15f4/0x2470 [ 283.500063][ T5849] ? hub_event+0x4ffb/0x72d0 [ 283.504861][ T5849] ? process_scheduled_works+0xae0/0x1c40 [ 283.510825][ T5849] ? worker_thread+0xea7/0x14f0 [ 283.515921][ T5849] ? kthread+0x3e2/0x540 [ 283.520353][ T5849] ? ret_from_fork+0x6d/0x90 [ 283.525152][ T5849] ? ret_from_fork_asm+0x1a/0x30 [ 283.530337][ T5849] ? rt_mutex_unlock+0x2a/0x50 [ 283.535294][ T5849] ? kmsan_get_metadata+0x13e/0x1c0 [ 283.540695][ T5849] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 283.546728][ T5849] ? dib3000_read_reg+0x32b/0x4e0 [ 283.551996][ T5849] __msan_warning+0x95/0x120 [ 283.556838][ T5849] dib3000mb_attach+0x2d8/0x3c0 [ 283.561921][ T5849] ? __pfx_dib3000mb_attach+0x10/0x10 [ 283.567541][ T5849] dibusb_dib3000mb_frontend_attach+0x155/0x2f0 [ 283.574032][ T5849] ? __pfx_dibusb_dib3000mb_frontend_attach+0x10/0x10 [ 283.581056][ T5849] dvb_usb_adapter_frontend_init+0xed/0x9a0 [ 283.587234][ T5849] dvb_usb_device_init+0x25a8/0x3760 [ 283.592787][ T5849] dibusb_probe+0x18c/0x250 [ 283.597495][ T5849] ? __pfx_dibusb_probe+0x10/0x10 [ 283.602716][ T5849] usb_probe_interface+0xd33/0x12e0 [ 283.608153][ T5849] ? __pfx_usb_probe_interface+0x10/0x10 [ 283.614007][ T5849] really_probe+0x4db/0xd90 [ 283.618735][ T5849] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 283.624759][ T5849] __driver_probe_device+0x2ab/0x5d0 [ 283.630290][ T5849] driver_probe_device+0x72/0x890 [ 283.635538][ T5849] ? kmsan_get_metadata+0x13e/0x1c0 [ 283.640933][ T5849] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 283.646974][ T5849] __device_attach_driver+0x568/0x9e0 [ 283.652604][ T5849] bus_for_each_drv+0x403/0x620 [ 283.657645][ T5849] ? __pfx___device_attach_driver+0x10/0x10 [ 283.663889][ T5849] __device_attach+0x3c1/0x650 [ 283.668898][ T5849] device_initial_probe+0x32/0x40 [ 283.674144][ T5849] bus_probe_device+0x3dc/0x5c0 [ 283.679197][ T5849] device_add+0x13aa/0x1ba0 [ 283.683921][ T5849] usb_set_configuration+0x31c9/0x38d0 [ 283.689606][ T5849] ? usb_set_configuration+0x961/0x38d0 [ 283.695414][ T5849] usb_generic_driver_probe+0x109/0x2a0 [ 283.701170][ T5849] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 283.707182][ T5849] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 283.713456][ T5849] usb_probe_device+0x3a7/0x690 [ 283.718537][ T5849] ? __pfx_usb_probe_device+0x10/0x10 [ 283.724134][ T5849] really_probe+0x4db/0xd90 [ 283.728864][ T5849] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 283.734894][ T5849] __driver_probe_device+0x2ab/0x5d0 [ 283.740408][ T5849] driver_probe_device+0x72/0x890 [ 283.745652][ T5849] ? kmsan_get_metadata+0x13e/0x1c0 [ 283.751057][ T5849] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 283.757083][ T5849] __device_attach_driver+0x568/0x9e0 [ 283.762708][ T5849] bus_for_each_drv+0x403/0x620 [ 283.767750][ T5849] ? __pfx___device_attach_driver+0x10/0x10 [ 283.773898][ T5849] __device_attach+0x3c1/0x650 [ 283.778892][ T5849] device_initial_probe+0x32/0x40 [ 283.784130][ T5849] bus_probe_device+0x3dc/0x5c0 [ 283.789173][ T5849] device_add+0x13aa/0x1ba0 [ 283.793897][ T5849] usb_new_device+0x15f4/0x2470 [ 283.798973][ T5849] hub_event+0x4ffb/0x72d0 [ 283.803662][ T5849] ? __pfx_hub_event+0x10/0x10 [ 283.808635][ T5849] process_scheduled_works+0xae0/0x1c40 [ 283.814468][ T5849] worker_thread+0xea7/0x14f0 [ 283.819393][ T5849] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 283.825432][ T5849] kthread+0x3e2/0x540 [ 283.829696][ T5849] ? __pfx_worker_thread+0x10/0x10 [ 283.835070][ T5849] ? __pfx_kthread+0x10/0x10 [ 283.839860][ T5849] ret_from_fork+0x6d/0x90 [ 283.844477][ T5849] ? __pfx_kthread+0x10/0x10 [ 283.849270][ T5849] ret_from_fork_asm+0x1a/0x30 [ 283.854299][ T5849] [ 283.857746][ T5849] Kernel Offset: disabled [ 283.862149][ T5849] Rebooting in 86400 seconds..