last executing test programs: 6.748517492s ago: executing program 4 (id=118): r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000040)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000002c0)={0x0, @bt={0x4, 0x7, 0x1, 0x5, 0xb7f, 0x10001, 0x13879f1a, 0x9, 0x8, 0xffffffff, 0x80000001, 0x101, 0x7, 0x4, 0x1, 0x4, {0x5, 0x10}, 0x0, 0x5}}) syz_open_dev$dri(0x0, 0xd21, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sndctrl(0x0, 0x20000, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000100)) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open(0x0, 0x0, 0x0) shutdown(r2, 0x2) 6.074346213s ago: executing program 2 (id=120): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06f40908"], 0xa) 5.606179279s ago: executing program 2 (id=122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x7, 0xe9, 0x8, 0x0, 0x401, 0xf, 0x9, 0xc, 0x9, 0x8, 0xc, 0x3, 0x0, 0xb28a, 0x200, 0xf9, 0xf, 0x40, 0x67, '\x00', 0xb, 0x7}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000000000070000040"]) 5.428927004s ago: executing program 4 (id=124): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x42) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') close_range(r0, 0xffffffffffffffff, 0x0) 4.984803173s ago: executing program 1 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 4.984501634s ago: executing program 4 (id=126): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) r3 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 4.584641749s ago: executing program 1 (id=128): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) 4.473384796s ago: executing program 2 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000580)='./file0\x00', 0x2) 4.473230016s ago: executing program 0 (id=130): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) 4.197157143s ago: executing program 2 (id=132): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x76, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r0, &(0x7f0000007940), 0x55, 0x30, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) 3.880928026s ago: executing program 0 (id=133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x4d09a000) 3.367832175s ago: executing program 0 (id=134): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10180}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x4012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.200740894s ago: executing program 1 (id=135): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) r1 = io_uring_setup(0x553c, &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x15, 0x0, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000340)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x10) getsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) r3 = memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4010, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) write$binfmt_misc(r7, &(0x7f0000000300), 0x7fec) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fchmod(r3, 0x184) mkdir(&(0x7f0000000280)='./file0\x00', 0xa) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000000)=0x200, 0x4) sendmsg$inet(r8, &(0x7f00000024c0)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000002380)=[{&(0x7f00000000c0)="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", 0xffe3}], 0x1}, 0x24040000) preadv(r3, &(0x7f0000001640)=[{&(0x7f00000016c0)=""/131, 0x75}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/19, 0x13}, {&(0x7f0000000440)=""/180, 0xffffffffffffffac}, {&(0x7f0000000500)=""/107, 0x7a}, {&(0x7f0000000580)=""/138, 0x8a}, {&(0x7f0000000640)=""/4096, 0x1011}], 0x8, 0x3, 0x7) 3.056787452s ago: executing program 3 (id=136): semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000003b40)=""/26) 2.84856596s ago: executing program 0 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @dev, @bcast, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x3}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x10, 0x3, 0x4, 0xc, 0x9, 0xfa, 0xfe, 0x3, 0x2, 0x1, 0x13, 0x2, 0x5}, {0x10001, 0x9, 0x3, 0x8, 0xae, 0x5, 0x12, 0x40, 0xfe, 0x40, 0x6, 0x17, 0x3c}, {0xa20004, 0x7, 0x4, 0x7, 0x2, 0x77, 0x1, 0x9, 0x2, 0x5, 0x8, 0x54, 0x18bb}], 0xd7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000b40)="f30f09ba6100b8c400ef66b9eb0a00000f3266b9830000c066b84700000066ba000000000f30f2a60fc75add650fdabc755ac09af67f0066b98004000066b8532ebe1866ba0bffd3710f3066b9830500000f32", 0x53}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.842849355s ago: executing program 4 (id=138): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000000), 0x0}) 2.445335695s ago: executing program 3 (id=139): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0], &(0x7f0000000140), 0x1, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000580), 0x0, 0x1f}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r6}) 2.43124648s ago: executing program 2 (id=140): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000638877fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 1.815800446s ago: executing program 1 (id=141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x1000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 1.810215267s ago: executing program 3 (id=142): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x5c, r4, 0x1, 0x70bd27, 0x25dfdbff, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x4}, 0x4c014) 1.445696167s ago: executing program 3 (id=143): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04041220"], 0x7) 1.353923648s ago: executing program 4 (id=144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x4d09a000) 1.352321902s ago: executing program 3 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setuid(0xee01) chmod(&(0x7f00000000c0)='./file0\x00', 0x0) 1.063577845s ago: executing program 0 (id=146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) 1.017302057s ago: executing program 3 (id=147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 862.688229ms ago: executing program 1 (id=148): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 716.686969ms ago: executing program 2 (id=149): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100"]) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000180)=""/199) 501.060618ms ago: executing program 0 (id=150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x6, 0x801}, 0x14}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) 437.014794ms ago: executing program 4 (id=151): chdir(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xfce1) ioctl$TCFLSH(r0, 0x540b, 0x2) 0s ago: executing program 1 (id=152): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0], &(0x7f0000000140), 0x1, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000580), 0x0, 0x1f}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts. [ 171.019712][ T5768] cgroup: Unknown subsys name 'net' [ 171.183345][ T5768] cgroup: Unknown subsys name 'cpuset' [ 171.197341][ T5768] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 215.827115][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 219.068025][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.074820][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.612372][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.620505][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.630653][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.644127][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.654308][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.663529][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.678330][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.688743][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.702451][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.711838][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.722008][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.731806][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.739922][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.748312][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.760945][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.771899][ T5795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.784397][ T5795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.793472][ T5080] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.793626][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.810097][ T5080] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.814658][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.832564][ T5080] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.836447][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.841518][ T5080] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.850895][ T5799] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.864712][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.886487][ T5080] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.896554][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.907383][ T5080] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.921973][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.949382][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 221.480967][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 221.565554][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 221.658451][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 221.835683][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 221.844784][ T5797] Bluetooth: hci0: command tx timeout [ 221.923185][ T5797] Bluetooth: hci3: command tx timeout [ 221.928845][ T5797] Bluetooth: hci1: command tx timeout [ 222.016307][ T5797] Bluetooth: hci2: command tx timeout [ 222.016791][ T5793] Bluetooth: hci4: command tx timeout [ 222.080605][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.088512][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.096367][ T5786] bridge_slave_0: entered allmulticast mode [ 222.105463][ T5786] bridge_slave_0: entered promiscuous mode [ 222.188055][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.195982][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.205671][ T5786] bridge_slave_1: entered allmulticast mode [ 222.214673][ T5786] bridge_slave_1: entered promiscuous mode [ 222.384093][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.423616][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.641056][ T5786] team0: Port device team_slave_0 added [ 222.722240][ T5786] team0: Port device team_slave_1 added [ 222.836129][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.844094][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.851739][ T5796] bridge_slave_0: entered allmulticast mode [ 222.860768][ T5796] bridge_slave_0: entered promiscuous mode [ 222.875818][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.885165][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.892813][ T5798] bridge_slave_0: entered allmulticast mode [ 222.901803][ T5798] bridge_slave_0: entered promiscuous mode [ 222.947466][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.954888][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.981907][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.997977][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.005290][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.031724][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.047860][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.055565][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.063199][ T5796] bridge_slave_1: entered allmulticast mode [ 223.072044][ T5796] bridge_slave_1: entered promiscuous mode [ 223.080257][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.088075][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.095961][ T5798] bridge_slave_1: entered allmulticast mode [ 223.104644][ T5798] bridge_slave_1: entered promiscuous mode [ 223.300020][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.308726][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.316457][ T5785] bridge_slave_0: entered allmulticast mode [ 223.324533][ T5785] bridge_slave_0: entered promiscuous mode [ 223.366114][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.374152][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.381892][ T5792] bridge_slave_0: entered allmulticast mode [ 223.391097][ T5792] bridge_slave_0: entered promiscuous mode [ 223.411536][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.421388][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.429245][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.437020][ T5792] bridge_slave_1: entered allmulticast mode [ 223.445934][ T5792] bridge_slave_1: entered promiscuous mode [ 223.454860][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.462578][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.470447][ T5785] bridge_slave_1: entered allmulticast mode [ 223.479421][ T5785] bridge_slave_1: entered promiscuous mode [ 223.624503][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.678270][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.779714][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.800748][ T5786] hsr_slave_0: entered promiscuous mode [ 223.809528][ T5786] hsr_slave_1: entered promiscuous mode [ 223.886308][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.948836][ T5793] Bluetooth: hci0: command tx timeout [ 224.011112][ T5793] Bluetooth: hci3: command tx timeout [ 224.013555][ T5797] Bluetooth: hci1: command tx timeout [ 224.033204][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.048691][ T5796] team0: Port device team_slave_0 added [ 224.065210][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.081340][ T5798] team0: Port device team_slave_0 added [ 224.083717][ T5797] Bluetooth: hci4: command tx timeout [ 224.089219][ T5793] Bluetooth: hci2: command tx timeout [ 224.148896][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.165083][ T5796] team0: Port device team_slave_1 added [ 224.235450][ T5798] team0: Port device team_slave_1 added [ 224.379327][ T5785] team0: Port device team_slave_0 added [ 224.433508][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.440677][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.467093][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.513800][ T5792] team0: Port device team_slave_0 added [ 224.526845][ T5785] team0: Port device team_slave_1 added [ 224.548142][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.556567][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.583510][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.597041][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.604440][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.630780][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.662017][ T5792] team0: Port device team_slave_1 added [ 224.708394][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.715686][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.742129][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.879911][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.887173][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.913545][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.060493][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.067899][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.094468][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.147058][ T5796] hsr_slave_0: entered promiscuous mode [ 225.157442][ T5796] hsr_slave_1: entered promiscuous mode [ 225.166470][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.174399][ T5796] Cannot create hsr debugfs directory [ 225.182416][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.189719][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.216016][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.301073][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.308461][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.334819][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.455623][ T5798] hsr_slave_0: entered promiscuous mode [ 225.464702][ T5798] hsr_slave_1: entered promiscuous mode [ 225.472621][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.480445][ T5798] Cannot create hsr debugfs directory [ 225.680447][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 225.767254][ T5785] hsr_slave_0: entered promiscuous mode [ 225.778232][ T5785] hsr_slave_1: entered promiscuous mode [ 225.786577][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.794489][ T5785] Cannot create hsr debugfs directory [ 225.800618][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 225.833066][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 225.954874][ T5792] hsr_slave_0: entered promiscuous mode [ 225.966972][ T5792] hsr_slave_1: entered promiscuous mode [ 225.976722][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.985333][ T5792] Cannot create hsr debugfs directory [ 225.992440][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.003435][ T5793] Bluetooth: hci0: command tx timeout [ 226.083703][ T5793] Bluetooth: hci3: command tx timeout [ 226.089358][ T5793] Bluetooth: hci1: command tx timeout [ 226.183297][ T5797] Bluetooth: hci4: command tx timeout [ 226.188975][ T5797] Bluetooth: hci2: command tx timeout [ 226.947449][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 227.030603][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 227.052779][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 227.187313][ T5796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.227519][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 227.313288][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.339170][ T5796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.383357][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.417876][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 227.446601][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 227.469256][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 227.489107][ T5796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 227.509935][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.540299][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 227.560642][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 227.608727][ T5796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 227.992572][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.093954][ T5797] Bluetooth: hci0: command tx timeout [ 228.165234][ T5797] Bluetooth: hci1: command tx timeout [ 228.170890][ T5797] Bluetooth: hci3: command tx timeout [ 228.243918][ T5793] Bluetooth: hci2: command tx timeout [ 228.249575][ T5793] Bluetooth: hci4: command tx timeout [ 228.335294][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.463159][ T3874] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.470854][ T3874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.538085][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.592255][ T3874] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.600041][ T3874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.775323][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.904168][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.911820][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.939217][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.988442][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.005246][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.013019][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.057035][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.113654][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.195114][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.223236][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.295649][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.303359][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.387445][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.436537][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.444241][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.466118][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.473838][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.497192][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.504909][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.597638][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.605393][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.722311][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.730056][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.959119][ T5792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.971067][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.011748][ T5785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.022705][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.909422][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.460557][ T5786] veth0_vlan: entered promiscuous mode [ 231.576940][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.606429][ T5786] veth1_vlan: entered promiscuous mode [ 231.812615][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.023930][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.037018][ T5786] veth0_macvtap: entered promiscuous mode [ 232.091012][ T5786] veth1_macvtap: entered promiscuous mode [ 232.155678][ T5798] veth0_vlan: entered promiscuous mode [ 232.186275][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.292857][ T5798] veth1_vlan: entered promiscuous mode [ 232.345078][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.464950][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.547473][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.556702][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.570025][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.579248][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.655969][ T5785] veth0_vlan: entered promiscuous mode [ 232.685381][ T5792] veth0_vlan: entered promiscuous mode [ 232.767369][ T5798] veth0_macvtap: entered promiscuous mode [ 232.794017][ T5792] veth1_vlan: entered promiscuous mode [ 232.820983][ T5798] veth1_macvtap: entered promiscuous mode [ 232.846827][ T5785] veth1_vlan: entered promiscuous mode [ 232.999785][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.010865][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.025477][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.193238][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.204991][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.219008][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.241577][ T5785] veth0_macvtap: entered promiscuous mode [ 233.270792][ T5792] veth0_macvtap: entered promiscuous mode [ 233.308360][ T5785] veth1_macvtap: entered promiscuous mode [ 233.333069][ T5792] veth1_macvtap: entered promiscuous mode [ 233.378646][ T5798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.389290][ T5798] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.400465][ T5798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.409695][ T5798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.492737][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.504340][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.514504][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.525309][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.539508][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.641478][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.654939][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.665153][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.675982][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.686294][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.697106][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.711319][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.736954][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.747760][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.757920][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.769323][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.783740][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.910495][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.922844][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.933312][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.944152][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.954468][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.965242][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.979448][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.993795][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.002859][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.013125][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.022139][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.330784][ T5792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.344533][ T5792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.353704][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.362738][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.016664][ T5796] veth0_vlan: entered promiscuous mode [ 235.139408][ T5796] veth1_vlan: entered promiscuous mode [ 235.481633][ T5796] veth0_macvtap: entered promiscuous mode [ 235.574069][ T5796] veth1_macvtap: entered promiscuous mode [ 235.777183][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.788070][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.798309][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.809111][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.819243][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.830144][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.840301][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.851179][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.865685][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.067114][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.078005][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.089725][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.101395][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.111543][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.122312][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.132500][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.143307][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.157851][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.201127][ T5796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.212627][ T5796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.222450][ T5796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.231680][ T5796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.491322][ T3874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.499587][ T3874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.816855][ T3874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.826022][ T3874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.917523][ T3874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.925789][ T3874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.117585][ T5786] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 240.193390][ T3732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.201465][ T3732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.639944][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 240.735532][ T5962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 240.949032][ T5966] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 241.022814][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.032875][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.257119][ T3634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.265257][ T3634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.385089][ T3732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.393302][ T3732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.572785][ T3732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.581144][ T3732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.780310][ T5975] FAULT_INJECTION: forcing a failure. [ 241.780310][ T5975] name failslab, interval 1, probability 0, space 0, times 1 [ 241.793839][ T5975] CPU: 0 UID: 0 PID: 5975 Comm: syz.0.7 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 241.804557][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 241.814842][ T5975] Call Trace: [ 241.818309][ T5975] [ 241.821408][ T5975] dump_stack_lvl+0x216/0x2d0 [ 241.826411][ T5975] dump_stack+0x1e/0x24 [ 241.830833][ T5975] should_fail_ex+0x748/0x7f0 [ 241.835798][ T5975] should_failslab+0x17f/0x210 [ 241.840826][ T5975] kmem_cache_alloc_noprof+0xee/0xe10 [ 241.846485][ T5975] ? kmsan_get_metadata+0x13e/0x1c0 [ 241.851938][ T5975] ? __anon_vma_prepare+0xec/0xb30 [ 241.857341][ T5975] ? kmsan_get_metadata+0x13e/0x1c0 [ 241.862801][ T5975] __anon_vma_prepare+0xec/0xb30 [ 241.868013][ T5975] ? _raw_spin_unlock+0x30/0x50 [ 241.873142][ T5975] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 241.879213][ T5975] handle_mm_fault+0xcab6/0xdcc0 [ 241.884432][ T5975] ? mt_find+0x1663/0x1910 [ 241.889159][ T5975] exc_page_fault+0x29f/0x700 [ 241.894124][ T5975] asm_exc_page_fault+0x2b/0x30 [ 241.899265][ T5975] RIP: 0010:rep_movs_alternative+0x15/0x70 [ 241.905370][ T5975] Code: cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 [ 241.925249][ T5975] RSP: 0018:ffff888023b9bcd8 EFLAGS: 00050202 [ 241.931592][ T5975] RAX: 00000000000000ef RBX: ffff88804ab4ccb8 RCX: 0000000000000002 [ 241.939809][ T5975] RDX: 000000001037d068 RSI: ffffffff9037d068 RDI: 00000000200001c0 [ 241.948013][ T5975] RBP: ffff888023b9bd10 R08: ffffea000000000f R09: ffffffff85bac60a [ 241.956219][ T5975] R10: 0000000000000021 R11: ffff88804ab4c180 R12: 00000000200001c0 [ 241.964410][ T5975] R13: 00000000200001c2 R14: 0000000000000002 R15: ffffffff9037d068 [ 241.972609][ T5975] ? __se_sys_keyctl+0x6a/0x1510 [ 241.977853][ T5975] ? _copy_to_user+0xd9/0x120 [ 241.982806][ T5975] __se_sys_keyctl+0x596/0x1510 [ 241.987952][ T5975] ? stack_depot_save_flags+0x2c/0x750 [ 241.993690][ T5975] ? kmsan_get_metadata+0x13e/0x1c0 [ 241.999140][ T5975] ? kmsan_get_metadata+0x13e/0x1c0 [ 242.004590][ T5975] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 242.011224][ T5975] ? kmsan_get_metadata+0x13e/0x1c0 [ 242.016686][ T5975] ? kmsan_get_metadata+0x13e/0x1c0 [ 242.022150][ T5975] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 242.028225][ T5975] __x64_sys_keyctl+0xe4/0x150 [ 242.033285][ T5975] x64_sys_call+0x1997/0x3c30 [ 242.038263][ T5975] do_syscall_64+0xcd/0x1e0 [ 242.043011][ T5975] ? clear_bhb_loop+0x25/0x80 [ 242.047989][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.054166][ T5975] RIP: 0033:0x7f548f385d19 [ 242.058807][ T5975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.078682][ T5975] RSP: 002b:00007f549028c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 242.087375][ T5975] RAX: ffffffffffffffda RBX: 00007f548f575fa0 RCX: 00007f548f385d19 [ 242.095573][ T5975] RDX: fffffffffffffee2 RSI: 00000000200001c0 RDI: 000000000000001f [ 242.103773][ T5975] RBP: 00007f549028c090 R08: 0000000000000000 R09: 0000000000000000 [ 242.111973][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.120166][ T5975] R13: 0000000000000000 R14: 00007f548f575fa0 R15: 00007ffe3f593318 [ 242.128390][ T5975] [ 242.308152][ T3732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.316529][ T3732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.353203][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.361281][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.694647][ T5980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 242.907751][ T5414] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 243.102287][ T5414] usb 2-1: Using ep0 maxpacket: 8 [ 243.173605][ T5414] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 243.183346][ T5414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.191618][ T5414] usb 2-1: Product: syz [ 243.196202][ T5414] usb 2-1: Manufacturer: syz [ 243.201037][ T5414] usb 2-1: SerialNumber: syz [ 243.305844][ T5989] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 243.325898][ T5414] usb 2-1: config 0 descriptor?? [ 243.630211][ T5414] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 243.813774][ T5984] loop0: detected capacity change from 0 to 4096 [ 243.848264][ T5984] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 243.905367][ T5995] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 243.931974][ T5984] ntfs3(loop0): Failed to load $Bitmap (-22). [ 244.156161][ T5999] netlink: 'syz.3.12': attribute type 1 has an invalid length. [ 244.164310][ T5999] netlink: 244 bytes leftover after parsing attributes in process `syz.3.12'. [ 244.252075][ T5995] loop2: detected capacity change from 0 to 1764 [ 244.345714][ T5995] iso9660: Bad value for 'gid' [ 244.350841][ T5995] iso9660: Bad value for 'gid' [ 244.545956][ T5995] loop2: detected capacity change from 0 to 128 [ 244.587282][ T5995] ======================================================= [ 244.587282][ T5995] WARNING: The mand mount option has been deprecated and [ 244.587282][ T5995] and is ignored by this kernel. Remove the mand [ 244.587282][ T5995] option from the mount to silence this warning. [ 244.587282][ T5995] ======================================================= [ 244.623593][ T5995] vfat: Unknown parameter '01777777777777777777777' [ 244.714090][ T5867] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 244.750147][ T5978] loop1: detected capacity change from 0 to 1024 [ 244.887969][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 244.933812][ T5867] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 244.943750][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.989361][ T5867] usb 4-1: config 0 descriptor?? [ 245.046622][ T5867] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 245.106447][ T6002] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 245.106447][ T6002] z,@qJ#"h/.W1ȱnNC"C׈E)8+1<+`#k' [ 245.544134][ T5414] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 246.140459][ T6009] loop2: detected capacity change from 0 to 1024 [ 246.380180][ T6009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.789364][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.851518][ T5414] usb 4-1: USB disconnect, device number 2 [ 246.894387][ T44] usb 2-1: USB disconnect, device number 2 [ 247.142145][ T6015] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 247.171873][ T6003] syz.1.2 (6003) used greatest stack depth: 5152 bytes left [ 247.299020][ T3686] hfsplus: b-tree write err: -5, ino 4 [ 247.842073][ T6024] loop3: detected capacity change from 0 to 2048 [ 248.288611][ T6024] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.333470][ T5414] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 248.506035][ T6035] FAULT_INJECTION: forcing a failure. [ 248.506035][ T6035] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 248.519746][ T6035] CPU: 1 UID: 0 PID: 6035 Comm: syz.0.24 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 248.525208][ T5414] usb 5-1: Using ep0 maxpacket: 16 [ 248.530453][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 248.530535][ T6035] Call Trace: [ 248.530585][ T6035] [ 248.552508][ T6035] dump_stack_lvl+0x216/0x2d0 [ 248.557517][ T6035] dump_stack+0x1e/0x24 [ 248.561965][ T6035] should_fail_ex+0x748/0x7f0 [ 248.566962][ T6035] should_fail+0x2a/0x40 [ 248.571497][ T6035] should_fail_usercopy+0x2e/0x40 [ 248.576842][ T6035] _copy_from_user+0x35/0x110 [ 248.581836][ T6035] memdup_user+0xc1/0x1b0 [ 248.586444][ T6035] snd_pcm_hw_refine_user+0x41/0x2d0 [ 248.592099][ T6035] snd_pcm_common_ioctl+0x756/0xb70 [ 248.597604][ T6035] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 248.603356][ T5414] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 248.603617][ T6035] snd_pcm_ioctl+0xae/0x110 [ 248.611826][ T5414] usb 5-1: config 0 has no interface number 0 [ 248.616180][ T6035] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 248.616317][ T6035] __se_sys_ioctl+0x246/0x440 [ 248.632832][ T6035] __x64_sys_ioctl+0x96/0xe0 [ 248.637732][ T6035] x64_sys_call+0x19f0/0x3c30 [ 248.642726][ T6035] do_syscall_64+0xcd/0x1e0 [ 248.647503][ T6035] ? clear_bhb_loop+0x25/0x80 [ 248.652503][ T6035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.658723][ T6035] RIP: 0033:0x7f548f385d19 [ 248.663388][ T6035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.683299][ T6035] RSP: 002b:00007f549028c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.692042][ T6035] RAX: ffffffffffffffda RBX: 00007f548f575fa0 RCX: 00007f548f385d19 [ 248.695492][ T5414] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 248.700177][ T6035] RDX: 0000000020000000 RSI: 00000000c2604110 RDI: 0000000000000003 [ 248.700277][ T6035] RBP: 00007f549028c090 R08: 0000000000000000 R09: 0000000000000000 [ 248.700371][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.709539][ T5414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.717424][ T6035] R13: 0000000000000000 R14: 00007f548f575fa0 R15: 00007ffe3f593318 [ 248.717545][ T6035] [ 248.754099][ T5414] usb 5-1: Product: syz [ 248.758502][ T5414] usb 5-1: Manufacturer: syz [ 248.763443][ T5414] usb 5-1: SerialNumber: syz [ 248.870546][ T5414] usb 5-1: config 0 descriptor?? [ 248.902011][ T5414] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 249.557875][ T5414] gspca_spca1528: reg_w err -110 [ 249.566448][ T6037] fuse: Unknown parameter 'default_permissionstilization' [ 249.603733][ T5414] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 249.762874][ T6037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25'. [ 249.876627][ T6041] fuse: Bad value for 'fd' [ 249.936744][ T6040] loop1: detected capacity change from 0 to 32768 [ 249.946260][ T6040] (syz.1.27,6040,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "loc0000000000000003" or missing value [ 249.959031][ T6040] (syz.1.27,6040,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 250.025053][ T6044] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_1, syncid = 3, id = 0 [ 250.081584][ T5786] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1367 (mode 100000) has inode size 134220898 different from extent length 134221312. Filesystem need not be standards compliant. [ 250.864507][ T6043] loop0: detected capacity change from 0 to 4096 [ 250.932232][ T44] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 250.944056][ T6043] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 251.002252][ T6043] ntfs3(loop0): failed to replay log file. Can't mount rw! [ 251.063418][ T5840] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 251.113206][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 251.151721][ T44] usb 3-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d [ 251.161565][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.170034][ T44] usb 3-1: Product: syz [ 251.174503][ T44] usb 3-1: Manufacturer: syz [ 251.179342][ T44] usb 3-1: SerialNumber: syz [ 251.273363][ T5840] usb 4-1: Using ep0 maxpacket: 8 [ 251.304145][ T5840] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 251.313865][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.322318][ T5840] usb 4-1: Product: syz [ 251.327077][ T5840] usb 4-1: Manufacturer: syz [ 251.332101][ T5840] usb 4-1: SerialNumber: syz [ 251.410419][ T5840] usb 4-1: config 0 descriptor?? [ 251.513236][ T5840] gspca_main: sq930x-2.14.0 probing 2770:930c [ 251.774160][ T6050] loop2: detected capacity change from 0 to 2048 [ 251.925798][ T6050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.220345][ T6050] EXT4-fs error (device loop2): __ext4_new_inode:1071: comm syz.2.29: reserved inode found cleared - inode=1 [ 252.374160][ T5867] usb 5-1: USB disconnect, device number 2 [ 252.431715][ T6067] loop4: detected capacity change from 0 to 512 [ 252.441631][ T29] audit: type=1800 audit(1734309682.538:2): pid=6063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.29" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 252.456017][ T6067] EXT4-fs: Ignoring removed orlov option [ 252.471418][ T6067] EXT4-fs: Ignoring removed nobh option [ 252.523461][ T5840] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 252.753488][ T5840] gspca_sq930x: Sensor ov9630 not yet treated [ 252.760343][ T5840] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 252.824505][ T6067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.884130][ T44] aqc111 3-1:1.0: probe with driver aqc111 failed with error -22 [ 252.985893][ T6067] EXT4-fs (loop4): orphan cleanup on readonly fs [ 253.073961][ T44] usb 3-1: USB disconnect, device number 2 [ 253.187039][ T6067] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.33: bg 0: block 248: padding at end of block bitmap is not set [ 253.249326][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.313892][ T6067] Quota error (device loop4): write_blk: dquota write failed [ 253.321854][ T6067] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 253.333814][ T6067] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.33: Failed to acquire dquot type 1 [ 253.440984][ T6067] EXT4-fs (loop4): 1 truncate cleaned up [ 253.454387][ T6067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.653991][ T6067] EXT4-fs: Ignoring removed orlov option [ 253.654135][ T6067] EXT4-fs: Ignoring removed nobh option [ 253.654466][ T6067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.656258][ T6067] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 253.681464][ T6067] EXT4-fs error (device loop4): __ext4_remount:6749: comm syz.4.33: Abort forced by user [ 253.685727][ T6067] EXT4-fs (loop4): Remounting filesystem read-only [ 253.685821][ T6067] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 253.686078][ T6067] ext4 filesystem being remounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.718207][ T6077] loop1: detected capacity change from 0 to 128 [ 253.736571][ T6081] loop0: detected capacity change from 0 to 16 [ 253.766191][ T6081] erofs (device loop0): mounted with root inode @ nid 36. [ 253.821125][ T29] audit: type=1800 audit(1734309683.928:3): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.35" name="bus" dev="loop1" ino=1048600 res=0 errno=0 [ 253.826893][ T6081] erofs (device loop0): read error -117 @ 4 of nid 36 [ 253.845227][ T6081] erofs (device loop0): read error -117 @ 4 of nid 36 [ 253.850783][ T6081] erofs (device loop0): read error -117 @ 4 of nid 36 [ 253.993701][ T6081] erofs (device loop0): read error -117 @ 4 of nid 36 [ 254.254037][ T44] usb 4-1: USB disconnect, device number 3 [ 254.319640][ T6067] syz.4.33 (6067) used greatest stack depth: 3888 bytes left [ 254.527557][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.535064][ T6090] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 255.071697][ T6095] loop4: detected capacity change from 0 to 64 [ 255.179832][ T6095] hfs: unable to locate alternate MDB [ 255.185661][ T6095] hfs: continuing without an alternate MDB [ 255.343406][ T6096] loop0: detected capacity change from 0 to 2048 [ 255.469082][ T6100] loop2: detected capacity change from 0 to 128 [ 255.669642][ T6103] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.748764][ T6102] loop1: detected capacity change from 0 to 2048 [ 255.852177][ T6102] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 255.860994][ T6102] UDF-fs: Scanning with blocksize 512 failed [ 255.990539][ T6102] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.138738][ T6096] Zero length message leads to an empty skb [ 256.204852][ T6106] loop4: detected capacity change from 0 to 1024 [ 256.424676][ T6111] hfsplus: bad catalog entry type [ 256.468903][ T5785] sysv_free_block: flc_count > flc_size [ 256.474985][ T5785] sysv_free_block: flc_count > flc_size [ 256.480770][ T5785] sysv_free_block: flc_count > flc_size [ 256.486775][ T5785] sysv_free_block: flc_count > flc_size [ 256.492502][ T5785] sysv_free_block: flc_count > flc_size [ 256.498496][ T5785] sysv_free_block: flc_count > flc_size [ 256.504574][ T5785] sysv_free_block: flc_count > flc_size [ 256.510321][ T5785] sysv_free_block: flc_count > flc_size [ 256.516245][ T5785] sysv_free_block: flc_count > flc_size [ 256.521965][ T5785] sysv_free_block: flc_count > flc_size [ 256.528828][ T5785] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 256.984505][ T6114] loop1: detected capacity change from 0 to 512 [ 257.112060][ T6114] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.46: bg 0: block 393: padding at end of block bitmap is not set [ 257.199634][ T6114] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 257.210401][ T34] hfsplus: b-tree write err: -5, ino 4 [ 257.285716][ T6114] EXT4-fs (loop1): 2 truncates cleaned up [ 257.293484][ T6114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.345761][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 257.577988][ T6119] loop0: detected capacity change from 0 to 2048 [ 257.674003][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.750528][ T6125] IPv6: Can't replace route, no match found [ 257.808872][ T6126] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.029900][ T6131] loop2: detected capacity change from 0 to 4096 [ 258.210909][ T6135] fuse: Bad value for 'fd' [ 258.237321][ T6125] loop4: detected capacity change from 0 to 8 [ 258.336924][ T6133] loop3: detected capacity change from 0 to 512 [ 258.371617][ T6137] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.532652][ T6119] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 258.591348][ T6133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.610289][ T6133] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.671352][ T6125] SQUASHFS error: Unable to read directory block [2c0:35] [ 258.687947][ T6119] Remounting filesystem read-only [ 258.699728][ T6125] SQUASHFS error: Failed to read block 0x2fc: -5 [ 258.711210][ T6125] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 258.721030][ T6125] SQUASHFS error: Unable to read directory block [247:26] [ 258.745168][ T6140] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 258.889726][ T6119] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 258.905702][ T29] audit: type=1800 audit(1734309688.978:4): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.54" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 258.930199][ T29] audit: type=1800 audit(1734309688.998:5): pid=6143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.54" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 259.038243][ T6145] process 'syz.1.56' launched './file0' with NULL argv: empty string added [ 259.698726][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.083268][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 260.248479][ T44] usb 1-1: device descriptor read/64, error -71 [ 260.540981][ T6162] loop4: detected capacity change from 0 to 2048 [ 260.868080][ T6162] NILFS (loop4): corrupt root inode [ 260.997546][ T6164] sctp: failed to load transform for md5: -2 [ 261.125051][ T6167] sctp: failed to load transform for md5: -2 [ 261.261824][ T6168] loop3: detected capacity change from 0 to 40427 [ 261.297896][ T6168] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1fffff [ 261.311120][ T6168] F2FS-fs (loop3): invalid crc value [ 261.328957][ T6168] F2FS-fs (loop3): Found nat_bits in checkpoint [ 261.663401][ T44] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 261.684232][ T6168] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 261.889400][ T6168] F2FS-fs (loop3): access invalid blkaddr:2816 [ 261.897364][ T6168] CPU: 1 UID: 0 PID: 6168 Comm: syz.3.59 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 261.908185][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 261.918486][ T6168] Call Trace: [ 261.921969][ T6168] [ 261.925097][ T6168] dump_stack_lvl+0x216/0x2d0 [ 261.930106][ T6168] dump_stack+0x1e/0x24 [ 261.934563][ T6168] __f2fs_is_valid_blkaddr+0x1344/0x1460 [ 261.940529][ T6168] f2fs_is_valid_blkaddr+0x19e/0x2a0 [ 261.940666][ T6184] loop1: detected capacity change from 0 to 128 [ 261.952483][ T6168] ? f2fs_map_blocks+0x1056/0x6ff0 [ 261.957881][ T6168] f2fs_map_blocks+0x1056/0x6ff0 [ 261.963189][ T6168] f2fs_mpage_readpages+0x1480/0x3280 [ 261.968902][ T6168] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 261.974986][ T6168] ? read_pages+0x7f/0x1110 [ 261.979757][ T6168] ? filter_irq_stacks+0x60/0x1a0 [ 261.985067][ T6168] ? kmsan_get_metadata+0x13e/0x1c0 [ 261.990554][ T6168] f2fs_readahead+0x14e/0x3c0 [ 261.995523][ T6168] ? __pfx_f2fs_readahead+0x10/0x10 [ 262.001035][ T6168] read_pages+0x193/0x1110 [ 262.005733][ T6168] ? kmsan_get_metadata+0x13e/0x1c0 [ 262.011195][ T6168] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 262.017274][ T6168] page_cache_ra_unbounded+0xc3c/0xd70 [ 262.023049][ T6168] page_cache_ra_order+0x118c/0x1250 [ 262.028627][ T6168] ? kmsan_get_metadata+0x13e/0x1c0 [ 262.034116][ T6168] page_cache_sync_ra+0xed1/0x11a0 [ 262.039514][ T6168] f2fs_readdir+0x71a/0x1940 [ 262.044444][ T6168] ? __pfx_f2fs_readdir+0x10/0x10 [ 262.049768][ T6168] iterate_dir+0x5b3/0x9e0 [ 262.054474][ T6168] ? kmsan_get_metadata+0x13e/0x1c0 [ 262.059939][ T6168] __se_sys_getdents64+0x170/0x540 [ 262.065386][ T6168] ? __pfx_filldir64+0x10/0x10 [ 262.070443][ T6168] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 262.076522][ T6168] __x64_sys_getdents64+0x96/0xe0 [ 262.081860][ T6168] x64_sys_call+0x3b0f/0x3c30 [ 262.086855][ T6168] do_syscall_64+0xcd/0x1e0 [ 262.091622][ T6168] ? clear_bhb_loop+0x25/0x80 [ 262.096610][ T6168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.102817][ T6168] RIP: 0033:0x7f789e185d19 [ 262.107462][ T6168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.127341][ T6168] RSP: 002b:00007f789efa1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 262.136081][ T6168] RAX: ffffffffffffffda RBX: 00007f789e375fa0 RCX: 00007f789e185d19 [ 262.144288][ T6168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 262.152477][ T6168] RBP: 00007f789e201a20 R08: 0000000000000000 R09: 0000000000000000 [ 262.160670][ T6168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.168872][ T6168] R13: 0000000000000000 R14: 00007f789e375fa0 R15: 00007ffd18eb5e58 [ 262.177091][ T6168] [ 262.251373][ T6168] F2FS-fs (loop3): access invalid blkaddr:2816 [ 262.257946][ T6168] CPU: 1 UID: 0 PID: 6168 Comm: syz.3.59 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 262.268766][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 262.279080][ T6168] Call Trace: [ 262.281321][ T29] audit: type=1800 audit(1734309691.968:6): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.59" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 262.282462][ T6168] [ 262.282518][ T6168] dump_stack_lvl+0x216/0x2d0 [ 262.310610][ T6168] dump_stack+0x1e/0x24 [ 262.315089][ T6168] __f2fs_is_valid_blkaddr+0x1344/0x1460 [ 262.315902][ T6185] syz.3.59: attempt to access beyond end of device [ 262.315902][ T6185] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 262.320968][ T6168] f2fs_is_valid_blkaddr+0x19e/0x2a0 [ 262.340232][ T6168] ? f2fs_map_blocks+0x1056/0x6ff0 [ 262.345653][ T6168] f2fs_map_blocks+0x1056/0x6ff0 [ 262.350972][ T6168] f2fs_mpage_readpages+0x1480/0x3280 [ 262.356706][ T6168] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 262.362818][ T6168] ? read_pages+0x7f/0x1110 [ 262.367612][ T6168] f2fs_readahead+0x14e/0x3c0 [ 262.372581][ T6168] ? __pfx_f2fs_readahead+0x10/0x10 [ 262.378060][ T6168] read_pages+0x193/0x1110 [ 262.382759][ T6168] ? kmsan_get_metadata+0x13e/0x1c0 [ 262.388216][ T6168] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 262.394302][ T6168] page_cache_ra_unbounded+0xc3c/0xd70 [ 262.400080][ T6168] page_cache_ra_order+0x118c/0x1250 [ 262.405655][ T6168] ? kmsan_get_metadata+0x13e/0x1c0 [ 262.411145][ T6168] page_cache_sync_ra+0xed1/0x11a0 [ 262.416546][ T6168] f2fs_readdir+0x71a/0x1940 [ 262.421489][ T6168] ? __pfx_f2fs_readdir+0x10/0x10 [ 262.426854][ T6168] iterate_dir+0x5b3/0x9e0 [ 262.431584][ T6168] ? kmsan_get_metadata+0x13e/0x1c0 [ 262.437076][ T6168] __se_sys_getdents64+0x170/0x540 [ 262.442497][ T6168] ? __pfx_filldir64+0x10/0x10 [ 262.447560][ T6168] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 262.453645][ T6168] __x64_sys_getdents64+0x96/0xe0 [ 262.458974][ T6168] x64_sys_call+0x3b0f/0x3c30 [ 262.463953][ T6168] do_syscall_64+0xcd/0x1e0 [ 262.468703][ T6168] ? clear_bhb_loop+0x25/0x80 [ 262.473676][ T6168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.479866][ T6168] RIP: 0033:0x7f789e185d19 [ 262.484503][ T6168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.504392][ T6168] RSP: 002b:00007f789efa1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 262.513097][ T6168] RAX: ffffffffffffffda RBX: 00007f789e375fa0 RCX: 00007f789e185d19 [ 262.521300][ T6168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 262.529485][ T6168] RBP: 00007f789e201a20 R08: 0000000000000000 R09: 0000000000000000 [ 262.537674][ T6168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.545867][ T6168] R13: 0000000000000000 R14: 00007f789e375fa0 R15: 00007ffd18eb5e58 [ 262.554100][ T6168] [ 262.566154][ T6168] syz.3.59: attempt to access beyond end of device [ 262.566154][ T6168] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 262.603598][ T44] usb 1-1: device descriptor read/64, error -71 [ 262.757432][ T44] usb usb1-port1: attempt power cycle [ 263.225599][ T6193] sctp: [Deprecated]: syz.2.64 (pid 6193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.225599][ T6193] Use struct sctp_sack_info instead [ 263.366085][ T5786] syz-executor: attempt to access beyond end of device [ 263.366085][ T5786] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 263.381124][ T5786] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 263.527421][ T6197] loop2: detected capacity change from 0 to 1024 [ 263.629034][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 264.470148][ T6208] loop4: detected capacity change from 0 to 4096 [ 264.532200][ T6208] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 264.815214][ T6208] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 264.829547][ T6208] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 264.864299][ T6208] netlink: 60 bytes leftover after parsing attributes in process `syz.4.70'. [ 264.876174][ T6208] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 265.063305][ T6214] ntfs3(loop4): ino=5, "/" directory corrupted [ 265.276616][ T6217] loop7: detected capacity change from 0 to 16384 [ 265.757266][ T4026] hfsplus: b-tree write err: -5, ino 4 [ 265.954684][ T5867] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 266.918604][ T6225] loop2: detected capacity change from 0 to 32768 [ 266.929595][ T6225] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.74 (6225) [ 266.944332][ T5867] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 266.953977][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.967927][ T5867] usb 5-1: config 0 descriptor?? [ 267.028217][ T6225] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 267.039178][ T6225] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 267.054336][ T6225] BTRFS error (device loop2): superblock checksum mismatch [ 267.065827][ T6225] BTRFS error (device loop2): open_ctree failed [ 267.169966][ T6229] loop1: detected capacity change from 0 to 2048 [ 267.366454][ T6229] NILFS (loop1): corrupt root inode [ 267.530745][ T5867] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 267.539813][ T5867] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 267.550425][ T5867] [drm:udl_init] *ERROR* Selecting channel failed [ 267.578827][ T5867] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 267.585967][ T5867] [drm] Initialized udl on minor 2 [ 267.673646][ T5867] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 267.682862][ T5867] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 267.763278][ T5414] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 267.793512][ T5414] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 267.802149][ T5414] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 267.823411][ T5867] usb 5-1: USB disconnect, device number 3 [ 268.661020][ T6238] loop2: detected capacity change from 0 to 512 [ 270.508194][ T6238] fuse: Invalid rootmode [ 271.162502][ T6239] loop0: detected capacity change from 0 to 1024 [ 271.367070][ T6239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.379740][ T6239] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.619317][ T6233] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm syz.0.77: corrupted xattr block 128: overlapping e_value [ 271.767932][ T6233] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 272.426222][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.346698][ T6282] Bluetooth: MGMT ver 1.23 [ 273.355847][ T6282] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 274.655192][ T6296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.100'. [ 279.602223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 280.586006][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.732674][ T6367] batadv_slave_1: entered promiscuous mode [ 280.854108][ T5793] Bluetooth: hci1: Malformed LE Event: 0x0d [ 281.082225][ T6377] netlink: 260 bytes leftover after parsing attributes in process `syz.3.131'. [ 281.206404][ T6367] ipvlan2: entered promiscuous mode [ 281.777815][ T6364] batadv_slave_1: left promiscuous mode [ 284.128788][ T6413] evm: overlay not supported [ 285.001786][ T44] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 285.224692][ T3732] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.305029][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.315747][ T44] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 285.325219][ T44] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 285.338262][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.356076][ T44] usb 3-1: config 0 descriptor?? [ 285.379841][ T44] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 285.387041][ T44] dvb-usb: bulk message failed: -22 (3/0) [ 285.417231][ T44] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 285.441511][ T44] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 285.450628][ T44] usb 3-1: media controller created [ 285.460794][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.498015][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 285.504517][ T44] ===================================================== [ 285.511868][ T44] BUG: KMSAN: uninit-value in dib3000mb_attach+0x2d8/0x3c0 [ 285.519449][ T44] dib3000mb_attach+0x2d8/0x3c0 [ 285.524626][ T44] dibusb_dib3000mb_frontend_attach+0x155/0x2f0 [ 285.531119][ T44] dvb_usb_adapter_frontend_init+0xed/0x9a0 [ 285.543540][ T44] dvb_usb_device_init+0x25a8/0x3760 [ 285.549317][ T44] dibusb_probe+0x18c/0x250 [ 285.555790][ T44] usb_probe_interface+0xd33/0x12e0 [ 285.561208][ T44] really_probe+0x4db/0xd90 [ 285.570307][ T44] __driver_probe_device+0x2ab/0x5d0 [ 285.575943][ T44] driver_probe_device+0x72/0x890 [ 285.581179][ T44] __device_attach_driver+0x568/0x9e0 [ 285.586858][ T44] bus_for_each_drv+0x403/0x620 [ 285.591892][ T44] __device_attach+0x3c1/0x650 [ 285.597016][ T44] device_initial_probe+0x32/0x40 [ 285.602248][ T44] bus_probe_device+0x3dc/0x5c0 [ 285.608196][ T44] device_add+0x13aa/0x1ba0 [ 285.612884][ T44] usb_set_configuration+0x31c9/0x38d0 [ 285.618630][ T44] usb_generic_driver_probe+0x109/0x2a0 [ 285.624558][ T44] usb_probe_device+0x3a7/0x690 [ 285.629628][ T44] really_probe+0x4db/0xd90 [ 285.634412][ T44] __driver_probe_device+0x2ab/0x5d0 [ 285.646006][ T44] driver_probe_device+0x72/0x890 [ 285.649114][ T3732] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.651199][ T44] __device_attach_driver+0x568/0x9e0 [ 285.668699][ T44] bus_for_each_drv+0x403/0x620 [ 285.673891][ T44] __device_attach+0x3c1/0x650 [ 285.678862][ T44] device_initial_probe+0x32/0x40 [ 285.684865][ T44] bus_probe_device+0x3dc/0x5c0 [ 285.689890][ T44] device_add+0x13aa/0x1ba0 [ 285.694674][ T44] usb_new_device+0x15f4/0x2470 [ 285.699694][ T44] hub_event+0x4ffb/0x72d0 [ 285.704365][ T44] process_scheduled_works+0xae0/0x1c40 [ 285.710148][ T44] worker_thread+0xea7/0x14f0 [ 285.715256][ T44] kthread+0x3e2/0x540 [ 285.719579][ T44] ret_from_fork+0x6d/0x90 [ 285.724275][ T44] ret_from_fork_asm+0x1a/0x30 [ 285.729269][ T44] [ 285.731703][ T44] Local variable rb created at: [ 285.736743][ T44] dib3000_read_reg+0x86/0x4e0 [ 285.747828][ T44] dib3000mb_attach+0x123/0x3c0 [ 285.752890][ T44] [ 285.756937][ T44] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 285.767913][ T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 285.778620][ T44] Workqueue: usb_hub_wq hub_event [ 285.783941][ T44] ===================================================== [ 285.790983][ T44] Disabling lock debugging due to kernel taint [ 285.797339][ T44] Kernel panic - not syncing: kmsan.panic set ... [ 285.803896][ T44] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Tainted: G B 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 285.816199][ T44] Tainted: [B]=BAD_PAGE [ 285.820449][ T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 285.830653][ T44] Workqueue: usb_hub_wq hub_event [ 285.835941][ T44] Call Trace: [ 285.839341][ T44] [ 285.842380][ T44] dump_stack_lvl+0x216/0x2d0 [ 285.847270][ T44] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 285.853263][ T44] dump_stack+0x1e/0x24 [ 285.857610][ T44] panic+0x4e2/0xcf0 [ 285.861696][ T44] ? kmsan_get_metadata+0xc1/0x1c0 [ 285.867005][ T44] kmsan_report+0x2c7/0x2d0 [ 285.871676][ T44] ? __msan_warning+0x95/0x120 [ 285.876652][ T44] ? dib3000mb_attach+0x2d8/0x3c0 [ 285.881878][ T44] ? dibusb_dib3000mb_frontend_attach+0x155/0x2f0 [ 285.888490][ T44] ? dvb_usb_adapter_frontend_init+0xed/0x9a0 [ 285.894759][ T44] ? dvb_usb_device_init+0x25a8/0x3760 [ 285.900402][ T44] ? dibusb_probe+0x18c/0x250 [ 285.905248][ T44] ? usb_probe_interface+0xd33/0x12e0 [ 285.910805][ T44] ? really_probe+0x4db/0xd90 [ 285.915676][ T44] ? __driver_probe_device+0x2ab/0x5d0 [ 285.921320][ T44] ? driver_probe_device+0x72/0x890 [ 285.926700][ T44] ? __device_attach_driver+0x568/0x9e0 [ 285.932440][ T44] ? bus_for_each_drv+0x403/0x620 [ 285.937625][ T44] ? __device_attach+0x3c1/0x650 [ 285.942733][ T44] ? device_initial_probe+0x32/0x40 [ 285.948116][ T44] ? bus_probe_device+0x3dc/0x5c0 [ 285.953305][ T44] ? device_add+0x13aa/0x1ba0 [ 285.958158][ T44] ? usb_set_configuration+0x31c9/0x38d0 [ 285.963982][ T44] ? usb_generic_driver_probe+0x109/0x2a0 [ 285.969883][ T44] ? usb_probe_device+0x3a7/0x690 [ 285.975089][ T44] ? really_probe+0x4db/0xd90 [ 285.979948][ T44] ? __driver_probe_device+0x2ab/0x5d0 [ 285.985587][ T44] ? driver_probe_device+0x72/0x890 [ 285.990973][ T44] ? __device_attach_driver+0x568/0x9e0 [ 285.996705][ T44] ? bus_for_each_drv+0x403/0x620 [ 286.001888][ T44] ? __device_attach+0x3c1/0x650 [ 286.006996][ T44] ? device_initial_probe+0x32/0x40 [ 286.012456][ T44] ? bus_probe_device+0x3dc/0x5c0 [ 286.017631][ T44] ? device_add+0x13aa/0x1ba0 [ 286.022473][ T44] ? usb_new_device+0x15f4/0x2470 [ 286.027662][ T44] ? hub_event+0x4ffb/0x72d0 [ 286.032434][ T44] ? process_scheduled_works+0xae0/0x1c40 [ 286.038366][ T44] ? worker_thread+0xea7/0x14f0 [ 286.043422][ T44] ? kthread+0x3e2/0x540 [ 286.047828][ T44] ? ret_from_fork+0x6d/0x90 [ 286.052597][ T44] ? ret_from_fork_asm+0x1a/0x30 [ 286.057746][ T44] ? rt_mutex_unlock+0x2a/0x50 [ 286.062675][ T44] ? kmsan_get_metadata+0x13e/0x1c0 [ 286.068043][ T44] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 286.074023][ T44] ? dib3000_read_reg+0x32b/0x4e0 [ 286.079250][ T44] __msan_warning+0x95/0x120 [ 286.084035][ T44] dib3000mb_attach+0x2d8/0x3c0 [ 286.089077][ T44] ? __pfx_dib3000mb_attach+0x10/0x10 [ 286.094642][ T44] dibusb_dib3000mb_frontend_attach+0x155/0x2f0 [ 286.101095][ T44] ? __pfx_dibusb_dib3000mb_frontend_attach+0x10/0x10 [ 286.108058][ T44] dvb_usb_adapter_frontend_init+0xed/0x9a0 [ 286.114165][ T44] dvb_usb_device_init+0x25a8/0x3760 [ 286.119677][ T44] dibusb_probe+0x18c/0x250 [ 286.124358][ T44] ? __pfx_dibusb_probe+0x10/0x10 [ 286.129558][ T44] usb_probe_interface+0xd33/0x12e0 [ 286.134969][ T44] ? __pfx_usb_probe_interface+0x10/0x10 [ 286.140808][ T44] really_probe+0x4db/0xd90 [ 286.145495][ T44] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 286.151479][ T44] __driver_probe_device+0x2ab/0x5d0 [ 286.156979][ T44] driver_probe_device+0x72/0x890 [ 286.162187][ T44] ? kmsan_get_metadata+0x13e/0x1c0 [ 286.167554][ T44] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 286.173539][ T44] __device_attach_driver+0x568/0x9e0 [ 286.179127][ T44] bus_for_each_drv+0x403/0x620 [ 286.184127][ T44] ? __pfx___device_attach_driver+0x10/0x10 [ 286.190229][ T44] __device_attach+0x3c1/0x650 [ 286.195179][ T44] device_initial_probe+0x32/0x40 [ 286.200389][ T44] bus_probe_device+0x3dc/0x5c0 [ 286.205399][ T44] device_add+0x13aa/0x1ba0 [ 286.210082][ T44] usb_set_configuration+0x31c9/0x38d0 [ 286.215736][ T44] ? usb_set_configuration+0x921/0x38d0 [ 286.221512][ T44] usb_generic_driver_probe+0x109/0x2a0 [ 286.227225][ T44] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 286.233209][ T44] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 286.239450][ T44] usb_probe_device+0x3a7/0x690 [ 286.244500][ T44] ? __pfx_usb_probe_device+0x10/0x10 [ 286.250066][ T44] really_probe+0x4db/0xd90 [ 286.254761][ T44] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 286.260764][ T44] __driver_probe_device+0x2ab/0x5d0 [ 286.266260][ T44] driver_probe_device+0x72/0x890 [ 286.271475][ T44] ? kmsan_get_metadata+0x13e/0x1c0 [ 286.276843][ T44] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 286.282831][ T44] __device_attach_driver+0x568/0x9e0 [ 286.288407][ T44] bus_for_each_drv+0x403/0x620 [ 286.293409][ T44] ? __pfx___device_attach_driver+0x10/0x10 [ 286.299507][ T44] __device_attach+0x3c1/0x650 [ 286.304457][ T44] device_initial_probe+0x32/0x40 [ 286.309664][ T44] bus_probe_device+0x3dc/0x5c0 [ 286.314679][ T44] device_add+0x13aa/0x1ba0 [ 286.319373][ T44] usb_new_device+0x15f4/0x2470 [ 286.324408][ T44] hub_event+0x4ffb/0x72d0 [ 286.329058][ T44] ? __pfx_hub_event+0x10/0x10 [ 286.333993][ T44] process_scheduled_works+0xae0/0x1c40 [ 286.339800][ T44] worker_thread+0xea7/0x14f0 [ 286.344682][ T44] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 286.350685][ T44] kthread+0x3e2/0x540 [ 286.354918][ T44] ? __pfx_worker_thread+0x10/0x10 [ 286.360251][ T44] ? __pfx_kthread+0x10/0x10 [ 286.365003][ T44] ret_from_fork+0x6d/0x90 [ 286.369594][ T44] ? __pfx_kthread+0x10/0x10 [ 286.374347][ T44] ret_from_fork_asm+0x1a/0x30 [ 286.379325][ T44] [ 286.382718][ T44] Kernel Offset: disabled [ 286.387107][ T44] Rebooting in 86400 seconds..