last executing test programs: 3.263616139s ago: executing program 0 (id=1): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r0, 0x0, 0x1f4, 0xc190, &(0x7f0000000040)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 2.709630473s ago: executing program 3 (id=4): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) get_mempolicy(0x0, 0x0, 0xffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000020000000000", @ANYRES32, @ANYBLOB="05"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x70, &(0x7f0000000100)}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @remote}, 0x3}}, 0x2e) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) 2.61344224s ago: executing program 0 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\x00\b\x00'}) 2.024320584s ago: executing program 3 (id=7): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000040)=ANY=[], 0x1, 0x30e, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x52) openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[], 0x77c) sendfile(r1, r0, 0x0, 0x3ffff) 1.564682775s ago: executing program 0 (id=8): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000fc0)="538eb34b12b6e78221d826a03b7c0143cd6b6f16b06f4d0fa7269431b78022336d8825fa7a0e3511e83e19a4a17ae750af98ccb9c80337704a140c13b9307b1191af533c2574ef20e724fa7797f387507cb9f93eeebc24a3403aa64f0cd9da80b8e2432ce5be3a878cba0519d691a55d2c50dfb017ef6a444b9c73aab5428ced4fa4a914b178a1d00dfb91aab5b9eddbffdd480964c76916098e4790dabed0d7324638701c4405dec8192232ce17b730425180aff1e87b5648012f5121b23bbdea0fcd703090816285febe7c4b307a536948b6e3853662c9a2d71fe21c5843d97c86dccdff76d3d3fffe58e94dcb93", 0xef}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 1.434852673s ago: executing program 2 (id=3): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 983.527424ms ago: executing program 3 (id=9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002680), &(0x7f00000026c0)=0xc) sendmmsg$unix(r3, &(0x7f00000005c0), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f0000000100)=0x808c) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 500.942918ms ago: executing program 1 (id=2): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x29d) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x800) 360.359006ms ago: executing program 4 (id=5): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c300000000030000008510", @ANYRES32], &(0x7f0000000140)='GPL\x00', 0x6, 0xfc, &(0x7f0000000840)=""/252, 0x0, 0x8}, 0x94) 0s ago: executing program 0 (id=10): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6(0x10, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_getscheduler(r0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r2, &(0x7f0000000540), 0x0}, 0x20) write$sndseq(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. [ 153.704241][ T5559] cgroup: Unknown subsys name 'net' [ 153.824142][ T5559] cgroup: Unknown subsys name 'cpuset' [ 153.837566][ T5559] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 159.250782][ T5559] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 164.745558][ T5578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.759186][ T5578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.771661][ T5578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.790948][ T5584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.801664][ T5584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.821814][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.833679][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.848991][ T4872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.872704][ T5584] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.886270][ T5588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.900444][ T5578] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.910216][ T5578] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.931174][ T5578] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.941155][ T5578] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.951170][ T5584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.956389][ T5578] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.960350][ T5584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.970896][ T5578] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.982109][ T5584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.991655][ T5578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.005054][ T5584] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.014344][ T5578] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.024024][ T5578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.039053][ T5584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.051052][ T5584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.916003][ T5588] Bluetooth: hci0: command tx timeout [ 166.996786][ T5588] Bluetooth: hci1: command tx timeout [ 167.076088][ T5588] Bluetooth: hci3: command tx timeout [ 167.076132][ T5584] Bluetooth: hci2: command tx timeout [ 167.155992][ T5588] Bluetooth: hci4: command tx timeout [ 168.996117][ T5588] Bluetooth: hci0: command tx timeout [ 169.012876][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.021786][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.030579][ T5577] bridge_slave_0: entered allmulticast mode [ 169.041250][ T5577] bridge_slave_0: entered promiscuous mode [ 169.081145][ T5588] Bluetooth: hci1: command tx timeout [ 169.099278][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.126690][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.143499][ T5577] bridge_slave_1: entered allmulticast mode [ 169.156142][ T5588] Bluetooth: hci3: command tx timeout [ 169.161799][ T5584] Bluetooth: hci2: command tx timeout [ 169.181313][ T5577] bridge_slave_1: entered promiscuous mode [ 169.196181][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.216406][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.231046][ T5587] bridge_slave_0: entered allmulticast mode [ 169.237448][ T5584] Bluetooth: hci4: command tx timeout [ 169.247713][ T5587] bridge_slave_0: entered promiscuous mode [ 169.369507][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.377436][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.385158][ T5587] bridge_slave_1: entered allmulticast mode [ 169.394600][ T5587] bridge_slave_1: entered promiscuous mode [ 169.459899][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.472273][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.480657][ T5583] bridge_slave_0: entered allmulticast mode [ 169.488844][ T5583] bridge_slave_0: entered promiscuous mode [ 169.528281][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.561024][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.568655][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.576410][ T5583] bridge_slave_1: entered allmulticast mode [ 169.584527][ T5583] bridge_slave_1: entered promiscuous mode [ 169.641536][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.673756][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.681504][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.689016][ T5581] bridge_slave_0: entered allmulticast mode [ 169.697599][ T5581] bridge_slave_0: entered promiscuous mode [ 169.759802][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.792898][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.800599][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.808308][ T5581] bridge_slave_1: entered allmulticast mode [ 169.816713][ T5581] bridge_slave_1: entered promiscuous mode [ 169.847579][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.854997][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.863180][ T5582] bridge_slave_0: entered allmulticast mode [ 169.871461][ T5582] bridge_slave_0: entered promiscuous mode [ 169.889510][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.930984][ T5577] team0: Port device team_slave_0 added [ 169.967321][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.984364][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.991973][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.999743][ T5582] bridge_slave_1: entered allmulticast mode [ 170.007853][ T5582] bridge_slave_1: entered promiscuous mode [ 170.079856][ T5577] team0: Port device team_slave_1 added [ 170.141503][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.181810][ T5587] team0: Port device team_slave_0 added [ 170.219115][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.280226][ T5587] team0: Port device team_slave_1 added [ 170.315292][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.352345][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.385629][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.392795][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.418924][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.458827][ T5583] team0: Port device team_slave_0 added [ 170.471929][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.504766][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.512123][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.538494][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.578590][ T5583] team0: Port device team_slave_1 added [ 170.607626][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.614694][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.640940][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.674125][ T5581] team0: Port device team_slave_0 added [ 170.727995][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.735065][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.761976][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.782714][ T5581] team0: Port device team_slave_1 added [ 170.814694][ T5582] team0: Port device team_slave_0 added [ 170.862910][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.870220][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.896369][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.914991][ T5582] team0: Port device team_slave_1 added [ 170.971759][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.979333][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.005649][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.068219][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.075386][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.102041][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.113157][ T5584] Bluetooth: hci0: command tx timeout [ 171.119147][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.126809][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.153137][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.166693][ T5584] Bluetooth: hci1: command tx timeout [ 171.236190][ T5584] Bluetooth: hci2: command tx timeout [ 171.236334][ T5588] Bluetooth: hci3: command tx timeout [ 171.262207][ T5577] hsr_slave_0: entered promiscuous mode [ 171.270800][ T5577] hsr_slave_1: entered promiscuous mode [ 171.298190][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.305247][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.317273][ T5588] Bluetooth: hci4: command tx timeout [ 171.332209][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.382384][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.389532][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.416710][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.441174][ T5587] hsr_slave_0: entered promiscuous mode [ 171.449624][ T5587] hsr_slave_1: entered promiscuous mode [ 171.457892][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 171.463760][ T5587] Cannot create hsr debugfs directory [ 171.653139][ T5581] hsr_slave_0: entered promiscuous mode [ 171.661425][ T5581] hsr_slave_1: entered promiscuous mode [ 171.669479][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 171.675298][ T5581] Cannot create hsr debugfs directory [ 171.693770][ T5583] hsr_slave_0: entered promiscuous mode [ 171.702049][ T5583] hsr_slave_1: entered promiscuous mode [ 171.709917][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 171.715723][ T5583] Cannot create hsr debugfs directory [ 171.910092][ T5582] hsr_slave_0: entered promiscuous mode [ 171.918673][ T5582] hsr_slave_1: entered promiscuous mode [ 171.926150][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 171.931989][ T5582] Cannot create hsr debugfs directory [ 172.969569][ T5577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.021543][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.033209][ T5577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.065500][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.088780][ T5577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.112372][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.134842][ T5577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.151766][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.159127][ T5588] Bluetooth: hci0: command tx timeout [ 173.237064][ T5588] Bluetooth: hci1: command tx timeout [ 173.259302][ T5587] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.283255][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.295514][ T5587] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.314658][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.322018][ T5588] Bluetooth: hci3: command tx timeout [ 173.327985][ T5584] Bluetooth: hci2: command tx timeout [ 173.341732][ T5587] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.364854][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.376215][ T5587] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.393904][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.401182][ T5584] Bluetooth: hci4: command tx timeout [ 173.558365][ T5583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.577228][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.588595][ T5583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.606640][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.644035][ T5583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.661713][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.687244][ T5583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.706276][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.877531][ T5581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.894826][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.918585][ T5581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.937992][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.982183][ T5581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.000636][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.011449][ T5581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.029392][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.251825][ T5582] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.269481][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.300968][ T5582] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.319773][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.344247][ T5582] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.364140][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.403774][ T5582] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.422990][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.552927][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.733020][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.748746][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.834506][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.841865][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.913545][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.925460][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.932887][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.004386][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.081058][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.122432][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.129794][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.191763][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.199145][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.221114][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.280051][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.287500][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.343716][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.351091][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.376880][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.488144][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.495454][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.551107][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.592428][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.599798][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.741660][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.882030][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.889587][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.952880][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.960307][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.604739][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.931788][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.050242][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.341396][ T5577] veth0_vlan: entered promiscuous mode [ 179.576352][ T5577] veth1_vlan: entered promiscuous mode [ 179.615313][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.747936][ T5587] veth0_vlan: entered promiscuous mode [ 179.769664][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.868824][ T5587] veth1_vlan: entered promiscuous mode [ 180.059058][ T5577] veth0_macvtap: entered promiscuous mode [ 180.163646][ T5577] veth1_macvtap: entered promiscuous mode [ 180.295359][ T5581] veth0_vlan: entered promiscuous mode [ 180.330912][ T5582] veth0_vlan: entered promiscuous mode [ 180.347002][ T5587] veth0_macvtap: entered promiscuous mode [ 180.386386][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.400187][ T5581] veth1_vlan: entered promiscuous mode [ 180.447779][ T5587] veth1_macvtap: entered promiscuous mode [ 180.501590][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.564565][ T5582] veth1_vlan: entered promiscuous mode [ 180.621361][ T1098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.630590][ T1098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.660423][ T5583] veth0_vlan: entered promiscuous mode [ 180.669334][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.678886][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.703387][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.812953][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.867195][ T5583] veth1_vlan: entered promiscuous mode [ 180.891177][ T5581] veth0_macvtap: entered promiscuous mode [ 180.947804][ T5581] veth1_macvtap: entered promiscuous mode [ 180.961128][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.970518][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.021885][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.032033][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.206738][ T5582] veth0_macvtap: entered promiscuous mode [ 181.275272][ T5582] veth1_macvtap: entered promiscuous mode [ 181.310154][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.443613][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.510831][ T5583] veth0_macvtap: entered promiscuous mode [ 181.553341][ T1098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.587061][ T157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.606811][ T157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.736719][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.757042][ T157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.788432][ T5583] veth1_macvtap: entered promiscuous mode [ 181.890069][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.013303][ T144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.033530][ T144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.072822][ T144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.098959][ T144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.220818][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.352148][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.492616][ T157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.533966][ T157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.604413][ T157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.626166][ T157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.714683][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.758432][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.912137][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.940860][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.336174][ T5577] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 186.414778][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.451837][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.723853][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.774435][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.460789][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.515252][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.910276][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.926582][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.043514][ T5849] loop3: detected capacity change from 0 to 128 [ 188.082813][ T5849] ======================================================= [ 188.082813][ T5849] WARNING: The mand mount option has been deprecated and [ 188.082813][ T5849] and is ignored by this kernel. Remove the mand [ 188.082813][ T5849] option from the mount to silence this warning. [ 188.082813][ T5849] ======================================================= [ 188.114865][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.190544][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.299070][ T29] audit: type=1804 audit(1778908083.727:2): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.7" name="/newroot/1/file0/bus" dev="loop3" ino=1048595 res=1 errno=0 [ 188.461770][ T5849] syz.3.7: attempt to access beyond end of device [ 188.461770][ T5849] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 188.504532][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.521905][ T5849] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 188.545146][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.567150][ T5849] syz.3.7: attempt to access beyond end of device [ 188.567150][ T5849] loop3: rw=2049, sector=129, nr_sectors = 2 limit=128 [ 188.702650][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.730589][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.958309][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.976759][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.307365][ T5863] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 190.319326][ T5863] ===================================================== [ 190.326663][ T5863] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290 [ 190.334536][ T5863] dvbdmx_release_ts_feed+0x198/0x290 [ 190.340275][ T5863] dvb_dmxdev_add_pid+0xacc/0xb50 [ 190.345494][ T5863] dvb_demux_do_ioctl+0x78b/0xc80 [ 190.350900][ T5863] dvb_usercopy+0x263/0x500 [ 190.355572][ T5863] dvb_demux_ioctl+0x46/0x70 [ 190.360484][ T5863] __se_sys_ioctl+0x23c/0x400 [ 190.365327][ T5863] __x64_sys_ioctl+0x97/0xe0 [ 190.370253][ T5863] x64_sys_call+0x1975/0x3ea0 [ 190.375099][ T5863] do_syscall_64+0x134/0xf80 [ 190.381059][ T5863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.387292][ T5863] [ 190.389677][ T5863] Uninit was created at: [ 190.394121][ T5863] __alloc_frozen_pages_noprof+0x6fa/0x1000 [ 190.400317][ T5863] alloc_pages_mpol+0x328/0x860 [ 190.405361][ T5863] alloc_pages_noprof+0x101/0x290 [ 190.410635][ T5863] __vmalloc_node_range_noprof+0xab0/0x2cd0 [ 190.416746][ T5863] __vmalloc_noprof+0x128/0x1f0 [ 190.424152][ T5863] vmalloc_array_noprof+0x48/0x80 [ 190.430155][ T5863] dvb_dmx_init+0x121/0x930 [ 190.434806][ T5863] vidtv_bridge_probe+0x1b1f/0x2690 [ 190.440275][ T5863] platform_probe+0x213/0x370 [ 190.445110][ T5863] really_probe+0x4d5/0xe40 [ 190.449968][ T5863] __driver_probe_device+0x2fb/0x410 [ 190.455425][ T5863] driver_probe_device+0x70/0x8f0 [ 190.460696][ T5863] __driver_attach+0x541/0xaa0 [ 190.465626][ T5863] bus_for_each_dev+0x33b/0x580 [ 190.470756][ T5863] driver_attach+0x51/0x70 [ 190.475345][ T5863] bus_add_driver+0x54f/0xdb0 [ 190.480307][ T5863] driver_register+0x42e/0x6a0 [ 190.485251][ T5863] __platform_driver_register+0x65/0x80 [ 190.491095][ T5863] vidtv_bridge_init+0x73/0x100 [ 190.496227][ T5863] do_one_initcall+0x237/0xb30 [ 190.501163][ T5863] do_initcall_level+0x157/0x330 [ 190.506443][ T5863] do_initcalls+0x176/0x310 [ 190.511095][ T5863] do_basic_setup+0x22/0x30 [ 190.515842][ T5863] kernel_init_freeable+0x213/0x460 [ 190.523623][ T5863] kernel_init+0x2f/0x5e0 [ 190.529004][ T5863] ret_from_fork+0x20f/0x8d0 [ 190.533811][ T5863] ret_from_fork_asm+0x1a/0x30 [ 190.538866][ T5863] [ 190.541309][ T5863] CPU: 1 UID: 0 PID: 5863 Comm: syz.3.9 Not tainted syzkaller #0 PREEMPT(full) [ 190.550577][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.560806][ T5863] ===================================================== [ 190.568021][ T5863] Disabling lock debugging due to kernel taint [ 190.574760][ T5863] Kernel panic - not syncing: kmsan.panic set ... [ 190.581308][ T5863] CPU: 1 UID: 0 PID: 5863 Comm: syz.3.9 Tainted: G B syzkaller #0 PREEMPT(full) [ 190.592070][ T5863] Tainted: [B]=BAD_PAGE [ 190.596305][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.606480][ T5863] Call Trace: [ 190.609834][ T5863] [ 190.612843][ T5863] __dump_stack+0x26/0x30 [ 190.617321][ T5863] dump_stack_lvl+0x50/0x1c0 [ 190.622045][ T5863] ? dump_stack+0x12/0x25 [ 190.626516][ T5863] dump_stack+0x1e/0x25 [ 190.630817][ T5863] vpanic+0x7b4/0x1430 [ 190.635080][ T5863] panic+0x15d/0x160 [ 190.639165][ T5863] kmsan_report+0x31a/0x320 [ 190.643837][ T5863] ? __msan_warning+0x1b/0x30 [ 190.648656][ T5863] ? dvbdmx_release_ts_feed+0x198/0x290 [ 190.654335][ T5863] ? dvb_dmxdev_add_pid+0xacc/0xb50 [ 190.659709][ T5863] ? dvb_demux_do_ioctl+0x78b/0xc80 [ 190.665077][ T5863] ? dvb_usercopy+0x263/0x500 [ 190.669908][ T5863] ? dvb_demux_ioctl+0x46/0x70 [ 190.674831][ T5863] ? __se_sys_ioctl+0x23c/0x400 [ 190.679841][ T5863] ? __x64_sys_ioctl+0x97/0xe0 [ 190.684766][ T5863] ? x64_sys_call+0x1975/0x3ea0 [ 190.689777][ T5863] ? do_syscall_64+0x134/0xf80 [ 190.694693][ T5863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.700905][ T5863] ? irqentry_exit+0x7b/0x820 [ 190.705727][ T5863] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 190.712234][ T5863] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 190.718473][ T5863] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 190.724437][ T5863] ? kmsan_get_metadata+0xf1/0x160 [ 190.729722][ T5863] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 190.736230][ T5863] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 190.742461][ T5863] ? _raw_spin_unlock_irq+0x25/0x50 [ 190.747798][ T5863] ? _raw_spin_unlock_irq+0x31/0x50 [ 190.753131][ T5863] ? kmsan_get_metadata+0x146/0x160 [ 190.758507][ T5863] __msan_warning+0x1b/0x30 [ 190.763153][ T5863] dvbdmx_release_ts_feed+0x198/0x290 [ 190.768677][ T5863] dvb_dmxdev_add_pid+0xacc/0xb50 [ 190.773887][ T5863] ? __pfx_dvbdmx_release_ts_feed+0x10/0x10 [ 190.779934][ T5863] dvb_demux_do_ioctl+0x78b/0xc80 [ 190.785144][ T5863] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 190.790873][ T5863] dvb_usercopy+0x263/0x500 [ 190.795530][ T5863] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 190.801279][ T5863] ? kmsan_get_metadata+0xf1/0x160 [ 190.806559][ T5863] dvb_demux_ioctl+0x46/0x70 [ 190.811312][ T5863] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 190.816761][ T5863] __se_sys_ioctl+0x23c/0x400 [ 190.821615][ T5863] __x64_sys_ioctl+0x97/0xe0 [ 190.826365][ T5863] x64_sys_call+0x1975/0x3ea0 [ 190.831206][ T5863] do_syscall_64+0x134/0xf80 [ 190.835964][ T5863] ? clear_bhb_loop+0x50/0xa0 [ 190.840796][ T5863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.846865][ T5863] RIP: 0033:0x7f9e5eb9ce59 [ 190.851391][ T5863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.871134][ T5863] RSP: 002b:00007f9e5f984028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.879683][ T5863] RAX: ffffffffffffffda RBX: 00007f9e5ee16090 RCX: 00007f9e5eb9ce59 [ 190.887764][ T5863] RDX: 0000200000000100 RSI: 0000000040026f33 RDI: 0000000000000007 [ 190.895844][ T5863] RBP: 00007f9e5ec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 190.903905][ T5863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.911962][ T5863] R13: 00007f9e5ee16128 R14: 00007f9e5ee16090 R15: 00007ffcfea00f18 [ 190.920071][ T5863] [ 190.923470][ T5863] Kernel Offset: disabled [ 190.927842][ T5863] Rebooting in 86400 seconds..