last executing test programs: 12.960503544s ago: executing program 2 (id=103): r0 = landlock_create_ruleset(&(0x7f0000000440)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='mqueue\x00', 0x200011, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') 12.74257615s ago: executing program 2 (id=107): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001e40)=@newqdisc={0x3c, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8}]}}]}, 0x3c}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000001800)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000001840)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 12.636623628s ago: executing program 2 (id=108): r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) msgget$private(0x0, 0x230) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000000600)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019600)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000019640)='source', &(0x7f0000019680)='c:::\x00', 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f00000196c0)={0x0, 0x0, 0x100}, &(0x7f0000019740), &(0x7f0000019780), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019840)=@base={0xb, 0x7, 0x10001, 0x4b, 0x1}, 0x50) keyctl$get_persistent(0x16, 0x0, r0) 9.877378555s ago: executing program 2 (id=120): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000015c0), 0x651, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 6.310009466s ago: executing program 3 (id=133): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r2, &(0x7f0000000c80)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000019c80)=ANY=[], 0x2a, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000019d80)={0x1}) add_key$user(0x0, &(0x7f0000019dc0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 5.939139975s ago: executing program 0 (id=134): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000017c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000001840)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000001880)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f00000018c0)={@multicast2, @loopback, @empty}, 0xc) 4.725144412s ago: executing program 3 (id=135): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') r1 = memfd_create(&(0x7f0000000280)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bH\x96\x15\xb7\xe0b\x1c\xfe\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xae!\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa7\xf5&\xd7\x89\xda\xa7Wd\xa4Eu\x8csm\x00.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f0000004600)={0x2020}, 0x2067) 4.40147833s ago: executing program 0 (id=137): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001800)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000001840)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 4.011180841s ago: executing program 0 (id=138): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/interrupts\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x6d7, 0x80000002) 3.833637533s ago: executing program 0 (id=140): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.699239255s ago: executing program 1 (id=142): r0 = syz_open_dev$vim2m(&(0x7f0000000d00), 0x68d2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000d40)={0x7, 0x1, 0x2, 0x0, 0x5}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000d80)={0x7, 0x3, 0x1, "0000087aba10fdfffffb05001400", 0x30383653}) 3.674446474s ago: executing program 3 (id=143): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e716000000060000005c93000000000000b5030000000000008500000076000000b7000000000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000240)={0x2, 0x80100, 0x0, 'queue1\x00', 0x32a}) write$sndseq(r1, &(0x7f0000000300)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000008ac0530024000010203010902240001010480090904000002030102"], 0x0) syz_open_dev$cec(&(0x7f0000000380), 0x0, 0x2800) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x802154}, &(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)=0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000500)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000580), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_ublk_add_dev(r5, r3, r6, r4, &(0x7f0000000640)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x20}}}, &(0x7f0000000700)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000740)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r10}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3900, 0x0, 0xffff, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x2000, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x0, 0xba}}], 0x1, &(0x7f0000000b00)={0x2e, 0x14, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r7, '\x00', {0xfff9, 0x95, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000c40)={{0x3, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000c80)={0x6, 0x20000006, 0x0, 0x0, 0xd}) r11 = syz_open_dev$vim2m(&(0x7f0000000d00), 0x68d2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f0000000d40)={0x7, 0x1, 0x2, 0x0, 0x5}) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405668, &(0x7f0000000d80)={0x7, 0x3, 0x1, "0000087aba10fdfffffb05001400", 0x30383653}) r12 = syz_open_dev$video(&(0x7f0000000dc0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f0000000e00)={0x1, @pix_mp={0x0, 0x0, 0x20363159}}) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000f00)='\x00', 0x89901) fchdir(r13) close(r13) syz_emit_ethernet(0x4f, &(0x7f0000000f40)=ANY=[@ANYRES64=0x0], 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 3.558508693s ago: executing program 1 (id=144): syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x6, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x10000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000e80)={'syzkaller0\x00', 0x7101}) r2 = openat$comedi(0xffffff9c, &(0x7f0000000ec0)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000f00)={'c6xdigio\x00', [0x3c4, 0x4, 0x2, 0xa, 0x401, 0x0, 0xfffffffc, 0x40, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffab, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x6, 0x200, 0x2a14, 0x9, 0x4, 0x29, 0x7, 0xe, 0x4]}) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000fc0)={0x4000000, 0x34, 0x0, 0x1, 0x80000000}) 3.502158467s ago: executing program 4 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000040)={'das16m1\x00', [0x140, 0x9, 0x7, 0x2, 0x10000007, 0x7, 0x8002, 0x8000, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x6, 0x6, 0x9, 0x4, 0x6, 0xa2d8, 0x7a62, 0x1000, 0x8, 0x471, 0x6, 0x383, 0x8001, 0x4, 0xffffffff]}) write(0xffffffffffffffff, 0x0, 0x0) write$binfmt_format(r0, &(0x7f0000000540)='-1\x00', 0x3) write$binfmt_format(r0, &(0x7f0000000580)='0\x00', 0x2) 3.50169194s ago: executing program 2 (id=146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0x1000, {{0xa, 0x4e22, 0xba68, @rand_addr=' \x01\x00', 0x2}}}, 0x88) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeb3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x22000010) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r6, &(0x7f0000000340)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000019340)=0x4000007) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000019400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000019480)={0x15, 0x1c, &(0x7f0000019540)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000019640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, 0x0, 0x0) 3.286652126s ago: executing program 4 (id=147): openat$comedi(0xffffffffffffff9c, 0x0, 0x80001, 0x0) pipe(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x143102) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) close(r1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1\n', 0x2) 2.459936157s ago: executing program 1 (id=148): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001800)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000001840)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1.409356035s ago: executing program 4 (id=149): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/260], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f0000000580), 0x0, 0x14a042) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) 809.155328ms ago: executing program 2 (id=150): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/interrupts\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x6d7, 0x80000002) 584.233465ms ago: executing program 1 (id=151): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='dmask=00000000000000000002002,fmask=00000000000000000000203,time_offset=0x0000000000000008,dmask=00000000000000000000001,fmask=00000000000000000000001,time_offset=0x000000000000007f,iocharset=cp852,dmask=00000000000000000002001,iocharset=macroman,keep_last_dots,codepage=cp863,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x1533, &(0x7f0000006800)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x210002, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 540.371092ms ago: executing program 4 (id=152): r0 = landlock_create_ruleset(&(0x7f0000000440)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='mqueue\x00', 0x200011, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') 438.321461ms ago: executing program 0 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, 0x0, 0x800) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x50, 0xffffffffffffffff, 0xdd312000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) r1 = syz_mount_image$exfat(&(0x7f0000000300), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000200)=ANY=[], 0xfb, 0x1501, &(0x7f0000002080)="$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") io_submit(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x4, r1, 0x10, {0x9, 0x31}, 0x2}, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000200)={0x4}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 403.264069ms ago: executing program 3 (id=154): r0 = syz_open_dev$vim2m(&(0x7f0000000d00), 0x68d2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000d80)={0x7, 0x3, 0x1, "0000087aba10fdfffffb05001400", 0x30383653}) 402.494809ms ago: executing program 4 (id=155): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000c80)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 308.470485ms ago: executing program 3 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000100)={0xb, 0x29, 0x2, {0x8}}, 0xb) 308.251508ms ago: executing program 1 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./proc_mnt\x00', 0x1cc) mount(0x0, &(0x7f0000000f80)='./proc_mnt\x00', &(0x7f0000000fc0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000001040)={'#! ', './proc_mnt/irq/1/smp_affinity', [{0x20, '\x15@\x10\xe8P\x91@,000000\x00'}]}, 0x31) 53.622105ms ago: executing program 4 (id=158): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x88001, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000002d80)={0x4, 0x0, 0x0, 0x178, 0x138, 0x1, 0x0, 0x8400, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x1008, 0x0, 0x40, 'snapshot-merge\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, 'P', 0x20, '0'}}]}) 53.255526ms ago: executing program 3 (id=159): r0 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x1000000) 30.552246ms ago: executing program 0 (id=160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0x1000, {{0xa, 0x4e22, 0xba68, @rand_addr=' \x01\x00', 0x2}}}, 0x88) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeb3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x22000010) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r6, &(0x7f0000000340)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000019340)=0x4000007) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000019400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000019480)={0x15, 0x1c, &(0x7f0000019540)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000019640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, 0x0, 0x0) 0s ago: executing program 1 (id=161): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001e40)=@newqdisc={0x3c, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8}]}}]}, 0x3c}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000001800)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r1, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. [ 71.783288][ T5623] cgroup: Unknown subsys name 'net' [ 71.891557][ T5623] cgroup: Unknown subsys name 'cpuset' [ 71.899481][ T5623] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.294046][ T5623] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.709117][ T5653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.710670][ T5653] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.711741][ T5653] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.712651][ T5653] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.713324][ T5653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.713905][ T5653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.714734][ T5653] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.714949][ T5653] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.715882][ T5653] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.718345][ T5653] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.718453][ T5651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.726272][ T5655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.734692][ T5656] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.735277][ T5654] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.735382][ T5654] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.735448][ T5654] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.736683][ T5656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.736931][ T5656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.745114][ T5654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.745415][ T5654] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.745497][ T5654] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.746887][ T5645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.750010][ T4956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.750317][ T4956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.753137][ T4956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.653315][ T5638] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.665744][ T5638] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.680212][ T5638] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.731770][ T5635] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.791540][ T5637] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.807014][ T5639] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.899247][ T5636] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 79.118191][ T5638] infiniband rxe0: set active [ 79.120442][ T5638] infiniband rxe0: added rxe_eth0 [ 79.166832][ T5638] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 79.166868][ T5638] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 79.166904][ T5638] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 79.173536][ T47] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.229877][ T5638] RDS/IB: rxe0: added [ 79.230207][ T5638] smc: adding ib device rxe0 with port count 1 [ 79.230293][ T5638] smc: ib device rxe0 port 1 has no pnetid [ 79.273402][ T47] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.332003][ T5638] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.605580][ T47] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.675520][ T5072] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.745705][ T5638] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.798437][ T5642] Bluetooth: hci1: command tx timeout [ 79.798569][ T5642] Bluetooth: hci3: command tx timeout [ 79.798648][ T5642] Bluetooth: hci4: command tx timeout [ 79.798719][ T5642] Bluetooth: hci2: command tx timeout [ 79.799017][ T4956] Bluetooth: hci0: command tx timeout [ 80.160597][ T5638] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.317678][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.318435][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.318630][ T5637] bridge_slave_0: entered allmulticast mode [ 80.320511][ T5637] bridge_slave_0: entered promiscuous mode [ 80.324685][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.324788][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.324902][ T5635] bridge_slave_0: entered allmulticast mode [ 80.328342][ T5635] bridge_slave_0: entered promiscuous mode [ 80.331228][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.331393][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.331776][ T5635] bridge_slave_1: entered allmulticast mode [ 80.333394][ T5635] bridge_slave_1: entered promiscuous mode [ 80.410027][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.410149][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.410387][ T5637] bridge_slave_1: entered allmulticast mode [ 80.411551][ T5637] bridge_slave_1: entered promiscuous mode [ 80.442769][ T5638] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.521975][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.522081][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.522208][ T5639] bridge_slave_0: entered allmulticast mode [ 80.524489][ T5639] bridge_slave_0: entered promiscuous mode [ 80.528364][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.528462][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.528585][ T5639] bridge_slave_1: entered allmulticast mode [ 80.553472][ T5639] bridge_slave_1: entered promiscuous mode [ 80.560109][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.560214][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.560362][ T5636] bridge_slave_0: entered allmulticast mode [ 80.563777][ T5636] bridge_slave_0: entered promiscuous mode [ 80.602189][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.622802][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.622910][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.623035][ T5636] bridge_slave_1: entered allmulticast mode [ 80.625092][ T5636] bridge_slave_1: entered promiscuous mode [ 80.644371][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.648206][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.683444][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.721351][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.726196][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.781164][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.783773][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.814086][ T5637] team0: Port device team_slave_0 added [ 80.817017][ T5635] team0: Port device team_slave_0 added [ 80.845990][ T5637] team0: Port device team_slave_1 added [ 80.866599][ T5635] team0: Port device team_slave_1 added [ 80.888993][ T5636] team0: Port device team_slave_0 added [ 80.915158][ T5639] team0: Port device team_slave_0 added [ 80.917291][ T5636] team0: Port device team_slave_1 added [ 80.930111][ T5639] team0: Port device team_slave_1 added [ 80.931011][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.931020][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.931033][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.947984][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.948000][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.948023][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.007282][ T5638] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.038858][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.038874][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.038897][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.073444][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.073461][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.073485][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.075421][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.075435][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.075458][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.123519][ T5639] hsr_slave_0: entered promiscuous mode [ 81.124656][ T5639] hsr_slave_1: entered promiscuous mode [ 81.129030][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.129043][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.129067][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.130430][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.130442][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.130465][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.143754][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.143769][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.143794][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.395517][ T5637] hsr_slave_0: entered promiscuous mode [ 81.396908][ T5637] hsr_slave_1: entered promiscuous mode [ 81.403396][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 81.403497][ T5637] Cannot create hsr debugfs directory [ 81.437648][ T5635] hsr_slave_0: entered promiscuous mode [ 81.438746][ T5635] hsr_slave_1: entered promiscuous mode [ 81.439560][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 81.439578][ T5635] Cannot create hsr debugfs directory [ 81.446179][ T5636] hsr_slave_0: entered promiscuous mode [ 81.446786][ T5636] hsr_slave_1: entered promiscuous mode [ 81.447209][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 81.447227][ T5636] Cannot create hsr debugfs directory [ 81.888233][ T55] Bluetooth: hci2: command tx timeout [ 81.888268][ T55] Bluetooth: hci4: command tx timeout [ 81.888292][ T55] Bluetooth: hci3: command tx timeout [ 81.888311][ T55] Bluetooth: hci1: command tx timeout [ 81.888623][ T4956] Bluetooth: hci0: command tx timeout [ 82.065057][ T5639] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.076998][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.091932][ T5639] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.095703][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.096456][ T5639] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.100538][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.110863][ T5639] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.121805][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.230514][ T5637] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.246533][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.265426][ T5637] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.269871][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.271043][ T5637] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.281062][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.311747][ T5637] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.314291][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.433813][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.433979][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.434101][ T5638] bridge_slave_0: entered allmulticast mode [ 82.435724][ T5638] bridge_slave_0: entered promiscuous mode [ 82.468258][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.468418][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.469310][ T5638] bridge_slave_1: entered allmulticast mode [ 82.470303][ T5638] bridge_slave_1: entered promiscuous mode [ 82.510609][ T5635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.513113][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.513833][ T5635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.517099][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.540688][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.543542][ T5635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.551678][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.552501][ T5635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.566088][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.594851][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.656135][ T5638] team0: Port device team_slave_0 added [ 82.664912][ T5638] team0: Port device team_slave_1 added [ 82.715912][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.715929][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.715951][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.719426][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.719440][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.719464][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.743595][ T5636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.756361][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.777905][ T5636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.802676][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.805841][ T5636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.812416][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.857200][ T5638] hsr_slave_0: entered promiscuous mode [ 82.863812][ T5638] hsr_slave_1: entered promiscuous mode [ 82.864250][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 82.864267][ T5638] Cannot create hsr debugfs directory [ 82.870486][ T5636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.876573][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.882981][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.071513][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.100771][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.127725][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.127991][ T3392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.158894][ T3392] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.159060][ T3392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.213174][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.221245][ T5638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.234315][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.237185][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.255553][ T5638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.266060][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.266774][ T5638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.284137][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.284903][ T5638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.295484][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.341806][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.345338][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.345398][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.375768][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.381395][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.381495][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.422001][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.422344][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.451890][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.469488][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.469562][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.504386][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.504470][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.505786][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.505869][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.816236][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.892836][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.923192][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.923319][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.939846][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.939951][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.959059][ T5642] Bluetooth: hci1: command tx timeout [ 83.959100][ T5642] Bluetooth: hci3: command tx timeout [ 83.959123][ T5642] Bluetooth: hci4: command tx timeout [ 83.959144][ T5642] Bluetooth: hci2: command tx timeout [ 83.959373][ T4956] Bluetooth: hci0: command tx timeout [ 84.584714][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.790881][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.936885][ T5635] veth0_vlan: entered promiscuous mode [ 84.995751][ T5635] veth1_vlan: entered promiscuous mode [ 85.025872][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.116504][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.184566][ T5635] veth0_macvtap: entered promiscuous mode [ 85.215706][ T5635] veth1_macvtap: entered promiscuous mode [ 85.232747][ T5637] veth0_vlan: entered promiscuous mode [ 85.290726][ T5637] veth1_vlan: entered promiscuous mode [ 85.295075][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.330910][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.354562][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.401523][ T5636] veth0_vlan: entered promiscuous mode [ 85.414284][ T5639] veth0_vlan: entered promiscuous mode [ 85.456790][ T5636] veth1_vlan: entered promiscuous mode [ 85.473686][ T5639] veth1_vlan: entered promiscuous mode [ 85.480095][ T5637] veth0_macvtap: entered promiscuous mode [ 85.492400][ T5637] veth1_macvtap: entered promiscuous mode [ 85.517977][ T45] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.555725][ T5638] veth0_vlan: entered promiscuous mode [ 85.580675][ T3392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.580699][ T3392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.630162][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.630175][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.656258][ T5638] veth1_vlan: entered promiscuous mode [ 85.657409][ T5636] veth0_macvtap: entered promiscuous mode [ 85.665822][ T5636] veth1_macvtap: entered promiscuous mode [ 85.683689][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.701872][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.720711][ T5639] veth0_macvtap: entered promiscuous mode [ 85.727198][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.759965][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.794026][ T5639] veth1_macvtap: entered promiscuous mode [ 85.902505][ T5635] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.928298][ T2204] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.928344][ T2204] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.928379][ T2204] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.928414][ T2204] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.928448][ T2204] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.928482][ T2204] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.928516][ T2204] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.928566][ T2204] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.928599][ T2204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.928631][ T2204] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.928664][ T2204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.950927][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.983697][ T3392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.983718][ T3392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.013063][ T5638] veth0_macvtap: entered promiscuous mode [ 86.032503][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.049283][ T55] Bluetooth: hci2: command tx timeout [ 86.049314][ T55] Bluetooth: hci4: command tx timeout [ 86.049335][ T55] Bluetooth: hci3: command tx timeout [ 86.049356][ T55] Bluetooth: hci1: command tx timeout [ 86.049416][ T4956] Bluetooth: hci0: command tx timeout [ 86.101939][ T5638] veth1_macvtap: entered promiscuous mode [ 86.122981][ T2204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.124257][ T2204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.124306][ T2204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.124320][ T2204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.124885][ T208] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.203492][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.203512][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.287505][ T2204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.288054][ T2204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.295593][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.360914][ T5855] loop1: detected capacity change from 0 to 4096 [ 86.365330][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.487959][ T5855] ntfs3(loop1): ino=19, mi_enum_attr [ 86.488110][ T5855] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 86.549564][ T3392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.549583][ T3392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.777282][ T10] cfg80211: failed to load regulatory.db [ 87.183801][ T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.217148][ T2204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.217167][ T2204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.346928][ T2204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.346949][ T2204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.387814][ T2204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.410321][ T2204] ntfs3(loop1): ino=5, mi_enum_attr [ 87.410486][ T2204] ntfs3(loop1): ino=5, mi_enum_attr [ 87.437786][ T2204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.438199][ T2204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.438353][ T2204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.565790][ T2204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.565810][ T2204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.024459][ T5888] loop4: detected capacity change from 0 to 2048 [ 89.060924][ T5888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.061051][ T5888] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.241397][ T5888] overlayfs: failed to set xattr on upper [ 89.241412][ T5888] overlayfs: ...falling back to redirect_dir=nofollow. [ 89.241420][ T5888] overlayfs: ...falling back to index=off. [ 89.241435][ T5888] overlayfs: ...falling back to uuid=null. [ 89.372301][ T5881] loop2: detected capacity change from 0 to 32768 [ 89.399876][ T5881] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.9 (5881) [ 90.447637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 90.838332][ T5881] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.838379][ T5881] BTRFS info (device loop2): using sha256 checksum algorithm [ 90.958379][ T5881] BTRFS info (device loop2): enabling ssd optimizations [ 90.958405][ T5881] BTRFS info (device loop2): turning on sync discard [ 90.958425][ T5881] BTRFS info (device loop2): enabling free space tree [ 90.958452][ T5881] BTRFS info (device loop2): use zlib compression, level 3 [ 91.043224][ T5639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.142980][ T5922] loop3: detected capacity change from 0 to 2048 [ 91.242542][ T5922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.242651][ T5922] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.477492][ T5637] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.582447][ T5931] overlayfs: failed to set xattr on upper [ 91.582461][ T5931] overlayfs: ...falling back to redirect_dir=nofollow. [ 91.582469][ T5931] overlayfs: ...falling back to index=off. [ 91.582475][ T5931] overlayfs: ...falling back to uuid=null. [ 91.685197][ T5922] syz.3.18 (5922) used greatest stack depth: 17992 bytes left [ 91.939320][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.598227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 92.869412][ T195] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.048027][ T53] IPVS: starting estimator thread 0... [ 93.137773][ T5946] IPVS: using max 31 ests per chain, 74400 per kthread [ 93.550721][ T5957] FAULT_INJECTION: forcing a failure. [ 93.550721][ T5957] name failslab, interval 1, probability 0, space 0, times 1 [ 93.550778][ T5957] CPU: 1 UID: 0 PID: 5957 Comm: syz.4.26 Not tainted syzkaller #0 PREEMPT(full) [ 93.550802][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.550823][ T5957] Call Trace: [ 93.550831][ T5957] [ 93.550841][ T5957] dump_stack_lvl+0xe8/0x150 [ 93.550889][ T5957] should_fail_ex+0x3eb/0x540 [ 93.550921][ T5957] should_failslab+0xa8/0x100 [ 93.550956][ T5957] __kmalloc_cache_noprof+0x9e/0x600 [ 93.550982][ T5957] ? do_raw_spin_lock+0x12b/0x2f0 [ 93.551003][ T5957] ? wakeup_source_register+0x57/0x380 [ 93.551023][ T5957] ? wakeup_source_register+0x57/0x380 [ 93.551048][ T5957] wakeup_source_register+0x57/0x380 [ 93.551074][ T5957] ep_insert+0xfaf/0x1af0 [ 93.551122][ T5957] ? __pfx_ep_insert+0x10/0x10 [ 93.551167][ T5957] ? do_epoll_ctl_file+0xacd/0xee0 [ 93.551201][ T5957] do_epoll_ctl_file+0x8c2/0xee0 [ 93.551234][ T5957] ? do_epoll_ctl_file+0xacd/0xee0 [ 93.551269][ T5957] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 93.551304][ T5957] ? __fget_files+0x3a2/0x420 [ 93.551330][ T5957] ? __fget_files+0x2a/0x420 [ 93.551361][ T5957] ? fdget+0x1ac/0x250 [ 93.551389][ T5957] __se_sys_epoll_ctl+0x162/0x230 [ 93.551411][ T5957] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 93.551458][ T5957] do_syscall_64+0x166/0x520 [ 93.551492][ T5957] ? trace_irq_disable+0x3b/0x140 [ 93.551521][ T5957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.551544][ T5957] ? clear_bhb_loop+0x70/0xc0 [ 93.551572][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.551592][ T5957] RIP: 0033:0x7fe131b9f559 [ 93.551623][ T5957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.551639][ T5957] RSP: 002b:00007fe132b0b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 93.551662][ T5957] RAX: ffffffffffffffda RBX: 00007fe131e25fa0 RCX: 00007fe131b9f559 [ 93.551678][ T5957] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 93.551690][ T5957] RBP: 00007fe131c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 93.551702][ T5957] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 93.551715][ T5957] R13: 00007fe131e26038 R14: 00007fe131e25fa0 R15: 00007ffe0c573b78 [ 93.551752][ T5957] [ 95.649223][ T5848] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.686437][ T5989] loop4: detected capacity change from 0 to 764 [ 95.827626][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 95.829950][ T5848] usb 2-1: New USB device found: idVendor=05ac, idProduct=0214, bcdDevice=f0.72 [ 95.850487][ T5848] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 95.850514][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.850532][ T5848] usb 2-1: config 0 has no interface number 0 [ 95.850575][ T5848] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.850601][ T5848] usb 2-1: config 0 interface 85 has no altsetting 0 [ 95.853873][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.853898][ T5848] usb 2-1: Product: syz [ 95.853912][ T5848] usb 2-1: Manufacturer: syz [ 95.853926][ T5848] usb 2-1: SerialNumber: syz [ 95.984075][ T5848] usb 2-1: config 0 descriptor?? [ 96.199015][ T5997] isofs: Unable to find the "." directory for NFS. [ 96.807650][ T195] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.363417][ T195] usb 1-1: Using ep0 maxpacket: 32 [ 97.381012][ T195] usb 1-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 97.495922][ T195] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 97.495952][ T195] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 97.495972][ T195] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 97.496014][ T195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.496034][ T195] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.496057][ T195] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.496097][ T195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.506111][ T195] usb 1-1: config 0 descriptor?? [ 97.746081][ T195] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 97.752256][ T6015] Bluetooth: MGMT ver 1.23 [ 98.060842][ T11] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.919312][ T11] usb 3-1: New USB device found: idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 99.007966][ T11] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.130779][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 99.130807][ T11] usb 3-1: Product: syz [ 99.130821][ T11] usb 3-1: Manufacturer: syz [ 99.165580][ C1] usblp0: nonzero read bulk status received: -71 [ 99.168236][ T10] usb 1-1: USB disconnect, device number 2 [ 99.204527][ T5994] usblp0: removed [ 99.271882][ T5783] usb 2-1: USB disconnect, device number 2 [ 99.396603][ T6024] syz.4.42 (6024): drop_caches: 2 [ 99.567568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.337575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.637577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.687732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 101.047770][ T11] usbhid 3-1:1.0: can't add hid device: -71 [ 101.047886][ T11] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 101.092526][ T11] usb 3-1: USB disconnect, device number 2 [ 101.174495][ T6043] FAULT_INJECTION: forcing a failure. [ 101.174495][ T6043] name failslab, interval 1, probability 0, space 0, times 0 [ 101.174516][ T6043] CPU: 0 UID: 0 PID: 6043 Comm: syz.3.48 Not tainted syzkaller #0 PREEMPT(full) [ 101.174529][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.174536][ T6043] Call Trace: [ 101.174541][ T6043] [ 101.174547][ T6043] dump_stack_lvl+0xe8/0x150 [ 101.174582][ T6043] should_fail_ex+0x3eb/0x540 [ 101.174611][ T6043] should_failslab+0xa8/0x100 [ 101.174644][ T6043] __kvmalloc_node_noprof+0x171/0x820 [ 101.174667][ T6043] ? fuse_dev_splice_read+0x105/0x610 [ 101.174679][ T6043] ? fuse_dev_splice_read+0x105/0x610 [ 101.174696][ T6043] fuse_dev_splice_read+0x105/0x610 [ 101.174709][ T6043] ? __pfx_aa_file_perm+0x10/0x10 [ 101.174720][ T6043] ? splice_file_to_pipe+0x3e/0x720 [ 101.174737][ T6043] ? __pfx_fuse_dev_splice_read+0x10/0x10 [ 101.174749][ T6043] ? __pfx_futex_wake_mark+0x10/0x10 [ 101.174767][ T6043] ? try_to_wake_up+0x8ce/0x14e0 [ 101.174788][ T6043] ? __pfx_fuse_dev_splice_read+0x10/0x10 [ 101.174806][ T6043] splice_file_to_pipe+0x4ab/0x720 [ 101.174829][ T6043] do_splice+0x124a/0x19f0 [ 101.174854][ T6043] ? __fget_files+0x2a/0x420 [ 101.174871][ T6043] ? __pfx_do_splice+0x10/0x10 [ 101.174885][ T6043] ? __fget_files+0x2a/0x420 [ 101.174901][ T6043] ? fdget+0x1ac/0x250 [ 101.174916][ T6043] __se_sys_splice+0x353/0x490 [ 101.174935][ T6043] ? __pfx___se_sys_splice+0x10/0x10 [ 101.174954][ T6043] ? __x64_sys_splice+0x21/0xf0 [ 101.174971][ T6043] do_syscall_64+0x166/0x520 [ 101.174984][ T6043] ? trace_irq_disable+0x3b/0x140 [ 101.174999][ T6043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.175010][ T6043] ? clear_bhb_loop+0x70/0xc0 [ 101.175023][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.175034][ T6043] RIP: 0033:0x7f85add9f559 [ 101.175045][ T6043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.175055][ T6043] RSP: 002b:00007f85aec45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 101.175067][ T6043] RAX: ffffffffffffffda RBX: 00007f85ae025fa0 RCX: 00007f85add9f559 [ 101.175075][ T6043] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 101.175081][ T6043] RBP: 00007f85ade36b20 R08: 000000000000f55f R09: 0000000000000000 [ 101.175088][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.175094][ T6043] R13: 00007f85ae026038 R14: 00007f85ae025fa0 R15: 00007ffcf2919d38 [ 101.175111][ T6043] [ 101.486052][ T6051] Zero length message leads to an empty skb [ 101.514519][ T6050] loop4: detected capacity change from 0 to 512 [ 101.515297][ T6050] ======================================================= [ 101.515297][ T6050] WARNING: The mand mount option has been deprecated and [ 101.515297][ T6050] and is ignored by this kernel. Remove the mand [ 101.515297][ T6050] option from the mount to silence this warning. [ 101.515297][ T6050] ======================================================= [ 103.658027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.697914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 104.078577][ T6051] loop3: detected capacity change from 0 to 32768 [ 104.104479][ T6051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.52 (6051) [ 104.130415][ T6051] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.130448][ T6051] BTRFS info (device loop3): using crc32c checksum algorithm [ 104.319421][ T6051] BTRFS info (device loop3): setting nodatasum [ 104.319450][ T6051] BTRFS info (device loop3): setting nodatacow [ 104.319466][ T6051] BTRFS info (device loop3): disabling tree log [ 104.319517][ T6051] BTRFS info (device loop3): turning on async discard [ 104.319533][ T6051] BTRFS info (device loop3): enabling free space tree [ 104.319550][ T6051] BTRFS info (device loop3): max_inline set to 0 [ 104.541605][ T6088] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.541986][ T6088] netlink: 'syz.0.60': attribute type 1 has an invalid length. [ 104.566114][ T5638] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.678495][ T11] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.829681][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 104.832471][ T11] usb 2-1: New USB device found: idVendor=05ac, idProduct=0230, bcdDevice=0.40 [ 104.841346][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.841395][ T11] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.128366][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.128436][ T11] usb 2-1: Product: syz [ 105.128534][ T11] usb 2-1: Manufacturer: syz [ 105.128569][ T11] usb 2-1: SerialNumber: syz [ 105.857614][ T5841] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.702057][ T5841] usb 4-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 106.706545][ T5841] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.735274][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 106.735300][ T5841] usb 4-1: Product: syz [ 106.735314][ T5841] usb 4-1: Manufacturer: syz [ 106.782062][ T5841] usb 4-1: selecting invalid altsetting 1 [ 106.782735][ T5841] dvb_ttusb_budget: ttusb_init_controller: error [ 106.782824][ T5841] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 106.854264][ T11] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input5 [ 106.857408][ T4990] bcm5974 2-1:1.0: could not read from device [ 106.915106][ T4990] bcm5974 2-1:1.0: could not read from device [ 106.925662][ T4990] bcm5974 2-1:1.0: could not read from device [ 106.944850][ T11] usb 2-1: USB disconnect, device number 3 [ 106.960516][ T6122] loop2: detected capacity change from 0 to 256 [ 107.020085][ T5841] DVB: Unable to find symbol cx22700_attach() [ 107.040305][ T6122] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.077853][ T5841] DVB: Unable to find symbol tda10046_attach() [ 107.077868][ T5841] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 107.079285][ T6122] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 107.084649][ T5841] usb 4-1: USB disconnect, device number 2 [ 107.296245][ T6130] mmap: syz.2.67 (6130) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.777974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 109.158092][ T6151] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.158189][ T6151] netlink: 'syz.1.74': attribute type 1 has an invalid length. [ 111.286816][ T6184] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.333373][ T6177] nvmet: adding nsid 1 to subsystem testsubsys [ 111.512225][ T6173] null_blk: disk nullb1 created [ 111.648369][ T6177] block device autoloading is deprecated and will be removed. [ 114.874241][ T6222] xt_hashlimit: size too large, truncated to 1048576 [ 115.912070][ T6223] loop0: detected capacity change from 0 to 128 [ 117.676001][ T6223] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.692330][ T6223] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.800881][ T6239] loop3: detected capacity change from 0 to 512 [ 117.829587][ T6239] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.102: Unrecognised inode hash code 4 [ 117.829625][ T6239] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.102: Corrupt directory, running e2fsck is recommended [ 117.877039][ T6239] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 117.889481][ T6239] EXT4-fs error (device loop3): ext4_iget_extra_inode:6027: inode #15: comm syz.3.102: corrupted in-inode xattr: invalid ea_ino [ 117.889672][ T6239] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 117.894637][ T6239] EXT4-fs (loop3): Remounting filesystem read-only [ 117.935240][ T6239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.958023][ T6239] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #2: comm syz.3.102: directory missing '.' [ 118.024097][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.215768][ T5636] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.453672][ T6249] loop1: detected capacity change from 0 to 16 [ 119.077843][ T6249] erofs (device loop1): mounted with root inode @ nid 36. [ 119.184730][ T6249] erofs (device loop1): invalid de[0].nameoff 14 @ nid 36 [ 119.344343][ T6262] FAULT_INJECTION: forcing a failure. [ 119.344343][ T6262] name fail_futex, interval 1, probability 0, space 0, times 1 [ 119.344392][ T6262] CPU: 1 UID: 0 PID: 6262 Comm: syz.3.109 Not tainted syzkaller #0 PREEMPT(full) [ 119.344415][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 119.344427][ T6262] Call Trace: [ 119.344435][ T6262] [ 119.344444][ T6262] dump_stack_lvl+0xe8/0x150 [ 119.344490][ T6262] should_fail_ex+0x3eb/0x540 [ 119.344520][ T6262] get_futex_key+0x1ab/0x1410 [ 119.344565][ T6262] ? __pfx_get_futex_key+0x10/0x10 [ 119.344596][ T6262] ? __lock_acquire+0x747/0x2de0 [ 119.344630][ T6262] futex_wake+0x119/0x5f0 [ 119.344661][ T6262] ? __pfx_futex_wake+0x10/0x10 [ 119.344687][ T6262] ? errseq_sample+0x40/0x70 [ 119.344715][ T6262] ? lock_acquire+0x115/0x350 [ 119.344747][ T6262] do_futex+0x458/0x4e0 [ 119.344774][ T6262] ? __pfx_do_futex+0x10/0x10 [ 119.344805][ T6262] __se_sys_futex+0x3a8/0x450 [ 119.344831][ T6262] ? __x64_sys_signalfd4+0x15a/0x1a0 [ 119.344856][ T6262] ? __pfx___se_sys_futex+0x10/0x10 [ 119.344876][ T6262] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 119.344907][ T6262] ? __x64_sys_futex+0x21/0xf0 [ 119.344931][ T6262] do_syscall_64+0x166/0x520 [ 119.344955][ T6262] ? trace_irq_disable+0x3b/0x140 [ 119.344990][ T6262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.345011][ T6262] ? clear_bhb_loop+0x70/0xc0 [ 119.345037][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.345058][ T6262] RIP: 0033:0x7f85add9f559 [ 119.345081][ T6262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.345099][ T6262] RSP: 002b:00007f85aec450e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.345124][ T6262] RAX: ffffffffffffffda RBX: 00007f85ae025fa8 RCX: 00007f85add9f559 [ 119.345138][ T6262] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f85ae025fac [ 119.345151][ T6262] RBP: 00007f85ae025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 119.345163][ T6262] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 119.345174][ T6262] R13: 00007f85ae026038 R14: 00007ffcf2919c50 R15: 00007ffcf2919d38 [ 119.345205][ T6262] [ 122.276793][ T6307] loop1: detected capacity change from 0 to 764 [ 122.617360][ T6317] isofs: Unable to find the "." directory for NFS. [ 123.727656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 126.214922][ T4956] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 126.215019][ T4956] Bluetooth: hci1: Injecting HCI hardware error event [ 126.216794][ T4956] Bluetooth: hci1: hardware error 0x00 [ 126.418625][ T6332] lo: entered allmulticast mode [ 127.407631][ T195] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.700540][ T5799] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 127.833561][ T195] usb 1-1: Using ep0 maxpacket: 16 [ 127.891936][ T195] usb 1-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 127.939172][ T5799] usb 4-1: Using ep0 maxpacket: 8 [ 127.941823][ T5799] usb 4-1: New USB device found: idVendor=05ac, idProduct=0230, bcdDevice=0.40 [ 127.946538][ T5799] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.946740][ T5799] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.975531][ T195] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 127.975564][ T195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 128.056594][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.056635][ T5799] usb 4-1: Product: syz [ 128.056686][ T5799] usb 4-1: Manufacturer: syz [ 128.056748][ T5799] usb 4-1: SerialNumber: syz [ 128.117707][ T195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.117734][ T195] usb 1-1: Product: syz [ 128.117748][ T195] usb 1-1: Manufacturer: syz [ 128.117762][ T195] usb 1-1: SerialNumber: syz [ 128.358168][ T4956] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 128.491389][ T195] usb 1-1: config 0 descriptor?? [ 128.496329][ T195] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 128.496363][ T195] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 129.888553][ T5799] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input6 [ 129.912190][ T4990] bcm5974 4-1:1.0: could not read from device [ 129.934164][ T195] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 129.934487][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 129.934614][ T195] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 129.934879][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 129.935007][ T195] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 129.935022][ T195] em28xx 1-1:0.0: No AC97 audio processor [ 129.948512][ T4990] bcm5974 4-1:1.0: could not read from device [ 129.986890][ T195] usb 1-1: USB disconnect, device number 3 [ 129.992177][ T195] em28xx 1-1:0.0: Disconnecting em28xx [ 130.014841][ T5799] usb 4-1: USB disconnect, device number 3 [ 130.027728][ T4990] bcm5974 4-1:1.0: could not read from device [ 130.129558][ T195] em28xx: Freeing device [ 130.476603][ T6386] loop1: detected capacity change from 0 to 256 [ 130.515666][ T6386] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 130.705579][ T6392] loop0: detected capacity change from 0 to 256 [ 130.761872][ T6392] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 131.026235][ T6399] ================================================================== [ 131.026256][ T6399] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x5cb/0x1340 [ 131.026290][ T6399] Read of size 8 at addr ffff8880780e2e18 by task syz.4.158/6399 [ 131.026308][ T6399] [ 131.026318][ T6399] CPU: 0 UID: 0 PID: 6399 Comm: syz.4.158 Not tainted syzkaller #0 PREEMPT(full) [ 131.026341][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.026383][ T6399] Call Trace: [ 131.026391][ T6399] [ 131.026399][ T6399] dump_stack_lvl+0xe8/0x150 [ 131.026434][ T6399] print_address_description+0x55/0x1e0 [ 131.026464][ T6399] ? snapshot_ctr+0x5cb/0x1340 [ 131.026489][ T6399] print_report+0x58/0x70 [ 131.026514][ T6399] kasan_report+0x117/0x150 [ 131.026545][ T6399] ? snapshot_ctr+0x5cb/0x1340 [ 131.026572][ T6399] snapshot_ctr+0x5cb/0x1340 [ 131.026601][ T6399] ? __pfx_snapshot_ctr+0x10/0x10 [ 131.026623][ T6399] ? skip_spaces+0x8a/0xa0 [ 131.026650][ T6399] ? dm_split_args+0x50b/0x5d0 [ 131.026703][ T6399] dm_table_add_target+0x58d/0xc70 [ 131.026732][ T6399] table_load+0x325/0x8a0 [ 131.026756][ T6399] ? __pfx_table_load+0x10/0x10 [ 131.026779][ T6399] ? __might_fault+0xaf/0x130 [ 131.026801][ T6399] dm_ctl_ioctl+0x9ec/0xe10 [ 131.026849][ T6399] ? __pfx_table_load+0x10/0x10 [ 131.026869][ T6399] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 131.026916][ T6399] ? __fget_files+0x2a/0x420 [ 131.026947][ T6399] ? bpf_lsm_file_ioctl+0x9/0x20 [ 131.026974][ T6399] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 131.027001][ T6399] __se_sys_ioctl+0xfc/0x170 [ 131.027032][ T6399] do_syscall_64+0x166/0x520 [ 131.027055][ T6399] ? trace_irq_disable+0x3b/0x140 [ 131.027082][ T6399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.027103][ T6399] ? clear_bhb_loop+0x70/0xc0 [ 131.027126][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.027145][ T6399] RIP: 0033:0x7fe131b9f559 [ 131.027163][ T6399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 2 ** replaying previous printk message ** [ 131.027163][ T6399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.027181][ T6399] RSP: 002b:00007fe132b0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.027202][ T6399] RAX: ffffffffffffffda RBX: 00007fe131e25fa0 RCX: 00007fe131b9f559 [ 131.027217][ T6399] RDX: 0000200000002d80 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 131.027231][ T6399] RBP: 00007fe131c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 131.027244][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.027256][ T6399] R13: 00007fe131e26038 R14: 00007fe131e25fa0 R15: 00007ffe0c573b78 [ 131.027280][ T6399] [ 131.027288][ T6399] [ 131.027293][ T6399] Allocated by task 6399: [ 131.027302][ T6399] kasan_save_track+0x3e/0x80 [ 131.027327][ T6399] __kasan_kmalloc+0x93/0xb0 [ 131.027359][ T6399] __kmalloc_cache_node_noprof+0x3cc/0x620 [ 131.027383][ T6399] dm_get_table_device+0x23e/0x730 [ 131.027404][ T6399] dm_get_device+0x327/0x760 [ 131.027421][ T6399] snapshot_ctr+0x2b2/0x1340 [ 131.027443][ T6399] dm_table_add_target+0x58d/0xc70 [ 131.027461][ T6399] table_load+0x325/0x8a0 [ 131.027477][ T6399] dm_ctl_ioctl+0x9ec/0xe10 [ 131.027504][ T6399] __se_sys_ioctl+0xfc/0x170 [ 131.027530][ T6399] do_syscall_64+0x166/0x520 [ 131.027547][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.027564][ T6399] [ 131.027568][ T6399] Freed by task 6399: [ 131.027576][ T6399] kasan_save_track+0x3e/0x80 [ 131.027599][ T6399] kasan_save_free_info+0x40/0x50 [ 131.027618][ T6399] __kasan_slab_free+0x5c/0x80 [ 131.027643][ T6399] kfree+0x1c5/0x650 [ 131.027660][ T6399] dm_put_table_device+0x255/0x2a0 [ 131.027681][ T6399] dm_get_device+0x56f/0x760 [ 131.027698][ T6399] snapshot_ctr+0x471/0x1340 [ 131.027720][ T6399] dm_table_add_target+0x58d/0xc70 [ 131.027738][ T6399] table_load+0x325/0x8a0 [ 131.027753][ T6399] dm_ctl_ioctl+0x9ec/0xe10 [ 131.027779][ T6399] __se_sys_ioctl+0xfc/0x170 [ 131.027805][ T6399] do_syscall_64+0x166/0x520 [ 131.027825][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.027843][ T6399] [ 131.027848][ T6399] The buggy address belongs to the object at ffff8880780e2e00 [ 131.027848][ T6399] which belongs to the cache kmalloc-96 of size 96 [ 131.027864][ T6399] The buggy address is located 24 bytes inside of [ 131.027864][ T6399] freed 96-byte region [ffff8880780e2e00, ffff8880780e2e60) [ 131.027882][ T6399] [ 131.027887][ T6399] The buggy address belongs to the physical page: [ 131.027905][ T6399] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x780e2 [ 131.027923][ T6399] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.027940][ T6399] page_type: f5(slab) [ 131.027958][ T6399] raw: 00fff00000000000 ffff88813ff28280 dead000000000100 dead000000000122 [ 131.027976][ T6399] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 131.027987][ T6399] page dumped because: kasan: bad access detected [ 131.028000][ T6399] page_owner tracks the page as allocated [ 131.028008][ T6399] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5636, tgid 5636 (syz-executor), ts 104483245569 [ 131.028056][ T6399] post_alloc_hook+0x1f9/0x250 [ 131.028077][ T6399] get_page_from_freelist+0x220f/0x2280 [ 131.028102][ T6399] __alloc_frozen_pages_noprof+0x1fe/0x410 [ 131.028126][ T6399] allocate_slab+0x7d/0x5e0 [ 131.028142][ T6399] refill_objects+0x2d5/0x350 [ 131.028158][ T6399] __pcs_replace_empty_main+0x2c8/0x6c0 [ 131.028186][ T6399] __kmalloc_flags_noprof+0x5c1/0x790 [ 131.028208][ T6399] alloc_slab_obj_exts+0x5c/0x180 [ 131.028227][ T6399] __memcg_slab_post_alloc_hook+0x5f0/0xdb0 [ 131.028252][ T6399] kmem_cache_alloc_noprof+0x362/0x600 [ 131.028272][ T6399] vm_area_dup+0x32/0x8e0 [ 131.028289][ T6399] dup_mmap+0x8d6/0x1e10 [ 131.028306][ T6399] copy_mm+0x115/0x470 [ 131.028330][ T6399] copy_process+0x1ecc/0x44b0 [ 131.028360][ T6399] kernel_clone+0x2d7/0x940 [ 131.028386][ T6399] __x64_sys_clone+0x1b6/0x230 [ 131.028413][ T6399] page last free pid 6080 tgid 6079 ts 104419098185 stack trace: [ 131.028426][ T6399] __free_frozen_pages+0xc97/0xd90 [ 131.028447][ T6399] tlb_finish_mmu+0x13e/0x220 [ 131.028467][ T6399] exit_mmap+0x4b2/0xa40 [ 131.028484][ T6399] __mmput+0x118/0x420 [ 131.028504][ T6399] exit_mm+0x18e/0x240 [ 131.028521][ T6399] do_exit+0x6a8/0x2360 [ 131.028537][ T6399] do_group_exit+0x22d/0x2f0 [ 131.028555][ T6399] get_signal+0x1216/0x12c0 [ 131.028578][ T6399] arch_do_signal_or_restart+0xbb/0x860 [ 131.028596][ T6399] exit_to_user_mode_loop+0x10e/0x770 [ 131.028621][ T6399] do_syscall_64+0x328/0x520 [ 131.028643][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.028661][ T6399] [ 131.028666][ T6399] Memory state around the buggy address: [ 131.028677][ T6399] ffff8880780e2d00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 131.028690][ T6399] ffff8880780e2d80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 131.028703][ T6399] >ffff8880780e2e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 131.028713][ T6399] ^ [ 131.028724][ T6399] ffff8880780e2e80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 131.028737][ T6399] ffff8880780e2f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 131.028747][ T6399] ================================================================== [ 131.231338][ T6399] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 131.756279][ T6399] CPU: 1 UID: 0 PID: 6399 Comm: syz.4.158 Not tainted syzkaller #0 PREEMPT(full) [ 131.765470][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.775523][ T6399] Call Trace: [ 131.778794][ T6399] [ 131.781713][ T6399] vpanic+0x26f/0x710 [ 131.785686][ T6399] panic+0xc5/0xd0 [ 131.789396][ T6399] ? __pfx_panic+0x10/0x10 [ 131.793798][ T6399] ? preempt_schedule_thunk+0x16/0x40 [ 131.799168][ T6399] ? snapshot_ctr+0x5cb/0x1340 [ 131.803931][ T6399] ? preempt_schedule_thunk+0x16/0x40 [ 131.809303][ T6399] ? snapshot_ctr+0x5cb/0x1340 [ 131.814060][ T6399] check_panic_on_warn+0x89/0xb0 [ 131.818989][ T6399] ? snapshot_ctr+0x5cb/0x1340 [ 131.823768][ T6399] end_report+0x73/0x170 [ 131.828014][ T6399] ? snapshot_ctr+0x5cb/0x1340 [ 131.832770][ T6399] kasan_report+0x128/0x150 [ 131.837270][ T6399] ? snapshot_ctr+0x5cb/0x1340 [ 131.842035][ T6399] snapshot_ctr+0x5cb/0x1340 [ 131.846622][ T6399] ? __pfx_snapshot_ctr+0x10/0x10 [ 131.851634][ T6399] ? skip_spaces+0x8a/0xa0 [ 131.856042][ T6399] ? dm_split_args+0x50b/0x5d0 [ 131.860799][ T6399] dm_table_add_target+0x58d/0xc70 [ 131.865907][ T6399] table_load+0x325/0x8a0 [ 131.870225][ T6399] ? __pfx_table_load+0x10/0x10 [ 131.875065][ T6399] ? __might_fault+0xaf/0x130 [ 131.879733][ T6399] dm_ctl_ioctl+0x9ec/0xe10 [ 131.884239][ T6399] ? __pfx_table_load+0x10/0x10 [ 131.889074][ T6399] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 131.894108][ T6399] ? __fget_files+0x2a/0x420 [ 131.898691][ T6399] ? bpf_lsm_file_ioctl+0x9/0x20 [ 131.903623][ T6399] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 131.908645][ T6399] __se_sys_ioctl+0xfc/0x170 [ 131.913232][ T6399] do_syscall_64+0x166/0x520 [ 131.917811][ T6399] ? trace_irq_disable+0x3b/0x140 [ 131.922834][ T6399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.928895][ T6399] ? clear_bhb_loop+0x70/0xc0 [ 131.933564][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.939441][ T6399] RIP: 0033:0x7fe131b9f559 [ 131.943847][ T6399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.963439][ T6399] RSP: 002b:00007fe132b0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.971863][ T6399] RAX: ffffffffffffffda RBX: 00007fe131e25fa0 RCX: 00007fe131b9f559 [ 131.979820][ T6399] RDX: 0000200000002d80 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 131.987776][ T6399] RBP: 00007fe131c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 131.995733][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.003691][ T6399] R13: 00007fe131e26038 R14: 00007fe131e25fa0 R15: 00007ffe0c573b78 [ 132.011662][ T6399] [ 132.014945][ T6399] Kernel Offset: disabled [ 132.019261][ T6399] Rebooting in 86400 seconds..