last executing test programs: 6.786762597s ago: executing program 1 (id=45): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'veth1_virt_wifi\x00', {0x2}, 0x2}) 6.384239329s ago: executing program 3 (id=47): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'mpc624\x00', [0x3c4, 0xffffffff, 0x2, 0xa, 0x14000000, 0x4, 0xfffffffc, 0x7, 0xffd, 0x7ffe, 0x0, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x0, 0x1, 0x3ff, 0x6, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) 6.065028593s ago: executing program 1 (id=48): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="024068a4e7679ffdbe27d63276", 0xd}, {&(0x7f0000000240)="794cfa", 0x3}], 0x2}, 0x44151) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/125, 0x7d}], 0x1}, 0x3}], 0x1, 0x2160, 0x0) 5.518506474s ago: executing program 0 (id=52): syz_open_dev$dri(0x0, 0x1f, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) 4.780141843s ago: executing program 3 (id=53): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040), 0x8) listen(r1, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 4.77847456s ago: executing program 1 (id=54): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 4.672811414s ago: executing program 1 (id=56): openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'rti800\x00', [0x4f27, 0x5, 0x3, 0x2, 0x400, 0xcc7, 0xfff, 0x27, 0x5, 0x100, 0x8, 0x1, 0x7fff, 0x1, 0x4, 0xe1cc, 0x0, 0x0, 0x3, 0x40000003, 0x89, 0xfff7fdfd, 0x2, 0x20001e56, 0xb, 0xe69, 0x3c, 0xffffffff, 0x105, 0x8000000, 0xfffffff8]}) 4.464279666s ago: executing program 0 (id=57): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) 3.646600788s ago: executing program 3 (id=59): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b51f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) 3.516942666s ago: executing program 3 (id=60): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x19) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xfffffe7fffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.515058051s ago: executing program 0 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 3.470413416s ago: executing program 1 (id=62): unshare(0x2a020400) r0 = socket(0x29, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) 3.452644341s ago: executing program 2 (id=63): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x33) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r6, 0x431, 0x70bd28, 0xfffffffd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x844) 2.116572157s ago: executing program 1 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_unlink(0x0) socket$netlink(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) waitid(0x0, r0, &(0x7f0000000300), 0x20000000, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 1.682592305s ago: executing program 0 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b000000000"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f00000001c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 1.38379313s ago: executing program 2 (id=66): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 1.266387327s ago: executing program 2 (id=67): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000029c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.146571144s ago: executing program 0 (id=68): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280), &(0x7f0000000100)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.146316421s ago: executing program 3 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x100) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) 997.798313ms ago: executing program 2 (id=70): fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe41) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a040, 0x0) 822.56004ms ago: executing program 2 (id=71): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005d80)={0x20, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 25.863571ms ago: executing program 2 (id=72): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) setreuid(0xee00, 0x0) r1 = getuid() setreuid(0xffffffffffffffff, r1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x0, 0x0}) 19.525051ms ago: executing program 3 (id=73): socket$inet_tcp(0x2, 0x1, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$I2C(0x0, 0x10001, 0x240000) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=74): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}, 0x8810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. [ 88.200982][ T5849] cgroup: Unknown subsys name 'net' [ 88.359881][ T5849] cgroup: Unknown subsys name 'cpuset' [ 88.369058][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.132023][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.917736][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.931253][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.939476][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.948471][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.957242][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.967439][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.986363][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.994607][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.011726][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.045911][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.057639][ T5874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.066445][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.075490][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.076460][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.084413][ T5874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.098417][ T5875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.099871][ T5874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.115159][ T5875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.115515][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.131888][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.655260][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 93.884107][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 93.898628][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.906631][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.914555][ T5862] bridge_slave_0: entered allmulticast mode [ 93.922918][ T5862] bridge_slave_0: entered promiscuous mode [ 93.970490][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.978819][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.987215][ T5862] bridge_slave_1: entered allmulticast mode [ 93.994840][ T5862] bridge_slave_1: entered promiscuous mode [ 94.162616][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.175264][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 94.204112][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.231088][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.239197][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.247443][ T5864] bridge_slave_0: entered allmulticast mode [ 94.255844][ T5864] bridge_slave_0: entered promiscuous mode [ 94.271523][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 94.315873][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.323715][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.331773][ T5864] bridge_slave_1: entered allmulticast mode [ 94.339845][ T5864] bridge_slave_1: entered promiscuous mode [ 94.367012][ T5862] team0: Port device team_slave_0 added [ 94.418642][ T5862] team0: Port device team_slave_1 added [ 94.463913][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.503062][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.514449][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.522938][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.550815][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.565398][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.572754][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.600180][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.688171][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.696427][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.704242][ T5867] bridge_slave_0: entered allmulticast mode [ 94.713839][ T5867] bridge_slave_0: entered promiscuous mode [ 94.739886][ T5864] team0: Port device team_slave_0 added [ 94.749818][ T5864] team0: Port device team_slave_1 added [ 94.770568][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.778775][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.787064][ T5867] bridge_slave_1: entered allmulticast mode [ 94.795076][ T5867] bridge_slave_1: entered promiscuous mode [ 94.891092][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.903244][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.913132][ T5859] bridge_slave_0: entered allmulticast mode [ 94.921207][ T5859] bridge_slave_0: entered promiscuous mode [ 94.950375][ T5862] hsr_slave_0: entered promiscuous mode [ 94.958651][ T5862] hsr_slave_1: entered promiscuous mode [ 94.969335][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.977635][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.007614][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.021954][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.030148][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.038383][ T5859] bridge_slave_1: entered allmulticast mode [ 95.046193][ T5859] bridge_slave_1: entered promiscuous mode [ 95.056081][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.070857][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.082925][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.092199][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.124353][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.207046][ T5870] Bluetooth: hci2: command tx timeout [ 95.207052][ T52] Bluetooth: hci0: command tx timeout [ 95.207460][ T5870] Bluetooth: hci3: command tx timeout [ 95.213551][ T52] Bluetooth: hci1: command tx timeout [ 95.240987][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.273503][ T5867] team0: Port device team_slave_0 added [ 95.292068][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.332608][ T5867] team0: Port device team_slave_1 added [ 95.397068][ T5864] hsr_slave_0: entered promiscuous mode [ 95.404908][ T5864] hsr_slave_1: entered promiscuous mode [ 95.413240][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 95.423153][ T5864] Cannot create hsr debugfs directory [ 95.452016][ T5859] team0: Port device team_slave_0 added [ 95.477479][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.484904][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.514002][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.529043][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.536472][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.563163][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.590534][ T5859] team0: Port device team_slave_1 added [ 95.669523][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.677339][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.709498][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.723160][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.730861][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.758804][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.888902][ T5867] hsr_slave_0: entered promiscuous mode [ 95.895991][ T5867] hsr_slave_1: entered promiscuous mode [ 95.902605][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 95.909100][ T5867] Cannot create hsr debugfs directory [ 95.998017][ T5859] hsr_slave_0: entered promiscuous mode [ 96.004893][ T5859] hsr_slave_1: entered promiscuous mode [ 96.011711][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 96.018307][ T5859] Cannot create hsr debugfs directory [ 96.315830][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.331430][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.365577][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.402852][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.497385][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.515370][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.552930][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.568801][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.621448][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.636719][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.656163][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.674753][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.794657][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.819765][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.845490][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.857552][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.044308][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.058203][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.097132][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.125237][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.152009][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.183691][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.192470][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.209069][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.216960][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.234908][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.258446][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.266599][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.279957][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.287792][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.295884][ T52] Bluetooth: hci1: command tx timeout [ 97.299486][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.301814][ T5875] Bluetooth: hci3: command tx timeout [ 97.309394][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.309814][ T5870] Bluetooth: hci0: command tx timeout [ 97.319160][ T5875] Bluetooth: hci2: command tx timeout [ 97.351473][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.359508][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.503350][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.550272][ T24] cfg80211: failed to load regulatory.db [ 97.561593][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.604936][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.612262][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.704002][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.712073][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.020026][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.204545][ T5862] veth0_vlan: entered promiscuous mode [ 98.234952][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.274038][ T5862] veth1_vlan: entered promiscuous mode [ 98.317968][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.379550][ T5862] veth0_macvtap: entered promiscuous mode [ 98.414882][ T5862] veth1_macvtap: entered promiscuous mode [ 98.458693][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.489580][ T5859] veth0_vlan: entered promiscuous mode [ 98.508932][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.524732][ T5864] veth0_vlan: entered promiscuous mode [ 98.550699][ T5859] veth1_vlan: entered promiscuous mode [ 98.561967][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.590573][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.601333][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.629860][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.662382][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.674550][ T5864] veth1_vlan: entered promiscuous mode [ 98.730734][ T5867] veth0_vlan: entered promiscuous mode [ 98.779339][ T5859] veth0_macvtap: entered promiscuous mode [ 98.791300][ T5867] veth1_vlan: entered promiscuous mode [ 98.829644][ T5859] veth1_macvtap: entered promiscuous mode [ 98.856502][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.864769][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.903678][ T5864] veth0_macvtap: entered promiscuous mode [ 98.939425][ T5864] veth1_macvtap: entered promiscuous mode [ 98.953397][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.961976][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.982819][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.984416][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.039509][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.070039][ T5867] veth0_macvtap: entered promiscuous mode [ 99.082744][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.099318][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.111837][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.115553][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.142866][ T5867] veth1_macvtap: entered promiscuous mode [ 99.160550][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.214331][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.251060][ T5955] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 99.271531][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.309583][ T1096] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.320160][ T1096] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.354881][ T1096] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.365579][ T1096] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.366884][ T5875] Bluetooth: hci1: command tx timeout [ 99.376811][ T52] Bluetooth: hci0: command tx timeout [ 99.376865][ T52] Bluetooth: hci3: command tx timeout [ 99.386382][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.394351][ T5870] Bluetooth: hci2: command tx timeout [ 99.456655][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.499554][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.512849][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.531608][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.540264][ T5957] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.548671][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.628859][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.693533][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.708302][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.809582][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.844084][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.899136][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.921280][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.036296][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.101120][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.237883][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.815295][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.244463][ T5974] usb usb8: usbfs: process 5974 (syz.3.4) did not claim interface 0 before use [ 101.280395][ T5974] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.4' resets device [ 101.447961][ T5875] Bluetooth: hci3: command tx timeout [ 101.454092][ T5870] Bluetooth: hci0: command tx timeout [ 101.454127][ T5182] Bluetooth: hci2: command tx timeout [ 101.468019][ T52] Bluetooth: hci1: command tx timeout [ 101.711505][ T5989] tipc: Started in network mode [ 101.719872][ T5989] tipc: Node identity 6e61db16d24b, cluster identity 4711 [ 101.728794][ T5989] tipc: Enabled bearer , priority 0 [ 101.757251][ T5989] syzkaller0: entered promiscuous mode [ 101.771187][ T5989] syzkaller0: entered allmulticast mode [ 101.830077][ T5989] tipc: Resetting bearer [ 101.849867][ T5988] tipc: Resetting bearer [ 101.936622][ T5988] tipc: Disabling bearer [ 102.138192][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 103.577581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.936142][ T5934] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.300429][ T5934] usb 3-1: config 0 interface 0 altsetting 244 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.317315][ T5934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 104.324978][ T5934] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 104.335865][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.994513][ T5934] usb 3-1: config 0 descriptor?? [ 104.996125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.000782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.009133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.086018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.096701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 105.107587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.126101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 105.135720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 105.144756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 107.465203][ T5934] usbhid 3-1:0.0: can't add hid device: -71 [ 107.475777][ T5934] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 107.517656][ T5934] usb 3-1: USB disconnect, device number 2 [ 107.704665][ T6082] openvswitch: netlink: Flow key attr not present in new flow. [ 107.900105][ T6087] netlink: 368 bytes leftover after parsing attributes in process `syz.0.46'. [ 109.846473][ T5182] Bluetooth: hci3: command 0x0405 tx timeout [ 111.857616][ T6138] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 112.504203][ T6140] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 112.780941][ T52] Bluetooth: hci4: sending frame failed (-49) [ 112.789141][ T5182] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 114.759983][ T6168] ================================================================== [ 114.768281][ T6168] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0 [ 114.776826][ T6168] Read of size 8 at addr ffff88802423c408 by task syz.3.73/6168 [ 114.784829][ T6168] [ 114.787176][ T6168] CPU: 1 UID: 0 PID: 6168 Comm: syz.3.73 Not tainted syzkaller #0 PREEMPT(full) [ 114.787202][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.787214][ T6168] Call Trace: [ 114.787225][ T6168] [ 114.787235][ T6168] dump_stack_lvl+0x189/0x250 [ 114.787258][ T6168] ? __kasan_check_byte+0x12/0x40 [ 114.787284][ T6168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.787303][ T6168] ? lock_release+0x4b/0x3e0 [ 114.787330][ T6168] ? __virt_addr_valid+0x4a5/0x5c0 [ 114.787363][ T6168] print_report+0xca/0x240 [ 114.787384][ T6168] ? change_page_attr_set_clr+0x625/0xfc0 [ 114.787407][ T6168] kasan_report+0x118/0x150 [ 114.787432][ T6168] ? change_page_attr_set_clr+0x625/0xfc0 [ 114.787459][ T6168] change_page_attr_set_clr+0x625/0xfc0 [ 114.787486][ T6168] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 114.787510][ T6168] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 114.787542][ T6168] ? memtype_reserve+0x874/0xb30 [ 114.787581][ T6168] _set_pages_array+0x145/0x270 [ 114.787609][ T6168] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 114.787644][ T6168] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 114.787681][ T6168] drm_gem_shmem_pin_locked+0x22c/0x460 [ 114.787713][ T6168] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 114.787747][ T6168] ? ww_mutex_lock+0x3f/0x1c0 [ 114.787771][ T6168] drm_gem_map_attach+0x19c/0x1f0 [ 114.787806][ T6168] dma_buf_dynamic_attach+0x1ea/0x3d0 [ 114.787837][ T6168] ? __fget_files+0x3a0/0x420 [ 114.787866][ T6168] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 114.787887][ T6168] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 114.787907][ T6168] ? drm_gem_prime_fd_to_handle+0x185/0x4d0 [ 114.787939][ T6168] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 114.787961][ T6168] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 114.787993][ T6168] drm_ioctl_kernel+0x2cc/0x390 [ 114.788020][ T6168] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 114.788072][ T6168] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 114.788104][ T6168] drm_ioctl+0x67f/0xb10 [ 114.788140][ T6168] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 114.788175][ T6168] ? __pfx_drm_ioctl+0x10/0x10 [ 114.788208][ T6168] ? __fget_files+0x3a0/0x420 [ 114.788235][ T6168] ? __fget_files+0x2a/0x420 [ 114.788265][ T6168] ? bpf_lsm_file_ioctl+0x9/0x20 [ 114.788284][ T6168] ? __pfx_drm_ioctl+0x10/0x10 [ 114.788311][ T6168] __se_sys_ioctl+0xf9/0x170 [ 114.788333][ T6168] do_syscall_64+0xfa/0xfa0 [ 114.788351][ T6168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.788370][ T6168] ? asm_sysvec_call_function_single+0x1a/0x20 [ 114.788390][ T6168] ? clear_bhb_loop+0x60/0xb0 [ 114.788413][ T6168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.788434][ T6168] RIP: 0033:0x7feb38b8ebe9 [ 114.788454][ T6168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.788473][ T6168] RSP: 002b:00007feb39a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.788498][ T6168] RAX: ffffffffffffffda RBX: 00007feb38dc6090 RCX: 00007feb38b8ebe9 [ 114.788513][ T6168] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000007 [ 114.788528][ T6168] RBP: 00007feb38c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 114.788542][ T6168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.788555][ T6168] R13: 00007feb38dc6128 R14: 00007feb38dc6090 R15: 00007fffc2a443d8 [ 114.788578][ T6168] [ 114.788586][ T6168] [ 115.144537][ T6168] Allocated by task 6168: [ 115.149515][ T6168] kasan_save_track+0x3e/0x80 [ 115.155895][ T6168] __kasan_kmalloc+0x93/0xb0 [ 115.160961][ T6168] __kvmalloc_node_noprof+0x5cd/0x910 [ 115.166631][ T6168] drm_gem_get_pages+0x166/0xa20 [ 115.172141][ T6168] drm_gem_shmem_get_pages_locked+0x201/0x440 [ 115.179213][ T6168] drm_gem_shmem_pin_locked+0x22c/0x460 [ 115.185409][ T6168] drm_gem_map_attach+0x19c/0x1f0 [ 115.191426][ T6168] dma_buf_dynamic_attach+0x1ea/0x3d0 [ 115.197200][ T6168] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 115.203658][ T6168] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 115.210126][ T6168] drm_ioctl_kernel+0x2cc/0x390 [ 115.215455][ T6168] drm_ioctl+0x67f/0xb10 [ 115.220366][ T6168] __se_sys_ioctl+0xf9/0x170 [ 115.225964][ T6168] do_syscall_64+0xfa/0xfa0 [ 115.244924][ T6168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.252428][ T6168] [ 115.255042][ T6168] The buggy address belongs to the object at ffff88802423c000 [ 115.255042][ T6168] which belongs to the cache kmalloc-2k of size 2048 [ 115.270693][ T6168] The buggy address is located 0 bytes to the right of [ 115.270693][ T6168] allocated 1032-byte region [ffff88802423c000, ffff88802423c408) [ 115.286004][ T6168] [ 115.288489][ T6168] The buggy address belongs to the physical page: [ 115.295902][ T6168] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24238 [ 115.305314][ T6168] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 115.314374][ T6168] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 115.322916][ T6168] page_type: f5(slab) [ 115.327007][ T6168] raw: 00fff00000000040 ffff88801a842000 0000000000000000 0000000000000001 [ 115.336328][ T6168] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 115.345378][ T6168] head: 00fff00000000040 ffff88801a842000 0000000000000000 0000000000000001 [ 115.354706][ T6168] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 115.363923][ T6168] head: 00fff00000000003 ffffea0000908e01 00000000ffffffff 00000000ffffffff [ 115.373339][ T6168] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 115.382742][ T6168] page dumped because: kasan: bad access detected [ 115.389632][ T6168] page_owner tracks the page as allocated [ 115.395755][ T6168] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5862, tgid 5862 (syz-executor), ts 98753637812, free_ts 64832981613 [ 115.417854][ T6168] post_alloc_hook+0x240/0x2a0 [ 115.422921][ T6168] get_page_from_freelist+0x21e4/0x22c0 [ 115.428775][ T6168] __alloc_frozen_pages_noprof+0x181/0x370 [ 115.434905][ T6168] alloc_pages_mpol+0x232/0x4a0 [ 115.439781][ T6168] allocate_slab+0x8a/0x330 [ 115.444490][ T6168] ___slab_alloc+0xbd1/0x13f0 [ 115.449384][ T6168] __slab_alloc+0x55/0xa0 [ 115.454091][ T6168] __kmalloc_noprof+0x471/0x7f0 [ 115.459265][ T6168] ieee80211_register_hw+0x1e90/0x40a0 [ 115.464760][ T6168] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 115.471057][ T6168] hwsim_new_radio_nl+0xea4/0x1b10 [ 115.476626][ T6168] genl_family_rcv_msg_doit+0x212/0x300 [ 115.482752][ T6168] genl_rcv_msg+0x60e/0x790 [ 115.487707][ T6168] netlink_rcv_skb+0x208/0x470 [ 115.492971][ T6168] genl_rcv+0x28/0x40 [ 115.497322][ T6168] netlink_unicast+0x82c/0x9e0 [ 115.502378][ T6168] page last free pid 5527 tgid 5527 stack trace: [ 115.508847][ T6168] __free_frozen_pages+0xbc4/0xd30 [ 115.514502][ T6168] __put_partials+0x146/0x170 [ 115.519509][ T6168] put_cpu_partial+0x17c/0x250 [ 115.524593][ T6168] __slab_free+0x2b9/0x390 [ 115.529599][ T6168] qlist_free_all+0x97/0x140 [ 115.534653][ T6168] kasan_quarantine_reduce+0x148/0x160 [ 115.540659][ T6168] __kasan_slab_alloc+0x22/0x80 [ 115.545827][ T6168] __kmalloc_cache_noprof+0x36f/0x6f0 [ 115.551623][ T6168] mpls_dev_notify+0x121/0x7a0 [ 115.556538][ T6168] notifier_call_chain+0x1b3/0x3e0 [ 115.562137][ T6168] register_netdevice+0x1608/0x1ae0 [ 115.567630][ T6168] lapbeth_device_event+0x829/0xae0 [ 115.573117][ T6168] notifier_call_chain+0x1b3/0x3e0 [ 115.578386][ T6168] __dev_notify_flags+0x18d/0x2e0 [ 115.584852][ T6168] netif_change_flags+0xe8/0x1a0 [ 115.590401][ T6168] dev_change_flags+0x130/0x260 [ 115.595619][ T6168] [ 115.598166][ T6168] Memory state around the buggy address: [ 115.604408][ T6168] ffff88802423c300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.612928][ T6168] ffff88802423c380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.621545][ T6168] >ffff88802423c400: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.630786][ T6168] ^ [ 115.635769][ T6168] ffff88802423c480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.644927][ T6168] ffff88802423c500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.654150][ T6168] ================================================================== [ 115.882050][ T6168] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 115.889760][ T6168] CPU: 0 UID: 0 PID: 6168 Comm: syz.3.73 Not tainted syzkaller #0 PREEMPT(full) [ 115.899331][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.909835][ T6168] Call Trace: [ 115.913304][ T6168] [ 115.916501][ T6168] dump_stack_lvl+0x99/0x250 [ 115.921188][ T6168] ? __asan_memcpy+0x40/0x70 [ 115.925952][ T6168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.931290][ T6168] ? __pfx__printk+0x10/0x10 [ 115.936070][ T6168] vpanic+0x237/0x6d0 [ 115.940423][ T6168] ? __pfx_vpanic+0x10/0x10 [ 115.945225][ T6168] ? preempt_schedule+0xae/0xc0 [ 115.950148][ T6168] ? __pfx_preempt_schedule+0x10/0x10 [ 115.955550][ T6168] panic+0xb9/0xc0 [ 115.959554][ T6168] ? __pfx_panic+0x10/0x10 [ 115.964112][ T6168] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 115.970394][ T6168] ? change_page_attr_set_clr+0x625/0xfc0 [ 115.976401][ T6168] check_panic_on_warn+0x89/0xb0 [ 115.981636][ T6168] ? change_page_attr_set_clr+0x625/0xfc0 [ 115.987662][ T6168] end_report+0x78/0x160 [ 115.992112][ T6168] kasan_report+0x129/0x150 [ 115.996630][ T6168] ? change_page_attr_set_clr+0x625/0xfc0 [ 116.002458][ T6168] change_page_attr_set_clr+0x625/0xfc0 [ 116.008393][ T6168] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 116.015822][ T6168] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 116.022238][ T6168] ? memtype_reserve+0x874/0xb30 [ 116.027520][ T6168] _set_pages_array+0x145/0x270 [ 116.033041][ T6168] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 116.039586][ T6168] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 116.047168][ T6168] drm_gem_shmem_pin_locked+0x22c/0x460 [ 116.053355][ T6168] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 116.060004][ T6168] ? ww_mutex_lock+0x3f/0x1c0 [ 116.065148][ T6168] drm_gem_map_attach+0x19c/0x1f0 [ 116.070289][ T6168] dma_buf_dynamic_attach+0x1ea/0x3d0 [ 116.076420][ T6168] ? __fget_files+0x3a0/0x420 [ 116.081918][ T6168] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 116.089051][ T6168] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 116.096119][ T6168] ? drm_gem_prime_fd_to_handle+0x185/0x4d0 [ 116.102752][ T6168] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 116.110134][ T6168] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 116.116415][ T6168] drm_ioctl_kernel+0x2cc/0x390 [ 116.121895][ T6168] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 116.128407][ T6168] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 116.134537][ T6168] drm_ioctl+0x67f/0xb10 [ 116.139376][ T6168] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 116.145911][ T6168] ? __pfx_drm_ioctl+0x10/0x10 [ 116.150948][ T6168] ? __fget_files+0x3a0/0x420 [ 116.156085][ T6168] ? __fget_files+0x2a/0x420 [ 116.161433][ T6168] ? bpf_lsm_file_ioctl+0x9/0x20 [ 116.166391][ T6168] ? __pfx_drm_ioctl+0x10/0x10 [ 116.171600][ T6168] __se_sys_ioctl+0xf9/0x170 [ 116.176371][ T6168] do_syscall_64+0xfa/0xfa0 [ 116.181699][ T6168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.188660][ T6168] ? asm_sysvec_call_function_single+0x1a/0x20 [ 116.195089][ T6168] ? clear_bhb_loop+0x60/0xb0 [ 116.200133][ T6168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.206320][ T6168] RIP: 0033:0x7feb38b8ebe9 [ 116.211024][ T6168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.232379][ T6168] RSP: 002b:00007feb39a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.243406][ T6168] RAX: ffffffffffffffda RBX: 00007feb38dc6090 RCX: 00007feb38b8ebe9 [ 116.252172][ T6168] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000007 [ 116.260673][ T6168] RBP: 00007feb38c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 116.269258][ T6168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.277797][ T6168] R13: 00007feb38dc6128 R14: 00007feb38dc6090 R15: 00007fffc2a443d8 [ 116.286998][ T6168] [ 116.290999][ T6168] Kernel Offset: disabled [ 116.295960][ T6168] Rebooting in 86400 seconds..