last executing test programs: 15.819825732s ago: executing program 1 (id=16): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x0, 0x2, 0xbedffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8) r4 = syz_open_pts(r0, 0x101) r5 = dup3(r4, r0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) 15.441980216s ago: executing program 1 (id=17): socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 13.601321962s ago: executing program 1 (id=25): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 13.397135509s ago: executing program 1 (id=29): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 12.237778284s ago: executing program 3 (id=30): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 10.845870622s ago: executing program 3 (id=32): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 9.843224702s ago: executing program 0 (id=35): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 9.113752515s ago: executing program 4 (id=39): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe044, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 8.684658291s ago: executing program 2 (id=40): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc, 0x2010, r2, 0xffff9000) 8.628484359s ago: executing program 3 (id=41): socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000480)='V', 0x1) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000006800), 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) 7.913440978s ago: executing program 4 (id=42): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8cf, &(0x7f00000001c0)={0x0, 0xb0a8, 0x80, 0x1, 0x118}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x40}}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 7.506105689s ago: executing program 0 (id=43): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3454, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2e9}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 7.434221447s ago: executing program 2 (id=44): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.647342144s ago: executing program 0 (id=45): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) dup3(r0, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 5.434285598s ago: executing program 4 (id=46): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x39, 0x1a, r1, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x1, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 5.388357306s ago: executing program 0 (id=47): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.234495925s ago: executing program 2 (id=48): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) 5.1611068s ago: executing program 4 (id=49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ipvlan1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 5.017152555s ago: executing program 3 (id=50): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xfffffffffd110f4f, 0xd, 0x285, 0xf7b, 0x2, 0x0, 0x0, 0x1, 0xfffb}}, 0x50) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x3f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.727495165s ago: executing program 0 (id=51): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)={0x0, 0x30, 0x2, "a1db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.090665576s ago: executing program 3 (id=52): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0xfd74, 0x8, 0x0, 0x164}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=[{0x10, 0x1, 0x401}], 0x10}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0xf23, 0x0, 0xc, 0x0, 0x0) 3.843142193s ago: executing program 2 (id=53): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x80) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.841772003s ago: executing program 1 (id=54): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x100) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') read$FUSE(r2, &(0x7f0000000a40)={0x2020}, 0xffffffb2) 3.801809907s ago: executing program 4 (id=55): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES64=r2], 0x40}}, 0x200040b4) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43b, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 3.155840954s ago: executing program 2 (id=56): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65f, 0x0, 0x9, 0x42}, &(0x7f00000011c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 1.910641473s ago: executing program 1 (id=57): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8cf, &(0x7f00000001c0)={0x0, 0xb0a8, 0x80, 0x1, 0x118}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x40}}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 1.910439612s ago: executing program 4 (id=58): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xd73, 0x80, 0xfffffffd, 0x283}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 1.195589098s ago: executing program 0 (id=59): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x648b03, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0) 270.237884ms ago: executing program 3 (id=60): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000000, 0x9d8}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 0s ago: executing program 2 (id=61): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x0, 0x6, @buffer={0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. [ 71.790643][ T5810] cgroup: Unknown subsys name 'net' [ 71.905035][ T5810] cgroup: Unknown subsys name 'cpuset' [ 71.913499][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.491121][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.657385][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.666236][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.674496][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.674938][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.682212][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.697308][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.706484][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.707236][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.714775][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.721195][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.728685][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.734914][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.742669][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.749161][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.756776][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.762826][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.772776][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.777770][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.784040][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.791283][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.799776][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.812358][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.812517][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.830324][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.831287][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.432084][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 76.562272][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 76.587395][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 76.767199][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 76.791358][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 76.809581][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.817075][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.824265][ T5840] bridge_slave_0: entered allmulticast mode [ 76.831321][ T5840] bridge_slave_0: entered promiscuous mode [ 76.845089][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.852214][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.859302][ T5842] bridge_slave_0: entered allmulticast mode [ 76.866488][ T5842] bridge_slave_0: entered promiscuous mode [ 76.889504][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.896703][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.903903][ T5840] bridge_slave_1: entered allmulticast mode [ 76.910854][ T5840] bridge_slave_1: entered promiscuous mode [ 76.927447][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.934696][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.941825][ T5842] bridge_slave_1: entered allmulticast mode [ 76.949254][ T5842] bridge_slave_1: entered promiscuous mode [ 77.016263][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.023479][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.030573][ T5843] bridge_slave_0: entered allmulticast mode [ 77.037792][ T5843] bridge_slave_0: entered promiscuous mode [ 77.075564][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.082772][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.090041][ T5843] bridge_slave_1: entered allmulticast mode [ 77.097515][ T5843] bridge_slave_1: entered promiscuous mode [ 77.107171][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.124295][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.150603][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.179802][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.245962][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.257573][ T5840] team0: Port device team_slave_0 added [ 77.296255][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.307005][ T5840] team0: Port device team_slave_1 added [ 77.316207][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.323474][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.330587][ T5844] bridge_slave_0: entered allmulticast mode [ 77.337805][ T5844] bridge_slave_0: entered promiscuous mode [ 77.347264][ T5842] team0: Port device team_slave_0 added [ 77.353364][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.360489][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.367727][ T5841] bridge_slave_0: entered allmulticast mode [ 77.374882][ T5841] bridge_slave_0: entered promiscuous mode [ 77.382656][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.389725][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.397051][ T5841] bridge_slave_1: entered allmulticast mode [ 77.404670][ T5841] bridge_slave_1: entered promiscuous mode [ 77.439574][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.446811][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.454381][ T5844] bridge_slave_1: entered allmulticast mode [ 77.461373][ T5844] bridge_slave_1: entered promiscuous mode [ 77.469834][ T5842] team0: Port device team_slave_1 added [ 77.496672][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.503665][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.529578][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.574889][ T5843] team0: Port device team_slave_0 added [ 77.583288][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.593280][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.600235][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.626516][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.665686][ T5843] team0: Port device team_slave_1 added [ 77.673596][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.693780][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.703699][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.710666][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.737002][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.779961][ T5841] team0: Port device team_slave_0 added [ 77.787785][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.797673][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.804975][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.831060][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.855678][ T5841] team0: Port device team_slave_1 added [ 77.861829][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.869109][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.895961][ T5831] Bluetooth: hci3: command tx timeout [ 77.896127][ T5831] Bluetooth: hci2: command tx timeout [ 77.896236][ T5831] Bluetooth: hci1: command tx timeout [ 77.907276][ T5831] Bluetooth: hci0: command tx timeout [ 77.912721][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.930461][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.938111][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.964143][ T5831] Bluetooth: hci4: command tx timeout [ 77.964220][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.066200][ T5840] hsr_slave_0: entered promiscuous mode [ 78.072925][ T5840] hsr_slave_1: entered promiscuous mode [ 78.083400][ T5844] team0: Port device team_slave_0 added [ 78.089769][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.096825][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.123448][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.136296][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.143316][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.169469][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.200052][ T5844] team0: Port device team_slave_1 added [ 78.249178][ T5842] hsr_slave_0: entered promiscuous mode [ 78.255782][ T5842] hsr_slave_1: entered promiscuous mode [ 78.261824][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 78.267683][ T5842] Cannot create hsr debugfs directory [ 78.297830][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.305083][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.331411][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.348375][ T5843] hsr_slave_0: entered promiscuous mode [ 78.354834][ T5843] hsr_slave_1: entered promiscuous mode [ 78.360853][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 78.366679][ T5843] Cannot create hsr debugfs directory [ 78.397459][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.404530][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.430911][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.559622][ T5841] hsr_slave_0: entered promiscuous mode [ 78.566194][ T5841] hsr_slave_1: entered promiscuous mode [ 78.572477][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 78.578201][ T5841] Cannot create hsr debugfs directory [ 78.687596][ T5844] hsr_slave_0: entered promiscuous mode [ 78.694010][ T5844] hsr_slave_1: entered promiscuous mode [ 78.700014][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 78.705804][ T5844] Cannot create hsr debugfs directory [ 79.080020][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.092279][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.112038][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.122145][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.189015][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.198945][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.209671][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.220475][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.304077][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.327337][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.346115][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.357377][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.493714][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.505623][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.516136][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.552100][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.563718][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.624230][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.635000][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.649968][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.666042][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.676697][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.689039][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.725646][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.732902][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.763599][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.770698][ T4201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.805059][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.817740][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.840839][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.848172][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.878115][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.885291][ T4201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.916272][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.951738][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.958864][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.962060][ T5831] Bluetooth: hci0: command tx timeout [ 79.967644][ T5832] Bluetooth: hci1: command tx timeout [ 79.971677][ T5835] Bluetooth: hci2: command tx timeout [ 79.977438][ T5832] Bluetooth: hci3: command tx timeout [ 80.032360][ T5831] Bluetooth: hci4: command tx timeout [ 80.045267][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.052437][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.109924][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.139177][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.194864][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.217506][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.235511][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.242622][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.261450][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.287035][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.294203][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.331650][ T5840] veth0_vlan: entered promiscuous mode [ 80.341391][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.369094][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.376207][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.404840][ T5840] veth1_vlan: entered promiscuous mode [ 80.417113][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.429441][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.436549][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.528118][ T5844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.538894][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.551353][ T5842] veth0_vlan: entered promiscuous mode [ 80.563178][ T5840] veth0_macvtap: entered promiscuous mode [ 80.578415][ T5840] veth1_macvtap: entered promiscuous mode [ 80.609350][ T5842] veth1_vlan: entered promiscuous mode [ 80.624860][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.640663][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.667591][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.699940][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.725047][ T1030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.734618][ T1030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.765840][ T1030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.776623][ T1030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.787567][ T5843] veth0_vlan: entered promiscuous mode [ 80.825652][ T5843] veth1_vlan: entered promiscuous mode [ 80.870333][ T5842] veth0_macvtap: entered promiscuous mode [ 80.880138][ T5841] veth0_vlan: entered promiscuous mode [ 80.907743][ T5842] veth1_macvtap: entered promiscuous mode [ 80.923436][ T5841] veth1_vlan: entered promiscuous mode [ 80.934344][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.956415][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.977905][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.996992][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.024725][ T5844] veth0_vlan: entered promiscuous mode [ 81.058411][ T63] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.067940][ T63] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.086754][ T5844] veth1_vlan: entered promiscuous mode [ 81.099166][ T63] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.108603][ T63] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.121173][ T5843] veth0_macvtap: entered promiscuous mode [ 81.133575][ T5841] veth0_macvtap: entered promiscuous mode [ 81.147278][ T4201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.161320][ T5841] veth1_macvtap: entered promiscuous mode [ 81.167338][ T4201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.183971][ T5843] veth1_macvtap: entered promiscuous mode [ 81.208558][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.235650][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.268651][ T4201] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.299712][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.319229][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.339538][ T4201] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.350584][ T4201] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.360787][ T5844] veth0_macvtap: entered promiscuous mode [ 81.387553][ T4201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.401380][ T5844] veth1_macvtap: entered promiscuous mode [ 81.446241][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.495203][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.515091][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.527941][ T105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.552165][ T105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.594566][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.608845][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.622061][ T105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.631456][ T105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.677463][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.689257][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.752740][ T105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.769032][ T105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.852281][ T105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.876149][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.887465][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.933150][ T63] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.032233][ T5835] Bluetooth: hci1: command tx timeout [ 82.033322][ T5144] Bluetooth: hci0: command tx timeout [ 82.037688][ T5835] Bluetooth: hci2: command tx timeout [ 82.048517][ T5831] Bluetooth: hci3: command tx timeout [ 82.074229][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.091928][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.112078][ T5835] Bluetooth: hci4: command tx timeout [ 82.334206][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.342919][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.479310][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.479337][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.644587][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.644611][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.971110][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.007422][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.497693][ T5825] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 83.517644][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.718602][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 83.753969][ T5825] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 83.767471][ T5825] usb 1-1: New USB device strings: Mfr=172, Product=0, SerialNumber=0 [ 83.784274][ T5825] usb 1-1: Manufacturer: syz [ 83.835426][ T5825] usb 1-1: config 0 descriptor?? [ 83.855336][ T5825] hub 1-1:0.0: USB hub found [ 84.082115][ T5825] hub 1-1:0.0: 1 port detected [ 84.119711][ T5835] Bluetooth: hci0: command tx timeout [ 84.127552][ T5831] Bluetooth: hci1: command tx timeout [ 84.127584][ T5832] Bluetooth: hci3: command tx timeout [ 84.138935][ T5144] Bluetooth: hci2: command tx timeout [ 84.202856][ T5144] Bluetooth: hci4: command tx timeout [ 84.661995][ T5825] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.692113][ T5895] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.847303][ T5825] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 84.858194][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.868566][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 84.882173][ T5895] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.895826][ T5825] usb 5-1: Product: syz [ 84.900013][ T5825] usb 5-1: Manufacturer: syz [ 84.905240][ T5895] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.917106][ T5825] usb 5-1: SerialNumber: syz [ 84.926407][ T5895] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 84.937681][ T5825] usb 5-1: config 0 descriptor?? [ 84.952263][ T5895] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 84.975052][ T5895] usb 4-1: Product: syz [ 84.991187][ T5895] usb 4-1: Manufacturer: syz [ 85.017931][ T5895] hub 4-1:4.0: USB hub found [ 85.236669][ T5895] hub 4-1:4.0: 2 ports detected [ 85.247257][ T5896] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 85.258966][ T5896] usb 1-1-port1: connect-debounce failed [ 85.324855][ T10] usb 1-1: USB disconnect, device number 2 [ 85.374601][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.452646][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.476123][ T5825] usb 5-1: Firmware version (0.0) predates our first public release. [ 85.640548][ T5825] usb 5-1: Please update to version 0.2 or newer [ 85.653342][ T5825] usb 5-1: Firmware: build [ 85.909645][ T5825] usb 5-1: USB disconnect, device number 2 [ 86.524257][ T5888] hub 4-1:4.0: activate --> -90 [ 86.527647][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 86.556095][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.686264][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.793144][ T9] cfg80211: failed to load regulatory.db [ 86.934101][ T9] usb 4-1: USB disconnect, device number 2 [ 91.349534][ T6035] binder: 6034:6035 ioctl c0306201 2000000003c0 returned -14 [ 92.891981][ T5825] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.226290][ T5825] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 93.237910][ T5825] usb 4-1: config 0 has no interface number 0 [ 93.457287][ T5825] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.281041][ T5825] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 94.297739][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.307152][ T5825] usb 4-1: Product: syz [ 94.311427][ T5825] usb 4-1: Manufacturer: syz [ 94.316241][ T5825] usb 4-1: SerialNumber: syz [ 94.329604][ T5825] usb 4-1: config 0 descriptor?? [ 94.363027][ T5825] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 94.718363][ T6059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.759506][ T6059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.863176][ T5881] usb 4-1: USB disconnect, device number 3 [ 94.865761][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 94.883246][ T5881] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 96.512048][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.682003][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 96.714274][ T10] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 96.731967][ T10] usb 1-1: config 0 has no interface number 0 [ 96.758384][ T10] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.818001][ T10] usb 1-1: config 0 interface 89 has no altsetting 0 [ 96.858513][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 96.870140][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.878605][ T10] usb 1-1: Product: syz [ 96.884783][ T10] usb 1-1: Manufacturer: syz [ 96.889787][ T10] usb 1-1: SerialNumber: syz [ 96.900970][ T10] usb 1-1: config 0 descriptor?? [ 96.928983][ T10] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 96.944684][ T10] em28xx 1-1:0.89: Video interface 89 found: [ 97.559629][ T10] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 98.601964][ T10] em28xx 1-1:0.89: AC97 command still being executed: not handled properly! [ 98.811103][ T10] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 98.822365][ T10] em28xx 1-1:0.89: board has no eeprom [ 98.881937][ T10] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 99.402022][ T10] em28xx 1-1:0.89: analog set to bulk mode. [ 99.413311][ T9] em28xx 1-1:0.89: Registering V4L2 extension [ 99.493263][ T10] usb 1-1: USB disconnect, device number 3 [ 99.805547][ T10] em28xx 1-1:0.89: Disconnecting em28xx [ 100.173349][ T9] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 100.211284][ T9] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 100.283548][ T9] em28xx 1-1:0.89: No AC97 audio processor [ 100.318894][ T9] usb 1-1: Decoder not found [ 100.366794][ T9] em28xx 1-1:0.89: failed to create media graph [ 100.424801][ T9] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 100.477978][ T9] em28xx 1-1:0.89: Registering snapshot button... [ 100.507966][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input5 [ 100.548132][ T6119] ================================================================== [ 100.556202][ T6119] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 100.563571][ T6119] Read of size 8 at addr ffff8880413bc748 by task v4l_id/6119 [ 100.571014][ T6119] [ 100.573326][ T6119] CPU: 1 UID: 0 PID: 6119 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 100.573342][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.573349][ T6119] Call Trace: [ 100.573354][ T6119] [ 100.573359][ T6119] dump_stack_lvl+0xe8/0x150 [ 100.573377][ T6119] print_report+0xba/0x230 [ 100.573391][ T6119] ? v4l2_fh_open+0xac/0x420 [ 100.573405][ T6119] kasan_report+0x117/0x150 [ 100.573420][ T6119] ? v4l2_fh_open+0xac/0x420 [ 100.573436][ T6119] v4l2_fh_open+0xac/0x420 [ 100.573450][ T6119] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 100.573466][ T6119] em28xx_v4l2_open+0x157/0x9a0 [ 100.573478][ T6119] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.573492][ T6119] v4l2_open+0x1bf/0x3a0 [ 100.573508][ T6119] chrdev_open+0x4cd/0x5e0 [ 100.573523][ T6119] ? __pfx_chrdev_open+0x10/0x10 [ 100.573537][ T6119] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 100.573550][ T6119] ? __pfx_chrdev_open+0x10/0x10 [ 100.573564][ T6119] do_dentry_open+0x785/0x14e0 [ 100.573582][ T6119] vfs_open+0x3b/0x340 [ 100.573596][ T6119] ? path_openat+0x2df0/0x3860 [ 100.573609][ T6119] path_openat+0x2e08/0x3860 [ 100.573624][ T6119] ? __pfx_stack_trace_save+0x10/0x10 [ 100.573637][ T6119] ? stack_depot_save_flags+0x33/0x810 [ 100.573656][ T6119] ? __pfx_path_openat+0x10/0x10 [ 100.573668][ T6119] ? __x64_sys_openat+0x138/0x170 [ 100.573683][ T6119] ? do_syscall_64+0x14d/0xf80 [ 100.573696][ T6119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.573709][ T6119] ? __lock_acquire+0x6b5/0x2cf0 [ 100.573726][ T6119] do_file_open+0x23e/0x4a0 [ 100.573739][ T6119] ? __pfx_do_file_open+0x10/0x10 [ 100.573756][ T6119] ? _raw_spin_unlock+0x28/0x50 [ 100.573766][ T6119] ? alloc_fd+0x64b/0x6c0 [ 100.573784][ T6119] do_sys_openat2+0x113/0x200 [ 100.573801][ T6119] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.573817][ T6119] ? exc_page_fault+0x6a/0xc0 [ 100.573830][ T6119] ? do_user_addr_fault+0xc6f/0x1340 [ 100.573846][ T6119] __x64_sys_openat+0x138/0x170 [ 100.573863][ T6119] do_syscall_64+0x14d/0xf80 [ 100.573875][ T6119] ? trace_irq_disable+0x3b/0x150 [ 100.573891][ T6119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.573903][ T6119] ? clear_bhb_loop+0x40/0x90 [ 100.573915][ T6119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.573927][ T6119] RIP: 0033:0x7ff86f8a7407 [ 100.573938][ T6119] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 100.573948][ T6119] RSP: 002b:00007ffd340550a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 100.573962][ T6119] RAX: ffffffffffffffda RBX: 00007ff86ff85880 RCX: 00007ff86f8a7407 [ 100.573971][ T6119] RDX: 0000000000000000 RSI: 00007ffd34055f1d RDI: ffffffffffffff9c [ 100.573980][ T6119] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 100.573986][ T6119] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 100.573993][ T6119] R13: 00007ffd340552f0 R14: 00007ff8700ec000 R15: 000055a8ebb5f4d8 [ 100.574006][ T6119] [ 100.574016][ T6119] [ 100.867535][ T6119] Allocated by task 9: [ 100.871583][ T6119] kasan_save_track+0x3e/0x80 [ 100.876248][ T6119] __kasan_kmalloc+0x93/0xb0 [ 100.880827][ T6119] __kmalloc_cache_noprof+0x31c/0x660 [ 100.886185][ T6119] em28xx_v4l2_init+0x10b/0x2e70 [ 100.891114][ T6119] em28xx_init_extension+0x120/0x1c0 [ 100.896383][ T6119] process_scheduled_works+0xb6e/0x18c0 [ 100.901929][ T6119] worker_thread+0xa53/0xfc0 [ 100.906512][ T6119] kthread+0x388/0x470 [ 100.910560][ T6119] ret_from_fork+0x51e/0xb90 [ 100.915135][ T6119] ret_from_fork_asm+0x1a/0x30 [ 100.919891][ T6119] [ 100.922198][ T6119] Freed by task 9: [ 100.925901][ T6119] kasan_save_track+0x3e/0x80 [ 100.930560][ T6119] kasan_save_free_info+0x46/0x50 [ 100.935571][ T6119] __kasan_slab_free+0x5c/0x80 [ 100.940318][ T6119] kfree+0x1c1/0x630 [ 100.944192][ T6119] em28xx_v4l2_init+0x1683/0x2e70 [ 100.949207][ T6119] em28xx_init_extension+0x120/0x1c0 [ 100.954479][ T6119] process_scheduled_works+0xb6e/0x18c0 [ 100.960019][ T6119] worker_thread+0xa53/0xfc0 [ 100.964600][ T6119] kthread+0x388/0x470 [ 100.968656][ T6119] ret_from_fork+0x51e/0xb90 [ 100.973229][ T6119] ret_from_fork_asm+0x1a/0x30 [ 100.977982][ T6119] [ 100.980291][ T6119] The buggy address belongs to the object at ffff8880413bc000 [ 100.980291][ T6119] which belongs to the cache kmalloc-8k of size 8192 [ 100.994327][ T6119] The buggy address is located 1864 bytes inside of [ 100.994327][ T6119] freed 8192-byte region [ffff8880413bc000, ffff8880413be000) [ 101.008279][ T6119] [ 101.010589][ T6119] The buggy address belongs to the physical page: [ 101.016979][ T6119] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x413b8 [ 101.025725][ T6119] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 101.034207][ T6119] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 101.041732][ T6119] page_type: f5(slab) [ 101.045698][ T6119] raw: 00fff00000000040 ffff88813fea6280 dead000000000122 0000000000000000 [ 101.054264][ T6119] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 101.062834][ T6119] head: 00fff00000000040 ffff88813fea6280 dead000000000122 0000000000000000 [ 101.071488][ T6119] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 101.080142][ T6119] head: 00fff00000000003 ffffea000104ee01 00000000ffffffff 00000000ffffffff [ 101.088795][ T6119] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 101.097444][ T6119] page dumped because: kasan: bad access detected [ 101.103837][ T6119] page_owner tracks the page as allocated [ 101.109531][ T6119] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6030, tgid 6027 (syz.0.35), ts 91280979848, free_ts 91266981555 [ 101.130346][ T6119] post_alloc_hook+0x231/0x280 [ 101.135097][ T6119] get_page_from_freelist+0x24dc/0x2580 [ 101.140627][ T6119] __alloc_frozen_pages_noprof+0x18d/0x380 [ 101.146420][ T6119] allocate_slab+0x77/0x660 [ 101.150911][ T6119] refill_objects+0x331/0x3c0 [ 101.155572][ T6119] __pcs_replace_empty_main+0x2e6/0x730 [ 101.161108][ T6119] __kvmalloc_node_noprof+0x657/0x8a0 [ 101.166465][ T6119] netlink_alloc_large_skb+0x62/0x110 [ 101.171826][ T6119] netlink_sendmsg+0x5d4/0xb40 [ 101.176587][ T6119] sock_sendmsg+0x3fb/0x450 [ 101.181080][ T6119] splice_to_socket+0xae2/0x11f0 [ 101.186007][ T6119] direct_splice_actor+0x101/0x160 [ 101.191109][ T6119] splice_direct_to_actor+0x53a/0xc70 [ 101.196466][ T6119] do_splice_direct+0x195/0x290 [ 101.201306][ T6119] do_sendfile+0x535/0x7d0 [ 101.205708][ T6119] __se_sys_sendfile64+0x144/0x1a0 [ 101.210805][ T6119] page last free pid 6030 tgid 6027 stack trace: [ 101.217112][ T6119] __free_frozen_pages+0xc2b/0xdb0 [ 101.222210][ T6119] __slab_free+0x263/0x2b0 [ 101.226613][ T6119] qlist_free_all+0x97/0x100 [ 101.231182][ T6119] kasan_quarantine_reduce+0x148/0x160 [ 101.236621][ T6119] __kasan_slab_alloc+0x22/0x80 [ 101.241460][ T6119] __kmalloc_noprof+0x316/0x760 [ 101.246292][ T6119] copy_splice_read+0x16f/0xaa0 [ 101.251137][ T6119] splice_direct_to_actor+0x4a0/0xc70 [ 101.256495][ T6119] do_splice_direct+0x195/0x290 [ 101.261334][ T6119] do_sendfile+0x535/0x7d0 [ 101.265746][ T6119] __se_sys_sendfile64+0x144/0x1a0 [ 101.270869][ T6119] do_syscall_64+0x14d/0xf80 [ 101.275447][ T6119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.281324][ T6119] [ 101.283647][ T6119] Memory state around the buggy address: [ 101.289260][ T6119] ffff8880413bc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.297301][ T6119] ffff8880413bc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.305349][ T6119] >ffff8880413bc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.313393][ T6119] ^ [ 101.319790][ T6119] ffff8880413bc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.327834][ T6119] ffff8880413bc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.335878][ T6119] ================================================================== [ 101.420814][ T6119] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 101.428051][ T6119] CPU: 1 UID: 0 PID: 6119 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 101.437008][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.447076][ T6119] Call Trace: [ 101.450370][ T6119] [ 101.453314][ T6119] vpanic+0x56c/0xa60 [ 101.457323][ T6119] ? __pfx_vpanic+0x10/0x10 [ 101.461849][ T6119] panic+0xc5/0xd0 [ 101.465592][ T6119] ? __pfx_panic+0x10/0x10 [ 101.470034][ T6119] ? preempt_schedule_thunk+0x16/0x30 [ 101.475429][ T6119] ? preempt_schedule_thunk+0x16/0x30 [ 101.480819][ T6119] ? v4l2_fh_open+0xac/0x420 [ 101.485432][ T6119] check_panic_on_warn+0x89/0xb0 [ 101.490388][ T6119] ? v4l2_fh_open+0xac/0x420 [ 101.495008][ T6119] end_report+0x73/0x180 [ 101.499271][ T6119] ? v4l2_fh_open+0xac/0x420 [ 101.503883][ T6119] kasan_report+0x128/0x150 [ 101.508407][ T6119] ? v4l2_fh_open+0xac/0x420 [ 101.513007][ T6119] v4l2_fh_open+0xac/0x420 [ 101.517427][ T6119] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.523412][ T6119] em28xx_v4l2_open+0x157/0x9a0 [ 101.528263][ T6119] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.533288][ T6119] v4l2_open+0x1bf/0x3a0 [ 101.537540][ T6119] chrdev_open+0x4cd/0x5e0 [ 101.541961][ T6119] ? __pfx_chrdev_open+0x10/0x10 [ 101.546902][ T6119] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 101.553226][ T6119] ? __pfx_chrdev_open+0x10/0x10 [ 101.558168][ T6119] do_dentry_open+0x785/0x14e0 [ 101.562940][ T6119] vfs_open+0x3b/0x340 [ 101.567015][ T6119] ? path_openat+0x2df0/0x3860 [ 101.571778][ T6119] path_openat+0x2e08/0x3860 [ 101.576372][ T6119] ? __pfx_stack_trace_save+0x10/0x10 [ 101.581746][ T6119] ? stack_depot_save_flags+0x33/0x810 [ 101.587211][ T6119] ? __pfx_path_openat+0x10/0x10 [ 101.592152][ T6119] ? __x64_sys_openat+0x138/0x170 [ 101.597181][ T6119] ? do_syscall_64+0x14d/0xf80 [ 101.601943][ T6119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.608015][ T6119] ? __lock_acquire+0x6b5/0x2cf0 [ 101.612957][ T6119] do_file_open+0x23e/0x4a0 [ 101.617465][ T6119] ? __pfx_do_file_open+0x10/0x10 [ 101.622492][ T6119] ? _raw_spin_unlock+0x28/0x50 [ 101.627337][ T6119] ? alloc_fd+0x64b/0x6c0 [ 101.631675][ T6119] do_sys_openat2+0x113/0x200 [ 101.636355][ T6119] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.641562][ T6119] ? exc_page_fault+0x6a/0xc0 [ 101.646239][ T6119] ? do_user_addr_fault+0xc6f/0x1340 [ 101.651529][ T6119] __x64_sys_openat+0x138/0x170 [ 101.656386][ T6119] do_syscall_64+0x14d/0xf80 [ 101.660975][ T6119] ? trace_irq_disable+0x3b/0x150 [ 101.666009][ T6119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.672073][ T6119] ? clear_bhb_loop+0x40/0x90 [ 101.676751][ T6119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.682646][ T6119] RIP: 0033:0x7ff86f8a7407 [ 101.687063][ T6119] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 101.706665][ T6119] RSP: 002b:00007ffd340550a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 101.715079][ T6119] RAX: ffffffffffffffda RBX: 00007ff86ff85880 RCX: 00007ff86f8a7407 [ 101.723049][ T6119] RDX: 0000000000000000 RSI: 00007ffd34055f1d RDI: ffffffffffffff9c [ 101.731015][ T6119] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 101.738980][ T6119] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 101.746951][ T6119] R13: 00007ffd340552f0 R14: 00007ff8700ec000 R15: 000055a8ebb5f4d8 [ 101.754927][ T6119] [ 101.758087][ T6119] Kernel Offset: disabled [ 101.762398][ T6119] Rebooting in 86400 seconds..