program:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES64=r1], 0x48) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES64=r1], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x60}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', @ifru_map={0xef, 0x8dd, 0x745, 0x2, 0x3, 0x5e}}) (async)
ioctl$sock_ifreq(r5, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', @ifru_map={0xef, 0x8dd, 0x745, 0x2, 0x3, 0x5e}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000200)=@framed={{}, [@generic={0x81, 0x0, 0x1, 0x65}]}, &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000400)={0x2, 0x100000000, 0x0, 0x83, 0x3, 0x0, [{0x8, 0x4, 0x390a, '\x00', 0x1006}, {0x90, 0x4, 0x40, '\x00', 0x404}, {0xffffffffffff8000, 0x0, 0x50000000}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
syz_usb_control_io$sierra_net(r7, 0x0, 0x0) (async)
syz_usb_control_io$sierra_net(r7, 0x0, 0x0)
syz_usb_control_io$rtl8150(r7, 0x0, 0x0)
r8 = dup(r6)
write$UHID_INPUT(r8, &(0x7f0000001a00)={0xf, {"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", 0x1000}}, 0x1006)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
[ 93.447672][ T5281] Bluetooth: hci0: command tx timeout
[ 93.458438][ T10] cfg80211: failed to load regulatory.db
[ 93.794449][ T5305] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 93.944083][ T5305] usb 5-1: Using ep0 maxpacket: 16
[ 93.948139][ T5305] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 93.972705][ T5305] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[ 93.978431][ T5305] usb 5-1: config 0 has no interface number 0
[ 93.981555][ T5305] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 93.988883][ T5305] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 93.992719][ T5305] usb 5-1: Product: syz
[ 93.996444][ T5305] usb 5-1: SerialNumber: syz
[ 94.012879][ T5305] usb 5-1: config 0 descriptor??
[ 94.027608][ T5305] cm109 5-1:0.8: invalid payload size 183, expected 4
[ 94.122857][ T5305] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input5
[ 94.300911][ T4695] udevd[4695]: worker [5278] terminated by signal 33 (Unknown signal 33)
[ 94.305682][ T4695] udevd[4695]: worker [5278] failed while handling '/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8'
[ 95.475489][ T5281] Bluetooth: hci0: command tx timeout
[ 96.476886][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71
[ 96.476958][ C0] ------------[ cut here ]------------
[ 96.476963][ C0] URB ffff888012fd0400 submitted while active
[ 96.477003][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: syz.0.0/5318
[ 96.488963][ C0] Modules linked in:
[ 96.490714][ C0] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 96.494339][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.498399][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 96.500587][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 39 c8 c9 fa 49 83 3e 00 74 40 e8 2e 52 58 fa 48 8d 3d 37 75 18 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 13 52 58 fa eb 05 e8 0c 52
[ 96.508551][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010046
[ 96.511241][ C0] RAX: ffffffff876f7a02 RBX: ffff888012fd0400 RCX: ffff888012f14b00
[ 96.514617][ C0] RDX: 0000000000000100 RSI: ffff888012fd0400 RDI: ffffffff9087ef40
[ 96.517886][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000004
[ 96.521226][ C0] R10: dffffc0000000000 R11: fffff52000000f3c R12: ffff888012413848
[ 96.524546][ C0] R13: ffff888012413830 R14: ffff888012fd0408 R15: 0000000000000820
[ 96.527975][ C0] FS: 0000000000000000(0000) GS:ffff88808c2cd000(0000) knlGS:0000000000000000
[ 96.531751][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 96.534584][ C0] CR2: 00007f9ea27e29a0 CR3: 000000004f3a5000 CR4: 0000000000352ef0
[ 96.538110][ C0] Call Trace:
[ 96.539646][ C0]
[ 96.540923][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 96.543514][ C0] cm109_urb_irq_callback+0x6fb/0xca0
[ 96.545848][ C0] __usb_hcd_giveback_urb+0x378/0x540
[ 96.548012][ C0] dummy_timer+0xa91/0x4cf0
[ 96.549848][ C0] ? __lock_acquire+0x6df/0x2e50
[ 96.551685][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 96.553546][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 96.555404][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 96.557885][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 96.559881][ C0] __hrtimer_run_queues+0x3bc/0xa10
[ 96.562151][ C0] hrtimer_run_softirq+0x1e3/0x2e0
[ 96.564337][ C0] handle_softirqs+0x226/0x860
[ 96.566256][ C0] ? __irq_exit_rcu+0xcb/0x220
[ 96.568169][ C0] __irq_exit_rcu+0xcb/0x220
[ 96.570077][ C0] irq_exit_rcu+0x9/0x30
[ 96.571579][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 96.573767][ C0]
[ 96.575081][ C0]
[ 96.576383][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 96.579056][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 96.581958][ C0] Code: f7 e8 5d b5 ba f5 f7 c3 00 02 00 00 74 05 e8 60 03 e7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f4 ce ab f5 65 48 8b 05 9c 21 ac 07 48 85 c0 74 18 5b 41 5e c3
[ 96.590021][ C0] RSP: 0018:ffffc9000ed7f6e8 EFLAGS: 00000206
[ 96.592588][ C0] RAX: 0000000000000002 RBX: 0000000000000202 RCX: 0000000000000001
[ 96.595884][ C0] RDX: 0000000000000006 RSI: ffffffff8e477aa7 RDI: 0000000000000001
[ 96.599168][ C0] RBP: ffffc9000ed7f7e0 R08: ffffffff907a3a7f R09: 1ffffffff20f474f
[ 96.602377][ C0] R10: dffffc0000000000 R11: fffffbfff20f4750 R12: dffffc0000000000
[ 96.605721][ C0] R13: ffff88801f449400 R14: ffffffff8fb01f40 R15: 0000000000000001
[ 96.609330][ C0] usb_hcd_poll_rh_status+0x3e9/0x600
[ 96.611668][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10
[ 96.614220][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 96.616792][ C0] dummy_pullup+0xde/0x120
[ 96.618725][ C0] ? __pfx_dummy_pullup+0x10/0x10
[ 96.620870][ C0] usb_gadget_disconnect_locked+0x126/0x480
[ 96.623439][ C0] gadget_unbind_driver+0xc2/0x410
[ 96.625735][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10
[ 96.628138][ C0] device_release_driver_internal+0x48b/0x880
[ 96.630691][ C0] driver_detach+0x1f3/0x2d0
[ 96.632631][ C0] bus_remove_driver+0x226/0x320
[ 96.634774][ C0] usb_gadget_unregister_driver+0x4e/0x70
[ 96.637396][ C0] raw_release+0xd7/0x260
[ 96.639337][ C0] ? __pfx_raw_release+0x10/0x10
[ 96.641419][ C0] __fput+0x418/0xa50
[ 96.643185][ C0] task_work_run+0x1d9/0x270
[ 96.645371][ C0] ? __pfx_task_work_run+0x10/0x10
[ 96.647618][ C0] ? do_exit+0x735/0x2360
[ 96.649495][ C0] ? kmem_cache_free+0x182/0x650
[ 96.651410][ C0] ? put_net+0x191/0x260
[ 96.653158][ C0] do_exit+0x73a/0x2360
[ 96.654797][ C0] ? __pfx_do_exit+0x10/0x10
[ 96.656692][ C0] ? do_raw_spin_lock+0x12b/0x2f0
[ 96.658800][ C0] do_group_exit+0x22d/0x2f0
[ 96.660787][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 96.663021][ C0] get_signal+0x121b/0x12c0
[ 96.665085][ C0] arch_do_signal_or_restart+0xbb/0x860
[ 96.667510][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 96.670141][ C0] exit_to_user_mode_loop+0x10e/0x770
[ 96.672185][ C0] ? rcu_is_watching+0x16/0xb0
[ 96.674030][ C0] do_syscall_64+0x328/0x520
[ 96.676027][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.678643][ C0] ? clear_bhb_loop+0x70/0xc0
[ 96.680656][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.683162][ C0] RIP: 0033:0x7f9ea199e159
[ 96.685004][ C0] Code: Unable to access opcode bytes at 0x7f9ea199e12f.
[ 96.687951][ C0] RSP: 002b:00007f9ea2802fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[ 96.691370][ C0] RAX: fffffffffffffe00 RBX: 00007f9ea1c25fa0 RCX: 00007f9ea199e159
[ 96.694669][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[ 96.698155][ C0] RBP: 00007f9ea1a35024 R08: 0000000000000000 R09: 0000000000000000
[ 96.701830][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.705472][ C0] R13: 00007f9ea1c26038 R14: 00007f9ea1c25fa0 R15: 00007ffd96425438
[ 96.709073][ C0]
[ 96.710320][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 96.713572][ C0] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 96.717554][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.721699][ C0] Call Trace:
[ 96.723122][ C0]
[ 96.724292][ C0] vpanic+0x56d/0xa60
[ 96.726008][ C0] ? __pfx__printk+0x10/0x10
[ 96.727982][ C0] ? __pfx_vpanic+0x10/0x10
[ 96.729878][ C0] ? is_bpf_text_address+0x292/0x2b0
[ 96.732035][ C0] ? is_bpf_text_address+0x26/0x2b0
[ 96.734338][ C0] panic+0xc5/0xd0
[ 96.736022][ C0] ? __pfx_panic+0x10/0x10
[ 96.737787][ C0] __warn+0x315/0x4c0
[ 96.739389][ C0] ? usb_submit_urb+0x79/0x18b0
[ 96.741437][ C0] ? usb_submit_urb+0x79/0x18b0
[ 96.743581][ C0] __report_bug+0x276/0x570
[ 96.745683][ C0] ? usb_submit_urb+0x79/0x18b0
[ 96.747718][ C0] ? __pfx___report_bug+0x10/0x10
[ 96.749874][ C0] ? __lock_acquire+0x6df/0x2e50
[ 96.751998][ C0] report_bug_entry+0x19b/0x290
[ 96.754050][ C0] ? usb_submit_urb+0x7c/0x18b0
[ 96.756266][ C0] ? usb_submit_urb+0x81/0x18b0
[ 96.758426][ C0] handle_bug+0xce/0x200
[ 96.760257][ C0] exc_invalid_op+0x1a/0x50
[ 96.762302][ C0] asm_exc_invalid_op+0x1a/0x20
[ 96.764454][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 96.766874][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 39 c8 c9 fa 49 83 3e 00 74 40 e8 2e 52 58 fa 48 8d 3d 37 75 18 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 13 52 58 fa eb 05 e8 0c 52
[ 96.774968][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010046
[ 96.777579][ C0] RAX: ffffffff876f7a02 RBX: ffff888012fd0400 RCX: ffff888012f14b00
[ 96.780782][ C0] RDX: 0000000000000100 RSI: ffff888012fd0400 RDI: ffffffff9087ef40
[ 96.784173][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000004
[ 96.787438][ C0] R10: dffffc0000000000 R11: fffff52000000f3c R12: ffff888012413848
[ 96.790891][ C0] R13: ffff888012413830 R14: ffff888012fd0408 R15: 0000000000000820
[ 96.794413][ C0] ? usb_submit_urb+0x72/0x18b0
[ 96.796195][ C0] ? usb_submit_urb+0x72/0x18b0
[ 96.798112][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 96.800597][ C0] cm109_urb_irq_callback+0x6fb/0xca0
[ 96.802774][ C0] __usb_hcd_giveback_urb+0x378/0x540
[ 96.805093][ C0] dummy_timer+0xa91/0x4cf0
[ 96.807101][ C0] ? __lock_acquire+0x6df/0x2e50
[ 96.809239][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 96.811622][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 96.813679][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 96.816292][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 96.818376][ C0] __hrtimer_run_queues+0x3bc/0xa10
[ 96.820543][ C0] hrtimer_run_softirq+0x1e3/0x2e0
[ 96.822673][ C0] handle_softirqs+0x226/0x860
[ 96.824767][ C0] ? __irq_exit_rcu+0xcb/0x220
[ 96.826776][ C0] __irq_exit_rcu+0xcb/0x220
[ 96.828458][ C0] irq_exit_rcu+0x9/0x30
[ 96.830048][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 96.832208][ C0]
[ 96.833530][ C0]
[ 96.834892][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 96.837606][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 96.840436][ C0] Code: f7 e8 5d b5 ba f5 f7 c3 00 02 00 00 74 05 e8 60 03 e7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f4 ce ab f5 65 48 8b 05 9c 21 ac 07 48 85 c0 74 18 5b 41 5e c3
[ 96.848238][ C0] RSP: 0018:ffffc9000ed7f6e8 EFLAGS: 00000206
[ 96.850752][ C0] RAX: 0000000000000002 RBX: 0000000000000202 RCX: 0000000000000001
[ 96.853685][ C0] RDX: 0000000000000006 RSI: ffffffff8e477aa7 RDI: 0000000000000001
[ 96.856922][ C0] RBP: ffffc9000ed7f7e0 R08: ffffffff907a3a7f R09: 1ffffffff20f474f
[ 96.860320][ C0] R10: dffffc0000000000 R11: fffffbfff20f4750 R12: dffffc0000000000
[ 96.863690][ C0] R13: ffff88801f449400 R14: ffffffff8fb01f40 R15: 0000000000000001
[ 96.867048][ C0] usb_hcd_poll_rh_status+0x3e9/0x600
[ 96.869400][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10
[ 96.871995][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 96.874581][ C0] dummy_pullup+0xde/0x120
[ 96.876567][ C0] ? __pfx_dummy_pullup+0x10/0x10
[ 96.878741][ C0] usb_gadget_disconnect_locked+0x126/0x480
[ 96.881043][ C0] gadget_unbind_driver+0xc2/0x410
[ 96.883286][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10
[ 96.885770][ C0] device_release_driver_internal+0x48b/0x880
[ 96.888435][ C0] driver_detach+0x1f3/0x2d0
[ 96.890388][ C0] bus_remove_driver+0x226/0x320
[ 96.892265][ C0] usb_gadget_unregister_driver+0x4e/0x70
[ 96.894398][ C0] raw_release+0xd7/0x260
[ 96.896106][ C0] ? __pfx_raw_release+0x10/0x10
[ 96.897938][ C0] __fput+0x418/0xa50
[ 96.899491][ C0] task_work_run+0x1d9/0x270
[ 96.901401][ C0] ? __pfx_task_work_run+0x10/0x10
[ 96.903646][ C0] ? do_exit+0x735/0x2360
[ 96.905556][ C0] ? kmem_cache_free+0x182/0x650
[ 96.907729][ C0] ? put_net+0x191/0x260
[ 96.909610][ C0] do_exit+0x73a/0x2360
[ 96.911424][ C0] ? __pfx_do_exit+0x10/0x10
[ 96.913454][ C0] ? do_raw_spin_lock+0x12b/0x2f0
[ 96.915651][ C0] do_group_exit+0x22d/0x2f0
[ 96.917685][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 96.919902][ C0] get_signal+0x121b/0x12c0
[ 96.921898][ C0] arch_do_signal_or_restart+0xbb/0x860
[ 96.924322][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 96.927026][ C0] exit_to_user_mode_loop+0x10e/0x770
[ 96.929291][ C0] ? rcu_is_watching+0x16/0xb0
[ 96.931488][ C0] do_syscall_64+0x328/0x520
[ 96.933632][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.936254][ C0] ? clear_bhb_loop+0x70/0xc0
[ 96.938422][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.941519][ C0] RIP: 0033:0x7f9ea199e159
[ 96.943764][ C0] Code: Unable to access opcode bytes at 0x7f9ea199e12f.
[ 96.946830][ C0] RSP: 002b:00007f9ea2802fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[ 96.950392][ C0] RAX: fffffffffffffe00 RBX: 00007f9ea1c25fa0 RCX: 00007f9ea199e159
[ 96.953736][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[ 96.957172][ C0] RBP: 00007f9ea1a35024 R08: 0000000000000000 R09: 0000000000000000
[ 96.960473][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.963759][ C0] R13: 00007f9ea1c26038 R14: 00007f9ea1c25fa0 R15: 00007ffd96425438
[ 96.967308][ C0]
[ 96.969265][ C0] Kernel Offset: disabled
[ 96.971530][ C0] Rebooting in 86400 seconds..