last executing test programs: 11.452791467s ago: executing program 0 (id=417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 9.819949746s ago: executing program 0 (id=421): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x8) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0844123, &(0x7f0000000000)=0x6) 8.24844299s ago: executing program 0 (id=426): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b4cb924d893b3fa4968e9f528426ae1732bed1826fa7e2044102c0cc2150d144b6f71d"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 7.027988989s ago: executing program 3 (id=427): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) 6.983032965s ago: executing program 2 (id=428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x24008cd0}, 0x40) 6.128934479s ago: executing program 0 (id=430): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffa) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) 6.100594588s ago: executing program 3 (id=431): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x412240, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, 0x0) 4.391550807s ago: executing program 2 (id=441): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b4cb924d893b3fa4968e9f528426ae1732bed1826fa7e2044102c0cc2150d144b6f71d"], 0x48) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 4.196855377s ago: executing program 0 (id=442): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000440)='Y', 0x1}], 0x2) 4.143877716s ago: executing program 1 (id=443): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_udp(0xa, 0x2, 0x0) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r5, r0, 0x0, 0x80000000) 2.890785589s ago: executing program 4 (id=444): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x987, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x4e}, 0x28) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) 2.743928425s ago: executing program 4 (id=446): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81a0}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="b874386d1929ebfd66cc265d21bc", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.573720123s ago: executing program 2 (id=447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) io_setup(0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfff5, r0, 0x0, 0x0, 0x7}]) 2.214867033s ago: executing program 1 (id=448): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x178}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.86310182s ago: executing program 3 (id=449): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0xa2, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x327681, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.811713671s ago: executing program 4 (id=450): syz_open_dev$I2C(&(0x7f000000adc0), 0x0, 0x60242) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x406002, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gi6', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x4, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000580)=@ethtool_drvinfo={0x3, "87d52890d86dde1f66f6917dcad7d7ad92f7eb71ae6687481d34af7f8009c03e", "282e2debe5b6e2d9cad8f3518100f38f417d72544a2bb7fa11b662fef4dcc9a3", "cc23b1f369d519afed2d88adb87a656e481839cf34fadf59616c090876643d4d", "fde867d2e299226caaee0a94ed24655f91c4544c0517157ec7e68e27a55c6afb", "3d470f000000000000000000010000004000", "0f0c3b4a2fe52f95297b7b93", 0x3, 0x4, 0x3e, 0x5, 0x100b0}}) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000108060018080006040009aaaaaaaaaaaaac1414bb0180c2000003ac14143010e43557a3bb0ec0c92ce94af81feeffeb957e1d03e34d2bfd6b8b5bbe3ed07183b346622549297ebf22bc9074f16c602657cd44e2cab667042c"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x116, 0x1, 0x1100, &(0x7f0000000040)="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"}) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'macsec0\x00', 0x0}) r5 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, 0x0) 1.444996718s ago: executing program 2 (id=451): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 1.429710416s ago: executing program 1 (id=452): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x2c, 0x3, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 39.783902ms ago: executing program 1 (id=453): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x0, r0}, 0x10) 3.557379ms ago: executing program 1 (id=454): syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000740)='./file0\x00', 0x0, 0x2) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bda", 0x7) open(0x0, 0x14927e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5032, &(0x7f0000000440)={0x0, 0x607b, 0x8, 0x0, 0x275}, &(0x7f0000000280)=0x0, &(0x7f0000000700)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendto$inet6(r6, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00005ed000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbff, 0x0, 0x2, 0x0, 0x20}) r7 = getpgid(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r7}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x200000ffe000) 0s ago: executing program 2 (id=455): socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. [ 70.532631][ T5848] cgroup: Unknown subsys name 'net' [ 70.666024][ T5848] cgroup: Unknown subsys name 'cpuset' [ 70.675651][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.496438][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.502943][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.184203][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.762723][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.771039][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.801147][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.802406][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.810234][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.816404][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.830700][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.831619][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.846196][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.854271][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.862500][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.864217][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.870252][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.884151][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.893516][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.898061][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.908620][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.927215][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.935166][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.942794][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.950902][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.958995][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.967174][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.968079][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.983646][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.609147][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 75.647053][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 75.688680][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 75.828427][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 75.913396][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.921188][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.929684][ T5858] bridge_slave_0: entered allmulticast mode [ 75.937390][ T5858] bridge_slave_0: entered promiscuous mode [ 75.996698][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.003945][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.011124][ T5858] bridge_slave_1: entered allmulticast mode [ 76.019262][ T5858] bridge_slave_1: entered promiscuous mode [ 76.026655][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.034671][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.041891][ T5865] bridge_slave_0: entered allmulticast mode [ 76.049147][ T5865] bridge_slave_0: entered promiscuous mode [ 76.120733][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.128423][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.136275][ T5865] bridge_slave_1: entered allmulticast mode [ 76.144409][ T5865] bridge_slave_1: entered promiscuous mode [ 76.247888][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.258618][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 76.271683][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.290996][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.298311][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.305633][ T5873] bridge_slave_0: entered allmulticast mode [ 76.313078][ T5873] bridge_slave_0: entered promiscuous mode [ 76.322732][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.340460][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.365656][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.373059][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.380255][ T5860] bridge_slave_0: entered allmulticast mode [ 76.387811][ T5860] bridge_slave_0: entered promiscuous mode [ 76.396520][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.403775][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.410954][ T5873] bridge_slave_1: entered allmulticast mode [ 76.418364][ T5873] bridge_slave_1: entered promiscuous mode [ 76.473713][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.480913][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.488708][ T5860] bridge_slave_1: entered allmulticast mode [ 76.497076][ T5860] bridge_slave_1: entered promiscuous mode [ 76.530456][ T5858] team0: Port device team_slave_0 added [ 76.542491][ T5865] team0: Port device team_slave_0 added [ 76.550016][ T5865] team0: Port device team_slave_1 added [ 76.587241][ T5858] team0: Port device team_slave_1 added [ 76.621770][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.634603][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.674571][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.717797][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.725068][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.751175][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.765741][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.817001][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.824053][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.850571][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.865140][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.872319][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.899302][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.925382][ T5873] team0: Port device team_slave_0 added [ 76.933551][ T5866] Bluetooth: hci0: command tx timeout [ 76.938937][ T5860] team0: Port device team_slave_0 added [ 76.939444][ T52] Bluetooth: hci4: command tx timeout [ 76.960495][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.967593][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.994204][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.012652][ T5866] Bluetooth: hci3: command tx timeout [ 77.018475][ T52] Bluetooth: hci1: command tx timeout [ 77.021785][ T5873] team0: Port device team_slave_1 added [ 77.031740][ T5860] team0: Port device team_slave_1 added [ 77.037991][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.045432][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.052999][ T5862] bridge_slave_0: entered allmulticast mode [ 77.060002][ T5862] bridge_slave_0: entered promiscuous mode [ 77.092413][ T52] Bluetooth: hci2: command tx timeout [ 77.118394][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.126008][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.133992][ T5862] bridge_slave_1: entered allmulticast mode [ 77.141069][ T5862] bridge_slave_1: entered promiscuous mode [ 77.232098][ T5865] hsr_slave_0: entered promiscuous mode [ 77.238653][ T5865] hsr_slave_1: entered promiscuous mode [ 77.251731][ T5858] hsr_slave_0: entered promiscuous mode [ 77.258950][ T5858] hsr_slave_1: entered promiscuous mode [ 77.265546][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 77.271392][ T5858] Cannot create hsr debugfs directory [ 77.277931][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.285083][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.311180][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.323895][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.330874][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.357138][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.384879][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.397073][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.404135][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.431787][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.450472][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.457508][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.483492][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.519308][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.613818][ T5862] team0: Port device team_slave_0 added [ 77.662831][ T5860] hsr_slave_0: entered promiscuous mode [ 77.669587][ T5860] hsr_slave_1: entered promiscuous mode [ 77.677033][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 77.682833][ T5860] Cannot create hsr debugfs directory [ 77.702798][ T5862] team0: Port device team_slave_1 added [ 77.771610][ T5873] hsr_slave_0: entered promiscuous mode [ 77.778668][ T5873] hsr_slave_1: entered promiscuous mode [ 77.785106][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 77.790840][ T5873] Cannot create hsr debugfs directory [ 77.841082][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.848201][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.874534][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.922737][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.929733][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.956007][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.251592][ T5862] hsr_slave_0: entered promiscuous mode [ 78.258187][ T5862] hsr_slave_1: entered promiscuous mode [ 78.264812][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 78.270558][ T5862] Cannot create hsr debugfs directory [ 78.415065][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.448270][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.462124][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.505978][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.596685][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.629970][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.640599][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.687096][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.778964][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.795619][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.808902][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.821401][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.940226][ T5873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.976661][ T5873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.988365][ T5873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.000327][ T5873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.012741][ T52] Bluetooth: hci4: command tx timeout [ 79.017928][ T5866] Bluetooth: hci0: command tx timeout [ 79.102320][ T5866] Bluetooth: hci1: command tx timeout [ 79.104356][ T52] Bluetooth: hci3: command tx timeout [ 79.126089][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.175194][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.183383][ T52] Bluetooth: hci2: command tx timeout [ 79.195393][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.207290][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.217350][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.252001][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.271827][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.327340][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.334599][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.353030][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.360159][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.401243][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.425175][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.448974][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.456202][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.480230][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.520035][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.527546][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.575499][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.601037][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.608196][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.628073][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.654335][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.661732][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.680912][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.688240][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.741454][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.748660][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.909421][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.021937][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.063737][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.070901][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.129635][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.136861][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.363168][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.378027][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.501264][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.624224][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.635639][ T5858] veth0_vlan: entered promiscuous mode [ 80.646705][ T5865] veth0_vlan: entered promiscuous mode [ 80.690913][ T5865] veth1_vlan: entered promiscuous mode [ 80.753653][ T5858] veth1_vlan: entered promiscuous mode [ 80.761184][ T5860] veth0_vlan: entered promiscuous mode [ 80.825718][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.836769][ T5865] veth0_macvtap: entered promiscuous mode [ 80.846278][ T5860] veth1_vlan: entered promiscuous mode [ 80.879478][ T5865] veth1_macvtap: entered promiscuous mode [ 80.929707][ T5858] veth0_macvtap: entered promiscuous mode [ 80.975876][ T5858] veth1_macvtap: entered promiscuous mode [ 81.002157][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.027918][ T5860] veth0_macvtap: entered promiscuous mode [ 81.065722][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.077612][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.093167][ T52] Bluetooth: hci4: command tx timeout [ 81.093946][ T5866] Bluetooth: hci0: command tx timeout [ 81.107690][ T5860] veth1_macvtap: entered promiscuous mode [ 81.118956][ T5862] veth0_vlan: entered promiscuous mode [ 81.139095][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.150840][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.160877][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.172674][ T5866] Bluetooth: hci3: command tx timeout [ 81.172953][ T52] Bluetooth: hci1: command tx timeout [ 81.198007][ T5959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.207312][ T5959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.225066][ T5862] veth1_vlan: entered promiscuous mode [ 81.238756][ T5959] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.249095][ T5959] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.258296][ T52] Bluetooth: hci2: command tx timeout [ 81.290048][ T5959] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.300856][ T5959] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.319535][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.331660][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.372779][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.410689][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.447897][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.463242][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.474069][ T5873] veth0_vlan: entered promiscuous mode [ 81.510074][ T5959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.524593][ T5959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.525206][ T5873] veth1_vlan: entered promiscuous mode [ 81.616209][ T5862] veth0_macvtap: entered promiscuous mode [ 81.655648][ T5862] veth1_macvtap: entered promiscuous mode [ 81.717070][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.719439][ T5873] veth0_macvtap: entered promiscuous mode [ 81.725771][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.741475][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.748123][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.760210][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.778285][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.786408][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.789901][ T5873] veth1_macvtap: entered promiscuous mode [ 81.830749][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.881238][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.882968][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.913754][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.921953][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.954282][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.981975][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.038308][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.048260][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.067272][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.079648][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.090513][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.113943][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.166598][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.404118][ T5982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 82.443030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.451677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.462388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 82.470883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.564576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.573373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.695742][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.712788][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.974091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.032597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.042514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.052502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.184735][ T52] Bluetooth: hci4: command tx timeout [ 83.190273][ T52] Bluetooth: hci0: command tx timeout [ 83.252698][ T5866] Bluetooth: hci1: command tx timeout [ 83.253220][ T52] Bluetooth: hci3: command tx timeout [ 83.332999][ T52] Bluetooth: hci2: command tx timeout [ 83.389328][ T5998] tipc: Started in network mode [ 83.414584][ T5998] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 83.440305][ T5998] tipc: Enabling of bearer rejected, failed to enable media [ 83.997653][ T5959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.029130][ T5959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.106408][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.330692][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.445315][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.592761][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.826159][ T5951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.905781][ T5951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.493174][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 85.946334][ T6032] loop4: detected capacity change from 0 to 512 [ 86.094222][ T6032] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 86.105114][ T6032] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 86.495492][ T6032] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.883104][ T9] cfg80211: failed to load regulatory.db [ 88.733280][ T6071] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.301405][ T6102] warning: `syz.3.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.960894][ T6126] Zero length message leads to an empty skb [ 92.470230][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 92.687479][ T6177] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.025611][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 93.171739][ T30] audit: type=1326 audit(1757084023.946:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0746f8ebe9 code=0x7ffc0000 [ 93.315256][ T30] audit: type=1326 audit(1757084023.946:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0746f8ebe9 code=0x7ffc0000 [ 93.917689][ T30] audit: type=1326 audit(1757084023.946:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0746f8ebe9 code=0x7ffc0000 [ 94.136620][ T30] audit: type=1326 audit(1757084023.946:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0746f8ebe9 code=0x7ffc0000 [ 94.141000][ T6209] IPVS: stopping backup sync thread 6212 ... [ 94.159973][ T30] audit: type=1326 audit(1757084023.946:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0746f8ebe9 code=0x7ffc0000 [ 94.173042][ T6212] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 94.367298][ T30] audit: type=1326 audit(1757084023.956:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0746f8ebe9 code=0x7ffc0000 [ 94.743614][ T30] audit: type=1326 audit(1757084023.956:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0746f8ebe9 code=0x7ffc0000 [ 94.821631][ T30] audit: type=1326 audit(1757084023.956:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f0746f8ebe9 code=0x7ffc0000 [ 94.970421][ T30] audit: type=1326 audit(1757084023.956:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0746f8ebe9 code=0x7ffc0000 [ 95.059083][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 95.110447][ T6224] veth1_macvtap: left promiscuous mode [ 101.754993][ T6304] loop2: detected capacity change from 0 to 7 [ 101.800521][ T6304] Dev loop2: unable to read RDB block 7 [ 101.830049][ T6304] loop2: unable to read partition table [ 101.887886][ T6304] loop2: partition table beyond EOD, truncated [ 101.965481][ T6304] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 102.821716][ T5925] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 103.837773][ T5925] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 103.910381][ T5925] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 104.248299][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.220657][ T5925] usb 4-1: can't set config #32, error -71 [ 105.244897][ T5925] usb 4-1: USB disconnect, device number 2 [ 105.367113][ T5939] Process accounting resumed [ 105.494170][ T6354] tipc: Cannot configure node identity twice [ 105.583381][ T6344] Process accounting resumed [ 105.702309][ T5925] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.845359][ T6365] usb usb5: usbfs: process 6365 (syz.4.98) did not claim interface 0 before use [ 106.575706][ T5925] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 106.596418][ T5925] usb 4-1: config 0 has no interface number 0 [ 106.606501][ T5925] usb 4-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 107.163180][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.171241][ T5925] usb 4-1: Product: syz [ 107.175785][ T5925] usb 4-1: Manufacturer: syz [ 107.180411][ T5925] usb 4-1: SerialNumber: syz [ 107.302840][ T5925] usb 4-1: config 0 descriptor?? [ 107.865837][ T5925] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in cold state, will try to load a firmware [ 108.017665][ T5925] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 108.046923][ T5925] dib0700: firmware download failed at 7 with -22 [ 108.098463][ T5925] usb 4-1: USB disconnect, device number 3 [ 109.041401][ T6397] netlink: 'syz.3.107': attribute type 1 has an invalid length. [ 110.922008][ T6416] netlink: 'syz.1.114': attribute type 10 has an invalid length. [ 110.959114][ T6416] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.999262][ T6416] bond0: (slave team0): Enslaving as an active interface with an up link [ 113.086761][ T93] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.363250][ T93] usb 4-1: device descriptor read/64, error -71 [ 113.371970][ T6438] trusted_key: syz.4.121 sent an empty control message without MSG_MORE. [ 113.642518][ T93] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.872601][ T93] usb 4-1: device descriptor read/64, error -71 [ 115.239898][ T93] usb usb4-port1: attempt power cycle [ 115.404052][ T5962] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.523100][ T5962] usb 5-1: Using ep0 maxpacket: 8 [ 116.537211][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.548452][ T5962] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 116.569027][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.203987][ T5962] usb 5-1: config 0 descriptor?? [ 117.755653][ T5962] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 117.926429][ T5939] usb 5-1: USB disconnect, device number 2 [ 118.695854][ T6487] capability: warning: `syz.3.134' uses deprecated v2 capabilities in a way that may be insecure [ 118.712150][ T6487] netlink: 'syz.3.134': attribute type 1 has an invalid length. [ 121.478163][ T6506] Bluetooth: MGMT ver 1.23 [ 124.183549][ T5962] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.292471][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.371669][ T5962] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 124.390339][ T5962] usb 1-1: config 0 has no interface number 0 [ 124.413401][ T5962] usb 1-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 124.426814][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.449303][ T5962] usb 1-1: Product: syz [ 124.455199][ T5962] usb 1-1: Manufacturer: syz [ 124.459950][ T5962] usb 1-1: SerialNumber: syz [ 124.472650][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 124.491380][ T43] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 124.500606][ T5962] usb 1-1: config 0 descriptor?? [ 124.510958][ T43] usb 3-1: config 0 has no interface number 0 [ 124.523236][ T43] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 124.538921][ T43] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 124.551905][ T43] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 124.589856][ T43] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.672491][ T43] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 124.691881][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.020370][ T5962] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in cold state, will try to load a firmware [ 125.033175][ T43] usb 3-1: config 0 descriptor?? [ 125.336399][ T5962] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 125.347989][ T43] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 125.374467][ T5962] dib0700: firmware download failed at 7 with -22 [ 125.472054][ T5962] usb 1-1: USB disconnect, device number 2 [ 126.774113][ T6560] binder: 6553:6560 ioctl c0306201 0 returned -14 [ 127.254565][ T5962] usb 3-1: USB disconnect, device number 2 [ 127.304887][ T5962] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 128.970497][ T6596] binder: BC_ATTEMPT_ACQUIRE not supported [ 128.976543][ T6596] binder: 6589:6596 ioctl c0306201 2000000001c0 returned -22 [ 129.583069][ T5866] Bluetooth: hci4: command 0x0405 tx timeout [ 129.726421][ T6596] block device autoloading is deprecated and will be removed. [ 129.846230][ T6600] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.170'. [ 129.887439][ T6600] openvswitch: netlink: Message has 512 unknown bytes. [ 130.942715][ T5947] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 131.127448][ T6633] batman_adv: batadv0: Adding interface: dummy0 [ 131.136051][ T6633] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.161353][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.443199][ T6633] batman_adv: batadv0: Interface activated: dummy0 [ 131.864075][ T5947] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 131.874102][ T5947] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 132.955860][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.347744][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.733237][ T5947] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 135.509917][ T5947] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 135.533316][ T5947] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 135.636571][ T5947] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 135.745120][ T5947] usb 4-1: string descriptor 0 read error: -71 [ 135.751543][ T5947] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 135.801369][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.968254][ T5947] usb 4-1: config 0 descriptor?? [ 135.997805][ T5947] usb 4-1: can't set config #0, error -71 [ 136.006209][ T5947] usb 4-1: USB disconnect, device number 7 [ 137.702610][ T5939] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 138.380306][ T5939] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.917102][ T6689] serio: Serial port ptm0 [ 138.965271][ T5939] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 139.083203][ T5939] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.264380][ T5939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 139.496280][ T5939] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.523855][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.575949][ T5939] usb 1-1: Product: syz [ 139.594620][ T5939] usb 1-1: Manufacturer: syz [ 139.622086][ T5939] cdc_wdm 1-1:1.0: skipping garbage [ 139.635587][ T5939] cdc_wdm 1-1:1.0: skipping garbage [ 139.664004][ T5939] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 139.679643][ T5939] cdc_wdm 1-1:1.0: Unknown control protocol [ 139.742604][ T93] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 139.914339][ T93] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 139.942722][ T93] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 140.527441][ T93] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 140.543428][ T93] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 140.555508][ T93] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.566998][ T93] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 140.596785][ T93] usb 2-1: string descriptor 0 read error: -22 [ 140.620221][ T93] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 140.704132][ T93] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.765745][ T93] usb 2-1: config 0 descriptor?? [ 140.783029][ T93] hub 2-1:0.0: bad descriptor, ignoring hub [ 140.789021][ T93] hub 2-1:0.0: probe with driver hub failed with error -5 [ 140.801250][ T5939] usb 1-1: USB disconnect, device number 3 [ 141.318203][ T6721] netlink: 'syz.4.206': attribute type 1 has an invalid length. [ 141.318356][ T6721] netlink: 132 bytes leftover after parsing attributes in process `syz.4.206'. [ 141.318382][ T6721] netlink: 'syz.4.206': attribute type 2 has an invalid length. [ 141.318395][ T6721] netlink: 'syz.4.206': attribute type 1 has an invalid length. [ 141.318407][ T6721] netlink: 2 bytes leftover after parsing attributes in process `syz.4.206'. [ 141.594940][ T30] audit: type=1804 audit(1757084072.376:11): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.199" name="/newroot/36/file0" dev="tmpfs" ino=203 res=1 errno=0 [ 144.361582][ T981] usb 2-1: USB disconnect, device number 2 [ 145.823192][ T5962] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.307301][ T5962] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 146.323783][ T5962] usb 1-1: config 0 has no interface number 0 [ 146.338711][ T5962] usb 1-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 146.353393][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.364640][ T5962] usb 1-1: Product: syz [ 146.370479][ T5962] usb 1-1: Manufacturer: syz [ 146.492477][ T5962] usb 1-1: SerialNumber: syz [ 146.691655][ T5962] usb 1-1: config 0 descriptor?? [ 146.978328][ T5962] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in cold state, will try to load a firmware [ 147.355930][ T5962] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 147.387116][ T5962] dib0700: firmware download failed at 7 with -22 [ 148.154462][ T5962] usb 1-1: USB disconnect, device number 4 [ 148.497117][ T6771] syz.4.219 (6771): drop_caches: 2 [ 151.802839][ T981] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 151.906713][ T6812] snd_dummy snd_dummy.0: control 0:1:16388:syz1:0 is already present [ 152.258627][ T981] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 152.283128][ T981] usb 3-1: config 0 has no interface number 0 [ 152.311573][ T981] usb 3-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 152.348720][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.368504][ T981] usb 3-1: Product: syz [ 152.377549][ T981] usb 3-1: Manufacturer: syz [ 152.390538][ T981] usb 3-1: SerialNumber: syz [ 152.411490][ T981] usb 3-1: config 0 descriptor?? [ 152.726568][ T981] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in cold state, will try to load a firmware [ 152.851334][ T6831] wlan0 speed is unknown, defaulting to 1000 [ 152.860263][ T6831] wlan0 speed is unknown, defaulting to 1000 [ 152.891281][ T6831] wlan0 speed is unknown, defaulting to 1000 [ 153.009804][ T6831] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 153.258068][ T6831] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 153.311296][ T981] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 153.325636][ T6831] wlan0 speed is unknown, defaulting to 1000 [ 153.333779][ T6831] wlan0 speed is unknown, defaulting to 1000 [ 153.342799][ T6831] wlan0 speed is unknown, defaulting to 1000 [ 153.351184][ T6831] wlan0 speed is unknown, defaulting to 1000 [ 153.359402][ T6831] wlan0 speed is unknown, defaulting to 1000 [ 153.493469][ T981] dib0700: firmware download failed at 7 with -22 [ 153.514668][ T981] usb 3-1: USB disconnect, device number 3 [ 155.959264][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 156.202385][ T30] audit: type=1800 audit(1757084086.986:12): pid=6865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.248" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 156.255568][ T9] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 156.533222][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 156.542963][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 156.552042][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.563026][ T9] usb 4-1: config 0 descriptor?? [ 156.585188][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 156.592143][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 156.682934][ T6872] netlink: 'syz.1.250': attribute type 6 has an invalid length. [ 157.442476][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 157.562808][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 157.570161][ T9] usb 4-1: media controller created [ 158.463448][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.689008][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 158.802971][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 158.833619][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 159.639514][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 159.786937][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 159.827258][ T9] usb 4-1: USB disconnect, device number 8 [ 159.925270][ T6900] delete_channel: no stack [ 161.663532][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 162.539434][ T6920] netlink: 'syz.3.262': attribute type 1 has an invalid length. [ 162.823784][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'. [ 166.542609][ T30] audit: type=1326 audit(1757084095.646:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.2.275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb271b8ebe9 code=0x0 [ 167.020306][ T6977] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 171.853858][ T7047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.502574][ T43] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 176.520821][ T7102] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 176.527578][ T7102] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 176.536991][ T7102] vhci_hcd vhci_hcd.0: Device attached [ 176.594547][ T7108] vhci_hcd: connection closed [ 176.707186][ T6034] vhci_hcd: stop threads [ 176.737021][ T6034] vhci_hcd: release socket [ 176.751916][ T6034] vhci_hcd: disconnect device [ 176.814913][ T43] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 176.838277][ T43] usb 2-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.986298][ T43] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 177.470047][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.180590][ T7125] binder: BINDER_SET_CONTEXT_MGR already set [ 178.186931][ T7125] binder: 7120:7125 ioctl 4018620d 200000004a80 returned -16 [ 178.950138][ T43] usb 2-1: string descriptor 0 read error: -71 [ 180.206790][ T7136] syz.0.334 (7136): drop_caches: 2 [ 180.265612][ T43] usb 2-1: USB disconnect, device number 3 [ 181.920642][ T6415] udevd[6415]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.342436][ T981] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.562377][ T981] usb 4-1: Using ep0 maxpacket: 16 [ 185.584584][ T981] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.602584][ T981] usb 4-1: config 0 has no interface number 0 [ 185.629812][ T981] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.690735][ T981] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.782242][ T981] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 185.839782][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.861750][ T981] usb 4-1: config 0 descriptor?? [ 188.157061][ T981] usbhid 4-1:0.1: can't add hid device: -71 [ 188.172373][ T981] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 188.279808][ T981] usb 4-1: USB disconnect, device number 9 [ 188.652699][ T7233] netlink: 'syz.4.363': attribute type 1 has an invalid length. [ 188.661124][ T7233] netlink: 184 bytes leftover after parsing attributes in process `syz.4.363'. [ 189.676839][ T7253] syz.4.371 (7253): drop_caches: 2 [ 190.860489][ T7273] netlink: 80 bytes leftover after parsing attributes in process `syz.0.378'. [ 190.885787][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.378'. [ 190.901174][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 191.820593][ T7294] syz.0.385 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 191.881490][ T7294] ptrace attach of "./syz-executor exec"[5865] was attempted by " [ 192.910238][ T7295] ======================================================= [ 192.910238][ T7295] WARNING: The mand mount option has been deprecated and [ 192.910238][ T7295] and is ignored by this kernel. Remove the mand [ 192.910238][ T7295] option from the mount to silence this warning. [ 192.910238][ T7295] ======================================================= [ 193.042273][ T7295] Invalid source name [ 193.850060][ T7313] nlmon0: Master is either lo or non-ether device [ 194.888795][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.925109][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.672538][ T7353] input: syz1 as /devices/virtual/input/input6 [ 201.975839][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 201.982050][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 201.986671][ T5877] Bluetooth: hci0: command 0x0406 tx timeout [ 201.988265][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 201.994260][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 204.758126][ T7434] kvm_intel: kvm [7433]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 204.841146][ T7434] kvm_intel: kvm [7433]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 204.942864][ T7434] kvm_intel: kvm [7433]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 205.036092][ T7434] kvm_intel: kvm [7433]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 205.627416][ T7434] kvm_intel: kvm [7433]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 205.647969][ T7434] kvm_intel: kvm [7433]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 206.423046][ T93] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 207.312408][ T93] usb 1-1: Using ep0 maxpacket: 8 [ 207.372458][ T93] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 207.416369][ T93] usb 1-1: config 0 has no interface number 0 [ 207.443426][ T93] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 207.623350][ T93] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 207.704480][ T93] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.715012][ T93] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 207.715066][ T93] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 207.715090][ T93] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.045206][ T93] usb 1-1: config 0 descriptor?? [ 208.224677][ T93] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 209.268841][ T7475] ================================================================== [ 209.277280][ T7475] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0 [ 209.285745][ T7475] Read of size 8 at addr ffff8880567cb430 by task syz.3.449/7475 [ 209.293531][ T7475] [ 209.295890][ T7475] CPU: 0 UID: 0 PID: 7475 Comm: syz.3.449 Not tainted syzkaller #0 PREEMPT(full) [ 209.295916][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.295935][ T7475] Call Trace: [ 209.295943][ T7475] [ 209.295953][ T7475] dump_stack_lvl+0x189/0x250 [ 209.295985][ T7475] ? __kasan_check_byte+0x12/0x40 [ 209.296016][ T7475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.296040][ T7475] ? lock_release+0x4b/0x3e0 [ 209.296070][ T7475] ? __virt_addr_valid+0x4a5/0x5c0 [ 209.296095][ T7475] print_report+0xca/0x240 [ 209.296114][ T7475] ? change_page_attr_set_clr+0x625/0xfc0 [ 209.296141][ T7475] kasan_report+0x118/0x150 [ 209.296171][ T7475] ? change_page_attr_set_clr+0x625/0xfc0 [ 209.296204][ T7475] change_page_attr_set_clr+0x625/0xfc0 [ 209.296235][ T7475] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 209.296263][ T7475] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 209.296287][ T7475] ? memtype_reserve+0x874/0xb30 [ 209.296317][ T7475] ? __pfx___ww_mutex_lock+0x10/0x10 [ 209.296348][ T7475] _set_pages_array+0x145/0x270 [ 209.296380][ T7475] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 209.296408][ T7475] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 209.296436][ T7475] ? ww_mutex_lock+0x3f/0x1c0 [ 209.296458][ T7475] drm_gem_shmem_mmap+0x193/0x460 [ 209.296485][ T7475] drm_gem_mmap_obj+0x187/0x4e0 [ 209.296516][ T7475] drm_gem_mmap+0x384/0x640 [ 209.296547][ T7475] ? __pfx_drm_gem_mmap+0x10/0x10 [ 209.296578][ T7475] ? __mas_set_range+0x12f/0x3c0 [ 209.296603][ T7475] mmap_region+0x18a8/0x2100 [ 209.296634][ T7475] ? __pfx_mmap_region+0x10/0x10 [ 209.296655][ T7475] ? trace_sched_exit_tp+0x36/0x110 [ 209.296680][ T7475] ? __schedule+0x17ae/0x4cc0 [ 209.296727][ T7475] ? irqentry_exit+0x74/0x90 [ 209.296747][ T7475] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.296773][ T7475] ? memfd_check_seals_mmap+0x42/0x200 [ 209.296793][ T7475] ? shmem_mapping+0xd/0x50 [ 209.296813][ T7475] ? memfd_check_seals_mmap+0xc5/0x200 [ 209.296835][ T7475] do_mmap+0xc45/0x10d0 [ 209.296864][ T7475] ? __pfx_do_mmap+0x10/0x10 [ 209.296886][ T7475] ? down_write_killable+0x178/0x230 [ 209.296912][ T7475] ? __pfx_down_write_killable+0x10/0x10 [ 209.296935][ T7475] ? common_file_perm+0x1b5/0x230 [ 209.296958][ T7475] vm_mmap_pgoff+0x2a6/0x4d0 [ 209.296984][ T7475] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 209.297007][ T7475] ? __fget_files+0x2a/0x420 [ 209.297036][ T7475] ? __fget_files+0x2a/0x420 [ 209.297063][ T7475] ? __fget_files+0x2a/0x420 [ 209.297092][ T7475] ksys_mmap_pgoff+0x51f/0x760 [ 209.297119][ T7475] do_syscall_64+0xfa/0xfa0 [ 209.297140][ T7475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.297160][ T7475] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 209.297181][ T7475] ? clear_bhb_loop+0x60/0xb0 [ 209.297203][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.297223][ T7475] RIP: 0033:0x7fa08a58ebe9 [ 209.297247][ T7475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.297264][ T7475] RSP: 002b:00007fa08b42d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 209.297289][ T7475] RAX: ffffffffffffffda RBX: 00007fa08a7c6180 RCX: 00007fa08a58ebe9 [ 209.297305][ T7475] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 209.297319][ T7475] RBP: 00007fa08a611e19 R08: 0000000000000005 R09: 0000000100000000 [ 209.297333][ T7475] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 209.297351][ T7475] R13: 00007fa08a7c6218 R14: 00007fa08a7c6180 R15: 00007fff347c9f88 [ 209.297375][ T7475] [ 209.297382][ T7475] [ 209.644485][ T7475] The buggy address belongs to the physical page: [ 209.650892][ T7475] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880567cbc00 pfn:0x567c8 [ 209.660967][ T7475] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 209.669487][ T7475] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 209.677140][ T7475] page_type: f8(unknown) [ 209.681374][ T7475] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 209.689957][ T7475] raw: ffff8880567cbc00 0000000000000000 00000000f8000000 0000000000000000 [ 209.698630][ T7475] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 209.707567][ T7475] head: ffff8880567cbc00 0000000000000000 00000000f8000000 0000000000000000 [ 209.716327][ T7475] head: 00fff00000000002 ffffea000159f201 00000000ffffffff 00000000ffffffff [ 209.724992][ T7475] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 209.733653][ T7475] page dumped because: kasan: bad access detected [ 209.740084][ T7475] page_owner tracks the page as allocated [ 209.745809][ T7475] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1428c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_COMP|__GFP_HARDWALL), pid 7475, tgid 7470 (syz.3.449), ts 208010823041, free_ts 187160517625 [ 209.765617][ T7475] post_alloc_hook+0x240/0x2a0 [ 209.770403][ T7475] get_page_from_freelist+0x21e4/0x22c0 [ 209.775947][ T7475] __alloc_frozen_pages_noprof+0x181/0x370 [ 209.781757][ T7475] alloc_pages_mpol+0x232/0x4a0 [ 209.786695][ T7475] ___kmalloc_large_node+0x5f/0x1b0 [ 209.791883][ T7475] __kmalloc_large_node_noprof+0x18/0x90 [ 209.797590][ T7475] __kvmalloc_node_noprof+0x6e/0x910 [ 209.802885][ T7475] drm_gem_get_pages+0x166/0xa20 [ 209.807834][ T7475] drm_gem_shmem_get_pages_locked+0x201/0x440 [ 209.813899][ T7475] drm_gem_shmem_mmap+0x193/0x460 [ 209.818931][ T7475] drm_gem_mmap_obj+0x187/0x4e0 [ 209.823778][ T7475] drm_gem_mmap+0x384/0x640 [ 209.828317][ T7475] mmap_region+0x18a8/0x2100 [ 209.832899][ T7475] do_mmap+0xc45/0x10d0 [ 209.837072][ T7475] vm_mmap_pgoff+0x2a6/0x4d0 [ 209.841655][ T7475] ksys_mmap_pgoff+0x51f/0x760 [ 209.846414][ T7475] page last free pid 5848 tgid 5848 stack trace: [ 209.852734][ T7475] __free_frozen_pages+0xbc4/0xd30 [ 209.857859][ T7475] __put_partials+0x146/0x170 [ 209.862564][ T7475] put_cpu_partial+0x17c/0x250 [ 209.867334][ T7475] __slab_free+0x2b9/0x390 [ 209.871768][ T7475] qlist_free_all+0x97/0x140 [ 209.876365][ T7475] kasan_quarantine_reduce+0x148/0x160 [ 209.881825][ T7475] __kasan_slab_alloc+0x22/0x80 [ 209.886756][ T7475] kmem_cache_alloc_noprof+0x367/0x6e0 [ 209.892209][ T7475] jbd2__journal_start+0x146/0x5b0 [ 209.897316][ T7475] __ext4_journal_start_sb+0x227/0x5c0 [ 209.902777][ T7475] ext4_dirty_inode+0x93/0x110 [ 209.907544][ T7475] __mark_inode_dirty+0x2e9/0xe10 [ 209.912562][ T7475] file_update_time+0x40c/0x490 [ 209.917584][ T7475] ext4_page_mkwrite+0x20e/0x1190 [ 209.922708][ T7475] do_page_mkwrite+0x14a/0x310 [ 209.927487][ T7475] do_wp_page+0x268d/0x5800 [ 209.932204][ T7475] [ 209.934519][ T7475] Memory state around the buggy address: [ 209.940218][ T7475] ffff8880567cb300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 209.948367][ T7475] ffff8880567cb380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 209.956430][ T7475] >ffff8880567cb400: 00 00 00 00 00 00 fe fe fe fe fe fe fe fe fe fe [ 209.964507][ T7475] ^ [ 209.970303][ T7475] ffff8880567cb480: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 209.978354][ T7475] ffff8880567cb500: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 209.986492][ T7475] ================================================================== [ 210.232204][ T7475] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 210.239554][ T7475] CPU: 0 UID: 0 PID: 7475 Comm: syz.3.449 Not tainted syzkaller #0 PREEMPT(full) [ 210.248736][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.258779][ T7475] Call Trace: [ 210.262075][ T7475] [ 210.264992][ T7475] dump_stack_lvl+0x99/0x250 [ 210.269587][ T7475] ? __asan_memcpy+0x40/0x70 [ 210.274168][ T7475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.279347][ T7475] ? __pfx__printk+0x10/0x10 [ 210.283942][ T7475] vpanic+0x237/0x6d0 [ 210.287925][ T7475] ? __pfx_vpanic+0x10/0x10 [ 210.292419][ T7475] ? preempt_schedule+0xae/0xc0 [ 210.297278][ T7475] ? __pfx_preempt_schedule+0x10/0x10 [ 210.302893][ T7475] panic+0xb9/0xc0 [ 210.306596][ T7475] ? __pfx_panic+0x10/0x10 [ 210.311276][ T7475] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 210.317258][ T7475] ? change_page_attr_set_clr+0x625/0xfc0 [ 210.323058][ T7475] check_panic_on_warn+0x89/0xb0 [ 210.328065][ T7475] ? change_page_attr_set_clr+0x625/0xfc0 [ 210.333787][ T7475] end_report+0x78/0x160 [ 210.338047][ T7475] kasan_report+0x129/0x150 [ 210.342542][ T7475] ? change_page_attr_set_clr+0x625/0xfc0 [ 210.348332][ T7475] change_page_attr_set_clr+0x625/0xfc0 [ 210.353863][ T7475] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 210.359911][ T7475] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 210.366050][ T7475] ? memtype_reserve+0x874/0xb30 [ 210.370976][ T7475] ? __pfx___ww_mutex_lock+0x10/0x10 [ 210.376292][ T7475] _set_pages_array+0x145/0x270 [ 210.381149][ T7475] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 210.387305][ T7475] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 210.393896][ T7475] ? ww_mutex_lock+0x3f/0x1c0 [ 210.398562][ T7475] drm_gem_shmem_mmap+0x193/0x460 [ 210.403568][ T7475] drm_gem_mmap_obj+0x187/0x4e0 [ 210.408405][ T7475] drm_gem_mmap+0x384/0x640 [ 210.412899][ T7475] ? __pfx_drm_gem_mmap+0x10/0x10 [ 210.418013][ T7475] ? __mas_set_range+0x12f/0x3c0 [ 210.423109][ T7475] mmap_region+0x18a8/0x2100 [ 210.427774][ T7475] ? __pfx_mmap_region+0x10/0x10 [ 210.432693][ T7475] ? trace_sched_exit_tp+0x36/0x110 [ 210.438000][ T7475] ? __schedule+0x17ae/0x4cc0 [ 210.442755][ T7475] ? irqentry_exit+0x74/0x90 [ 210.447431][ T7475] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.452722][ T7475] ? memfd_check_seals_mmap+0x42/0x200 [ 210.458173][ T7475] ? shmem_mapping+0xd/0x50 [ 210.462660][ T7475] ? memfd_check_seals_mmap+0xc5/0x200 [ 210.468125][ T7475] do_mmap+0xc45/0x10d0 [ 210.472274][ T7475] ? __pfx_do_mmap+0x10/0x10 [ 210.476843][ T7475] ? down_write_killable+0x178/0x230 [ 210.482178][ T7475] ? __pfx_down_write_killable+0x10/0x10 [ 210.487810][ T7475] ? common_file_perm+0x1b5/0x230 [ 210.492895][ T7475] vm_mmap_pgoff+0x2a6/0x4d0 [ 210.497484][ T7475] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 210.503151][ T7475] ? __fget_files+0x2a/0x420 [ 210.507788][ T7475] ? __fget_files+0x2a/0x420 [ 210.512386][ T7475] ? __fget_files+0x2a/0x420 [ 210.517056][ T7475] ksys_mmap_pgoff+0x51f/0x760 [ 210.521959][ T7475] do_syscall_64+0xfa/0xfa0 [ 210.526556][ T7475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.532622][ T7475] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 210.538239][ T7475] ? clear_bhb_loop+0x60/0xb0 [ 210.542896][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.548779][ T7475] RIP: 0033:0x7fa08a58ebe9 [ 210.553181][ T7475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.573037][ T7475] RSP: 002b:00007fa08b42d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 210.581522][ T7475] RAX: ffffffffffffffda RBX: 00007fa08a7c6180 RCX: 00007fa08a58ebe9 [ 210.589578][ T7475] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 210.597727][ T7475] RBP: 00007fa08a611e19 R08: 0000000000000005 R09: 0000000100000000 [ 210.605805][ T7475] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 210.614468][ T7475] R13: 00007fa08a7c6218 R14: 00007fa08a7c6180 R15: 00007fff347c9f88 [ 210.622536][ T7475] [ 210.626149][ T7475] Kernel Offset: disabled [ 210.630495][ T7475] Rebooting in 86400 seconds..