last executing test programs: 5.610633995s ago: executing program 1 (id=357): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0xd2cd84a3ddbc3c5a, 0x0) dup(0xffffffffffffffff) syz_emit_ethernet(0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioprio_get$pid(0x0, 0x0) fcntl$notify(r0, 0x402, 0x31) r4 = socket$inet6(0xa, 0x2, 0x3a) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x40000000, 0x0) 4.434518014s ago: executing program 1 (id=360): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)) 3.490599894s ago: executing program 1 (id=364): open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) fcntl$setpipe(r1, 0x407, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000001090101b5"], 0x14}}, 0x0) 2.457727451s ago: executing program 1 (id=369): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 2.430910028s ago: executing program 3 (id=370): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) recvmmsg(r0, &(0x7f0000009c00)=[{{0x0, 0x0, 0x0}, 0xa44}], 0x1, 0x0, 0x0) dup2(r0, r1) 2.16661385s ago: executing program 0 (id=372): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000010400048008000c8004000b800800020001000000a00008801c00078008"], 0xd0}}, 0x0) 2.123768743s ago: executing program 4 (id=374): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) read(r0, 0x0, 0x0) 2.111509328s ago: executing program 1 (id=375): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.010443551s ago: executing program 3 (id=376): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x10f, 0x10105, 0x12345}) r0 = syz_io_uring_setup(0x16b, &(0x7f0000000100)={0x0, 0x40, 0x10, 0x5, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x9, 0x1, 0x0, 0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 1.994220479s ago: executing program 4 (id=377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.980363265s ago: executing program 0 (id=378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1.802824862s ago: executing program 2 (id=379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d00000085000000500000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) memfd_secret(0x80000) 1.80111298s ago: executing program 0 (id=380): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.77259712s ago: executing program 3 (id=381): mount(0x0, 0x0, 0x0, 0x2208004, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create1(0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.67203757s ago: executing program 1 (id=382): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000000009040009010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_disconnect(r0) read$hidraw(r1, 0x0, 0x0) 1.612708234s ago: executing program 2 (id=383): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.612374713s ago: executing program 4 (id=384): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) getsockopt$bt_hci(r0, 0x84, 0x7c, &(0x7f0000000000)=""/4087, &(0x7f0000001000)=0xff7) 1.612110996s ago: executing program 0 (id=385): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x48, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4003000000000000009a7a00"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8030}, 0x0) 1.611607568s ago: executing program 3 (id=386): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 1.446581734s ago: executing program 4 (id=387): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) 1.446226039s ago: executing program 0 (id=388): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20008040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r3, 0x2afd, 0x308b, 0xc, 0x0, 0x0) 1.418702324s ago: executing program 2 (id=389): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x545c64dc838784ce, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/255}, 0x20) 1.370351149s ago: executing program 3 (id=390): r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x4}, &(0x7f0000000040)=0x28) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.283912358s ago: executing program 4 (id=391): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1.28355197s ago: executing program 2 (id=392): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.184296814s ago: executing program 3 (id=393): syz_open_dev$dri(0x0, 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) 1.064432239s ago: executing program 4 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 991.052271ms ago: executing program 2 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2400c845) r0 = io_uring_setup(0x1196, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) 165.221556ms ago: executing program 2 (id=396): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@any, 0x4}, 0x1, 0x0, 0x2ff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmmsg$alg(r2, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="9dcd862dd8ead4408fb705bd12f387dd4ac82611b890f71a1f880566b07c843cfd05d76419eae10b188ce34637ef083558fe7e5c48f976d3", 0x38}], 0x1, &(0x7f0000000540)=[@iv={0x70, 0x117, 0x2, 0x5a, "5e8f8b5939a8845c785114f8c1620226b993465b124e331aa39696f25e997fe673af36a2d4eac4e9a4054c2b66cd67143a7c3e9672a93219cb63ebb5747d24927d225c18a8c969dcdaa108acaf628857e406f63af048724141ea"}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x10b8, 0x4000004}], 0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x4d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904000a017e63abff0905"], 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x63, 0xffffffffffff0001, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) read(r4, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000100)=[0x9, 0xc, 0xea, 0x0], &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)}) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=397): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts. [ 71.169039][ T5815] cgroup: Unknown subsys name 'net' [ 71.277249][ T5815] cgroup: Unknown subsys name 'cpuset' [ 71.286367][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.665679][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.311472][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.314554][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.319655][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.334914][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.336078][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.343098][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.351808][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.357569][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.364333][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.371299][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.378798][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.385483][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.392803][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.406367][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.407288][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.417013][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.422583][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.427570][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.435499][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.442161][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.449258][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.464464][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.479127][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.486382][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.505222][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.109228][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 77.247714][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 77.330198][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 77.373938][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 77.436824][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 77.490986][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.499343][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.506909][ T5828] bridge_slave_0: entered allmulticast mode [ 77.514613][ T5828] bridge_slave_0: entered promiscuous mode [ 77.567843][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.576180][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.583426][ T5828] bridge_slave_1: entered allmulticast mode [ 77.590694][ T5828] bridge_slave_1: entered promiscuous mode [ 77.671638][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.679536][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.686940][ T5826] bridge_slave_0: entered allmulticast mode [ 77.694658][ T5826] bridge_slave_0: entered promiscuous mode [ 77.738008][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.745205][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.752343][ T5826] bridge_slave_1: entered allmulticast mode [ 77.761168][ T5826] bridge_slave_1: entered promiscuous mode [ 77.771387][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.824597][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.835155][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.842339][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.849957][ T5830] bridge_slave_0: entered allmulticast mode [ 77.857140][ T5830] bridge_slave_0: entered promiscuous mode [ 77.910067][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.917326][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.925162][ T5830] bridge_slave_1: entered allmulticast mode [ 77.932146][ T5830] bridge_slave_1: entered promiscuous mode [ 77.939381][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.946562][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.953701][ T5825] bridge_slave_0: entered allmulticast mode [ 77.960975][ T5825] bridge_slave_0: entered promiscuous mode [ 77.968135][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.975871][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.983135][ T5827] bridge_slave_0: entered allmulticast mode [ 77.990433][ T5827] bridge_slave_0: entered promiscuous mode [ 78.000924][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.042817][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.050064][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.057505][ T5825] bridge_slave_1: entered allmulticast mode [ 78.064886][ T5825] bridge_slave_1: entered promiscuous mode [ 78.075914][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.083017][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.090736][ T5827] bridge_slave_1: entered allmulticast mode [ 78.098617][ T5827] bridge_slave_1: entered promiscuous mode [ 78.108521][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.119342][ T5828] team0: Port device team_slave_0 added [ 78.183044][ T5828] team0: Port device team_slave_1 added [ 78.191550][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.248011][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.260323][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.272412][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.284659][ T5826] team0: Port device team_slave_0 added [ 78.317962][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.329395][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.340863][ T5826] team0: Port device team_slave_1 added [ 78.347722][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.355304][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.381833][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.451669][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.459076][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.485774][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.498677][ T5830] team0: Port device team_slave_0 added [ 78.534793][ T5838] Bluetooth: hci4: command tx timeout [ 78.535173][ T5845] Bluetooth: hci0: command tx timeout [ 78.540945][ T5846] Bluetooth: hci2: command tx timeout [ 78.553079][ T52] Bluetooth: hci1: command tx timeout [ 78.559293][ T5840] Bluetooth: hci3: command tx timeout [ 78.578543][ T5830] team0: Port device team_slave_1 added [ 78.585803][ T5825] team0: Port device team_slave_0 added [ 78.595155][ T5827] team0: Port device team_slave_0 added [ 78.601690][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.609064][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.635439][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.650717][ T5825] team0: Port device team_slave_1 added [ 78.668480][ T5827] team0: Port device team_slave_1 added [ 78.675170][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.682118][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.708409][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.781726][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.788846][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.815148][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.838676][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.845827][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.872230][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.896617][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.903584][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.930145][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.941907][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.949600][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.975657][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.988503][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.995686][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.022147][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.037773][ T5828] hsr_slave_0: entered promiscuous mode [ 79.044428][ T5828] hsr_slave_1: entered promiscuous mode [ 79.052486][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.059677][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.085919][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.149895][ T5826] hsr_slave_0: entered promiscuous mode [ 79.156460][ T5826] hsr_slave_1: entered promiscuous mode [ 79.162570][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 79.168596][ T5826] Cannot create hsr debugfs directory [ 79.327590][ T5827] hsr_slave_0: entered promiscuous mode [ 79.334391][ T5827] hsr_slave_1: entered promiscuous mode [ 79.340618][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 79.347299][ T5827] Cannot create hsr debugfs directory [ 79.357343][ T5830] hsr_slave_0: entered promiscuous mode [ 79.363746][ T5830] hsr_slave_1: entered promiscuous mode [ 79.370060][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 79.375918][ T5830] Cannot create hsr debugfs directory [ 79.386854][ T5825] hsr_slave_0: entered promiscuous mode [ 79.393255][ T5825] hsr_slave_1: entered promiscuous mode [ 79.399572][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 79.406042][ T5825] Cannot create hsr debugfs directory [ 79.917055][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.932006][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.943376][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.966541][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.047142][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.061319][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.077103][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.088528][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.204820][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.227170][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.258359][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.287094][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.371393][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.394724][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.409460][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.430676][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.452961][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.546834][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.553712][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.578754][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.589359][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.600821][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.615171][ T52] Bluetooth: hci0: command tx timeout [ 80.615343][ T5838] Bluetooth: hci1: command tx timeout [ 80.620700][ T5845] Bluetooth: hci2: command tx timeout [ 80.627116][ T5846] Bluetooth: hci4: command tx timeout [ 80.631435][ T5840] Bluetooth: hci3: command tx timeout [ 80.647755][ T4416] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.655085][ T4416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.702345][ T4416] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.709573][ T4416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.742282][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.807502][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.856192][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.863327][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.888548][ T4416] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.895705][ T4416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.967153][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.026770][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.076516][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.110234][ T4416] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.117475][ T4416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.139131][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.166966][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.174177][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.211424][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.221329][ T4416] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.228584][ T4416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.258588][ T4416] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.265886][ T4416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.311927][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.329364][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.372558][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.379779][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.421129][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.428430][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.566408][ T5826] veth0_vlan: entered promiscuous mode [ 81.591617][ T5826] veth1_vlan: entered promiscuous mode [ 81.613986][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.856277][ T5826] veth0_macvtap: entered promiscuous mode [ 81.899528][ T5828] veth0_vlan: entered promiscuous mode [ 81.927970][ T5826] veth1_macvtap: entered promiscuous mode [ 81.985203][ T5828] veth1_vlan: entered promiscuous mode [ 82.043427][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.071411][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.119425][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.149426][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.246718][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.262771][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.278230][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.301944][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.326022][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.390486][ T5828] veth0_macvtap: entered promiscuous mode [ 82.460988][ T5828] veth1_macvtap: entered promiscuous mode [ 82.505178][ T5825] veth0_vlan: entered promiscuous mode [ 82.546257][ T5825] veth1_vlan: entered promiscuous mode [ 82.561938][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.574593][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.610490][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.620412][ T5827] veth0_vlan: entered promiscuous mode [ 82.644861][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.653653][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.656236][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.683412][ T5825] veth0_macvtap: entered promiscuous mode [ 82.695625][ T5845] Bluetooth: hci2: command tx timeout [ 82.695678][ T5838] Bluetooth: hci4: command tx timeout [ 82.701049][ T52] Bluetooth: hci1: command tx timeout [ 82.706610][ T5846] Bluetooth: hci0: command tx timeout [ 82.719923][ T5840] Bluetooth: hci3: command tx timeout [ 82.730358][ T5825] veth1_macvtap: entered promiscuous mode [ 82.740210][ T5827] veth1_vlan: entered promiscuous mode [ 82.753184][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.771879][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.800753][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.817137][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.838609][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.941023][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.957392][ T5830] veth0_vlan: entered promiscuous mode [ 82.973080][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.011172][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.021864][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.038759][ T5830] veth1_vlan: entered promiscuous mode [ 83.045760][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.055233][ T5827] veth0_macvtap: entered promiscuous mode [ 83.073363][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.097762][ T5827] veth1_macvtap: entered promiscuous mode [ 83.108170][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.127269][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.182657][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.206233][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.214522][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.217382][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.280644][ T4416] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.290646][ T5830] veth0_macvtap: entered promiscuous mode [ 83.309953][ T4416] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.318915][ T4416] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.327885][ T4416] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.375654][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.398069][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.422565][ T5830] veth1_macvtap: entered promiscuous mode [ 83.464726][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.472589][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.379644][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.400348][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.414190][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.551873][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.587510][ T5960] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.612880][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.641581][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.656098][ T1016] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.676396][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.732789][ T5960] isofs_fill_super: bread failed, dev=nbd3, iso_blknum=16, block=32 [ 84.774097][ T52] Bluetooth: hci4: command tx timeout [ 84.780859][ T52] Bluetooth: hci0: command tx timeout [ 84.786584][ T52] Bluetooth: hci1: command tx timeout [ 84.792429][ T52] Bluetooth: hci3: command tx timeout [ 84.796348][ T5840] Bluetooth: hci2: command tx timeout [ 84.833641][ T1016] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.856309][ T1016] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.816904][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.855854][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.073025][ T5971] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.851162][ T795] cfg80211: failed to load regulatory.db [ 87.023762][ T5971] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 87.166100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.233185][ T5982] program syz.0.11 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.250643][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.293952][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.366762][ T5986] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13'. [ 87.381724][ T5985] netlink: 160 bytes leftover after parsing attributes in process `syz.3.12'. [ 87.472140][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 88.041386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.564557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.573481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.583758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 89.781905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.904692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.986756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.996131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.089190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.576629][ T6018] siw: device registration error -23 [ 90.676034][ T6022] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.23'. [ 90.797285][ T6026] program syz.3.25 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.059166][ T6032] netlink: 'syz.2.28': attribute type 29 has an invalid length. [ 91.108873][ T6032] netlink: 'syz.2.28': attribute type 29 has an invalid length. [ 91.210836][ T6036] netlink: 76 bytes leftover after parsing attributes in process `syz.2.28'. [ 92.304283][ T5854] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.309454][ T6052] siw: device registration error -23 [ 93.147969][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.183911][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.214792][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.256316][ T5854] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 93.273319][ T6057] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.37'. [ 93.291788][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.291929][ T6059] program syz.3.40 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.317290][ T5854] usb 5-1: config 0 descriptor?? [ 93.728509][ T6065] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 94.189005][ T5854] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 94.196198][ T5854] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 94.203558][ T5854] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 94.210854][ T5854] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 94.218919][ T5854] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 94.246820][ T5854] acrux 0003:1A34:0802.0001: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 94.281357][ T5854] acrux 0003:1A34:0802.0001: no inputs found [ 94.300095][ T5854] acrux 0003:1A34:0802.0001: Failed to enable force feedback support, error: -19 [ 94.552442][ T5854] usb 5-1: USB disconnect, device number 2 [ 96.101522][ T6106] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.52'. [ 96.353648][ T6115] Zero length message leads to an empty skb [ 97.954332][ T5953] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.749032][ T5953] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 98.834695][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.842738][ T5953] usb 5-1: Product: syz [ 98.943931][ T5953] usb 5-1: Manufacturer: syz [ 98.953989][ T5953] usb 5-1: SerialNumber: syz [ 98.961788][ T5953] usb 5-1: config 0 descriptor?? [ 98.968637][ T6143] program syz.3.65 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.239564][ T5953] usb 5-1: USB disconnect, device number 3 [ 99.549870][ T6156] netlink: 79 bytes leftover after parsing attributes in process `syz.0.70'. [ 100.586987][ T5918] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 101.330629][ T5918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 101.358527][ T5918] usb 2-1: config 1 has an invalid interface number: 181 but max is 0 [ 101.383871][ T5918] usb 2-1: config 1 has no interface number 0 [ 101.435874][ T5918] usb 2-1: config 1 interface 181 altsetting 1 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 101.512541][ T5918] usb 2-1: config 1 interface 181 has no altsetting 0 [ 101.584688][ T5918] usb 2-1: string descriptor 0 read error: -22 [ 101.591003][ T5918] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1d.74 [ 101.610883][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.730146][ T5918] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 101.834815][ T980] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.883473][ T3526] usb 2-1: Failed to submit usb control message: -71 [ 101.887656][ T5996] usb 2-1: USB disconnect, device number 2 [ 101.920589][ T3526] usb 2-1: unable to send the bmi data to the device: -71 [ 101.963569][ T3526] usb 2-1: unable to get target info from device [ 101.982198][ T3526] usb 2-1: could not get target info (-71) [ 101.988741][ T3526] usb 2-1: could not probe fw (-71) [ 102.067286][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 102.089324][ T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.119561][ T980] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 102.148938][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.181206][ T980] usb 3-1: Product: syz [ 102.200438][ T980] usb 3-1: Manufacturer: syz [ 102.213173][ T980] usb 3-1: SerialNumber: syz [ 102.239689][ T980] usb 3-1: config 0 descriptor?? [ 102.423920][ T5854] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.624000][ T5854] usb 5-1: Using ep0 maxpacket: 16 [ 102.633773][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.656640][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.685121][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.727167][ T5854] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.737099][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.752561][ T5854] usb 5-1: config 0 descriptor?? [ 102.817696][ T6211] Sensor B: ================= START STATUS ================= [ 102.840842][ T6211] Sensor B: Test Pattern: 75% Colorbar [ 102.857434][ T6211] Sensor B: Show Information: All [ 102.872867][ T6211] Sensor B: Vertical Flip: false [ 102.879660][ T6211] Sensor B: Horizontal Flip: false [ 102.906084][ T6211] Sensor B: Brightness: 128 [ 102.921007][ T6211] Sensor B: Contrast: 128 [ 102.934115][ T6211] Sensor B: Hue: 0 [ 102.941852][ T6211] Sensor B: Saturation: 128 [ 102.953932][ T6211] Sensor B: ================== END STATUS ================== [ 103.689440][ T5854] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.715855][ T5854] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.746561][ T5854] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.766537][ T5854] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.773801][ T5854] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.791249][ T5854] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.813389][ T5854] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.830942][ T5854] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.841062][ T5854] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.867144][ T5854] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 104.121451][ T5854] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 104.151457][ T5854] microsoft 0003:045E:07DA.0002: no inputs found [ 104.163914][ T5854] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 104.208057][ T5854] usb 5-1: USB disconnect, device number 4 [ 104.611985][ T5854] usb 3-1: USB disconnect, device number 2 [ 105.014131][ T5854] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.186025][ T5854] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 105.207991][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 105.252756][ T5854] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 105.276101][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.300264][ T5854] usb 1-1: Product: syz [ 105.305747][ T5854] usb 1-1: Manufacturer: syz [ 105.310543][ T5854] usb 1-1: SerialNumber: syz [ 105.327137][ T5854] usb 1-1: config 0 descriptor?? [ 105.514037][ T980] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.671547][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.692241][ T980] usb 4-1: config 0 has no interfaces? [ 105.703935][ T980] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.752453][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.774991][ T5854] usb 1-1: USB disconnect, device number 2 [ 105.801276][ T980] usb 4-1: config 0 descriptor?? [ 106.876335][ T5953] usb 4-1: USB disconnect, device number 2 [ 106.897519][ T6284] netlink: 'syz.0.115': attribute type 29 has an invalid length. [ 106.922004][ T6284] netlink: 'syz.0.115': attribute type 29 has an invalid length. [ 106.943364][ T6284] netlink: 500 bytes leftover after parsing attributes in process `syz.0.115'. [ 107.165285][ T6292] program syz.2.119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.353489][ T6301] program syz.1.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.908272][ T6335] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.697728][ T982] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.924183][ T982] usb 4-1: Using ep0 maxpacket: 8 [ 110.942932][ T982] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 110.982590][ T982] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 111.010797][ T982] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 111.051662][ T982] usb 4-1: Product: syz [ 111.076307][ T982] usb 4-1: Manufacturer: syz [ 111.154043][ T982] usb 4-1: SerialNumber: syz [ 111.379021][ T982] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 111.387600][ T982] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 111.402627][ T982] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 111.515008][ T6381] program syz.1.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.568352][ T982] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 111.617800][ T982] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 111.665489][ T982] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 111.770933][ T6393] warning: `syz.4.155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.774116][ T5944] usb 4-1: USB disconnect, device number 3 [ 111.859218][ T5944] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 111.922683][ T5944] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 111.923354][ T5944] visor 4-1:1.0: device disconnected [ 112.180010][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'. [ 112.291578][ T6413] program syz.4.165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.372485][ T6360] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 112.407228][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.540855][ T6360] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 112.577995][ T6360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.610316][ T6360] usb 2-1: Product: syz [ 112.658310][ T6360] usb 2-1: Manufacturer: syz [ 112.669889][ T6360] usb 2-1: SerialNumber: syz [ 112.683899][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 112.690722][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.858676][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.042155][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.209094][ T6360] usb 2-1: config 0 descriptor?? [ 113.222194][ T6360] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 113.242195][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.263493][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.304785][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.556725][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.172'. [ 113.606708][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.172'. [ 113.623497][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 113.633653][ T9] usb 1-1: usb_control_msg returned -32 [ 113.639310][ T9] usbtmc 1-1:16.0: can't read capabilities [ 113.700550][ T9] usb 1-1: USB disconnect, device number 3 [ 114.556802][ T6360] gspca_stk1135: reg_w 0x7 err -110 [ 114.652705][ T6360] gspca_stk1135: serial bus timeout: status=0x00 [ 114.673023][ T6360] gspca_stk1135: Sensor write failed [ 114.823882][ T6360] gspca_stk1135: serial bus timeout: status=0x00 [ 114.830250][ T6360] gspca_stk1135: Sensor write failed [ 114.855902][ T6360] gspca_stk1135: serial bus timeout: status=0x00 [ 114.862321][ T6360] gspca_stk1135: Sensor read failed [ 114.879032][ T6360] gspca_stk1135: serial bus timeout: status=0x00 [ 114.889760][ T6360] gspca_stk1135: Sensor read failed [ 114.899353][ T6360] gspca_stk1135: Detected sensor type unknown (0x0) [ 114.907072][ T6454] program syz.2.177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.024616][ T6360] gspca_stk1135: serial bus timeout: status=0x00 [ 115.030993][ T6360] gspca_stk1135: Sensor read failed [ 115.063891][ T6360] gspca_stk1135: serial bus timeout: status=0x00 [ 115.070288][ T6360] gspca_stk1135: Sensor read failed [ 115.116195][ T6360] gspca_stk1135: serial bus timeout: status=0x00 [ 115.122673][ T6360] gspca_stk1135: Sensor write failed [ 115.164522][ T6360] gspca_stk1135: serial bus timeout: status=0x00 [ 115.171386][ T6360] gspca_stk1135: Sensor write failed [ 115.197693][ T6360] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 116.484175][ T6360] usb 2-1: USB disconnect, device number 3 [ 119.093393][ T6491] netlink: 'syz.0.189': attribute type 29 has an invalid length. [ 119.108600][ T6491] netlink: 'syz.0.189': attribute type 29 has an invalid length. [ 119.118004][ T6491] netlink: 500 bytes leftover after parsing attributes in process `syz.0.189'. [ 119.134261][ T6494] program syz.4.191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.433952][ T6360] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.749877][ T6521] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.201'. [ 121.761084][ T6521] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.201'. [ 122.234531][ T6360] usb 5-1: Using ep0 maxpacket: 8 [ 122.260741][ T6360] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.279364][ T6360] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 122.341664][ T6360] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 122.363437][ T6360] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 122.392892][ T6360] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 122.427884][ T6360] usb 5-1: Manufacturer: syz [ 122.432523][ T6360] usb 5-1: SerialNumber: syz [ 122.670421][ T6360] usb 5-1: USB disconnect, device number 5 [ 123.084992][ T6538] capability: warning: `syz.1.209' uses deprecated v2 capabilities in a way that may be insecure [ 123.829961][ T6547] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.211'. [ 125.499379][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 126.033451][ T6580] netlink: 'syz.0.224': attribute type 29 has an invalid length. [ 126.125216][ T6580] netlink: 'syz.0.224': attribute type 29 has an invalid length. [ 126.217594][ T6585] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.227'. [ 126.287453][ T6580] netlink: 500 bytes leftover after parsing attributes in process `syz.0.224'. [ 126.873903][ T5829] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.082276][ T5829] usb 1-1: Using ep0 maxpacket: 32 [ 127.141025][ T5829] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.236199][ T5829] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.534166][ T5829] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.557498][ T5829] usb 1-1: config 1 interface 0 has no altsetting 0 [ 128.305554][ T5829] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.343955][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.363917][ T5829] usb 1-1: Product: syz [ 128.368115][ T5829] usb 1-1: Manufacturer: syz [ 128.447139][ T5829] usb 1-1: SerialNumber: syz [ 128.648436][ T6626] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.242'. [ 128.913847][ T5829] usb 1-1: bad CDC descriptors [ 128.923301][ T5829] usb 1-1: USB disconnect, device number 4 [ 129.256217][ T6635] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.245'. [ 129.306783][ T6634] netlink: 'syz.3.246': attribute type 1 has an invalid length. [ 129.353657][ T6634] netlink: 'syz.3.246': attribute type 8 has an invalid length. [ 129.363946][ T6634] netlink: 'syz.3.246': attribute type 9 has an invalid length. [ 129.412004][ T6634] netlink: 'syz.3.246': attribute type 10 has an invalid length. [ 129.420694][ T6634] netlink: 'syz.3.246': attribute type 11 has an invalid length. [ 129.438873][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 130.498458][ T6656] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.254'. [ 132.644063][ T5949] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.750985][ T6686] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.267'. [ 132.780410][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.788509][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.843945][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 132.851002][ T5949] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 132.881982][ T5949] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.944015][ T5949] usb 2-1: config 1 has no interface number 0 [ 132.951281][ T5949] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.012166][ T5949] usb 2-1: config 1 interface 105 has no altsetting 0 [ 133.035864][ T5949] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 133.060747][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.085390][ T5949] usb 2-1: Product: syz [ 133.099922][ T5949] usb 2-1: Manufacturer: syz [ 133.109998][ T5949] usb 2-1: SerialNumber: syz [ 133.505793][ T5949] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 133.781890][ T39] usb 2-1: USB disconnect, device number 4 [ 134.285721][ T6360] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 134.537687][ T6360] usb 1-1: Using ep0 maxpacket: 8 [ 134.768667][ T6360] usb 1-1: unable to get BOS descriptor or descriptor too short [ 134.816948][ T6360] usb 1-1: config 4 interface 0 has no altsetting 0 [ 134.849992][ T6360] usb 1-1: string descriptor 0 read error: -22 [ 134.894170][ T6360] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 134.933994][ T6360] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 134.986177][ T6360] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 135.065959][ T6360] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 135.105076][ T6360] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 135.112427][ T6360] usb 1-1: media controller created [ 135.197450][ T6360] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.267620][ T6360] zl10353_read_register: readreg error (reg=127, ret==0) [ 135.285896][ T6737] overlayfs: missing 'lowerdir' [ 135.374429][ T6360] usb 1-1: USB disconnect, device number 5 [ 137.042840][ T6765] overlayfs: missing 'lowerdir' [ 137.075047][ T6773] netlink: 56 bytes leftover after parsing attributes in process `syz.2.301'. [ 138.146087][ T6804] overlayfs: missing 'lowerdir' [ 138.448801][ T6360] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 139.265511][ T6360] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.297762][ T6360] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.352381][ T6360] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.363265][ T6360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.638358][ T6844] overlayfs: missing 'lowerdir' [ 139.681466][ T6360] usb 3-1: usb_control_msg returned -32 [ 139.701848][ T6360] usbtmc 3-1:16.0: can't read capabilities [ 140.004683][ T6860] program syz.1.343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.734170][ T5953] usb 3-1: USB disconnect, device number 3 [ 140.757083][ T6865] syz.1.345 uses obsolete (PF_INET,SOCK_PACKET) [ 140.784198][ T6865] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 141.134690][ T6878] overlayfs: missing 'lowerdir' [ 141.173571][ T6868] binder: 6867:6868 ioctl 4018620d 0 returned -22 [ 141.202748][ T6868] binder: 6867:6868 ioctl c0306201 0 returned -14 [ 141.429564][ T6884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.352'. [ 141.455326][ T6884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.352'. [ 141.478424][ T6884] gretap0: entered promiscuous mode [ 141.491865][ T6884] gretap0: left promiscuous mode [ 141.749712][ T6895] program syz.0.356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.892454][ T6904] overlayfs: missing 'lowerdir' [ 143.347164][ T52] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 143.357061][ T52] Bluetooth: hci4: Injecting HCI hardware error event [ 143.367375][ T52] Bluetooth: hci4: hardware error 0x00 [ 145.032144][ T6935] program syz.1.369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.164791][ T6943] netlink: 128 bytes leftover after parsing attributes in process `syz.0.372'. [ 145.183044][ T6943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.372'. [ 145.321660][ T6949] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 145.347914][ T6949] overlayfs: failed to set xattr on upper [ 145.373272][ T6949] overlayfs: ...falling back to redirect_dir=nofollow. [ 145.423491][ T6949] overlayfs: ...falling back to index=off. [ 145.445730][ T6949] overlayfs: ...falling back to uuid=null. [ 145.730865][ T6970] Bluetooth: MGMT ver 1.23 [ 145.743928][ T52] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 145.755915][ T6973] program syz.3.386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.974198][ T5918] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.205128][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 146.469589][ T5918] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.508363][ T5918] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.521018][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 146.528274][ T5918] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 146.538193][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.593151][ T5918] usb 2-1: config 0 descriptor?? [ 147.363163][ T5918] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 147.388503][ T5918] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 147.393380][ T6990] ================================================================== [ 147.403951][ T6990] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x2e/0x40 [ 147.411434][ T6990] Read of size 1 at addr ffff888077e00d98 by task syz.3.393/6990 [ 147.413894][ T5918] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 147.419151][ T6990] [ 147.419182][ T6990] CPU: 1 UID: 0 PID: 6990 Comm: syz.3.393 Not tainted syzkaller #0 PREEMPT(full) [ 147.419199][ T6990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.419219][ T6990] Call Trace: [ 147.419226][ T6990] [ 147.419233][ T6990] dump_stack_lvl+0x189/0x250 [ 147.419256][ T6990] ? __virt_addr_valid+0x1c8/0x5c0 [ 147.419276][ T6990] ? rcu_is_watching+0x15/0xb0 [ 147.419295][ T6990] ? __kasan_check_byte+0x12/0x40 [ 147.419311][ T6990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.419327][ T6990] ? rcu_is_watching+0x15/0xb0 [ 147.419343][ T6990] ? lock_release+0x4b/0x3b0 [ 147.419359][ T6990] ? __virt_addr_valid+0x1c8/0x5c0 [ 147.419377][ T6990] ? __virt_addr_valid+0x4a5/0x5c0 [ 147.419395][ T6990] print_report+0xca/0x240 [ 147.419412][ T6990] ? _raw_spin_lock+0x2e/0x40 [ 147.419425][ T6990] kasan_report+0x118/0x150 [ 147.419443][ T6990] ? _raw_spin_lock+0x2e/0x40 [ 147.419460][ T6990] ? mqueue_flush_file+0x49/0x270 [ 147.419480][ T6990] __kasan_check_byte+0x2a/0x40 [ 147.419498][ T6990] lock_acquire+0x84/0x340 [ 147.419519][ T6990] ? __pfx_mqueue_flush_file+0x10/0x10 [ 147.419537][ T6990] _raw_spin_lock+0x2e/0x40 [ 147.419550][ T6990] ? mqueue_flush_file+0x49/0x270 [ 147.419568][ T6990] mqueue_flush_file+0x49/0x270 [ 147.419587][ T6990] ? filp_flush+0xae/0x190 [ 147.419608][ T6990] ? __pfx_mqueue_flush_file+0x10/0x10 [ 147.419625][ T6990] filp_flush+0xbd/0x190 [ 147.419647][ T6990] filp_close+0x1d/0x40 [ 147.419667][ T6990] put_files_struct+0x1ba/0x350 [ 147.419689][ T6990] do_exit+0x67f/0x2310 [ 147.419712][ T6990] ? do_raw_spin_lock+0x121/0x290 [ 147.419733][ T6990] ? __pfx_do_exit+0x10/0x10 [ 147.419759][ T6990] do_group_exit+0x21c/0x2d0 [ 147.419780][ T6990] ? lockdep_hardirqs_on+0x98/0x140 [ 147.419799][ T6990] get_signal+0x1285/0x1340 [ 147.419824][ T6990] arch_do_signal_or_restart+0x9a/0x7a0 [ 147.419847][ T6990] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 147.419874][ T6990] ? exit_to_user_mode_loop+0x55/0x4f0 [ 147.419893][ T6990] exit_to_user_mode_loop+0x87/0x4f0 [ 147.419909][ T6990] ? rcu_is_watching+0x15/0xb0 [ 147.419929][ T6990] do_syscall_64+0x2e3/0xf80 [ 147.419948][ T6990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.419964][ T6990] ? clear_bhb_loop+0x60/0xb0 [ 147.419982][ T6990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.419998][ T6990] RIP: 0033:0x7f7ab7b8f749 [ 147.420019][ T6990] Code: Unable to access opcode bytes at 0x7f7ab7b8f71f. [ 147.420028][ T6990] RSP: 002b:00007f7ab8a8a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 147.420050][ T6990] RAX: fffffffffffffe00 RBX: 00007f7ab7de5fa8 RCX: 00007f7ab7b8f749 [ 147.420063][ T6990] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7ab7de5fa8 [ 147.420074][ T6990] RBP: 00007f7ab7de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 147.420085][ T6990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.420095][ T6990] R13: 00007f7ab7de6038 R14: 00007ffd1e2a01c0 R15: 00007ffd1e2a02a8 [ 147.420114][ T6990] [ 147.420121][ T6990] [ 147.444228][ T5854] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.448387][ T6990] Allocated by task 6990: [ 147.448402][ T6990] kasan_save_track+0x3e/0x80 [ 147.448421][ T6990] __kasan_slab_alloc+0x6c/0x80 [ 147.448436][ T6990] kmem_cache_alloc_lru_noprof+0x36c/0x6e0 [ 147.448459][ T6990] mqueue_alloc_inode+0x28/0x40 [ 147.448477][ T6990] alloc_inode+0x6a/0x1b0 [ 147.453882][ T5918] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 147.454663][ T6990] new_inode+0x22/0x170 [ 147.459344][ T5918] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 147.464405][ T6990] mqueue_get_inode+0x27/0xb50 [ 147.464427][ T6990] mqueue_create_attr+0x1ac/0x2e0 [ 147.464442][ T6990] vfs_mkobj+0xcf/0x290 [ 147.464462][ T6990] do_mq_open+0x60d/0x7c0 [ 147.464477][ T6990] __x64_sys_mq_open+0x16a/0x1c0 [ 147.464492][ T6990] do_syscall_64+0xfa/0xf80 [ 147.487261][ T5918] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 147.488716][ T6990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.815131][ T6990] [ 147.817441][ T6990] Freed by task 6157: [ 147.821399][ T6990] kasan_save_track+0x3e/0x80 [ 147.826063][ T6990] kasan_save_free_info+0x46/0x50 [ 147.831137][ T6990] __kasan_slab_free+0x5c/0x80 [ 147.835883][ T6990] kmem_cache_free+0x197/0x620 [ 147.840713][ T6990] rcu_core+0xd70/0x1870 [ 147.844949][ T6990] handle_softirqs+0x27d/0x850 [ 147.849717][ T6990] __irq_exit_rcu+0xca/0x1f0 [ 147.854296][ T6990] irq_exit_rcu+0x9/0x30 [ 147.858519][ T6990] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 147.864134][ T6990] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 147.870095][ T6990] [ 147.872403][ T6990] Last potentially related work creation: [ 147.878096][ T6990] kasan_save_stack+0x3e/0x60 [ 147.882762][ T6990] kasan_record_aux_stack+0xbd/0xd0 [ 147.887958][ T6990] call_rcu+0x157/0x9c0 [ 147.892101][ T6990] evict+0x931/0xae0 [ 147.895977][ T6990] __dentry_kill+0x209/0x660 [ 147.900550][ T6990] finish_dput+0xc9/0x480 [ 147.904913][ T6990] path_put+0x39/0x60 [ 147.908882][ T6990] do_mq_open+0x468/0x7c0 [ 147.913195][ T6990] __x64_sys_mq_open+0x16a/0x1c0 [ 147.918116][ T6990] do_syscall_64+0xfa/0xf80 [ 147.922612][ T6990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.928487][ T6990] [ 147.930797][ T6990] The buggy address belongs to the object at ffff888077e00d80 [ 147.930797][ T6990] which belongs to the cache mqueue_inode_cache of size 1576 [ 147.945960][ T6990] The buggy address is located 24 bytes inside of [ 147.945960][ T6990] freed 1576-byte region [ffff888077e00d80, ffff888077e013a8) [ 147.959744][ T6990] [ 147.962059][ T6990] The buggy address belongs to the physical page: [ 147.968468][ T6990] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77e00 [ 147.977210][ T6990] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 147.985688][ T6990] memcg:ffff888077335c01 [ 147.989911][ T6990] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 147.997444][ T6990] page_type: f5(slab) [ 148.001417][ T6990] raw: 00fff00000000040 ffff88801df93a00 dead000000000122 0000000000000000 [ 148.009982][ T6990] raw: 0000000000000000 0000000080120012 00000000f5000000 ffff888077335c01 [ 148.018547][ T6990] head: 00fff00000000040 ffff88801df93a00 dead000000000122 0000000000000000 [ 148.027198][ T6990] head: 0000000000000000 0000000080120012 00000000f5000000 ffff888077335c01 [ 148.035849][ T6990] head: 00fff00000000003 ffffea0001df8001 00000000ffffffff 00000000ffffffff [ 148.044505][ T6990] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 148.053154][ T6990] page dumped because: kasan: bad access detected [ 148.059560][ T6990] page_owner tracks the page as allocated [ 148.065259][ T6990] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5826 (syz-executor), ts 76476305288, free_ts 76392236166 [ 148.086599][ T6990] post_alloc_hook+0x234/0x290 [ 148.091352][ T6990] get_page_from_freelist+0x2365/0x2440 [ 148.096885][ T6990] __alloc_frozen_pages_noprof+0x181/0x370 [ 148.102675][ T6990] alloc_pages_mpol+0x232/0x4a0 [ 148.107506][ T6990] allocate_slab+0x86/0x3b0 [ 148.111992][ T6990] ___slab_alloc+0xf2b/0x1960 [ 148.116652][ T6990] __slab_alloc+0x65/0x100 [ 148.121055][ T6990] kmem_cache_alloc_lru_noprof+0x3fe/0x6e0 [ 148.126934][ T6990] mqueue_alloc_inode+0x28/0x40 [ 148.131772][ T6990] alloc_inode+0x6a/0x1b0 [ 148.136087][ T6990] new_inode+0x22/0x170 [ 148.140225][ T6990] mqueue_fill_super+0xdc/0x380 [ 148.145067][ T6990] get_tree_nodev+0xbb/0x150 [ 148.149655][ T6990] vfs_get_tree+0x92/0x2a0 [ 148.154077][ T6990] fc_mount_longterm+0x1c/0x100 [ 148.159007][ T6990] mq_init_ns+0x275/0x360 [ 148.163327][ T6990] page last free pid 5843 tgid 5843 stack trace: [ 148.169632][ T6990] __free_frozen_pages+0xbc8/0xd30 [ 148.174738][ T6990] __put_partials+0x146/0x170 [ 148.179399][ T6990] put_cpu_partial+0x1f2/0x2d0 [ 148.184147][ T6990] __slab_free+0x288/0x2a0 [ 148.188548][ T6990] qlist_free_all+0x97/0x100 [ 148.193122][ T6990] kasan_quarantine_reduce+0x148/0x160 [ 148.198560][ T6990] __kasan_slab_alloc+0x22/0x80 [ 148.203393][ T6990] kmem_cache_alloc_noprof+0x37d/0x710 [ 148.208840][ T6990] skb_clone+0x212/0x3a0 [ 148.213068][ T6990] hci_cmd_work+0xd8/0x7e0 [ 148.217466][ T6990] process_one_work+0x93a/0x15a0 [ 148.222383][ T6990] worker_thread+0x9b0/0xee0 [ 148.226955][ T6990] kthread+0x711/0x8a0 [ 148.231008][ T6990] ret_from_fork+0x599/0xb30 [ 148.235585][ T6990] ret_from_fork_asm+0x1a/0x30 [ 148.240334][ T6990] [ 148.242725][ T6990] Memory state around the buggy address: [ 148.248333][ T6990] ffff888077e00c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 148.256727][ T6990] ffff888077e00d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 148.264775][ T6990] >ffff888077e00d80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.272818][ T6990] ^ [ 148.277643][ T6990] ffff888077e00e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.285684][ T6990] ffff888077e00e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.293722][ T6990] ================================================================== [ 148.304964][ T6990] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 148.312196][ T6990] CPU: 1 UID: 0 PID: 6990 Comm: syz.3.393 Not tainted syzkaller #0 PREEMPT(full) [ 148.321392][ T6990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.331459][ T6990] Call Trace: [ 148.334741][ T6990] [ 148.337668][ T6990] dump_stack_lvl+0x99/0x250 [ 148.342260][ T6990] ? __asan_memcpy+0x40/0x70 [ 148.346850][ T6990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.352041][ T6990] ? __pfx__printk+0x10/0x10 [ 148.356623][ T6990] vpanic+0x237/0x6d0 [ 148.360593][ T6990] ? __pfx_vpanic+0x10/0x10 [ 148.365080][ T6990] ? irqentry_exit+0x5dd/0x660 [ 148.369831][ T6990] ? trace_irq_disable+0x37/0x100 [ 148.374846][ T6990] panic+0xb9/0xc0 [ 148.378550][ T6990] ? __pfx_panic+0x10/0x10 [ 148.382950][ T6990] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 148.388827][ T6990] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 148.395137][ T6990] ? _raw_spin_lock+0x2e/0x40 [ 148.399794][ T6990] check_panic_on_warn+0x89/0xb0 [ 148.404731][ T6990] ? _raw_spin_lock+0x2e/0x40 [ 148.409411][ T6990] end_report+0x6f/0x140 [ 148.413666][ T6990] kasan_report+0x129/0x150 [ 148.418168][ T6990] ? _raw_spin_lock+0x2e/0x40 [ 148.422835][ T6990] ? mqueue_flush_file+0x49/0x270 [ 148.427844][ T6990] __kasan_check_byte+0x2a/0x40 [ 148.432680][ T6990] lock_acquire+0x84/0x340 [ 148.437082][ T6990] ? __pfx_mqueue_flush_file+0x10/0x10 [ 148.442681][ T6990] _raw_spin_lock+0x2e/0x40 [ 148.447174][ T6990] ? mqueue_flush_file+0x49/0x270 [ 148.452181][ T6990] mqueue_flush_file+0x49/0x270 [ 148.457021][ T6990] ? filp_flush+0xae/0x190 [ 148.461436][ T6990] ? __pfx_mqueue_flush_file+0x10/0x10 [ 148.466884][ T6990] filp_flush+0xbd/0x190 [ 148.471125][ T6990] filp_close+0x1d/0x40 [ 148.475270][ T6990] put_files_struct+0x1ba/0x350 [ 148.480110][ T6990] do_exit+0x67f/0x2310 [ 148.484251][ T6990] ? do_raw_spin_lock+0x121/0x290 [ 148.489260][ T6990] ? __pfx_do_exit+0x10/0x10 [ 148.493846][ T6990] do_group_exit+0x21c/0x2d0 [ 148.498424][ T6990] ? lockdep_hardirqs_on+0x98/0x140 [ 148.503609][ T6990] get_signal+0x1285/0x1340 [ 148.508102][ T6990] arch_do_signal_or_restart+0x9a/0x7a0 [ 148.513636][ T6990] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 148.519779][ T6990] ? exit_to_user_mode_loop+0x55/0x4f0 [ 148.525222][ T6990] exit_to_user_mode_loop+0x87/0x4f0 [ 148.530490][ T6990] ? rcu_is_watching+0x15/0xb0 [ 148.535243][ T6990] do_syscall_64+0x2e3/0xf80 [ 148.539848][ T6990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.545898][ T6990] ? clear_bhb_loop+0x60/0xb0 [ 148.550734][ T6990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.556623][ T6990] RIP: 0033:0x7f7ab7b8f749 [ 148.561024][ T6990] Code: Unable to access opcode bytes at 0x7f7ab7b8f71f. [ 148.568031][ T6990] RSP: 002b:00007f7ab8a8a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.576433][ T6990] RAX: fffffffffffffe00 RBX: 00007f7ab7de5fa8 RCX: 00007f7ab7b8f749 [ 148.584389][ T6990] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7ab7de5fa8 [ 148.592340][ T6990] RBP: 00007f7ab7de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 148.600295][ T6990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.608246][ T6990] R13: 00007f7ab7de6038 R14: 00007ffd1e2a01c0 R15: 00007ffd1e2a02a8 [ 148.616310][ T6990] [ 148.619451][ T6990] Kernel Offset: disabled [ 148.623753][ T6990] Rebooting in 86400 seconds..