last executing test programs: 8.183039242s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xbc) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(0x0, 0x40, 0x0) 7.876525996s ago: executing program 2 (id=3): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 7.698994271s ago: executing program 1 (id=2): connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4044000) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f7, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) 6.83796807s ago: executing program 1 (id=5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 6.422989643s ago: executing program 0 (id=1): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x334e89}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000200)={0x18, r1}) 5.370182448s ago: executing program 0 (id=6): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000380)={0x40, 0x21, 0x46, {0x46, 0x4, "d56ed8b3e84a91253dc6450808b22bb492e09a1f88c577f8a6bf3316a3917a1cee9ecfc94818339d521181244d0bfd35ebc1543c4fff4c77ca7f0547c5fd3d58678600f8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) 5.315388603s ago: executing program 1 (id=7): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10101) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000500)}, {&(0x7f00000003c0)="cad42b95eeb22fdd1b85a5d157aea1c58d646113136c56a0c1491ad1cb72b258caa9f6f57b8fb825c95dbd1cccecd29982d52d598ea533697818df73df03705a4c0345a3c0a93e40742a69c0676313b809e938769b61b3bac355fb237d06249379596d78ae7245e90a84654d41b139de71024d6d4d838980590b95f04ba60c8425f08639bc7d8d6733534737bd4d5a1131241e19cdf513fff591d6479c7efd0e1b4c87641caedbe73d41bd60af3c1f836b70961d", 0xb4}, {0x0}], 0x3) socket$key(0xf, 0x3, 0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r5, 0xffffffffffffffff}) r7 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x1ff, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)) dup3(r5, r4, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_DEV_CREATE(r3, 0x5501) 4.134062447s ago: executing program 1 (id=8): socket$nl_rdma(0x10, 0x3, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 4.076813142s ago: executing program 2 (id=9): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x6b}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.075402662s ago: executing program 3 (id=10): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) setrlimit(0xa, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0xa, 0x12e4f8, 0x334e8d}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0xa, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) 2.643499058s ago: executing program 3 (id=11): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x2a00810, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRESHEX, @ANYRES64], 0x1, 0x1fb, &(0x7f0000000280)="$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") syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x0) 2.556284774s ago: executing program 1 (id=12): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x98) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0xff) memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) 1.505076659s ago: executing program 2 (id=13): connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4044000) 959.082073ms ago: executing program 3 (id=14): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) 916.603566ms ago: executing program 0 (id=15): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x334e89}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000200)={0x18, r1}) 915.310966ms ago: executing program 2 (id=16): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200010000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000880)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 681.221055ms ago: executing program 3 (id=17): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10101) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000500)}, {&(0x7f00000003c0)="cad42b95eeb22fdd1b85a5d157aea1c58d646113136c56a0c1491ad1cb72b258caa9f6f57b8fb825c95dbd1cccecd29982d52d598ea533697818df73df03705a4c0345a3c0a93e40742a69c0676313b809e938769b61b3bac355fb237d06249379596d78ae7245e90a84654d41b139de71024d6d4d838980590b95f04ba60c8425f08639bc7d8d6733534737bd4d5a1131241e19cdf513fff591d6479c7efd0e1b4c87641caedbe73d41bd60af3c1f836b70961d", 0xb4}, {0x0}], 0x3) 87.906183ms ago: executing program 0 (id=18): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 0s ago: executing program 3 (id=19): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0x1, 0x1c8, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) open(0x0, 0x100, 0x123) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 66.480345][ T5771] cgroup: Unknown subsys name 'net' [ 66.615192][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.981915][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.989499][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.993497][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.007075][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.015225][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.020205][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.030113][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.031617][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.046126][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.048514][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.055109][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.070200][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.077842][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.083146][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.085846][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.093747][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.099866][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.107643][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.126209][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.128304][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.135623][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.147638][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.159395][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.173843][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.190442][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.622474][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 70.722603][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 70.776894][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.785042][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.792523][ T5789] bridge_slave_0: entered allmulticast mode [ 70.801076][ T5789] bridge_slave_0: entered promiscuous mode [ 70.819094][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 70.830138][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 70.851679][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.859240][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.867302][ T5789] bridge_slave_1: entered allmulticast mode [ 70.874326][ T5789] bridge_slave_1: entered promiscuous mode [ 70.950904][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.976068][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.056970][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.064287][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.077050][ T5780] bridge_slave_0: entered allmulticast mode [ 71.084528][ T5780] bridge_slave_0: entered promiscuous mode [ 71.093343][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.100574][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.107865][ T5780] bridge_slave_1: entered allmulticast mode [ 71.115677][ T5780] bridge_slave_1: entered promiscuous mode [ 71.144146][ T5789] team0: Port device team_slave_0 added [ 71.163809][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.171126][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.179533][ T5783] bridge_slave_0: entered allmulticast mode [ 71.186316][ T5783] bridge_slave_0: entered promiscuous mode [ 71.193513][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.201295][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.208599][ T5781] bridge_slave_0: entered allmulticast mode [ 71.215544][ T5781] bridge_slave_0: entered promiscuous mode [ 71.224492][ T5789] team0: Port device team_slave_1 added [ 71.253472][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.260788][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.268189][ T5783] bridge_slave_1: entered allmulticast mode [ 71.274930][ T5783] bridge_slave_1: entered promiscuous mode [ 71.281754][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.289256][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.296556][ T5781] bridge_slave_1: entered allmulticast mode [ 71.303466][ T5781] bridge_slave_1: entered promiscuous mode [ 71.324712][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.355803][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.363066][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.389031][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.403205][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.439592][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.461074][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.468868][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.496169][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.521556][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.532925][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.551316][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.583629][ T5780] team0: Port device team_slave_0 added [ 71.642374][ T5789] hsr_slave_0: entered promiscuous mode [ 71.650086][ T5789] hsr_slave_1: entered promiscuous mode [ 71.659383][ T5780] team0: Port device team_slave_1 added [ 71.676417][ T5781] team0: Port device team_slave_0 added [ 71.685523][ T5781] team0: Port device team_slave_1 added [ 71.714212][ T5783] team0: Port device team_slave_0 added [ 71.732827][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.740492][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.767401][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.774529][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.801759][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.814709][ T5783] team0: Port device team_slave_1 added [ 71.822640][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.830153][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.856139][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.871958][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.879126][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.905561][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.925814][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.932986][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.959783][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.034835][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.042218][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.068584][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.095183][ T5780] hsr_slave_0: entered promiscuous mode [ 72.102026][ T5780] hsr_slave_1: entered promiscuous mode [ 72.108531][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.116393][ T5780] Cannot create hsr debugfs directory [ 72.128520][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.135494][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.161519][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.198960][ T5796] Bluetooth: hci2: command tx timeout [ 72.199268][ T50] Bluetooth: hci0: command tx timeout [ 72.204692][ T5796] Bluetooth: hci3: command tx timeout [ 72.238522][ T5781] hsr_slave_0: entered promiscuous mode [ 72.245344][ T5781] hsr_slave_1: entered promiscuous mode [ 72.251573][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.259743][ T5781] Cannot create hsr debugfs directory [ 72.283122][ T5796] Bluetooth: hci1: command tx timeout [ 72.346297][ T5783] hsr_slave_0: entered promiscuous mode [ 72.353621][ T5783] hsr_slave_1: entered promiscuous mode [ 72.361532][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.369154][ T5783] Cannot create hsr debugfs directory [ 72.674148][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.697583][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.707456][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.729170][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.792386][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.804999][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.821196][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.834110][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.923456][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.950538][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.960161][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.978242][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.066268][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.085498][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.097653][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.116538][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.138164][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.184080][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.214401][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.241310][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.248905][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.274541][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.292850][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.300028][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.313155][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.320334][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.355844][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.363089][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.414015][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.479717][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.490454][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.541033][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.548245][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.565506][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.572748][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.686731][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.708758][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.769728][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.824681][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.831924][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.860963][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.868194][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.987677][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.076502][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.105715][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.180145][ T5780] veth0_vlan: entered promiscuous mode [ 74.237559][ T5780] veth1_vlan: entered promiscuous mode [ 74.257838][ T5789] veth0_vlan: entered promiscuous mode [ 74.278870][ T5796] Bluetooth: hci3: command tx timeout [ 74.279581][ T50] Bluetooth: hci0: command tx timeout [ 74.284311][ T5796] Bluetooth: hci2: command tx timeout [ 74.322876][ T5780] veth0_macvtap: entered promiscuous mode [ 74.332494][ T5783] veth0_vlan: entered promiscuous mode [ 74.349784][ T5789] veth1_vlan: entered promiscuous mode [ 74.361703][ T5796] Bluetooth: hci1: command tx timeout [ 74.365297][ T5780] veth1_macvtap: entered promiscuous mode [ 74.399000][ T5783] veth1_vlan: entered promiscuous mode [ 74.411181][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.424696][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.436700][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.447612][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.456860][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.466018][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.505730][ T5789] veth0_macvtap: entered promiscuous mode [ 74.526250][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.561134][ T5789] veth1_macvtap: entered promiscuous mode [ 74.592585][ T5783] veth0_macvtap: entered promiscuous mode [ 74.612147][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.626118][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.640806][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.673527][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.685554][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.700200][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.711042][ T5783] veth1_macvtap: entered promiscuous mode [ 74.741908][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.751733][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.761128][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.770445][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.797315][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.805499][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.857100][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.862118][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.875646][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.886227][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.890726][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.909009][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.921754][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.957571][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.969349][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.979672][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.990469][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.003540][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.017568][ T5781] veth0_vlan: entered promiscuous mode [ 75.031228][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.040614][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.050710][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.061199][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.128004][ T5781] veth1_vlan: entered promiscuous mode [ 75.164284][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.188367][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.265696][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.291331][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.340004][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.365520][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.392786][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.406241][ T5781] veth0_macvtap: entered promiscuous mode [ 75.410206][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.421601][ T5781] veth1_macvtap: entered promiscuous mode [ 75.502880][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.519520][ T5853] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.534399][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.545356][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.555870][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.566582][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.577335][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.590219][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.614076][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.633004][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.646921][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.660645][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.671768][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.686119][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.701358][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.738247][ T5853] usb 4-1: Using ep0 maxpacket: 8 [ 75.744110][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.756353][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.769320][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.779051][ T5853] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 75.786616][ T5853] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 76.248254][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.260985][ T5853] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 76.290169][ T5853] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 76.302752][ T5853] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 76.318815][ T5853] usb 4-1: config 168 interface 0 has no altsetting 0 [ 76.328606][ T5853] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 76.338240][ T5853] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 76.367863][ T5796] Bluetooth: hci0: command tx timeout [ 76.373406][ T5796] Bluetooth: hci2: command tx timeout [ 76.378909][ T50] Bluetooth: hci3: command tx timeout [ 76.390799][ T5853] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 76.440006][ T50] Bluetooth: hci1: command tx timeout [ 76.498536][ T5853] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 76.545939][ T5853] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 76.606892][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.629367][ T5853] usb 4-1: config 168 interface 0 has no altsetting 0 [ 76.653537][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.666925][ T5853] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 76.710041][ T5853] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 76.723105][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.732520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.736168][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.751562][ T5853] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 76.770884][ T5853] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 76.787638][ T5853] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 76.808945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.818303][ T5853] usb 4-1: config 168 interface 0 has no altsetting 0 [ 76.837309][ T5853] usb 4-1: string descriptor 0 read error: -22 [ 76.861421][ T5853] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 76.874944][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.959237][ T5853] adutux 4-1:168.0: interrupt endpoints not found [ 77.968571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 78.152443][ T5840] usb 4-1: USB disconnect, device number 2 [ 78.172488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.188379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.582087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.587673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.590913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.619510][ T50] Bluetooth: hci3: command tx timeout [ 78.625122][ T50] Bluetooth: hci2: command tx timeout [ 78.630817][ T50] Bluetooth: hci0: command tx timeout [ 78.636973][ T50] Bluetooth: hci1: command tx timeout [ 78.808095][ T5872] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.854662][ T5892] input: syz0 as /devices/virtual/input/input5 [ 78.889281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.897905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 79.014369][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.035920][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.059692][ T5872] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 79.108781][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.183937][ T5872] usb 1-1: config 0 descriptor?? [ 79.353887][ T5901] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.540767][ T5872] ortek 0003:1223:3F07.0001: unknown main item tag 0x3 [ 80.641529][ T5872] ortek 0003:1223:3F07.0001: item fetching failed at offset 48/69 [ 80.658811][ T5872] ortek: probe of 0003:1223:3F07.0001 failed with error -22 [ 80.709683][ T5872] usb 1-1: USB disconnect, device number 2 [ 80.929641][ T5913] syz.3.11[5913]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.941632][ T5913] loop3: detected capacity change from 0 to 8 [ 81.827813][ T28] audit: type=1800 audit(1755643100.886:2): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 82.103061][ T8] cfg80211: failed to load regulatory.db [ 82.758151][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.999777][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 83.065012][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 83.175627][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 83.186428][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.207815][ T23] usb 3-1: Product: syz [ 83.219721][ T23] usb 3-1: Manufacturer: syz [ 83.234560][ T23] usb 3-1: SerialNumber: syz [ 83.252637][ T23] usb 3-1: config 0 descriptor?? [ 83.360069][ T5935] loop3: detected capacity change from 0 to 16 [ 83.369529][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 83.393791][ T5935] erofs: (device loop3): mounted with root inode @ nid 36. [ 83.711776][ T5938] general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] PREEMPT SMP KASAN [ 83.723529][ T5938] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 83.731987][ T5938] CPU: 1 PID: 5938 Comm: syz.1.12 Not tainted 6.6.102-syzkaller #0 [ 83.739962][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.750005][ T5938] RIP: 0010:h5_recv+0x147/0x8c0 [ 83.754861][ T5938] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 2b f3 58 fa 4d 8b 65 00 31 ff 4c 89 [ 83.774474][ T5938] RSP: 0018:ffffc900051a7c60 EFLAGS: 00010202 [ 83.780533][ T5938] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f [ 83.788497][ T5938] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000 [ 83.796457][ T5938] RBP: ffffc900051a7d80 R08: ffff888030c4e01f R09: 1ffff11006189c03 [ 83.804424][ T5938] R10: dffffc0000000000 R11: ffffed1006189c04 R12: 0000000000000001 [ 83.812402][ T5938] R13: 00000000000002f8 R14: ffff888030c4e010 R15: ffffc900051a7e20 [ 83.820366][ T5938] FS: 00007f02132826c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 83.829287][ T5938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.835859][ T5938] CR2: 000020000000f000 CR3: 0000000023330000 CR4: 00000000003506e0 [ 83.843825][ T5938] Call Trace: [ 83.847100][ T5938] [ 83.850026][ T5938] ? h5_setup+0xb0/0xb0 [ 83.854184][ T5938] hci_uart_tty_receive+0x188/0x210 [ 83.859376][ T5938] ? hci_uart_tty_ioctl+0x9f0/0x9f0 [ 83.864582][ T5938] tiocsti+0x23e/0x2c0 [ 83.868643][ T5938] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 83.874276][ T5938] ? signal_pending+0xa0/0xa0 [ 83.879033][ T5938] tty_ioctl+0x62e/0xdd0 [ 83.883262][ T5938] ? tty_get_icount+0xb0/0xb0 [ 83.887923][ T5938] __se_sys_ioctl+0xfd/0x170 [ 83.892513][ T5938] do_syscall_64+0x55/0xb0 [ 83.896920][ T5938] ? clear_bhb_loop+0x40/0x90 [ 83.901589][ T5938] ? clear_bhb_loop+0x40/0x90 [ 83.906254][ T5938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.912146][ T5938] RIP: 0033:0x7f021238ebe9 [ 83.916564][ T5938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.936256][ T5938] RSP: 002b:00007f0213282038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.944810][ T5938] RAX: ffffffffffffffda RBX: 00007f02125b6270 RCX: 00007f021238ebe9 [ 83.952781][ T5938] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000006 [ 83.960742][ T5938] RBP: 00007f0212411e19 R08: 0000000000000000 R09: 0000000000000000 [ 83.968711][ T5938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.976671][ T5938] R13: 00007f02125b6308 R14: 00007f02125b6270 R15: 00007ffca0fad398 [ 83.984639][ T5938] [ 83.987649][ T5938] Modules linked in: [ 83.995726][ T5938] ---[ end trace 0000000000000000 ]--- [ 84.091797][ T5938] RIP: 0010:h5_recv+0x147/0x8c0 [ 84.165090][ T5938] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 2b f3 58 fa 4d 8b 65 00 31 ff 4c 89 [ 84.185144][ T5938] RSP: 0018:ffffc900051a7c60 EFLAGS: 00010202 [ 84.191466][ T5938] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f [ 84.200005][ T5938] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000 [ 84.214888][ T5938] RBP: ffffc900051a7d80 R08: ffff888030c4e01f R09: 1ffff11006189c03 [ 84.225850][ T5938] R10: dffffc0000000000 R11: ffffed1006189c04 R12: 0000000000000001 [ 84.237635][ T5938] R13: 00000000000002f8 R14: ffff888030c4e010 R15: ffffc900051a7e20 [ 84.247192][ T5938] FS: 00007f02132826c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 84.256638][ T5938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.264741][ T5938] CR2: 00007f0213240d58 CR3: 0000000023330000 CR4: 00000000003506f0 [ 84.273256][ T5938] Kernel panic - not syncing: Fatal exception [ 84.279596][ T5938] Kernel Offset: disabled [ 84.283920][ T5938] Rebooting in 86400 seconds..