last executing test programs: 5.629842103s ago: executing program 2 (id=25): sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 4.560345814s ago: executing program 2 (id=27): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x400) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 4.338568424s ago: executing program 1 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1f8, 0x0, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@dev, @multicast2, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002f00090028bd70000100002504"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x24000000) 3.827490889s ago: executing program 0 (id=30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x1e9100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x10000, 0x2, 0x25000, 0x2000, &(0x7f0000732000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.819329029s ago: executing program 1 (id=31): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00f8a7b2e3fa03c115197be9f70100003a0f2a481dcc0c7df70e91b53e9bbbfa9db883efa81e24a901c772de6f8d4564614508951ff81de8497b1024e6126e693215a870e4178226b43b6407f6ac10e466603341f9ceea175d778cf298b3838270d00c80d98203008e2cb95e02f009b842d0e510e2247e", @ANYRES16, @ANYBLOB="000200000000ffdbdf250100000004"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)=ANY=[]) 3.634697987s ago: executing program 1 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x20) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/146, 0x92}, {&(0x7f0000000140)=""/253, 0xfd}], 0x2, 0x8000, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)="3c3e0f2397b4d84500b5f812365f00000000000000", 0xff40) 3.487179345s ago: executing program 0 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='+bo', 0x3) 3.484993595s ago: executing program 2 (id=35): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f0000"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_open_dev$sndctrl(0x0, 0x458, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x7, 0x3, 0x6, 0x4006, 0x0, 0x3]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0xc804, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x1) chdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 3.36360474s ago: executing program 3 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) clock_adjtime(0xc, &(0x7f0000000140)={0x401, 0x8, 0x6, 0x5, 0x8, 0xa, 0x8, 0x7, 0x7, 0x618a, 0xffffffffffffffff, 0xf3f6, 0x7, 0x473, 0x80000001, 0x2, 0x3, 0x4, 0x2, 0xac, 0xfffffffffffffff6, 0xfffffffffffffffb, 0x1, 0xcf, 0x80000001, 0x6}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0xa, 0x0, '\x00', [{0x3, 0x3, 0x4, 0x98, 0x2, 0x80000000}, {0x7, 0xe6, 0x4, 0x8000000000000000, 0x3, 0x400}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 2.978758859s ago: executing program 1 (id=37): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xfffffffd}}]}}, 0x0, 0x4e}, 0x20) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r3, &(0x7f0000000080), 0x12) connect$x25(r3, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) r5 = openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x68, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x54, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@]]/\']%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(({##Z*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ':&((-$[}\xa2(@+\'\x00'}]}]}]}]}, 0x68}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x807c6406, &(0x7f0000002140)=""/29) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x0, 0x1}, 0x48) 2.52908665s ago: executing program 3 (id=38): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000021, 0x0, 0x400}]}) 2.496228631s ago: executing program 2 (id=39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x149b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000001c0)="b9e60a0000c7442400fcffffffc744240276980000c7442406000000000f011c9e3e66460f38806fca66410f3880200f21f835c00000000f23f8660f3881143126430f01c2c423f916c3088080430000c0c03235000000003a3a3066b8cd008ee0", 0x61}], 0xaaaaaaaaaaaabed, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x60000000046be, 0x0, 0xfffffffffffbfffb, 0x2, 0x8, 0x10000000000006, 0x167, 0x225561f6, 0x7ff, 0x1682, 0xce, 0x0, 0x7, 0x2, 0x800000000024f, 0x1], 0x2, 0x5382}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.431605565s ago: executing program 0 (id=40): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@void, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@llc={0x4, {@llc={0x42, 0x42, "9a", "772d6da3af"}}}}}}, 0x1a) 2.248279593s ago: executing program 1 (id=41): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x05\x00\xaaI\x00\x00\x00$\x19\xaa\x00\x00\x00\t<\xe8u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd2.\xeb\xb5\xc2\xff\x9bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x83T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ{\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\xcc\xa4\xbb\xb0\xa3S\n\xe8\xb1p\xb9\x90\xe9\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xab,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/uts\x00') open_by_handle_at(r1, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x3f000000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) syz_open_dev$video(&(0x7f0000000080), 0xe, 0x8800) personality(0x6) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01001dbd7000fedbdf250800000008000be6030000000800090000000000"], 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x4000044) listen(r2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.178304197s ago: executing program 3 (id=42): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.89131749s ago: executing program 0 (id=43): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0x30b8, 0x8, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x10, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd33, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x7, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r5, '\x00', {0x204, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) open(0x0, 0x480920, 0x146) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r9, &(0x7f0000000040)=ANY=[], 0xffffff6a) unshare(0x22020600) fsync(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r10 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x38728a2, &(0x7f0000000500)=ANY=[@ANYBLOB="f0d7a69393b0feab016476b8d47d9f9ef05b806f08c060928f5472b9d6ae02b49eb4c3110736840a76c277bf37c99bb730395d4f5b68b8145c89307e495a4bd7f8fcc895a1d91e5018f115ab7e02715eabaddd5088286ba85ddf5fcd12ca19ee3e86990cf29638d273b8c5e43eded226bb50174d787bc4e7eec3554f7aa531ce6f7332b9fe8b7aec07ac637962c9cda9c4bf7ea05aa8a127586bef799698a4b68ed2845787eeac95c45367b9c22a5abd03e1eb", @ANYRESHEX=r11, @ANYBLOB]) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x7, 0x37fffd, 0x4, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0xce7, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r12, &(0x7f0000000200)='hd3ss3220 0x4', 0xd) write(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) ioctl$TIOCSETD(r0, 0x5423, 0x0) 1.495377089s ago: executing program 2 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) close(0xffffffffffffffff) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r2, &(0x7f0000000d00), 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000340)="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", 0xff) close(r3) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000001100)='0\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') write(0xffffffffffffffff, &(0x7f0000001600)='usbip-vudc.0', 0xc) close(0xffffffffffffffff) 826.64538ms ago: executing program 2 (id=45): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_disconnect(r1) 747.543604ms ago: executing program 3 (id=46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004b2000/0x400000)=nil) 743.241554ms ago: executing program 1 (id=47): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000003340), 0x800, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000003400)={0x28, 0x0, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000300000000000070000ffffffbf0001"], &(0x7f0000000100)='syzkaller\x00', 0xf}, 0x94) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000200)) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000400)={'P\x00', 0x0, 0x5, 0x3, 0x7ff, 0x1, "ff9b15e5a8c80625c8c35500", '\x00\x00\a\x00', "020400", "001197ff", ["50d5c2a708000000e40000b6", "006167000000000000ffff00", "a1330700"]}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r4, 0x0, 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x406, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0xc1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) r6 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r6, 0x0, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r8, 0x6f2d, 0x1) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000100)={0x4, r4, 0x1}) bind$alg(r7, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000400)="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", 0x40) 454.281948ms ago: executing program 3 (id=48): r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000300070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) 255.545317ms ago: executing program 3 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/193, 0xc1) 203.40144ms ago: executing program 0 (id=50): r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, 0x0) 0s ago: executing program 0 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) pipe2$9p(0x0, 0x80000) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) write(r0, &(0x7f0000000180)='/proc/self/cwd/te', 0x11) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 67.627165][ T5758] cgroup: Unknown subsys name 'net' [ 67.759782][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.109721][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.004413][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.013987][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.021502][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.030161][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.037962][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.046224][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.054121][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.061444][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.067386][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.084545][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.092441][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.099850][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.173827][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.181881][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.189484][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.208141][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.211563][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.215933][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.230261][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.237705][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.252447][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.265547][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.273472][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.280849][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.447622][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.454233][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.472441][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 71.616207][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.624132][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.631342][ T5770] bridge_slave_0: entered allmulticast mode [ 71.638748][ T5770] bridge_slave_0: entered promiscuous mode [ 71.646547][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 71.657866][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.665088][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.672186][ T5770] bridge_slave_1: entered allmulticast mode [ 71.679101][ T5770] bridge_slave_1: entered promiscuous mode [ 71.730503][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.749630][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.809604][ T5770] team0: Port device team_slave_0 added [ 71.825590][ T5770] team0: Port device team_slave_1 added [ 71.855347][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 71.894205][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.901175][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.927729][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.955764][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.962727][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.988904][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.019003][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.026293][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.033537][ T5773] bridge_slave_0: entered allmulticast mode [ 72.040477][ T5773] bridge_slave_0: entered promiscuous mode [ 72.066726][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.073965][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.081061][ T5773] bridge_slave_1: entered allmulticast mode [ 72.088865][ T5773] bridge_slave_1: entered promiscuous mode [ 72.130457][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.149255][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 72.170489][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.194651][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.201796][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.209207][ T5779] bridge_slave_0: entered allmulticast mode [ 72.216630][ T5779] bridge_slave_0: entered promiscuous mode [ 72.237952][ T5770] hsr_slave_0: entered promiscuous mode [ 72.245051][ T5770] hsr_slave_1: entered promiscuous mode [ 72.263814][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.270926][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.278304][ T5779] bridge_slave_1: entered allmulticast mode [ 72.285060][ T5779] bridge_slave_1: entered promiscuous mode [ 72.304116][ T5773] team0: Port device team_slave_0 added [ 72.311292][ T5773] team0: Port device team_slave_1 added [ 72.388016][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.395179][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.421462][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.434978][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.465787][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.472754][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.498820][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.518393][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.551663][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.558893][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.570554][ T5777] bridge_slave_0: entered allmulticast mode [ 72.577345][ T5777] bridge_slave_0: entered promiscuous mode [ 72.586432][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.593588][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.600725][ T5777] bridge_slave_1: entered allmulticast mode [ 72.608007][ T5777] bridge_slave_1: entered promiscuous mode [ 72.632768][ T5779] team0: Port device team_slave_0 added [ 72.641528][ T5779] team0: Port device team_slave_1 added [ 72.716489][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.726345][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.735921][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.764494][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.777497][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.785064][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.811151][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.838752][ T5773] hsr_slave_0: entered promiscuous mode [ 72.845481][ T5773] hsr_slave_1: entered promiscuous mode [ 72.851483][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.859441][ T5773] Cannot create hsr debugfs directory [ 72.866999][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.904777][ T5777] team0: Port device team_slave_0 added [ 72.929764][ T5777] team0: Port device team_slave_1 added [ 72.983574][ T5779] hsr_slave_0: entered promiscuous mode [ 72.989715][ T5779] hsr_slave_1: entered promiscuous mode [ 72.996168][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.003976][ T5779] Cannot create hsr debugfs directory [ 73.027823][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.034994][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.061017][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.073434][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.080364][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.106552][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.124183][ T5776] Bluetooth: hci1: command tx timeout [ 73.203477][ T5776] Bluetooth: hci0: command tx timeout [ 73.239405][ T5777] hsr_slave_0: entered promiscuous mode [ 73.248302][ T5777] hsr_slave_1: entered promiscuous mode [ 73.254780][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.262328][ T5777] Cannot create hsr debugfs directory [ 73.283390][ T5776] Bluetooth: hci2: command tx timeout [ 73.346367][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.363401][ T5776] Bluetooth: hci3: command tx timeout [ 73.378063][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.428785][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.439386][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.584584][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.594193][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.620756][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.644964][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.689956][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.719317][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.728486][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.754281][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.830919][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.845907][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.875398][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.886590][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.968477][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.991075][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.053038][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.070086][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.079860][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.100932][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.111048][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.118472][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.132200][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.139376][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.159162][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.166314][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.191893][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.198996][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.210053][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.222628][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.229776][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.268894][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.289106][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.296305][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.315069][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.322146][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.335919][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.376049][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.383196][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.648993][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.772586][ T5770] veth0_vlan: entered promiscuous mode [ 74.816720][ T5770] veth1_vlan: entered promiscuous mode [ 74.910298][ T5770] veth0_macvtap: entered promiscuous mode [ 74.926967][ T5770] veth1_macvtap: entered promiscuous mode [ 74.941931][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.988960][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.019346][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.051917][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.064720][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.074856][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.084445][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.093137][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.117848][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.154909][ T5777] veth0_vlan: entered promiscuous mode [ 75.186596][ T5777] veth1_vlan: entered promiscuous mode [ 75.206812][ T5776] Bluetooth: hci1: command tx timeout [ 75.285965][ T5776] Bluetooth: hci0: command tx timeout [ 75.299899][ T5773] veth0_vlan: entered promiscuous mode [ 75.309865][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.322453][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.337300][ T5779] veth0_vlan: entered promiscuous mode [ 75.349780][ T5773] veth1_vlan: entered promiscuous mode [ 75.365316][ T5776] Bluetooth: hci2: command tx timeout [ 75.380585][ T5777] veth0_macvtap: entered promiscuous mode [ 75.399331][ T5779] veth1_vlan: entered promiscuous mode [ 75.412638][ T5777] veth1_macvtap: entered promiscuous mode [ 75.431571][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.437899][ T5773] veth0_macvtap: entered promiscuous mode [ 75.445741][ T5776] Bluetooth: hci3: command tx timeout [ 75.455926][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.507357][ T5779] veth0_macvtap: entered promiscuous mode [ 75.521135][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.534419][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.546822][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.555101][ T5773] veth1_macvtap: entered promiscuous mode [ 75.577307][ T5779] veth1_macvtap: entered promiscuous mode [ 75.601611][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.617298][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.627990][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.639322][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.651685][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.678513][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.690432][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.707438][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.722636][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.735184][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.745743][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.757323][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.770876][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.782161][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.794935][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.826101][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.853028][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.870485][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.882339][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.897159][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.908933][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.917978][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.928230][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.937084][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.947955][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.958688][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.972018][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.982724][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.992865][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.005014][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.020334][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.039025][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.048180][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.057369][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.066211][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.079786][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.090135][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.098909][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.108243][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.291919][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.326602][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.388709][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.413905][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.479480][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.495312][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.517868][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.537192][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.562194][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.577565][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.629747][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.663873][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.885790][ T5847] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.075905][ T5853] syzkaller1: entered promiscuous mode [ 77.081872][ T5853] syzkaller1: entered allmulticast mode [ 77.294554][ T5776] Bluetooth: hci1: command tx timeout [ 77.363756][ T5776] Bluetooth: hci0: command tx timeout [ 77.455760][ T5776] Bluetooth: hci2: command tx timeout [ 77.524344][ T5776] Bluetooth: hci3: command tx timeout [ 77.863751][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.084529][ T5866] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0) [ 78.186798][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 78.261053][ T9] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 78.344219][ T9] usb 1-1: Product: syz [ 78.453166][ T9] usb 1-1: config 0 descriptor?? [ 78.580154][ T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 78.691750][ T9] usb 1-1: Detected FT232H [ 78.867240][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 79.313426][ T5828] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.346988][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 79.363853][ T5776] Bluetooth: hci1: command tx timeout [ 79.443554][ T5776] Bluetooth: hci0: command tx timeout [ 79.504068][ T5809] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.511737][ T28] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.519311][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 79.526749][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.533483][ T5776] Bluetooth: hci2: command tx timeout [ 79.537795][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.552805][ T5828] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 79.566981][ T5828] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 79.580159][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.589691][ T9] usb 1-1: USB disconnect, device number 2 [ 79.600273][ T5828] usb 3-1: config 0 descriptor?? [ 79.612736][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 79.623183][ T5776] Bluetooth: hci3: command tx timeout [ 79.631353][ T9] ftdi_sio 1-1:0.0: device disconnected [ 79.703413][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 79.708662][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 79.716376][ T5809] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 79.724915][ T5809] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 79.736048][ T5809] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 79.747302][ T28] usb 4-1: unable to get BOS descriptor or descriptor too short [ 79.755614][ T5809] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 79.766248][ T5809] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 79.779519][ T5809] usb 2-1: config 0 interface 0 has no altsetting 0 [ 79.786531][ T28] usb 4-1: config 9 has an invalid interface number: 231 but max is 0 [ 79.795528][ T28] usb 4-1: config 9 has no interface number 0 [ 79.801726][ T28] usb 4-1: config 9 interface 231 altsetting 6 endpoint 0xB has invalid maxpacket 951, setting to 64 [ 79.812880][ T28] usb 4-1: config 9 interface 231 has no altsetting 0 [ 79.821513][ T5809] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 79.832803][ T28] usb 4-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=52.23 [ 79.841906][ T5809] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 79.851135][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.859711][ T28] usb 4-1: Product: syz [ 79.864018][ T5809] usb 2-1: Product: syz [ 79.868211][ T5809] usb 2-1: Manufacturer: syz [ 79.872805][ T5809] usb 2-1: SerialNumber: syz [ 79.877487][ T28] usb 4-1: Manufacturer: syz [ 79.882100][ T28] usb 4-1: SerialNumber: syz [ 79.894379][ T5809] usb 2-1: config 0 descriptor?? [ 79.920281][ T5809] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 79.933150][ T5809] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 80.071987][ T5828] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0001/input/input5 [ 80.136264][ T28] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 80.166094][ T5880] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90 [ 80.182028][ T5828] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0001/input/input6 [ 80.294532][ T5828] kye 0003:0458:5011.0001: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 80.409060][ T28] usb 4-1: USB disconnect, device number 2 [ 80.475865][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:9.231/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.538116][ T5809] usb 3-1: USB disconnect, device number 2 [ 80.695454][ T5893] ======================================================= [ 80.695454][ T5893] WARNING: The mand mount option has been deprecated and [ 80.695454][ T5893] and is ignored by this kernel. Remove the mand [ 80.695454][ T5893] option from the mount to silence this warning. [ 80.695454][ T5893] ======================================================= [ 80.733937][ T789] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.745597][ T5893] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 80.933843][ T789] usb 1-1: Using ep0 maxpacket: 8 [ 80.944464][ T789] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 80.953492][ T789] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.963233][ T789] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.979461][ T789] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.989494][ T789] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.002864][ T789] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.012375][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.443367][ T789] usb 1-1: GET_CAPABILITIES returned 0 [ 81.497430][ T789] usbtmc 1-1:16.0: can't read capabilities [ 81.637376][ T5890] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90 [ 81.751894][ T789] usb 1-1: USB disconnect, device number 3 [ 81.958827][ T5905] device-mapper: ioctl: Unable to rename non-existent device, to uuid .2\´£«.j—DH [ 82.195840][ T789] usb 2-1: USB disconnect, device number 2 [ 82.232818][ T789] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 82.460719][ T5916] FAULT_INJECTION: forcing a failure. [ 82.460719][ T5916] name failslab, interval 1, probability 0, space 0, times 1 [ 82.485300][ T5916] CPU: 0 PID: 5916 Comm: syz.1.29 Not tainted syzkaller #0 [ 82.492532][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.502594][ T5916] Call Trace: [ 82.505871][ T5916] [ 82.508799][ T5916] dump_stack_lvl+0x18c/0x250 [ 82.513490][ T5916] ? show_regs_print_info+0x20/0x20 [ 82.518686][ T5916] ? load_image+0x420/0x420 [ 82.523185][ T5916] ? __might_sleep+0xe0/0xe0 [ 82.527774][ T5916] ? __lock_acquire+0x7d80/0x7d80 [ 82.532797][ T5916] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 82.538773][ T5916] should_fail_ex+0x394/0x4c0 [ 82.543460][ T5916] should_failslab+0x9/0x20 [ 82.547961][ T5916] slab_pre_alloc_hook+0x59/0x300 [ 82.552985][ T5916] ? lockdep_hardirqs_on+0x98/0x150 [ 82.558179][ T5916] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 82.564422][ T5916] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 82.570670][ T5916] __kmem_cache_alloc_node+0x53/0x250 [ 82.576051][ T5916] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 82.582286][ T5916] __kmalloc+0xa7/0x240 [ 82.586449][ T5916] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 82.592518][ T5916] genl_family_rcv_msg_doit+0xcf/0x310 [ 82.597980][ T5916] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 82.603873][ T5916] ? apparmor_capable+0x137/0x1a0 [ 82.608894][ T5916] ? bpf_lsm_capable+0x9/0x10 [ 82.613563][ T5916] ? security_capable+0x89/0xb0 [ 82.618414][ T5916] genl_rcv_msg+0x611/0x7a0 [ 82.622926][ T5916] ? genl_bind+0x360/0x360 [ 82.627338][ T5916] ? seg6_genl_set_tunsrc+0x140/0x140 [ 82.632727][ T5916] ? ref_tracker_free+0x686/0x830 [ 82.637769][ T5916] netlink_rcv_skb+0x235/0x4c0 [ 82.642557][ T5916] ? genl_bind+0x360/0x360 [ 82.646995][ T5916] ? netlink_ack+0x1160/0x1160 [ 82.651777][ T5916] ? __lock_acquire+0x7d80/0x7d80 [ 82.656805][ T5916] ? down_read+0x1ac/0x2e0 [ 82.661222][ T5916] genl_rcv+0x28/0x40 [ 82.665208][ T5916] netlink_unicast+0x7b1/0x930 [ 82.669973][ T5916] netlink_sendmsg+0x8d0/0xbf0 [ 82.674741][ T5916] ? netlink_getsockopt+0x590/0x590 [ 82.679937][ T5916] ? apparmor_socket_sendmsg+0x170/0x330 [ 82.685565][ T5916] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 82.690851][ T5916] ? security_socket_sendmsg+0x80/0xa0 [ 82.696304][ T5916] ? netlink_getsockopt+0x590/0x590 [ 82.701504][ T5916] ____sys_sendmsg+0x61b/0x980 [ 82.706272][ T5916] ? __asan_memset+0x22/0x40 [ 82.710861][ T5916] ? __sys_sendmsg_sock+0x30/0x30 [ 82.715881][ T5916] ? __import_iovec+0x5f2/0x850 [ 82.720738][ T5916] ? import_iovec+0x73/0xa0 [ 82.725245][ T5916] ___sys_sendmsg+0x2a6/0x360 [ 82.729923][ T5916] ? __sys_sendmsg+0x2b0/0x2b0 [ 82.734701][ T5916] ? __local_bh_enable_ip+0x13a/0x1c0 [ 82.740084][ T5916] __se_sys_sendmsg+0x1d0/0x2c0 [ 82.744933][ T5916] ? __x64_sys_sendmsg+0x80/0x80 [ 82.749877][ T5916] ? lockdep_hardirqs_on+0x98/0x150 [ 82.755076][ T5916] do_syscall_64+0x55/0xb0 [ 82.759492][ T5916] ? clear_bhb_loop+0x40/0x90 [ 82.764173][ T5916] ? clear_bhb_loop+0x40/0x90 [ 82.768853][ T5916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.774744][ T5916] RIP: 0033:0x7f1aaad9e159 [ 82.779263][ T5916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.798865][ T5916] RSP: 002b:00007f1aabc89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.807274][ T5916] RAX: ffffffffffffffda RBX: 00007f1aab025fa0 RCX: 00007f1aaad9e159 [ 82.815240][ T5916] RDX: 0000000024000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 82.823207][ T5916] RBP: 00007f1aaae3503b R08: 0000000000000000 R09: 0000000000000000 [ 82.831169][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.839131][ T5916] R13: 00007f1aab026038 R14: 00007f1aab025fa0 R15: 00007ffcc24f38a8 [ 82.847108][ T5916] [ 83.020663][ T5919] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.396705][ T5931] bonding: bo is being created... [ 83.448352][ T5935] jffs2: notice: (5935) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.346120][ T5944] syz.0.40 uses obsolete (PF_INET,SOCK_PACKET) [ 86.030166][ T5974] devpts: called with bogus options [ 86.119456][ T5974] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 86.353416][ T5827] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.564585][ T5827] usb 3-1: Using ep0 maxpacket: 32 [ 86.600929][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.633729][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.650715][ T5827] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.662912][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.680752][ T5827] usb 3-1: config 0 descriptor?? [ 86.700463][ T5827] hub 3-1:0.0: USB hub found [ 86.818139][ T23] cfg80211: failed to load regulatory.db [ 86.864694][ T6017] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 86.876452][ T6017] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 86.884874][ T6017] CPU: 0 PID: 6017 Comm: syz.0.51 Not tainted syzkaller #0 [ 86.892082][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.902151][ T6017] RIP: 0010:vsscanf+0x19a/0x2520 [ 86.907113][ T6017] Code: 48 c7 c6 10 26 74 8e e8 c4 4b 05 f7 41 83 fe 25 74 4d 45 85 f6 0f 84 1e 22 00 00 48 ff c3 48 89 5c 24 78 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 bd 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 86.926728][ T6017] RSP: 0018:ffffc90004d5f640 EFLAGS: 00010246 [ 86.932793][ T6017] RAX: 0000000000000000 RBX: ffffffff8ad688e1 RCX: 0000000000000001 [ 86.940754][ T6017] RDX: ffffffff8a82444c RSI: ffffffff8e742610 RDI: 0000000000000030 [ 86.948716][ T6017] RBP: ffffc90004d5f770 R08: ffff888029c33c00 R09: 0000000000000002 [ 86.956679][ T6017] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff8ad688e0 [ 86.964645][ T6017] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 86.972612][ T6017] FS: 00007fe196bd96c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 86.981530][ T6017] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.988104][ T6017] CR2: 000000110c30dc89 CR3: 000000005b447000 CR4: 00000000003506f0 [ 86.996066][ T6017] Call Trace: [ 86.999330][ T6017] [ 87.002272][ T6017] ? bprintf+0x140/0x140 [ 87.006526][ T6017] sscanf+0xe3/0x140 [ 87.010420][ T6017] ? __might_fault+0xaa/0x120 [ 87.015093][ T6017] ? skip_atoi+0xe0/0xe0 [ 87.019330][ T6017] ? stack_trace_save+0xaa/0x100 [ 87.024264][ T6017] ? __might_fault+0xaa/0x120 [ 87.028934][ T6017] ? __might_fault+0xc6/0x120 [ 87.033606][ T6017] ? __might_fault+0xaa/0x120 [ 87.038278][ T6017] ? split_huge_pages_write+0x372/0x1b60 [ 87.043911][ T6017] split_huge_pages_write+0x391/0x1b60 [ 87.049373][ T6017] ? lockdep_unlock+0x146/0x2e0 [ 87.054226][ T6017] ? lockdep_lock+0x230/0x230 [ 87.058908][ T6017] ? add_lock_to_list+0x191/0x280 [ 87.063938][ T6017] ? deferred_split_scan+0x940/0x940 [ 87.069231][ T6017] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 87.075219][ T6017] ? debugfs_file_get+0x36c/0x460 [ 87.080244][ T6017] ? rcu_read_lock_any_held+0xb4/0x140 [ 87.085695][ T6017] ? rcu_read_lock_bh_held+0x100/0x100 [ 87.091157][ T6017] full_proxy_write+0x110/0x1c0 [ 87.096018][ T6017] ? full_proxy_read+0x1c0/0x1c0 [ 87.100955][ T6017] vfs_write+0x299/0x9a0 [ 87.105204][ T6017] ? file_end_write+0x250/0x250 [ 87.110052][ T6017] ? __fget_files+0x28/0x460 [ 87.114641][ T6017] ? __fget_files+0x3fc/0x460 [ 87.119315][ T6017] ? __fdget_pos+0x2a3/0x330 [ 87.123904][ T6017] ? ksys_write+0x74/0x260 [ 87.128322][ T6017] ksys_write+0x151/0x260 [ 87.132672][ T6017] ? __ia32_sys_read+0x90/0x90 [ 87.137444][ T6017] ? lockdep_hardirqs_on+0x98/0x150 [ 87.142649][ T6017] do_syscall_64+0x55/0xb0 [ 87.147063][ T6017] ? clear_bhb_loop+0x40/0x90 [ 87.151736][ T6017] ? clear_bhb_loop+0x40/0x90 [ 87.156409][ T6017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.162300][ T6017] RIP: 0033:0x7fe195d9e159 [ 87.166706][ T6017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.186305][ T6017] RSP: 002b:00007fe196bd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.194710][ T6017] RAX: ffffffffffffffda RBX: 00007fe196025fa0 RCX: 00007fe195d9e159 [ 87.202669][ T6017] RDX: 0000000000000011 RSI: 0000200000000180 RDI: 0000000000000003 [ 87.210631][ T6017] RBP: 00007fe195e3503b R08: 0000000000000000 R09: 0000000000000000 [ 87.218590][ T6017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.226641][ T6017] R13: 00007fe196026038 R14: 00007fe196025fa0 R15: 00007ffd545d0e88 [ 87.234605][ T6017] [ 87.237609][ T6017] Modules linked in: [ 87.268739][ T6017] ---[ end trace 0000000000000000 ]--- [ 87.277360][ T6017] RIP: 0010:vsscanf+0x19a/0x2520 [ 87.277667][ T5827] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 87.286818][ T6017] Code: 48 c7 c6 10 26 74 8e e8 c4 4b 05 f7 41 83 fe 25 74 4d 45 85 f6 0f 84 1e 22 00 00 48 ff c3 48 89 5c 24 78 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 bd 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 87.328058][ T6017] RSP: 0018:ffffc90004d5f640 EFLAGS: 00010246 [ 87.342552][ T6017] RAX: 0000000000000000 RBX: ffffffff8ad688e1 RCX: 0000000000000001 [ 87.377666][ T6017] RDX: ffffffff8a82444c RSI: ffffffff8e742610 RDI: 0000000000000030 [ 87.396994][ T6017] RBP: ffffc90004d5f770 R08: ffff888029c33c00 R09: 0000000000000002 [ 87.405930][ T6017] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff8ad688e0 [ 87.414709][ T6017] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 87.422775][ T6017] FS: 00007fe196bd96c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 87.432381][ T6017] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.439234][ T6017] CR2: 000055b7ff47f950 CR3: 000000005b447000 CR4: 00000000003506e0 [ 87.452215][ T6017] Kernel panic - not syncing: Fatal exception [ 87.458535][ T6017] Kernel Offset: disabled [ 87.462871][ T6017] Rebooting in 86400 seconds..