last executing test programs: 12.483501402s ago: executing program 3 (id=38): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/config.gz\x00', 0x0, 0x80) lseek(r3, 0xfffffffffffffffc, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)) unshare(0x28040680) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r5, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r5, 0x4) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000880)={"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"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) r7 = gettid() utimensat(r3, &(0x7f0000000080)='./proc/config.gz\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x2710}}, 0x0) tkill(r7, 0x11) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 11.74093406s ago: executing program 3 (id=40): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x4c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x10}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0x8}, {0x8, 0xc, 0x0, 0x0, 0x421}, {0x8, 0x5, 0x0, 0x0, 0x80000001}]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) 11.362261738s ago: executing program 3 (id=42): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x45, &(0x7f0000000240)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c"}}}}}, 0x0) 10.545037648s ago: executing program 3 (id=46): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000096, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') syz_usb_connect(0x0, 0x36, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 9.061536884s ago: executing program 2 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) r3 = openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004000)={0x2020}, 0x2020) 7.163072979s ago: executing program 3 (id=54): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x45, &(0x7f0000000240)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c"}}}}}, 0x0) 7.13145081s ago: executing program 2 (id=55): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0xfffffffffffffffd) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 5.718858444s ago: executing program 0 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/dir\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000300)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt/dir\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000500)='\x00', 0x0, &(0x7f0000000700), 0x1000) 5.573462737s ago: executing program 3 (id=59): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) 5.573263377s ago: executing program 1 (id=60): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x283}) 5.00497607s ago: executing program 32 (id=59): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) 4.99923891s ago: executing program 0 (id=62): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[], 0x8) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)={'b', ' *:* ', 'rm\x00'}, 0x9) 4.741582577s ago: executing program 0 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='auto', 0x4) 4.645346259s ago: executing program 1 (id=64): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000300), &(0x7f0000000780)}, 0x20) 4.394294775s ago: executing program 0 (id=65): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto(r1, &(0x7f0000000280)="7f526ec1a7bcfb6f9da9d30f2b94f92047c8ea98bcd1a5e53d49fc018d1391d5627ca3f0204121ca2a3e5c98369b5b95eed392ae584365e759e305d8de699a031f9c2cd35c853ff0ac68b0974936e3fc7f61efe0c9fd74577c1c1eda0ee3d8adbb76a042fbf59bbaf03007f6137fc2921e9c52c56f59e50908df662bcddacd3dc8abe14a76e68b94eef98a85ed8e128c84cb8d2b1e37a8670ff909beb6329fb7bc2f946af9d6667599b76a88ffacf4c131dcc588d4a39947d772b0e101bdfe9729bdb003a9c578cbcc2d11939ca4397899a62b0b9afcaea5202ee9fd920c9991601e9d4acac20289d0", 0xe9, 0x0, &(0x7f0000000840)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x80) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a00010000040000000000000aed0000"], 0x24}, 0x1, 0x0, 0x0, 0x814}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x6, 0x24d, &(0x7f0000000400)="$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") 4.255256038s ago: executing program 1 (id=66): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10) 3.644081753s ago: executing program 2 (id=67): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xce, 0x0, &(0x7f0000000040)) open(&(0x7f0000000000)='./file0\x00', 0x161a42, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) userfaultfd(0x80801) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810) 3.545104425s ago: executing program 1 (id=68): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xce, 0x0, &(0x7f0000000040)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161a42, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) userfaultfd(0x80801) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x810) fcntl$setlease(r1, 0x400, 0x0) 2.466853171s ago: executing program 2 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/dir\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000300)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt/dir\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000500)='\x00', 0x0, &(0x7f0000000700), 0x1000) 2.375274443s ago: executing program 0 (id=70): setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="40ffffffffff"}) 1.497904994s ago: executing program 2 (id=71): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 1.362650188s ago: executing program 1 (id=72): syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7e60c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r5, &(0x7f00000004c0)=[{0x0}], 0x1, 0x20091, 0x2) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x142) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 1.093235344s ago: executing program 0 (id=73): openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 86.171358ms ago: executing program 2 (id=74): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = gettid() r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c0c8) tkill(r6, 0xb) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r9 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000009b80)={0x40000012}) read$FUSE(r8, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(r9, &(0x7f0000000040), 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000001c0)={0x4800, 0x0, 0x4, 0x0, 0xb9a9, 0x9ce}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002880)=@RTM_DELMDB={0x18, 0x55, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0xe0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000280)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x8, 0x65, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x2a500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 0s ago: executing program 1 (id=75): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40045201, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40081271, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. [ 76.507973][ T5762] cgroup: Unknown subsys name 'net' [ 76.643794][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.368029][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.984138][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.995083][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.004057][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.027760][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.047823][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.076918][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.082061][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.087613][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.104005][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.106081][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.111573][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.120056][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.127062][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.132292][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.142107][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.147973][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.154301][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.167409][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.172117][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.175277][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.189822][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.198806][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.213037][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.221510][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.642408][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 80.711503][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 80.807542][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 80.828956][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 80.851303][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.858575][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.865888][ T5773] bridge_slave_0: entered allmulticast mode [ 80.873919][ T5773] bridge_slave_0: entered promiscuous mode [ 80.910163][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.917883][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.925026][ T5773] bridge_slave_1: entered allmulticast mode [ 80.932634][ T5773] bridge_slave_1: entered promiscuous mode [ 81.020678][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.027955][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.035092][ T5776] bridge_slave_0: entered allmulticast mode [ 81.042161][ T5776] bridge_slave_0: entered promiscuous mode [ 81.051608][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.058755][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.065872][ T5776] bridge_slave_1: entered allmulticast mode [ 81.072918][ T5776] bridge_slave_1: entered promiscuous mode [ 81.087666][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.119357][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.171861][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.179330][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.186731][ T5774] bridge_slave_0: entered allmulticast mode [ 81.193551][ T5774] bridge_slave_0: entered promiscuous mode [ 81.203527][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.217791][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.250834][ T5773] team0: Port device team_slave_0 added [ 81.257531][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.264713][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.274436][ T5774] bridge_slave_1: entered allmulticast mode [ 81.281428][ T5774] bridge_slave_1: entered promiscuous mode [ 81.330487][ T5773] team0: Port device team_slave_1 added [ 81.362271][ T5776] team0: Port device team_slave_0 added [ 81.368504][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.375685][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.383891][ T5775] bridge_slave_0: entered allmulticast mode [ 81.390951][ T5775] bridge_slave_0: entered promiscuous mode [ 81.412626][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.423634][ T5776] team0: Port device team_slave_1 added [ 81.430166][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.437554][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.444714][ T5775] bridge_slave_1: entered allmulticast mode [ 81.451735][ T5775] bridge_slave_1: entered promiscuous mode [ 81.459589][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.469403][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.495679][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.509457][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.516577][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.543547][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.557532][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.627857][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.651965][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.659329][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.688488][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.701817][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.708998][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.735013][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.752462][ T5774] team0: Port device team_slave_0 added [ 81.767841][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.804245][ T5775] team0: Port device team_slave_0 added [ 81.817396][ T5774] team0: Port device team_slave_1 added [ 81.825638][ T5775] team0: Port device team_slave_1 added [ 81.859794][ T5773] hsr_slave_0: entered promiscuous mode [ 81.867808][ T5773] hsr_slave_1: entered promiscuous mode [ 81.903278][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.910609][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.936909][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.949731][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.956972][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.983271][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.040145][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.047438][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.073562][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.095842][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.102905][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.129105][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.145192][ T5776] hsr_slave_0: entered promiscuous mode [ 82.151573][ T5776] hsr_slave_1: entered promiscuous mode [ 82.158733][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.166636][ T5776] Cannot create hsr debugfs directory [ 82.176994][ T5781] Bluetooth: hci2: command tx timeout [ 82.190512][ T5774] hsr_slave_0: entered promiscuous mode [ 82.197270][ T5774] hsr_slave_1: entered promiscuous mode [ 82.203333][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.211019][ T5774] Cannot create hsr debugfs directory [ 82.256634][ T5781] Bluetooth: hci0: command tx timeout [ 82.262610][ T5781] Bluetooth: hci3: command tx timeout [ 82.273790][ T5790] Bluetooth: hci1: command tx timeout [ 82.329368][ T5775] hsr_slave_0: entered promiscuous mode [ 82.335840][ T5775] hsr_slave_1: entered promiscuous mode [ 82.342409][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.350187][ T5775] Cannot create hsr debugfs directory [ 82.691363][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.715765][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.729459][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.741143][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.811637][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.852543][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.864682][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.898011][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.924041][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.962379][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.975112][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.985969][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.042943][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.057884][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.072464][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.083795][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.160909][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.200517][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.216466][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.223819][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.288059][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.295241][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.349251][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.422510][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.444138][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.458040][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.465207][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.495912][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.503450][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.527090][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.582265][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.608744][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.648313][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.655494][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.665916][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.673068][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.692073][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.699258][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.737356][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.744555][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.967764][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.082978][ T5774] veth0_vlan: entered promiscuous mode [ 84.139211][ T5774] veth1_vlan: entered promiscuous mode [ 84.234003][ T5774] veth0_macvtap: entered promiscuous mode [ 84.258268][ T5781] Bluetooth: hci2: command tx timeout [ 84.279569][ T5774] veth1_macvtap: entered promiscuous mode [ 84.322741][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.336615][ T5781] Bluetooth: hci3: command tx timeout [ 84.342094][ T5781] Bluetooth: hci1: command tx timeout [ 84.346253][ T5790] Bluetooth: hci0: command tx timeout [ 84.385325][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.401231][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.415300][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.425676][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.434922][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.443822][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.481538][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.505482][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.635104][ T5773] veth0_vlan: entered promiscuous mode [ 84.680386][ T5775] veth0_vlan: entered promiscuous mode [ 84.699841][ T5776] veth0_vlan: entered promiscuous mode [ 84.710216][ T5773] veth1_vlan: entered promiscuous mode [ 84.726062][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.742104][ T5775] veth1_vlan: entered promiscuous mode [ 84.754084][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.775169][ T5776] veth1_vlan: entered promiscuous mode [ 84.849973][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.861568][ T5775] veth0_macvtap: entered promiscuous mode [ 84.869587][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.885570][ T5775] veth1_macvtap: entered promiscuous mode [ 84.905491][ T5773] veth0_macvtap: entered promiscuous mode [ 84.941377][ T5773] veth1_macvtap: entered promiscuous mode [ 84.997389][ T5776] veth0_macvtap: entered promiscuous mode [ 85.020554][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.032161][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.048054][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.060963][ T5776] veth1_macvtap: entered promiscuous mode [ 85.090468][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.109927][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.130531][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.153673][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.158661][ T5841] syz.0.1[5841]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.171523][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.182588][ T5841] loop0: detected capacity change from 0 to 512 [ 85.208984][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.232808][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.245065][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.257214][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.268135][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.278867][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.279505][ T5841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.289981][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.314202][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.328890][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.338942][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.348147][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.358204][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.369194][ T5841] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.401114][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.414187][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.425674][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.435449][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.454301][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.468051][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.483893][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.503549][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.514986][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.533111][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.545285][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.684639][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.695323][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.706782][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.717866][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.761909][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.423542][ T5790] Bluetooth: hci2: command tx timeout [ 86.429161][ T5790] Bluetooth: hci1: command tx timeout [ 86.434588][ T5790] Bluetooth: hci3: command tx timeout [ 86.440151][ T5781] Bluetooth: hci0: command tx timeout [ 86.464122][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.498553][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.605719][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.609726][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.622978][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.635720][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.651874][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.836888][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.844766][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.865883][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.880163][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.951432][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.971737][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.029007][ T5854] loop0: detected capacity change from 0 to 2048 [ 87.037904][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.045763][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.089738][ T5854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.217377][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.225261][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.230095][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.287631][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.347517][ T5858] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #12: comm syz.0.6: corrupted inode contents [ 87.651459][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.083948][ T5872] loop0: detected capacity change from 0 to 764 [ 88.102108][ T5870] loop2: detected capacity change from 0 to 2048 [ 88.115681][ T5872] ======================================================= [ 88.115681][ T5872] WARNING: The mand mount option has been deprecated and [ 88.115681][ T5872] and is ignored by this kernel. Remove the mand [ 88.115681][ T5872] option from the mount to silence this warning. [ 88.115681][ T5872] ======================================================= [ 88.171395][ T5870] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.182385][ T5874] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.199716][ T5816] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.452805][ T5875] loop3: detected capacity change from 0 to 512 [ 88.497356][ T5875] EXT4-fs: inline encryption not supported [ 88.513420][ T5790] Bluetooth: hci3: command tx timeout [ 88.523120][ T5085] Bluetooth: hci2: command tx timeout [ 88.527707][ T5875] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 88.529064][ T5085] Bluetooth: hci0: command tx timeout [ 88.543816][ T5781] Bluetooth: hci1: command tx timeout [ 88.876427][ T5875] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #15: comm syz.3.10: corrupted inode contents [ 89.026285][ T5875] EXT4-fs (loop3): Remounting filesystem read-only [ 89.074133][ T5875] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -5) [ 89.147205][ T5875] EXT4-fs (loop3): 1 orphan inode deleted [ 89.179741][ T5816] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.196233][ T5816] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.197954][ T5875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.213943][ T5816] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.233991][ T5816] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 89.252728][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.287253][ T5816] usb 2-1: Product: syz [ 89.291496][ T5816] usb 2-1: Manufacturer: syz [ 89.316570][ T5816] usb 2-1: SerialNumber: syz [ 89.372266][ T5816] usb 2-1: selecting invalid altsetting 1 [ 89.408058][ T5816] usb 2-1: unit 6 not found! [ 89.594874][ T5816] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 89.670786][ T5816] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 89.804179][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.004887][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.323120][ T5816] usb 2-1: USB disconnect, device number 2 [ 90.557405][ T5898] loop2: detected capacity change from 0 to 512 [ 90.601230][ T5898] EXT4-fs: Mount option(s) incompatible with ext3 [ 92.286828][ T789] cfg80211: failed to load regulatory.db [ 93.410757][ T5914] sched: RT throttling activated [ 94.161475][ T5926] loop2: detected capacity change from 0 to 512 [ 94.209750][ T5926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.241933][ T5926] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.519134][ T5836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.747050][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.758960][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.771895][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.787435][ T5836] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.798350][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.964089][ T5836] usb 1-1: config 0 descriptor?? [ 95.318971][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.594625][ T5836] plantronics 0003:047F:FFFF.0001: unbalanced delimiter at end of report description [ 95.696895][ T5836] plantronics 0003:047F:FFFF.0001: parse failed [ 95.853473][ T5836] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 96.189862][ T5836] usb 1-1: USB disconnect, device number 2 [ 96.481368][ T5939] loop2: detected capacity change from 0 to 256 [ 96.545523][ T5939] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 96.623645][ T5939] syz.2.28: attempt to access beyond end of device [ 96.623645][ T5939] loop2: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 96.697984][ T5939] syz.2.28: attempt to access beyond end of device [ 96.697984][ T5939] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 96.755841][ T28] audit: type=1800 audit(1787640396.926:2): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.28" name="file1" dev="loop2" ino=1048592 res=0 errno=0 [ 96.997239][ C1] Unknown status report in ack skb [ 97.056383][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.167480][ T5956] loop1: detected capacity change from 0 to 2048 [ 97.191309][ T5956] UDF-fs: error (device loop1): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 97.203807][ T5956] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 97.247334][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 97.283114][ T8] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 97.291598][ T8] usb 1-1: config 179 has no interface number 0 [ 97.303194][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 97.339319][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 97.355523][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.367173][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 97.379183][ T8] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 97.396308][ T5156] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 97.401834][ T8] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 97.413237][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.446947][ T5945] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.605091][ T5156] usb 3-1: unable to get BOS descriptor or descriptor too short [ 97.629519][ T5156] usb 3-1: not running at top speed; connect to a high speed hub [ 97.656002][ T5156] usb 3-1: config 3 has an invalid interface number: 5 but max is 1 [ 97.678523][ T5156] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 97.694481][ T5156] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 97.718927][ T5156] usb 3-1: config 3 has no interface number 0 [ 97.748151][ T5156] usb 3-1: too many endpoints for config 3 interface 5 altsetting 6: 49, using maximum allowed: 30 [ 97.764168][ T5156] usb 3-1: config 3 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 97.783563][ T5156] usb 3-1: config 3 interface 5 has no altsetting 0 [ 97.793607][ T5156] usb 3-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 97.815505][ T5156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.866240][ T5156] usb 3-1: Product: syz [ 97.870472][ T5156] usb 3-1: Manufacturer: syz [ 97.901124][ T5156] usb 3-1: SerialNumber: syz [ 98.064175][ T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 99.026222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.046187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.086164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 99.136166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.156194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.196152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.216172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.276175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.298659][ T5963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.351445][ T5963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.409828][ T5963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.495410][ T5963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.531436][ T27] usb 1-1: USB disconnect, device number 3 [ 99.531547][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 99.546320][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 99.564482][ T27] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 100.152595][ T5975] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.183342][ T5156] msi2500 3-1:3.5: Registered as swradio24 [ 100.202465][ T5156] msi2500 3-1:3.5: SDR API is still slightly experimental and functionality changes may follow [ 100.235960][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.243766][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.266002][ T5156] usb 3-1: USB disconnect, device number 2 [ 102.282791][ T5989] loop3: detected capacity change from 0 to 2048 [ 102.360455][ T5994] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.405446][ T5989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.687649][ T6003] Bluetooth: MGMT ver 1.22 [ 105.454869][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.802393][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.362701][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.559411][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.797065][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.742957][ T6047] loop0: detected capacity change from 0 to 128 [ 107.858225][ T6047] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 107.970827][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.980047][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.982969][ T5869] udevd[5869]: incorrect ext4 checksum on /dev/loop0 [ 108.000890][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.013745][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.022038][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.030352][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.100427][ T5085] Bluetooth: hci1: command tx timeout [ 110.476255][ T6077] warning: `syz.0.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.666551][ T6051] chnl_net:caif_netlink_parms(): no params data found [ 112.106012][ T6099] capability: warning: `syz.1.75' uses deprecated v2 capabilities in a way that may be insecure [ 112.176338][ T5085] Bluetooth: hci1: command tx timeout [ 112.351561][ T6051] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.594803][ C1] ------------[ cut here ]------------ [ 112.600347][ C1] WARNING: CPU: 1 PID: 6096 at net/mac80211/tx.c:5048 __ieee80211_beacon_get+0x1141/0x1520 [ 112.610397][ C1] Modules linked in: [ 112.614302][ C1] CPU: 1 PID: 6096 Comm: syz.2.74 Not tainted syzkaller #0 [ 112.621525][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.631604][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 112.637959][ C1] Code: f7 4c 89 ef e8 b0 c0 b7 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 bb de 79 f7 0f 0b e9 61 f8 ff ff e8 af de 79 f7 <0f> 0b e9 85 fb ff ff e8 a3 de 79 f7 48 c7 c7 20 c7 65 8e 4c 89 e6 [ 112.657612][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 112.663678][ C1] RAX: ffffffff8a0d93c1 RBX: dffffc0000000000 RCX: ffff888024c49e00 [ 112.671714][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.679763][ C1] RBP: 0000000000000000 R08: ffff888024c49e00 R09: 0000000000000003 [ 112.687755][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88802ea92440 [ 112.695723][ C1] R13: ffff88802d2b9424 R14: ffff88802ea92930 R15: ffff88802d2b9400 [ 112.703716][ C1] FS: 00007f73812786c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 112.712693][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.719294][ C1] CR2: 0000001b2dd1cff8 CR3: 00000000647a8000 CR4: 00000000003526e0 [ 112.727293][ C1] Call Trace: [ 112.730571][ C1] [ 112.733438][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 112.739016][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 112.744477][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 112.751269][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 112.756838][ C1] __iterate_interfaces+0x225/0x4c0 [ 112.762034][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 112.768299][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 112.775492][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 112.781755][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 112.788808][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 112.794003][ C1] ? hw_scan_work+0xf10/0xf10 [ 112.798709][ C1] __hrtimer_run_queues+0x525/0xc10 [ 112.803941][ C1] ? hrtimer_interrupt+0x980/0x980 [ 112.809072][ C1] ? read_tsc+0x9/0x20 [ 112.813148][ C1] hrtimer_run_softirq+0x177/0x290 [ 112.818301][ C1] handle_softirqs+0x27d/0x820 [ 112.823059][ C1] ? read_tsc+0x9/0x20 [ 112.827152][ C1] ? ktime_get+0x24b/0x280 [ 112.831568][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 112.836357][ C1] ? do_softirq+0x1a0/0x1a0 [ 112.840907][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 112.846178][ C1] __irq_exit_rcu+0xd3/0x190 [ 112.850787][ C1] ? irq_exit_rcu+0x20/0x20 [ 112.855295][ C1] irq_exit_rcu+0x9/0x20 [ 112.859553][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 112.865204][ C1] [ 112.868158][ C1] [ 112.871088][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.877147][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 112.882978][ C1] Code: 31 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 e9 d5 04 00 00 4c 89 e7 e8 73 77 3b 09 e8 0e 1a 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 112.902658][ C1] RSP: 0018:ffffc9000541f2a0 EFLAGS: 00000286 [ 112.908780][ C1] RAX: 4d0b7a06b5c58f00 RBX: 0000000000000000 RCX: 4d0b7a06b5c58f00 [ 112.916798][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d3260 [ 112.924792][ C1] RBP: ffffc9000541f2f0 R08: ffffffff8e8c866f R09: 1ffffffff1d190cd [ 112.932793][ C1] R10: dffffc0000000000 R11: fffffbfff1d190ce R12: ffff888024c49e00 [ 112.940834][ C1] R13: ffff8880b8f3cfc8 R14: dffffc0000000000 R15: ffff8880b8f3cd48 [ 112.948874][ C1] __schedule+0x15b6/0x4660 [ 112.953399][ C1] ? asan.module_dtor+0x20/0x20 [ 112.958278][ C1] ? mark_lock+0x94/0x320 [ 112.962613][ C1] schedule+0xbd/0x170 [ 112.966705][ C1] schedule_timeout+0xc1/0x2d0 [ 112.971472][ C1] ? console_conditional_schedule+0x40/0x40 [ 112.977387][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 112.982419][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 112.987648][ C1] unix_wait_for_peer+0x1f6/0x2f0 [ 112.992700][ C1] ? unix_find_other+0x8e0/0x8e0 [ 112.997651][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 113.002672][ C1] ? wake_bit_function+0x200/0x200 [ 113.007804][ C1] ? __rwlock_init+0x150/0x150 [ 113.012592][ C1] ? skb_copy_datagram_from_iter+0x643/0x6f0 [ 113.018614][ C1] ? bpf_lsm_unix_may_send+0x9/0x10 [ 113.023818][ C1] unix_dgram_sendmsg+0xee4/0x16e0 [ 113.028961][ C1] ? unix_dgram_poll+0x680/0x680 [ 113.033894][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 113.040334][ C1] ? apparmor_socket_sendmsg+0x8e/0x330 [ 113.045875][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 113.051181][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 113.056658][ C1] ? unix_dgram_poll+0x680/0x680 [ 113.061592][ C1] ____sys_sendmsg+0x61b/0x980 [ 113.066376][ C1] ? __asan_memset+0x22/0x40 [ 113.071077][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 113.076186][ C1] ? __import_iovec+0x3fa/0x850 [ 113.081071][ C1] ? import_iovec+0x73/0xa0 [ 113.085583][ C1] ___sys_sendmsg+0x2a6/0x360 [ 113.090295][ C1] ? __sys_sendmsg+0x2b0/0x2b0 [ 113.095078][ C1] ? __might_fault+0xc6/0x120 [ 113.099775][ C1] ? __might_fault+0xaa/0x120 [ 113.104449][ C1] __sys_sendmmsg+0x2ca/0x510 [ 113.109154][ C1] ? __ia32_sys_sendmsg+0x90/0x90 [ 113.114192][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 113.120108][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 113.126145][ C1] ? lock_chain_count+0x20/0x20 [ 113.131021][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 113.135867][ C1] do_syscall_64+0x55/0xb0 [ 113.140302][ C1] ? clear_bhb_loop+0x40/0x90 [ 113.144974][ C1] ? clear_bhb_loop+0x40/0x90 [ 113.149669][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.155559][ C1] RIP: 0033:0x7f738039e0d9 [ 113.159997][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.179658][ C1] RSP: 002b:00007f7381278028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.189111][ C1] RAX: ffffffffffffffda RBX: 00007f7380625fa0 RCX: 00007f738039e0d9 [ 113.197119][ C1] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000007 [ 113.205100][ C1] RBP: 00007f7380435024 R08: 0000000000000000 R09: 0000000000000000 [ 113.213104][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.221098][ C1] R13: 00007f7380626038 R14: 00007f7380625fa0 R15: 00007ffd6dbbcdd8 [ 113.229105][ C1] [ 113.232125][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 113.239394][ C1] CPU: 1 PID: 6096 Comm: syz.2.74 Not tainted syzkaller #0 [ 113.246587][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.256634][ C1] Call Trace: [ 113.259907][ C1] [ 113.262744][ C1] dump_stack_lvl+0x18c/0x250 [ 113.267443][ C1] ? show_regs_print_info+0x20/0x20 [ 113.272638][ C1] ? load_image+0x420/0x420 [ 113.277142][ C1] panic+0x2ca/0x720 [ 113.281053][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 113.285561][ C1] __warn+0x2e0/0x470 [ 113.289541][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 113.295261][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 113.300983][ C1] report_bug+0x2be/0x4f0 [ 113.305309][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 113.311071][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 113.316825][ C1] ? __ieee80211_beacon_get+0x1143/0x1520 [ 113.322549][ C1] handle_bug+0xcf/0x120 [ 113.326787][ C1] exc_invalid_op+0x1a/0x50 [ 113.331283][ C1] asm_exc_invalid_op+0x1a/0x20 [ 113.336142][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 113.342498][ C1] Code: f7 4c 89 ef e8 b0 c0 b7 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 bb de 79 f7 0f 0b e9 61 f8 ff ff e8 af de 79 f7 <0f> 0b e9 85 fb ff ff e8 a3 de 79 f7 48 c7 c7 20 c7 65 8e 4c 89 e6 [ 113.362117][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 113.368180][ C1] RAX: ffffffff8a0d93c1 RBX: dffffc0000000000 RCX: ffff888024c49e00 [ 113.376159][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.384122][ C1] RBP: 0000000000000000 R08: ffff888024c49e00 R09: 0000000000000003 [ 113.392113][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88802ea92440 [ 113.400081][ C1] R13: ffff88802d2b9424 R14: ffff88802ea92930 R15: ffff88802d2b9400 [ 113.408052][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 113.413789][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 113.419543][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 113.425106][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 113.430563][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 113.437328][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 113.442876][ C1] __iterate_interfaces+0x225/0x4c0 [ 113.448084][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 113.454317][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 113.461512][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 113.467746][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 113.474765][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 113.479961][ C1] ? hw_scan_work+0xf10/0xf10 [ 113.484630][ C1] __hrtimer_run_queues+0x525/0xc10 [ 113.489833][ C1] ? hrtimer_interrupt+0x980/0x980 [ 113.494941][ C1] ? read_tsc+0x9/0x20 [ 113.499029][ C1] hrtimer_run_softirq+0x177/0x290 [ 113.504159][ C1] handle_softirqs+0x27d/0x820 [ 113.508932][ C1] ? read_tsc+0x9/0x20 [ 113.512992][ C1] ? ktime_get+0x24b/0x280 [ 113.517405][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 113.522185][ C1] ? do_softirq+0x1a0/0x1a0 [ 113.526685][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 113.531893][ C1] __irq_exit_rcu+0xd3/0x190 [ 113.536478][ C1] ? irq_exit_rcu+0x20/0x20 [ 113.540981][ C1] irq_exit_rcu+0x9/0x20 [ 113.545228][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 113.550862][ C1] [ 113.553785][ C1] [ 113.556709][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 113.562681][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 113.568481][ C1] Code: 31 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 e9 d5 04 00 00 4c 89 e7 e8 73 77 3b 09 e8 0e 1a 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 113.588122][ C1] RSP: 0018:ffffc9000541f2a0 EFLAGS: 00000286 [ 113.594207][ C1] RAX: 4d0b7a06b5c58f00 RBX: 0000000000000000 RCX: 4d0b7a06b5c58f00 [ 113.602175][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d3260 [ 113.610146][ C1] RBP: ffffc9000541f2f0 R08: ffffffff8e8c866f R09: 1ffffffff1d190cd [ 113.618120][ C1] R10: dffffc0000000000 R11: fffffbfff1d190ce R12: ffff888024c49e00 [ 113.626111][ C1] R13: ffff8880b8f3cfc8 R14: dffffc0000000000 R15: ffff8880b8f3cd48 [ 113.634112][ C1] __schedule+0x15b6/0x4660 [ 113.638630][ C1] ? asan.module_dtor+0x20/0x20 [ 113.643495][ C1] ? mark_lock+0x94/0x320 [ 113.647863][ C1] schedule+0xbd/0x170 [ 113.651938][ C1] schedule_timeout+0xc1/0x2d0 [ 113.656709][ C1] ? console_conditional_schedule+0x40/0x40 [ 113.662612][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 113.667640][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 113.672839][ C1] unix_wait_for_peer+0x1f6/0x2f0 [ 113.677862][ C1] ? unix_find_other+0x8e0/0x8e0 [ 113.682792][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 113.687812][ C1] ? wake_bit_function+0x200/0x200 [ 113.692918][ C1] ? __rwlock_init+0x150/0x150 [ 113.697676][ C1] ? skb_copy_datagram_from_iter+0x643/0x6f0 [ 113.703653][ C1] ? bpf_lsm_unix_may_send+0x9/0x10 [ 113.708894][ C1] unix_dgram_sendmsg+0xee4/0x16e0 [ 113.714064][ C1] ? unix_dgram_poll+0x680/0x680 [ 113.719094][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 113.725524][ C1] ? apparmor_socket_sendmsg+0x8e/0x330 [ 113.731069][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 113.736355][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 113.742436][ C1] ? unix_dgram_poll+0x680/0x680 [ 113.747388][ C1] ____sys_sendmsg+0x61b/0x980 [ 113.752169][ C1] ? __asan_memset+0x22/0x40 [ 113.756775][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 113.761816][ C1] ? __import_iovec+0x3fa/0x850 [ 113.766670][ C1] ? import_iovec+0x73/0xa0 [ 113.771168][ C1] ___sys_sendmsg+0x2a6/0x360 [ 113.775841][ C1] ? __sys_sendmsg+0x2b0/0x2b0 [ 113.780638][ C1] ? __might_fault+0xc6/0x120 [ 113.785321][ C1] ? __might_fault+0xaa/0x120 [ 113.789994][ C1] __sys_sendmmsg+0x2ca/0x510 [ 113.794672][ C1] ? __ia32_sys_sendmsg+0x90/0x90 [ 113.799696][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 113.805588][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 113.811565][ C1] ? lock_chain_count+0x20/0x20 [ 113.816427][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 113.821271][ C1] do_syscall_64+0x55/0xb0 [ 113.825684][ C1] ? clear_bhb_loop+0x40/0x90 [ 113.830357][ C1] ? clear_bhb_loop+0x40/0x90 [ 113.835026][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.840910][ C1] RIP: 0033:0x7f738039e0d9 [ 113.845319][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.864919][ C1] RSP: 002b:00007f7381278028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.873340][ C1] RAX: ffffffffffffffda RBX: 00007f7380625fa0 RCX: 00007f738039e0d9 [ 113.881321][ C1] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000007 [ 113.889285][ C1] RBP: 00007f7380435024 R08: 0000000000000000 R09: 0000000000000000 [ 113.897267][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.905227][ C1] R13: 00007f7380626038 R14: 00007f7380625fa0 R15: 00007ffd6dbbcdd8 [ 113.913216][ C1] [ 113.916387][ C1] Kernel Offset: disabled [ 113.920735][ C1] Rebooting in 86400 seconds..