program: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x50) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x48, r1, 0x5, 0x0, 0x200, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x5c}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x44, r4, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfc, 0x550, &(0x7f0000000340)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x51a, &(0x7f0000001200)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4b, 0x2, 0x0, 0x0, 0x0, 0x106, 0x4294, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108208, 0xffffffff, 0x3, 0x5, 0x3, 0x3f2, 0xffff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0x40045b0a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f00000001c0)={0x0, 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000007c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6b]}}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffe90, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x0, 0x0, 0xc1, 0x8, 0x0, 0x0}}, 0xfffffffffffffeac) r11 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r10, &(0x7f00000008c0)=""/235, 0xeb, 0x2000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r11) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x4000085) [ 75.310346][ T5301] Bluetooth: hci0: command tx timeout [ 75.416246][ T5321] ------------[ cut here ]------------ [ 75.418801][ T5321] WARNING: CPU: 0 PID: 5321 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0 [ 75.423571][ T5321] Modules linked in: [ 75.425663][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.429623][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.434593][ T5321] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 75.437292][ T5321] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 02 f7 00 f7 90 0f 0b 90 eb e1 e8 f7 f6 00 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 75.445706][ T5321] RSP: 0018:ffffc9000d3e6f60 EFLAGS: 00010283 [ 75.448401][ T5321] RAX: ffffffff8abf2c79 RBX: ffff8880118f8000 RCX: 0000000000100000 [ 75.452007][ T5321] RDX: ffffc9000e2d2000 RSI: 00000000000003ac RDI: 00000000000003ad [ 75.455223][ T5321] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8abf2793 [ 75.458927][ T5321] R10: dffffc0000000000 R11: ffffed100231f031 R12: 1ffff1100231f00a [ 75.462709][ T5321] R13: ffff88803fb58e80 R14: 0000000000000001 R15: ffffffff8abf2793 [ 75.465946][ T5321] FS: 00007f5daac0e6c0(0000) GS:ffff88808d730000(0000) knlGS:0000000000000000 [ 75.470107][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.472788][ T5321] CR2: 0000200000001080 CR3: 0000000011693000 CR4: 0000000000352ef0 [ 75.476029][ T5321] Call Trace: [ 75.477497][ T5321] [ 75.478888][ T5321] rate_control_rate_init_all_links+0x109/0x1a0 [ 75.482093][ T5321] sta_apply_auth_flags+0x1c2/0x400 [ 75.484448][ T5321] sta_apply_parameters+0xe27/0x1570 [ 75.486770][ T5321] ieee80211_add_station+0x424/0x6a0 [ 75.489181][ T5321] rdev_add_station+0x108/0x290 [ 75.491734][ T5321] nl80211_new_station+0x1755/0x1b70 [ 75.494210][ T5321] ? __pfx_nl80211_new_station+0x10/0x10 [ 75.496716][ T5321] ? netdev_run_todo+0xe1d/0xea0 [ 75.499003][ T5321] ? nl80211_pre_doit+0x4f1/0x930 [ 75.501590][ T5321] genl_family_rcv_msg_doit+0x215/0x300 [ 75.504001][ T5321] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 75.506787][ T5321] ? bpf_lsm_capable+0x9/0x20 [ 75.508983][ T5321] ? security_capable+0x7e/0x2e0 [ 75.511440][ T5321] genl_rcv_msg+0x60e/0x790 [ 75.513521][ T5321] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.515521][ T5321] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 75.517996][ T5321] ? __pfx_nl80211_new_station+0x10/0x10 [ 75.520791][ T5321] ? __pfx_nl80211_post_doit+0x10/0x10 [ 75.523163][ T5321] ? __asan_memcpy+0x40/0x70 [ 75.525280][ T5321] ? __pfx_ref_tracker_free+0x10/0x10 [ 75.527709][ T5321] netlink_rcv_skb+0x208/0x470 [ 75.529950][ T5321] ? __lock_acquire+0xab9/0xd20 [ 75.532202][ T5321] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.534477][ T5321] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.536732][ T5321] ? down_read+0x1ad/0x2e0 [ 75.539407][ T5321] genl_rcv+0x28/0x40 [ 75.541695][ T5321] netlink_unicast+0x82f/0x9e0 [ 75.543801][ T5321] ? __pfx_netlink_unicast+0x10/0x10 [ 75.546165][ T5321] ? netlink_sendmsg+0x642/0xb30 [ 75.548374][ T5321] ? skb_put+0x11b/0x210 [ 75.550374][ T5321] netlink_sendmsg+0x805/0xb30 [ 75.552531][ T5321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.555017][ T5321] ? aa_sock_msg_perm+0xf1/0x1d0 [ 75.557274][ T5321] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 75.559719][ T5321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.562276][ T5321] __sock_sendmsg+0x21c/0x270 [ 75.564421][ T5321] ____sys_sendmsg+0x505/0x830 [ 75.566593][ T5321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.568876][ T5321] ? import_iovec+0x74/0xa0 [ 75.571439][ T5321] ___sys_sendmsg+0x21f/0x2a0 [ 75.573593][ T5321] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.575948][ T5321] ? __fget_files+0x2a/0x420 [ 75.578037][ T5321] ? __fget_files+0x3a0/0x420 [ 75.580427][ T5321] __x64_sys_sendmsg+0x19b/0x260 [ 75.582744][ T5321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 75.585227][ T5321] ? do_syscall_64+0xbe/0xfa0 [ 75.587164][ T5321] do_syscall_64+0xfa/0xfa0 [ 75.589258][ T5321] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.591795][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.594552][ T5321] ? clear_bhb_loop+0x60/0xb0 [ 75.596676][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.599377][ T5321] RIP: 0033:0x7f5da9d8f6c9 [ 75.601524][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.609968][ T5321] RSP: 002b:00007f5daac0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.613591][ T5321] RAX: ffffffffffffffda RBX: 00007f5da9fe5fa0 RCX: 00007f5da9d8f6c9 [ 75.617074][ T5321] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 75.620782][ T5321] RBP: 00007f5da9e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.623903][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.627031][ T5321] R13: 00007f5da9fe6038 R14: 00007f5da9fe5fa0 R15: 00007ffdb3f893f8 [ 75.630428][ T5321] [ 75.631700][ T5321] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.634666][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.638590][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.643096][ T5321] Call Trace: [ 75.644578][ T5321] [ 75.645864][ T5321] dump_stack_lvl+0x99/0x250 [ 75.647891][ T5321] ? __asan_memcpy+0x40/0x70 [ 75.649942][ T5321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.652236][ T5321] ? __pfx__printk+0x10/0x10 [ 75.654348][ T5321] vpanic+0x237/0x6d0 [ 75.656075][ T5321] ? __pfx_vpanic+0x10/0x10 [ 75.658053][ T5321] panic+0xb9/0xc0 [ 75.659554][ T5321] ? __pfx_panic+0x10/0x10 [ 75.661262][ T5321] __warn+0x31b/0x4b0 [ 75.662819][ T5321] ? rate_control_rate_init+0x64a/0x6e0 [ 75.664895][ T5321] ? rate_control_rate_init+0x64a/0x6e0 [ 75.667029][ T5321] report_bug+0x2be/0x4f0 [ 75.668691][ T5321] ? rate_control_rate_init+0x64a/0x6e0 [ 75.670792][ T5321] ? rate_control_rate_init+0x64a/0x6e0 [ 75.672800][ T5321] ? rate_control_rate_init+0x64c/0x6e0 [ 75.674845][ T5321] handle_bug+0x84/0x160 [ 75.676473][ T5321] exc_invalid_op+0x1a/0x50 [ 75.678471][ T5321] asm_exc_invalid_op+0x1a/0x20 [ 75.680747][ T5321] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 75.684134][ T5321] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 02 f7 00 f7 90 0f 0b 90 eb e1 e8 f7 f6 00 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 75.692753][ T5321] RSP: 0018:ffffc9000d3e6f60 EFLAGS: 00010283 [ 75.695384][ T5321] RAX: ffffffff8abf2c79 RBX: ffff8880118f8000 RCX: 0000000000100000 [ 75.698599][ T5321] RDX: ffffc9000e2d2000 RSI: 00000000000003ac RDI: 00000000000003ad [ 75.702012][ T5321] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8abf2793 [ 75.705071][ T5321] R10: dffffc0000000000 R11: ffffed100231f031 R12: 1ffff1100231f00a [ 75.708525][ T5321] R13: ffff88803fb58e80 R14: 0000000000000001 R15: ffffffff8abf2793 [ 75.711955][ T5321] ? rate_control_rate_init+0x163/0x6e0 [ 75.714451][ T5321] ? rate_control_rate_init+0x163/0x6e0 [ 75.716840][ T5321] ? rate_control_rate_init+0x649/0x6e0 [ 75.719413][ T5321] rate_control_rate_init_all_links+0x109/0x1a0 [ 75.721977][ T5321] sta_apply_auth_flags+0x1c2/0x400 [ 75.724050][ T5321] sta_apply_parameters+0xe27/0x1570 [ 75.726095][ T5321] ieee80211_add_station+0x424/0x6a0 [ 75.728168][ T5321] rdev_add_station+0x108/0x290 [ 75.730103][ T5321] nl80211_new_station+0x1755/0x1b70 [ 75.732192][ T5321] ? __pfx_nl80211_new_station+0x10/0x10 [ 75.734380][ T5321] ? netdev_run_todo+0xe1d/0xea0 [ 75.736523][ T5321] ? nl80211_pre_doit+0x4f1/0x930 [ 75.739001][ T5321] genl_family_rcv_msg_doit+0x215/0x300 [ 75.741340][ T5321] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 75.743982][ T5321] ? bpf_lsm_capable+0x9/0x20 [ 75.745935][ T5321] ? security_capable+0x7e/0x2e0 [ 75.748000][ T5321] genl_rcv_msg+0x60e/0x790 [ 75.750254][ T5321] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.752654][ T5321] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 75.755161][ T5321] ? __pfx_nl80211_new_station+0x10/0x10 [ 75.757684][ T5321] ? __pfx_nl80211_post_doit+0x10/0x10 [ 75.760329][ T5321] ? __asan_memcpy+0x40/0x70 [ 75.762409][ T5321] ? __pfx_ref_tracker_free+0x10/0x10 [ 75.764804][ T5321] netlink_rcv_skb+0x208/0x470 [ 75.767227][ T5321] ? __lock_acquire+0xab9/0xd20 [ 75.769649][ T5321] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.771827][ T5321] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.774155][ T5321] ? down_read+0x1ad/0x2e0 [ 75.776191][ T5321] genl_rcv+0x28/0x40 [ 75.777946][ T5321] netlink_unicast+0x82f/0x9e0 [ 75.780181][ T5321] ? __pfx_netlink_unicast+0x10/0x10 [ 75.782434][ T5321] ? netlink_sendmsg+0x642/0xb30 [ 75.784655][ T5321] ? skb_put+0x11b/0x210 [ 75.786780][ T5321] netlink_sendmsg+0x805/0xb30 [ 75.789297][ T5321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.791721][ T5321] ? aa_sock_msg_perm+0xf1/0x1d0 [ 75.793960][ T5321] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 75.796331][ T5321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.798861][ T5321] __sock_sendmsg+0x21c/0x270 [ 75.801053][ T5321] ____sys_sendmsg+0x505/0x830 [ 75.803276][ T5321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.805544][ T5321] ? import_iovec+0x74/0xa0 [ 75.807552][ T5321] ___sys_sendmsg+0x21f/0x2a0 [ 75.809729][ T5321] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.812065][ T5321] ? __fget_files+0x2a/0x420 [ 75.814158][ T5321] ? __fget_files+0x3a0/0x420 [ 75.816243][ T5321] __x64_sys_sendmsg+0x19b/0x260 [ 75.818493][ T5321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 75.821064][ T5321] ? do_syscall_64+0xbe/0xfa0 [ 75.823115][ T5321] do_syscall_64+0xfa/0xfa0 [ 75.825023][ T5321] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.827237][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.830008][ T5321] ? clear_bhb_loop+0x60/0xb0 [ 75.832029][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.834638][ T5321] RIP: 0033:0x7f5da9d8f6c9 [ 75.836611][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.845043][ T5321] RSP: 002b:00007f5daac0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.848691][ T5321] RAX: ffffffffffffffda RBX: 00007f5da9fe5fa0 RCX: 00007f5da9d8f6c9 [ 75.852252][ T5321] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 75.855945][ T5321] RBP: 00007f5da9e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.859554][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.863160][ T5321] R13: 00007f5da9fe6038 R14: 00007f5da9fe5fa0 R15: 00007ffdb3f893f8 [ 75.866827][ T5321] [ 75.868714][ T5321] Kernel Offset: disabled [ 75.870727][ T5321] Rebooting in 86400 seconds..