last executing test programs: 2.862960309s ago: executing program 4 (id=5): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000001c0)={0x2, 0x100, 0xf7}) 2.31572401s ago: executing program 0 (id=1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x181601, 0x0) flock(r1, 0x1) flock(r1, 0x2) dup3(r1, r0, 0x0) 2.25938502s ago: executing program 2 (id=7): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x40000009a) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x72) 2.246853595s ago: executing program 1 (id=2): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P') 1.973146074s ago: executing program 2 (id=8): socket$nl_generic(0x11, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)={@void, @val={0x2, 0x0, 0x2, 0x0, 0xc6}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x26, 0xca, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0xc, 0x0, 0x0, 0x1, 0x6, 0x7}, 0x1, {0x80000001}}}, {0x8, 0x22eb, 0x80000004, {{0x9, 0x2, 0x8, 0x1, 0x0, 0x3, 0x1, 0x3}, 0x2, {0x5, 0x8, 0x3, 0x8, 0x0, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x3, "1ff18f2d258c8fcd69a5ef81e9cb8219e1cd5f721895283078889b13b0c8315a1f1dc898391f163696fc6335e97ec4a1bc0c045d611ee2039f1d27e52ad787e7ba5fc7be1dd2f1f4ecb71aa9f1eec8bcbb9e8873fe3e6fa184ed922d5306b3fc97f4aa98b8816822709ebcc9ecc052a368d3"}}}}}, 0xd4) 1.868103872s ago: executing program 0 (id=9): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) read$char_usb(r0, &(0x7f00000003c0)=""/50, 0x32) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 1.72558136s ago: executing program 3 (id=4): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000380)="2781f1b2d0fc8d64f7", 0x9) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.494054392s ago: executing program 2 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x2, 0x20000000, 0xb000000, 0x515}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800006d02"]) 1.339509203s ago: executing program 0 (id=11): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x120) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000000)='./file1\x00', 0x48000, 0x92) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) close_range(r0, r0, 0x0) 906.81905ms ago: executing program 2 (id=12): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x8) splice(r2, 0x0, r0, 0x0, 0x6, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) 728.226353ms ago: executing program 0 (id=13): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r0 = syz_io_uring_setup(0x23d, &(0x7f0000000040)={0x0, 0x0, 0x10100, 0x3, 0x10}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2f}}) io_uring_enter(r0, 0x2def, 0x0, 0x20, 0x0, 0x0) exit(0x4) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 541.665803ms ago: executing program 2 (id=14): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=15): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xe0200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. [ 93.155792][ T5853] cgroup: Unknown subsys name 'net' [ 93.268360][ T5853] cgroup: Unknown subsys name 'cpuset' [ 93.280035][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.253943][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.415414][ T984] cfg80211: failed to load regulatory.db [ 99.864013][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.903197][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.911987][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.920807][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.930105][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.954521][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.970634][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.974394][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.986680][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.004172][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.016471][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.027555][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.043192][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.043941][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.050991][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.067457][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.077135][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.085974][ T5186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.116412][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.135420][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.144480][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.153712][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.167844][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.193972][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.214340][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.945288][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 101.181906][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 101.245857][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 101.370234][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.379780][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.390047][ T5878] bridge_slave_0: entered allmulticast mode [ 101.400445][ T5878] bridge_slave_0: entered promiscuous mode [ 101.412340][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 101.464322][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.471637][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.479407][ T5878] bridge_slave_1: entered allmulticast mode [ 101.488748][ T5878] bridge_slave_1: entered promiscuous mode [ 101.559196][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 101.697865][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.713723][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.857998][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.867088][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.878389][ T5884] bridge_slave_0: entered allmulticast mode [ 101.888169][ T5884] bridge_slave_0: entered promiscuous mode [ 101.898310][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.906812][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.916915][ T5881] bridge_slave_0: entered allmulticast mode [ 101.926260][ T5881] bridge_slave_0: entered promiscuous mode [ 101.968905][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.979288][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.988651][ T5880] bridge_slave_0: entered allmulticast mode [ 101.999053][ T5880] bridge_slave_0: entered promiscuous mode [ 102.012519][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.021204][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.034051][ T5884] bridge_slave_1: entered allmulticast mode [ 102.044659][ T5884] bridge_slave_1: entered promiscuous mode [ 102.055670][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.064003][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.075842][ T5881] bridge_slave_1: entered allmulticast mode [ 102.091274][ T5881] bridge_slave_1: entered promiscuous mode [ 102.104078][ T5878] team0: Port device team_slave_0 added [ 102.125629][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.136197][ T5872] Bluetooth: hci2: command tx timeout [ 102.136453][ T5876] Bluetooth: hci1: command tx timeout [ 102.152626][ T5870] Bluetooth: hci0: command tx timeout [ 102.163883][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.178089][ T5880] bridge_slave_1: entered allmulticast mode [ 102.189320][ T5880] bridge_slave_1: entered promiscuous mode [ 102.222980][ T5870] Bluetooth: hci3: command tx timeout [ 102.293280][ T5870] Bluetooth: hci4: command tx timeout [ 102.293515][ T5878] team0: Port device team_slave_1 added [ 102.348486][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.368613][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.385913][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.504879][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.537160][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.546798][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.555919][ T5882] bridge_slave_0: entered allmulticast mode [ 102.566609][ T5882] bridge_slave_0: entered promiscuous mode [ 102.578906][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.601968][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.616474][ T5884] team0: Port device team_slave_0 added [ 102.642428][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.650442][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.678515][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.691866][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.700691][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.709152][ T5882] bridge_slave_1: entered allmulticast mode [ 102.717618][ T5882] bridge_slave_1: entered promiscuous mode [ 102.743904][ T5884] team0: Port device team_slave_1 added [ 102.783404][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.791328][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.819846][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.865989][ T5880] team0: Port device team_slave_0 added [ 102.893993][ T5881] team0: Port device team_slave_0 added [ 102.929914][ T5880] team0: Port device team_slave_1 added [ 102.954541][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.962091][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.990177][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.006168][ T5881] team0: Port device team_slave_1 added [ 103.013231][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.020327][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.046711][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.070266][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.137199][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.145462][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.172265][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.210633][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.221095][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.228761][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.255956][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.270937][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.279606][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.308833][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.325670][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.333614][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.363389][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.445201][ T5878] hsr_slave_0: entered promiscuous mode [ 103.452105][ T5878] hsr_slave_1: entered promiscuous mode [ 103.478525][ T5882] team0: Port device team_slave_0 added [ 103.522242][ T5882] team0: Port device team_slave_1 added [ 103.568621][ T5884] hsr_slave_0: entered promiscuous mode [ 103.577167][ T5884] hsr_slave_1: entered promiscuous mode [ 103.586070][ T5884] debugfs: 'hsr0' already exists in 'hsr' [ 103.592438][ T5884] Cannot create hsr debugfs directory [ 103.722147][ T5881] hsr_slave_0: entered promiscuous mode [ 103.731629][ T5881] hsr_slave_1: entered promiscuous mode [ 103.741477][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 103.748916][ T5881] Cannot create hsr debugfs directory [ 103.771934][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.779493][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.807268][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.820049][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.827503][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.855892][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.872961][ T5880] hsr_slave_0: entered promiscuous mode [ 103.879810][ T5880] hsr_slave_1: entered promiscuous mode [ 103.886781][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 103.893144][ T5880] Cannot create hsr debugfs directory [ 104.105751][ T5882] hsr_slave_0: entered promiscuous mode [ 104.115866][ T5882] hsr_slave_1: entered promiscuous mode [ 104.123373][ T5882] debugfs: 'hsr0' already exists in 'hsr' [ 104.130389][ T5882] Cannot create hsr debugfs directory [ 104.213171][ T5876] Bluetooth: hci2: command tx timeout [ 104.213266][ T5872] Bluetooth: hci1: command tx timeout [ 104.219363][ T5870] Bluetooth: hci0: command tx timeout [ 104.293454][ T5870] Bluetooth: hci3: command tx timeout [ 104.373090][ T5870] Bluetooth: hci4: command tx timeout [ 104.757328][ T5878] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.777518][ T5878] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.799993][ T5878] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.824279][ T5878] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.898377][ T5881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.927262][ T5881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.954778][ T5881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.983648][ T5881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.048327][ T5884] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.060516][ T5884] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.076340][ T5884] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.107154][ T5884] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.206389][ T5882] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.227703][ T5882] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.263898][ T5882] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.277084][ T5882] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.418948][ T5880] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.432591][ T5880] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.448923][ T5880] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.486634][ T5880] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.519186][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.625201][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.693278][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.700651][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.730349][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.769030][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.781930][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.789461][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.848761][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.865460][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.881846][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.915310][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.922571][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.939067][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.946387][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.985354][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.999574][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.007542][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.029368][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.036893][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.125836][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.133097][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.168238][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.190544][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.197902][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.257812][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.294426][ T5870] Bluetooth: hci0: command tx timeout [ 106.294435][ T5872] Bluetooth: hci2: command tx timeout [ 106.304058][ T5872] Bluetooth: hci1: command tx timeout [ 106.348855][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.356226][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.374134][ T5870] Bluetooth: hci3: command tx timeout [ 106.400034][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.407424][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.454604][ T5870] Bluetooth: hci4: command tx timeout [ 106.524356][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.540524][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.578360][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.591132][ T5880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.638094][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.747986][ T5884] veth0_vlan: entered promiscuous mode [ 106.806534][ T5878] veth0_vlan: entered promiscuous mode [ 106.822376][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.839165][ T5884] veth1_vlan: entered promiscuous mode [ 106.877201][ T5882] veth0_vlan: entered promiscuous mode [ 106.889678][ T5878] veth1_vlan: entered promiscuous mode [ 106.945225][ T5882] veth1_vlan: entered promiscuous mode [ 106.956560][ T5881] veth0_vlan: entered promiscuous mode [ 106.993555][ T5884] veth0_macvtap: entered promiscuous mode [ 107.006216][ T5881] veth1_vlan: entered promiscuous mode [ 107.032373][ T5878] veth0_macvtap: entered promiscuous mode [ 107.056737][ T5884] veth1_macvtap: entered promiscuous mode [ 107.088626][ T5878] veth1_macvtap: entered promiscuous mode [ 107.117694][ T5882] veth0_macvtap: entered promiscuous mode [ 107.156163][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.181515][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.190389][ T5882] veth1_macvtap: entered promiscuous mode [ 107.213293][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.233123][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.280439][ T5881] veth0_macvtap: entered promiscuous mode [ 107.293728][ T5880] veth0_vlan: entered promiscuous mode [ 107.300574][ T1320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.322004][ T1320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.331913][ T1320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.348190][ T5880] veth1_vlan: entered promiscuous mode [ 107.359268][ T5881] veth1_macvtap: entered promiscuous mode [ 107.378290][ T1320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.388704][ T1320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.400154][ T1320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.419775][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.442946][ T1320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.477956][ T1320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.508281][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.525977][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.550191][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.597712][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.607823][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.639751][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.649718][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.686525][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.697799][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.711700][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.749987][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.769677][ T5880] veth0_macvtap: entered promiscuous mode [ 107.797677][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.817495][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.859977][ T5880] veth1_macvtap: entered promiscuous mode [ 107.930208][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.932001][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.950481][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.970438][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.992510][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.049832][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.067989][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.098115][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.147380][ T5878] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.164096][ T1320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.164290][ T4431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.181050][ T1320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.183918][ T4431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.218236][ T1320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.285563][ T1320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.341068][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.366204][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.386283][ T5872] Bluetooth: hci1: command tx timeout [ 108.392144][ T5872] Bluetooth: hci2: command tx timeout [ 108.399153][ T5870] Bluetooth: hci0: command tx timeout [ 108.460027][ T5870] Bluetooth: hci3: command tx timeout [ 108.533669][ T5870] Bluetooth: hci4: command tx timeout [ 108.549685][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.563551][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.616136][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.636882][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.654442][ T93] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.818314][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.849587][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.884990][ T93] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.936144][ T93] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 108.980579][ T93] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 109.032953][ T93] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.073087][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.082340][ T93] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.105693][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.129417][ T93] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.214783][ T93] usb 5-1: config 0 descriptor?? [ 109.226896][ T5961] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 109.293717][ T984] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.348055][ T5979] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 109.455543][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.487490][ T984] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 109.523545][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.551937][ T5984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'. [ 109.587819][ T984] usb 2-1: config 0 descriptor?? [ 109.749184][ T5988] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.834641][ T5957] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 109.935605][ T93] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 109.957731][ T984] usbhid 2-1:0.0: can't add hid device: -71 [ 109.985279][ T984] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 110.038747][ T5957] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 110.054746][ T984] usb 2-1: USB disconnect, device number 2 [ 110.065609][ T5957] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 110.107921][ T5957] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.135672][ T5957] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 110.151847][ T5957] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 110.217032][ T5957] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 110.249073][ T5957] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 110.299613][ T5957] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.352520][ T5957] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 110.392001][ T5957] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 110.449787][ T5957] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 110.481539][ T5957] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 110.494554][ T5957] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.503493][ T984] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.517305][ T5957] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 110.558408][ T5957] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 110.579613][ T5957] usb 4-1: string descriptor 0 read error: -22 [ 110.590212][ T5957] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 110.607445][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.664641][ T984] usb 2-1: Using ep0 maxpacket: 16 [ 110.669580][ T5957] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 110.698645][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.732063][ T984] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 110.760199][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.809070][ T984] usb 2-1: config 0 descriptor?? [ 111.206893][ T5936] usb 4-1: USB disconnect, device number 2 [ 111.273232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.282139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.339563][ T984] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 111.439841][ C0] ================================================================== [ 111.448205][ C0] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x106a/0x1240 [ 111.456248][ C0] Read of size 1 at addr ffff888055503fff by task udevd/5992 [ 111.463655][ C0] [ 111.466038][ C0] CPU: 0 UID: 0 PID: 5992 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 111.466066][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.466089][ C0] Call Trace: [ 111.466105][ C0] [ 111.466115][ C0] dump_stack_lvl+0x189/0x250 [ 111.466153][ C0] ? __kasan_check_byte+0x12/0x40 [ 111.466187][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.466212][ C0] ? lock_release+0x4b/0x3e0 [ 111.466251][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 111.466282][ C0] print_report+0xca/0x240 [ 111.466306][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 111.466330][ C0] kasan_report+0x118/0x150 [ 111.466360][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 111.466389][ C0] mcp2221_raw_event+0x106a/0x1240 [ 111.466413][ C0] ? down_trylock+0x50/0xb0 [ 111.466435][ C0] hid_input_report+0x40a/0x520 [ 111.466468][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 111.466492][ C0] hid_irq_in+0x47e/0x6d0 [ 111.466520][ C0] __usb_hcd_giveback_urb+0x373/0x540 [ 111.466555][ C0] dummy_timer+0x862/0x4550 [ 111.466585][ C0] ? trace_pelt_se_tp+0x39/0x130 [ 111.466639][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 111.466670][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 111.466697][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 111.466724][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 111.466754][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 111.466772][ C0] ? read_tsc+0x9/0x20 [ 111.466802][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 111.466826][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 111.466848][ C0] handle_softirqs+0x283/0x870 [ 111.466869][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 111.466891][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 111.466917][ C0] __irq_exit_rcu+0xca/0x1f0 [ 111.466936][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 111.466961][ C0] irq_exit_rcu+0x9/0x30 [ 111.466978][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 111.467012][ C0] [ 111.467018][ C0] [ 111.467026][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.467050][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 111.467084][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 8b 21 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 111.467103][ C0] RSP: 0018:ffffc90004767618 EFLAGS: 00000206 [ 111.467124][ C0] RAX: 16bc914c05c82a00 RBX: 0000000000000000 RCX: 16bc914c05c82a00 [ 111.467149][ C0] RDX: 0000000000000000 RSI: ffffffff8dba7f2b RDI: ffffffff8be33880 [ 111.467167][ C0] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195 [ 111.467181][ C0] R10: ffffc900047677d8 R11: ffffffff81ac3ad0 R12: 0000000000000002 [ 111.467195][ C0] R13: ffffffff8e139f20 R14: 0000000000000000 R15: 0000000000000246 [ 111.467211][ C0] ? unwind_next_frame+0xa5/0x2390 [ 111.467236][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 111.467264][ C0] ? unwind_next_frame+0xa5/0x2390 [ 111.467296][ C0] ? unwind_next_frame+0xa5/0x2390 [ 111.467318][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 111.467344][ C0] ? unwind_next_frame+0xa5/0x2390 [ 111.467365][ C0] unwind_next_frame+0xc2/0x2390 [ 111.467388][ C0] ? unwind_next_frame+0xa5/0x2390 [ 111.467413][ C0] ? unwind_next_frame+0xa5/0x2390 [ 111.467435][ C0] ? qlist_free_all+0x97/0x140 [ 111.467460][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 111.467485][ C0] arch_stack_walk+0x11c/0x150 [ 111.467513][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 111.467540][ C0] stack_trace_save+0x9c/0xe0 [ 111.467563][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 111.467585][ C0] ? do_raw_spin_lock+0x121/0x290 [ 111.467614][ C0] save_stack+0xf5/0x1f0 [ 111.467641][ C0] ? __pfx_save_stack+0x10/0x10 [ 111.467665][ C0] ? __free_frozen_pages+0xbc4/0xd30 [ 111.467695][ C0] ? __put_partials+0x156/0x1a0 [ 111.467711][ C0] ? put_cpu_partial+0x17c/0x250 [ 111.467729][ C0] ? __slab_free+0x2d5/0x3c0 [ 111.467746][ C0] ? qlist_free_all+0x97/0x140 [ 111.467769][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 111.467801][ C0] __reset_page_owner+0x71/0x1f0 [ 111.467828][ C0] __free_frozen_pages+0xbc4/0xd30 [ 111.467862][ C0] __put_partials+0x156/0x1a0 [ 111.467881][ C0] put_cpu_partial+0x17c/0x250 [ 111.467899][ C0] ? put_cpu_partial+0x6d/0x250 [ 111.467920][ C0] __slab_free+0x2d5/0x3c0 [ 111.467941][ C0] ? __phys_addr+0xd3/0x180 [ 111.467968][ C0] qlist_free_all+0x97/0x140 [ 111.467993][ C0] kasan_quarantine_reduce+0x148/0x160 [ 111.468018][ C0] __kasan_slab_alloc+0x22/0x80 [ 111.468046][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 111.468073][ C0] ? getname_flags+0xb8/0x540 [ 111.468094][ C0] getname_flags+0xb8/0x540 [ 111.468114][ C0] vfs_fstatat+0x43/0x170 [ 111.468212][ C0] __x64_sys_newfstatat+0x116/0x190 [ 111.468345][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 111.468382][ C0] ? do_syscall_64+0xbe/0x3b0 [ 111.468406][ C0] do_syscall_64+0xfa/0x3b0 [ 111.468433][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.468458][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.468480][ C0] ? clear_bhb_loop+0x60/0xb0 [ 111.468503][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.468523][ C0] RIP: 0033:0x7f3815b11b0a [ 111.468559][ C0] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 111.468589][ C0] RSP: 002b:00007fff42311278 EFLAGS: 00000202 ORIG_RAX: 0000000000000106 [ 111.468610][ C0] RAX: ffffffffffffffda RBX: 000055cf62b4dbd1 RCX: 00007f3815b11b0a [ 111.468643][ C0] RDX: 00007fff42311280 RSI: 00007fff42311310 RDI: 00000000ffffff9c [ 111.468657][ C0] RBP: 000055cf62b35830 R08: 000055cf62b4dbd1 R09: 0000000000000000 [ 111.468670][ C0] R10: 0000000000000100 R11: 0000000000000202 R12: 000055cf62b35920 [ 111.468683][ C0] R13: 00007fff42311310 R14: 000055cf62b2164c R15: 000055cf2ba76bcc [ 111.468705][ C0] [ 111.468712][ C0] [ 112.056282][ C0] Allocated by task 6009: [ 112.060633][ C0] kasan_save_track+0x3e/0x80 [ 112.065349][ C0] __kasan_slab_alloc+0x6c/0x80 [ 112.070284][ C0] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 112.076215][ C0] kmalloc_reserve+0xbd/0x290 [ 112.080917][ C0] __alloc_skb+0x142/0x2d0 [ 112.085386][ C0] inet6_netconf_notify_devconf+0x10f/0x1d0 [ 112.091325][ C0] __addrconf_sysctl_register+0x451/0x4c0 [ 112.097086][ C0] addrconf_sysctl_register+0x168/0x1c0 [ 112.102837][ C0] ipv6_add_dev+0xd46/0x1370 [ 112.107448][ C0] addrconf_notify+0x794/0x1010 [ 112.112331][ C0] notifier_call_chain+0x1b3/0x3e0 [ 112.117466][ C0] register_netdevice+0x1608/0x1ae0 [ 112.122698][ C0] tun_set_iff+0x844/0xef0 [ 112.127146][ C0] __tun_chr_ioctl+0x788/0x1df0 [ 112.132248][ C0] __ia32_compat_sys_ioctl+0x540/0x840 [ 112.137752][ C0] __do_fast_syscall_32+0xb6/0x2b0 [ 112.142893][ C0] do_fast_syscall_32+0x34/0x80 [ 112.147772][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.154131][ C0] [ 112.156474][ C0] Freed by task 6009: [ 112.160554][ C0] kasan_save_track+0x3e/0x80 [ 112.165278][ C0] kasan_save_free_info+0x46/0x50 [ 112.170592][ C0] __kasan_slab_free+0x5b/0x80 [ 112.175406][ C0] kmem_cache_free+0x18f/0x400 [ 112.180207][ C0] skb_release_data+0x62d/0x7c0 [ 112.185103][ C0] consume_skb+0x9e/0xf0 [ 112.189489][ C0] netlink_broadcast_filtered+0x1188/0x12c0 [ 112.195510][ C0] nlmsg_notify+0xf0/0x1a0 [ 112.199976][ C0] __addrconf_sysctl_register+0x451/0x4c0 [ 112.205737][ C0] addrconf_sysctl_register+0x168/0x1c0 [ 112.211424][ C0] ipv6_add_dev+0xd46/0x1370 [ 112.216047][ C0] addrconf_notify+0x794/0x1010 [ 112.220944][ C0] notifier_call_chain+0x1b3/0x3e0 [ 112.226192][ C0] register_netdevice+0x1608/0x1ae0 [ 112.231445][ C0] tun_set_iff+0x844/0xef0 [ 112.235935][ C0] __tun_chr_ioctl+0x788/0x1df0 [ 112.240845][ C0] __ia32_compat_sys_ioctl+0x540/0x840 [ 112.246357][ C0] __do_fast_syscall_32+0xb6/0x2b0 [ 112.251496][ C0] do_fast_syscall_32+0x34/0x80 [ 112.256363][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.262802][ C0] [ 112.265154][ C0] The buggy address belongs to the object at ffff888055503a80 [ 112.265154][ C0] which belongs to the cache skbuff_small_head of size 704 [ 112.279833][ C0] The buggy address is located 703 bytes to the right of [ 112.279833][ C0] allocated 704-byte region [ffff888055503a80, ffff888055503d40) [ 112.294521][ C0] [ 112.296862][ C0] The buggy address belongs to the physical page: [ 112.303331][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55500 [ 112.312119][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 112.320655][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 112.328515][ C0] page_type: f5(slab) [ 112.332521][ C0] raw: 00fff00000000040 ffff88801e2f8b40 dead000000000122 0000000000000000 [ 112.341413][ C0] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 112.350670][ C0] head: 00fff00000000040 ffff88801e2f8b40 dead000000000122 0000000000000000 [ 112.359498][ C0] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 112.368459][ C0] head: 00fff00000000002 ffffea0001554001 00000000ffffffff 00000000ffffffff [ 112.377382][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 112.386119][ C0] page dumped because: kasan: bad access detected [ 112.392683][ C0] page_owner tracks the page as allocated [ 112.398441][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5992, tgid 5992 (udevd), ts 111318167346, free_ts 32476181789 [ 112.421475][ C0] post_alloc_hook+0x240/0x2a0 [ 112.426327][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 112.432140][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 112.438085][ C0] alloc_pages_mpol+0x232/0x4a0 [ 112.443021][ C0] allocate_slab+0x8a/0x370 [ 112.447587][ C0] ___slab_alloc+0xbeb/0x1410 [ 112.452371][ C0] kmem_cache_alloc_node_noprof+0x280/0x3c0 [ 112.458359][ C0] kmalloc_reserve+0xbd/0x290 [ 112.463197][ C0] __alloc_skb+0x142/0x2d0 [ 112.467640][ C0] skb_copy+0x188/0x800 [ 112.472096][ C0] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 112.478315][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 112.483897][ C0] mac80211_hwsim_beacon_tx+0x3f0/0x860 [ 112.489587][ C0] __iterate_interfaces+0x2a8/0x590 [ 112.494850][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 112.501925][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 112.507180][ C0] page last free pid 1 tgid 1 stack trace: [ 112.513255][ C0] __free_frozen_pages+0xbc4/0xd30 [ 112.518425][ C0] free_contig_range+0x1bd/0x4a0 [ 112.523424][ C0] destroy_args+0x69/0x660 [ 112.528105][ C0] debug_vm_pgtable+0x39f/0x3b0 [ 112.533206][ C0] do_one_initcall+0x233/0x820 [ 112.538231][ C0] do_initcall_level+0x104/0x190 [ 112.543229][ C0] do_initcalls+0x59/0xa0 [ 112.547607][ C0] kernel_init_freeable+0x334/0x4b0 [ 112.552865][ C0] kernel_init+0x1d/0x1d0 [ 112.557249][ C0] ret_from_fork+0x3fc/0x770 [ 112.561883][ C0] ret_from_fork_asm+0x1a/0x30 [ 112.566688][ C0] [ 112.569054][ C0] Memory state around the buggy address: [ 112.574850][ C0] ffff888055503e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 112.582945][ C0] ffff888055503f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 112.591055][ C0] >ffff888055503f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 112.599141][ C0] ^ [ 112.607163][ C0] ffff888055504000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 112.615291][ C0] ffff888055504080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 112.623384][ C0] ================================================================== [ 112.631607][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 112.638850][ C0] CPU: 0 UID: 0 PID: 5992 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 112.647738][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.657846][ C0] Call Trace: [ 112.661219][ C0] [ 112.664112][ C0] dump_stack_lvl+0x99/0x250 [ 112.668930][ C0] ? __asan_memcpy+0x40/0x70 [ 112.673559][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.678807][ C0] ? __pfx__printk+0x10/0x10 [ 112.683455][ C0] vpanic+0x281/0x750 [ 112.687480][ C0] ? __pfx_print_hex_dump+0x10/0x10 [ 112.692736][ C0] ? __pfx_vpanic+0x10/0x10 [ 112.697324][ C0] panic+0xb9/0xc0 [ 112.701081][ C0] ? __pfx_panic+0x10/0x10 [ 112.705568][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 112.712155][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 112.717471][ C0] check_panic_on_warn+0x89/0xb0 [ 112.723224][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 112.728899][ C0] end_report+0x78/0x160 [ 112.733260][ C0] kasan_report+0x129/0x150 [ 112.737836][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 112.743278][ C0] mcp2221_raw_event+0x106a/0x1240 [ 112.748541][ C0] ? down_trylock+0x50/0xb0 [ 112.753103][ C0] hid_input_report+0x40a/0x520 [ 112.758226][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 112.763760][ C0] hid_irq_in+0x47e/0x6d0 [ 112.768154][ C0] __usb_hcd_giveback_urb+0x373/0x540 [ 112.773624][ C0] dummy_timer+0x862/0x4550 [ 112.778395][ C0] ? trace_pelt_se_tp+0x39/0x130 [ 112.783523][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 112.788552][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 112.793539][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 112.798548][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 112.803884][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 112.809634][ C0] ? read_tsc+0x9/0x20 [ 112.813836][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 112.819687][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 112.824841][ C0] handle_softirqs+0x283/0x870 [ 112.829631][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 112.834415][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 112.839725][ C0] __irq_exit_rcu+0xca/0x1f0 [ 112.844345][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 112.849580][ C0] irq_exit_rcu+0x9/0x30 [ 112.853848][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 112.860261][ C0] [ 112.863220][ C0] [ 112.866206][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.872219][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 112.877552][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 8b 21 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 112.897694][ C0] RSP: 0018:ffffc90004767618 EFLAGS: 00000206 [ 112.903814][ C0] RAX: 16bc914c05c82a00 RBX: 0000000000000000 RCX: 16bc914c05c82a00 [ 112.911831][ C0] RDX: 0000000000000000 RSI: ffffffff8dba7f2b RDI: ffffffff8be33880 [ 112.919841][ C0] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195 [ 112.927882][ C0] R10: ffffc900047677d8 R11: ffffffff81ac3ad0 R12: 0000000000000002 [ 112.935882][ C0] R13: ffffffff8e139f20 R14: 0000000000000000 R15: 0000000000000246 [ 112.943892][ C0] ? unwind_next_frame+0xa5/0x2390 [ 112.949063][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 112.955316][ C0] ? unwind_next_frame+0xa5/0x2390 [ 112.960486][ C0] ? unwind_next_frame+0xa5/0x2390 [ 112.965637][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 112.971553][ C0] ? unwind_next_frame+0xa5/0x2390 [ 112.977419][ C0] unwind_next_frame+0xc2/0x2390 [ 112.982497][ C0] ? unwind_next_frame+0xa5/0x2390 [ 112.987668][ C0] ? unwind_next_frame+0xa5/0x2390 [ 112.993002][ C0] ? qlist_free_all+0x97/0x140 [ 112.997985][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 113.004285][ C0] arch_stack_walk+0x11c/0x150 [ 113.009092][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 113.014764][ C0] stack_trace_save+0x9c/0xe0 [ 113.019819][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 113.025403][ C0] ? do_raw_spin_lock+0x121/0x290 [ 113.031019][ C0] save_stack+0xf5/0x1f0 [ 113.035645][ C0] ? __pfx_save_stack+0x10/0x10 [ 113.040715][ C0] ? __free_frozen_pages+0xbc4/0xd30 [ 113.046040][ C0] ? __put_partials+0x156/0x1a0 [ 113.050941][ C0] ? put_cpu_partial+0x17c/0x250 [ 113.055913][ C0] ? __slab_free+0x2d5/0x3c0 [ 113.060606][ C0] ? qlist_free_all+0x97/0x140 [ 113.065485][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 113.071385][ C0] __reset_page_owner+0x71/0x1f0 [ 113.076437][ C0] __free_frozen_pages+0xbc4/0xd30 [ 113.081605][ C0] __put_partials+0x156/0x1a0 [ 113.086312][ C0] put_cpu_partial+0x17c/0x250 [ 113.091115][ C0] ? put_cpu_partial+0x6d/0x250 [ 113.096090][ C0] __slab_free+0x2d5/0x3c0 [ 113.100630][ C0] ? __phys_addr+0xd3/0x180 [ 113.105169][ C0] qlist_free_all+0x97/0x140 [ 113.109800][ C0] kasan_quarantine_reduce+0x148/0x160 [ 113.115403][ C0] __kasan_slab_alloc+0x22/0x80 [ 113.120424][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 113.125928][ C0] ? getname_flags+0xb8/0x540 [ 113.130645][ C0] getname_flags+0xb8/0x540 [ 113.135442][ C0] vfs_fstatat+0x43/0x170 [ 113.139790][ C0] __x64_sys_newfstatat+0x116/0x190 [ 113.145023][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 113.150867][ C0] ? do_syscall_64+0xbe/0x3b0 [ 113.156088][ C0] do_syscall_64+0xfa/0x3b0 [ 113.160787][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.167168][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 113.173355][ C0] ? clear_bhb_loop+0x60/0xb0 [ 113.178585][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.184595][ C0] RIP: 0033:0x7f3815b11b0a [ 113.189119][ C0] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 113.208956][ C0] RSP: 002b:00007fff42311278 EFLAGS: 00000202 ORIG_RAX: 0000000000000106 [ 113.217492][ C0] RAX: ffffffffffffffda RBX: 000055cf62b4dbd1 RCX: 00007f3815b11b0a [ 113.225492][ C0] RDX: 00007fff42311280 RSI: 00007fff42311310 RDI: 00000000ffffff9c [ 113.233494][ C0] RBP: 000055cf62b35830 R08: 000055cf62b4dbd1 R09: 0000000000000000 [ 113.241491][ C0] R10: 0000000000000100 R11: 0000000000000202 R12: 000055cf62b35920 [ 113.249483][ C0] R13: 00007fff42311310 R14: 000055cf62b2164c R15: 000055cf2ba76bcc [ 113.257508][ C0] [ 113.260914][ C0] Kernel Offset: disabled [ 113.265342][ C0] Rebooting in 86400 seconds..