last executing test programs: 6.162657397s ago: executing program 2 (id=3): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc95a, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0xe0, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x4, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x123, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x42c2, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.826149996s ago: executing program 2 (id=5): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = getpgid(0xffffffffffffffff) prlimit64(r2, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019300)=""/102392, 0x18ff8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.617232348s ago: executing program 2 (id=6): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_connect$uac1(0x6, 0x79, &(0x7f00000002c0)={{0x12, 0x1, 0x140, 0x0, 0x0, 0x0, 0x8, 0x499, 0x101c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x7, 0x40, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x11}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x4, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x8, 0x3, {0x7, 0x25, 0x1, 0xc, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x64, 0x40, 0x52, {0x7, 0x25, 0x1, 0xc, 0x8e, 0x5}}}}}}}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 4.567995288s ago: executing program 3 (id=7): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x80000002) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3, 0x1200) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r5, 0x1000) unshare(0x22020600) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 3.03899004s ago: executing program 3 (id=8): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.802818607s ago: executing program 3 (id=9): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[r4], &(0x7f0000000480)=[0x2], 0x0, 0x0, 0x0, 0x6}) 1.76256888s ago: executing program 3 (id=10): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1.195113428s ago: executing program 2 (id=11): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000000140)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}, {&(0x7f0000000300)='o \"f', 0x4}], 0x4}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000000100)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000580)="b8", 0x1}, {&(0x7f00000002c0)='y', 0x1}, {&(0x7f0000000280)="b7", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11", 0x1}], 0x2}}], 0x4, 0x4000000) 1.08243089s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0xcc2b) 872.345052ms ago: executing program 0 (id=1): socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0xd, 0x0, &(0x7f0000000140)={r0, r1+60000000}, &(0x7f0000000180)=0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 119.013226ms ago: executing program 3 (id=12): socket$igmp6(0xa, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x2, &(0x7f0000000000), 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 29.521164ms ago: executing program 2 (id=13): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) read(r0, &(0x7f00000001c0)=""/36, 0x24) 0s ago: executing program 3 (id=14): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x7, 0x0, 0x8, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd, 0x32}, 0x0, @in6=@empty, 0x10000, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 75.670712][ T5595] cgroup: Unknown subsys name 'net' [ 75.911169][ T5595] cgroup: Unknown subsys name 'cpuset' [ 75.967515][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.590054][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.849930][ T4922] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.852530][ T4922] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.853378][ T4922] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.869694][ T4922] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.870418][ T4922] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.955010][ T4922] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.969632][ T4922] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.973050][ T4922] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.974709][ T4922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.976129][ T4922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.039547][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.060956][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.062643][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.070353][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.086254][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.105611][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.112735][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.171359][ T4922] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.182473][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.183855][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.929239][ T5618] Bluetooth: hci0: command tx timeout [ 82.007146][ T5618] Bluetooth: hci1: command tx timeout [ 82.121078][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.122040][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.122192][ T5619] bridge_slave_0: entered allmulticast mode [ 82.123961][ T5619] bridge_slave_0: entered promiscuous mode [ 82.126844][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.137283][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.137543][ T5610] bridge_slave_0: entered allmulticast mode [ 82.140739][ T5610] bridge_slave_0: entered promiscuous mode [ 82.191066][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.191224][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.191392][ T5619] bridge_slave_1: entered allmulticast mode [ 82.193185][ T5619] bridge_slave_1: entered promiscuous mode [ 82.195662][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.195845][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.196163][ T5610] bridge_slave_1: entered allmulticast mode [ 82.213560][ T5610] bridge_slave_1: entered promiscuous mode [ 82.215855][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.216182][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.216412][ T5614] bridge_slave_0: entered allmulticast mode [ 82.223579][ T5614] bridge_slave_0: entered promiscuous mode [ 82.248630][ T5624] Bluetooth: hci2: command tx timeout [ 82.248791][ T5618] Bluetooth: hci3: command tx timeout [ 82.294747][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.294930][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.295070][ T5614] bridge_slave_1: entered allmulticast mode [ 82.296791][ T5614] bridge_slave_1: entered promiscuous mode [ 82.378363][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.382921][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.418257][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.421833][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.425709][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.492410][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.684033][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.684199][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.684360][ T5616] bridge_slave_0: entered allmulticast mode [ 82.686396][ T5616] bridge_slave_0: entered promiscuous mode [ 82.699006][ T5619] team0: Port device team_slave_0 added [ 82.703580][ T5610] team0: Port device team_slave_0 added [ 82.728692][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.728963][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.729167][ T5616] bridge_slave_1: entered allmulticast mode [ 82.733913][ T5616] bridge_slave_1: entered promiscuous mode [ 82.738892][ T5619] team0: Port device team_slave_1 added [ 82.744401][ T5610] team0: Port device team_slave_1 added [ 82.749455][ T5614] team0: Port device team_slave_0 added [ 82.804160][ T5614] team0: Port device team_slave_1 added [ 82.867960][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.869900][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.869909][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.869923][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.873823][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.873833][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.873846][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.903571][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.905622][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.905635][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.905657][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.908963][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.908975][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.908998][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.911361][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.911372][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.911394][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.971870][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.971886][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.971909][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.019830][ T5616] team0: Port device team_slave_0 added [ 83.032384][ T5616] team0: Port device team_slave_1 added [ 83.216106][ T5619] hsr_slave_0: entered promiscuous mode [ 83.219474][ T5619] hsr_slave_1: entered promiscuous mode [ 83.231821][ T5610] hsr_slave_0: entered promiscuous mode [ 83.233009][ T5610] hsr_slave_1: entered promiscuous mode [ 83.233969][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 83.234039][ T5610] Cannot create hsr debugfs directory [ 83.259615][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.259631][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.259654][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.281496][ T5614] hsr_slave_0: entered promiscuous mode [ 83.283366][ T5614] hsr_slave_1: entered promiscuous mode [ 83.284966][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 83.284987][ T5614] Cannot create hsr debugfs directory [ 83.289937][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.289950][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.289973][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.544583][ T5616] hsr_slave_0: entered promiscuous mode [ 83.545720][ T5616] hsr_slave_1: entered promiscuous mode [ 83.546624][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 83.546644][ T5616] Cannot create hsr debugfs directory [ 84.007181][ T5618] Bluetooth: hci0: command tx timeout [ 84.097692][ T5618] Bluetooth: hci1: command tx timeout [ 84.327496][ T5624] Bluetooth: hci2: command tx timeout [ 84.327630][ T5618] Bluetooth: hci3: command tx timeout [ 84.339711][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.390663][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.406874][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.441070][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.453581][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.490825][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.515547][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.551585][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.697373][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.734630][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.746668][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.783215][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.794173][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.824964][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.848333][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.883091][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.043075][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.070832][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.075401][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.132579][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.135285][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.158336][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.182418][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.210494][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.357856][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.400297][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.405930][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.443379][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.446774][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.492812][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.505483][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.536135][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.564009][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.649398][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.694820][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.694977][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.746482][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.766268][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.779091][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.864033][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.920894][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.921573][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.953542][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.974110][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.974407][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.083277][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.087277][ T5618] Bluetooth: hci0: command tx timeout [ 86.132146][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.146830][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.155994][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.167140][ T5618] Bluetooth: hci1: command tx timeout [ 86.219769][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.220940][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.302872][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.351503][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.354513][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.407619][ T5624] Bluetooth: hci2: command tx timeout [ 86.407715][ T5618] Bluetooth: hci3: command tx timeout [ 86.452727][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.452925][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.741579][ T32] cfg80211: failed to load regulatory.db [ 87.165240][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.606596][ T5619] veth0_vlan: entered promiscuous mode [ 87.634164][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.705367][ T5619] veth1_vlan: entered promiscuous mode [ 87.906027][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.918733][ T5619] veth0_macvtap: entered promiscuous mode [ 87.938640][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.954492][ T5619] veth1_macvtap: entered promiscuous mode [ 87.976415][ T5614] veth0_vlan: entered promiscuous mode [ 88.021895][ T5614] veth1_vlan: entered promiscuous mode [ 88.053677][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.093162][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.167274][ T5618] Bluetooth: hci0: command tx timeout [ 88.194430][ T1320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.211613][ T1320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.235466][ T1320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.247109][ T5618] Bluetooth: hci1: command tx timeout [ 88.251295][ T1320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.261159][ T5610] veth0_vlan: entered promiscuous mode [ 88.349814][ T5616] veth0_vlan: entered promiscuous mode [ 88.354492][ T5614] veth0_macvtap: entered promiscuous mode [ 88.418200][ T5610] veth1_vlan: entered promiscuous mode [ 88.429117][ T5614] veth1_macvtap: entered promiscuous mode [ 88.489063][ T5624] Bluetooth: hci2: command tx timeout [ 88.489200][ T5618] Bluetooth: hci3: command tx timeout [ 88.541638][ T5616] veth1_vlan: entered promiscuous mode [ 88.632644][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.682587][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.751780][ T3830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.766702][ T380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.766724][ T380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.778968][ T3830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.810302][ T3830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.830823][ T3830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.832748][ T5610] veth0_macvtap: entered promiscuous mode [ 88.851189][ T5616] veth0_macvtap: entered promiscuous mode [ 88.931000][ T5610] veth1_macvtap: entered promiscuous mode [ 88.936604][ T5616] veth1_macvtap: entered promiscuous mode [ 89.028006][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.028024][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.254342][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.306812][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.335377][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.336168][ T3830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.336184][ T3830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.385890][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.458070][ T1333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.484678][ T1333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.499583][ T1333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.534224][ T1333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.536372][ T2380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.536388][ T2380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.569441][ T1333] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.573642][ T1333] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.609320][ T1333] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.678675][ T1333] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.930784][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.930805][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.028782][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.028801][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.169908][ T2380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.169925][ T2380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.682378][ T2380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.682397][ T2380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.826837][ T5705] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.809747][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.809804][ T5705] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 93.809827][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.980069][ T5705] usb 3-1: config 0 descriptor?? [ 94.451899][ T5705] usbhid 3-1:0.0: can't add hid device: -71 [ 94.451988][ T5705] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 94.622540][ T5705] usb 3-1: USB disconnect, device number 2 [ 95.359401][ T5786] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.557125][ T5786] usb 2-1: Using ep0 maxpacket: 8 [ 95.625644][ T5786] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 95.625675][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.625695][ T5786] usb 2-1: Product: syz [ 95.625709][ T5786] usb 2-1: Manufacturer: syz [ 95.625724][ T5786] usb 2-1: SerialNumber: syz [ 95.726543][ T5786] usb 2-1: config 0 descriptor?? [ 95.810547][ T5786] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 96.019844][ T0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 96.019869][ T0] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 96.019894][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 96.019910][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 96.019919][ T0] RIP: 0010:__schedule+0x4030/0x5550 [ 96.019939][ T0] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 96.019950][ T0] RSP: 0000:ffffc900001e7c40 EFLAGS: 00010003 [ 96.019964][ T0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 96.019974][ T0] RDX: 0000000000000003 RSI: 0000000000000001 RDI: ffff8880b863c918 [ 96.019982][ T0] RBP: ffffc900001e7e30 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 96.019992][ T0] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: ffff8880b873c658 [ 96.020003][ T0] R13: ffff888125b6b000 R14: 1ffff110170e7922 R15: 0000000000000014 [ 96.020012][ T0] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 96.020023][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.020033][ T0] CR2: 000000110c46a5ba CR3: 000000002c314000 CR4: 00000000003526f0 [ 96.020046][ T0] Call Trace: [ 96.020055][ T0] [ 96.020067][ T0] ? irqentry_exit+0x1c1/0x8c0 [ 96.020087][ T0] ? __pfx___schedule+0x10/0x10 [ 96.020101][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 96.020119][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 96.020139][ T0] schedule_idle+0x51/0x90 [ 96.020154][ T0] do_idle+0x4a6/0x540 [ 96.020174][ T0] ? __pfx_do_idle+0x10/0x10 [ 96.020195][ T0] cpu_startup_entry+0x43/0x60 [ 96.020214][ T0] start_secondary+0x101/0x110 [ 96.020229][ T0] common_startup_64+0x13e/0x157 [ 96.020255][ T0] [ 96.020260][ T0] Modules linked in: [ 96.020273][ T0] ---[ end trace 0000000000000000 ]--- [ 96.020285][ T0] RIP: 0010:__schedule+0x4030/0x5550 [ 96.020300][ T0] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 96.020311][ T0] RSP: 0000:ffffc900001e7c40 EFLAGS: 00010003 [ 96.020322][ T0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 96.020331][ T0] RDX: 0000000000000003 RSI: 0000000000000001 RDI: ffff8880b863c918 [ 96.020344][ T0] RBP: ffffc900001e7e30 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 96.020354][ T0] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: ffff8880b873c658 [ 96.020364][ T0] R13: ffff888125b6b000 R14: 1ffff110170e7922 R15: 0000000000000014 [ 96.020375][ T0] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 96.020386][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.020396][ T0] CR2: 000000110c46a5ba CR3: 000000002c314000 CR4: 00000000003526f0 [ 96.020410][ T0] Kernel panic - not syncing: Fatal exception [ 97.092196][ T0] Shutting down cpus with NMI [ 97.092378][ T0] Kernel Offset: disabled