last executing test programs: 6.580547656s ago: executing program 3 (id=207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.052257414s ago: executing program 3 (id=217): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.876108811s ago: executing program 0 (id=224): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 3.272374752s ago: executing program 2 (id=227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x50, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c2c874b8d9d7"}, @NL80211_ATTR_PMKID={0x14, 0x55, "99eb50714ca9154d55155c255dc4570d"}, @NL80211_ATTR_PMK={0x14, 0xfe, "0934a74b03e7caeba348bb692d215a46"}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040010}, 0xc850) 3.176613954s ago: executing program 2 (id=228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.019178599s ago: executing program 0 (id=229): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) getdents(r2, &(0x7f00000005c0)=""/147, 0x93) 2.944166414s ago: executing program 0 (id=230): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002140)={0x8, {"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", 0x1000}}, 0x1006) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 2.89795053s ago: executing program 2 (id=231): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) unshare(0x2040400) ioctl$EVIOCGKEY(r0, 0x8040453f, 0x0) 2.768010892s ago: executing program 0 (id=232): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.767712276s ago: executing program 2 (id=233): r0 = eventfd2(0xffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$eventfd(r0, &(0x7f0000000080)=0xffffffff00000000, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.870526216s ago: executing program 3 (id=235): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 1.768475702s ago: executing program 2 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000"], 0x54}}, 0x0) 1.69574233s ago: executing program 3 (id=237): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x3050, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgrp(0x0) landlock_restrict_self(r0, 0xa) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) 1.650689953s ago: executing program 2 (id=238): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 1.611898315s ago: executing program 0 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000600)=""/156, 0x9c}], 0x4}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8c0}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) 1.543285962s ago: executing program 3 (id=240): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x14, 0x0, @fd_index=0x3, 0x400, 0x0, 0x2, 0x0, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0322006b2025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.460912973s ago: executing program 3 (id=241): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20202, 0xa4) syz_usb_connect$uac2(0x0, 0xa6, &(0x7f00000017c0)=ANY=[@ANYBLOB="12011003000000401e04483040000102030109029400030101900e080b01010107200009040000000101200009"], &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x200282, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x7}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0xe, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001ac0)={0x2020}, 0x2020) 1.200403838s ago: executing program 1 (id=242): capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 1.18259257s ago: executing program 1 (id=243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 997.367622ms ago: executing program 1 (id=244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1) 592.1924ms ago: executing program 0 (id=245): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000300)=""/131, 0x83}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000002ac0)=""/4109, 0x100d}, {&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f0000002940)=""/246, 0xf6}], 0x6}, 0x5fb5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x4000000}, {{0x0, 0x0, 0x0}, 0x7f}], 0x8, 0x100, 0x0) 344.402514ms ago: executing program 1 (id=246): r0 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "1ef228dab3155e729dc323b0327477bef015dace03eedeb79508870f5483c9b3", 0x31303553}) 206.47494ms ago: executing program 1 (id=247): fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) 0s ago: executing program 1 (id=248): r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x40000009fc}) fsopen(0x0, 0x0) socket(0x11, 0x6, 0xc) gettid() r5 = add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000001030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a052c2d2e2f303132333435363738393a3b3c3d3e3f40"], 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x100) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x80, 0x2, 0x0, 0x0, 0xffffeffa) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000458000/0x1000)=nil, 0x1000}, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. [ 91.516869][ T5595] cgroup: Unknown subsys name 'net' [ 91.746886][ T5595] cgroup: Unknown subsys name 'cpuset' [ 91.811337][ T5595] cgroup: Unknown subsys name 'rlimit' [ 92.050831][ T10] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 94.055345][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.572640][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.615075][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.622729][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.645791][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.663451][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.664045][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.669445][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.669724][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.682269][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.683766][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.685413][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.691039][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.698265][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.698617][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.707005][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.717809][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.746154][ T4923] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.766244][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.817530][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.832928][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.802057][ T5626] Bluetooth: hci1: command tx timeout [ 100.881420][ T5626] Bluetooth: hci2: command tx timeout [ 100.881898][ T5626] Bluetooth: hci0: command tx timeout [ 100.882086][ T5626] Bluetooth: hci3: command tx timeout [ 100.918724][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.920556][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.922336][ T5614] bridge_slave_0: entered allmulticast mode [ 100.941884][ T5614] bridge_slave_0: entered promiscuous mode [ 100.995004][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.995354][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.995670][ T5614] bridge_slave_1: entered allmulticast mode [ 100.998140][ T5614] bridge_slave_1: entered promiscuous mode [ 101.037522][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.037791][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.038037][ T5617] bridge_slave_0: entered allmulticast mode [ 101.040512][ T5617] bridge_slave_0: entered promiscuous mode [ 101.103946][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.104203][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.104401][ T5617] bridge_slave_1: entered allmulticast mode [ 101.106792][ T5617] bridge_slave_1: entered promiscuous mode [ 101.208173][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.265963][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.299766][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.300217][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.303823][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.304628][ T5616] bridge_slave_0: entered allmulticast mode [ 101.315690][ T5616] bridge_slave_0: entered promiscuous mode [ 101.444772][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.445192][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.445453][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.445642][ T5616] bridge_slave_1: entered allmulticast mode [ 101.448088][ T5616] bridge_slave_1: entered promiscuous mode [ 101.499520][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.499815][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.500020][ T5618] bridge_slave_0: entered allmulticast mode [ 101.511942][ T5618] bridge_slave_0: entered promiscuous mode [ 101.570122][ T5614] team0: Port device team_slave_0 added [ 101.571719][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.572324][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.572621][ T5618] bridge_slave_1: entered allmulticast mode [ 101.583128][ T5618] bridge_slave_1: entered promiscuous mode [ 101.645701][ T5614] team0: Port device team_slave_1 added [ 101.670019][ T5617] team0: Port device team_slave_0 added [ 101.682618][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.738895][ T5617] team0: Port device team_slave_1 added [ 101.748571][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.783345][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.830258][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.830276][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.830305][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.886758][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.933566][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.933580][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.933600][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.987093][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.987106][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.987126][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.999281][ T5616] team0: Port device team_slave_0 added [ 102.064499][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.064513][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.064533][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.068289][ T5616] team0: Port device team_slave_1 added [ 102.089567][ T5618] team0: Port device team_slave_0 added [ 102.152008][ T5618] team0: Port device team_slave_1 added [ 102.216510][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.216524][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.216544][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.308147][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.308160][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.308180][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.355244][ T5614] hsr_slave_0: entered promiscuous mode [ 102.357084][ T5614] hsr_slave_1: entered promiscuous mode [ 102.360490][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.360501][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.360520][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.703281][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.703294][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.703315][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.718771][ T5617] hsr_slave_0: entered promiscuous mode [ 102.726391][ T5617] hsr_slave_1: entered promiscuous mode [ 102.731378][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 102.731504][ T5617] Cannot create hsr debugfs directory [ 102.883485][ T5626] Bluetooth: hci1: command tx timeout [ 102.960851][ T5626] Bluetooth: hci3: command tx timeout [ 102.960892][ T5626] Bluetooth: hci0: command tx timeout [ 102.960915][ T5626] Bluetooth: hci2: command tx timeout [ 102.966563][ T5616] hsr_slave_0: entered promiscuous mode [ 102.968118][ T5616] hsr_slave_1: entered promiscuous mode [ 102.969400][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 102.969429][ T5616] Cannot create hsr debugfs directory [ 103.058026][ T5618] hsr_slave_0: entered promiscuous mode [ 103.059615][ T5618] hsr_slave_1: entered promiscuous mode [ 103.064391][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 103.064416][ T5618] Cannot create hsr debugfs directory [ 103.844523][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.885885][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.896379][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.939666][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.959543][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.997592][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.026260][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.058401][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.234455][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.277062][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.302894][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.344925][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.349363][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.371798][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.398559][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.425920][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.599114][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.628863][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.639294][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.680399][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.697392][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.737616][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.769383][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.807525][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.962466][ T5626] Bluetooth: hci1: command tx timeout [ 104.986391][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.016619][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.029287][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.041232][ T5629] Bluetooth: hci0: command tx timeout [ 105.041265][ T5629] Bluetooth: hci3: command tx timeout [ 105.041401][ T5626] Bluetooth: hci2: command tx timeout [ 105.073614][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.094505][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.136544][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.159117][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.197314][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.234795][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.356558][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.419360][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.419543][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.448747][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.488755][ T1447] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.488923][ T1447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.604941][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.684321][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.684492][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.736423][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.736963][ T1405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.778744][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.931041][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.030405][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.044804][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.045242][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.122542][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.122807][ T1500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.225026][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.289258][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.303573][ T1500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.383133][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.383299][ T1500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.024255][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.040969][ T5626] Bluetooth: hci1: command tx timeout [ 107.122715][ T60] Bluetooth: hci3: command tx timeout [ 107.122745][ T60] Bluetooth: hci0: command tx timeout [ 107.122799][ T5626] Bluetooth: hci2: command tx timeout [ 107.506324][ T5614] veth0_vlan: entered promiscuous mode [ 107.577893][ T5614] veth1_vlan: entered promiscuous mode [ 107.646585][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.856797][ T5614] veth0_macvtap: entered promiscuous mode [ 107.895133][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.929382][ T5614] veth1_macvtap: entered promiscuous mode [ 108.013022][ T5617] veth0_vlan: entered promiscuous mode [ 108.031421][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.076637][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.102166][ T5617] veth1_vlan: entered promiscuous mode [ 108.126087][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.234331][ T166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.256459][ T166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.287817][ T166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.311327][ T166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.412022][ T5616] veth0_vlan: entered promiscuous mode [ 108.653226][ T5616] veth1_vlan: entered promiscuous mode [ 108.717912][ T5617] veth0_macvtap: entered promiscuous mode [ 108.738137][ T5618] veth0_vlan: entered promiscuous mode [ 108.781866][ T5617] veth1_macvtap: entered promiscuous mode [ 108.859849][ T5618] veth1_vlan: entered promiscuous mode [ 108.897144][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.897166][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.963263][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.018815][ T5616] veth0_macvtap: entered promiscuous mode [ 109.030340][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.055110][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.055131][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.092521][ T5616] veth1_macvtap: entered promiscuous mode [ 109.115221][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.135313][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.152455][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.172923][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.219649][ T5618] veth0_macvtap: entered promiscuous mode [ 109.333902][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.335931][ T5618] veth1_macvtap: entered promiscuous mode [ 109.479542][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.669699][ T1500] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.724992][ T1500] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.784737][ T1500] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.827585][ T1500] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.847202][ T5762] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.923951][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.027244][ T1500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.027267][ T1500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.052263][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.198928][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.214362][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.332841][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.464056][ T1500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.558722][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.558743][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.822690][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.822711][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.445387][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.445427][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.594912][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.594933][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.767116][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.934822][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.934845][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.286322][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.286380][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.286423][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 112.286445][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.616290][ T10] usb 4-1: config 0 descriptor?? [ 113.063158][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 114.213396][ T5791] usb 4-1: USB disconnect, device number 2 [ 114.535207][ T37] IPVS: starting estimator thread 0... [ 114.651397][ T5811] IPVS: using max 10 ests per chain, 24000 per kthread [ 115.472127][ T32] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.647930][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 115.649416][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.649435][ T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.688579][ T32] usb 4-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 115.688602][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.688617][ T32] usb 4-1: Product: syz [ 115.688627][ T32] usb 4-1: Manufacturer: syz [ 115.688638][ T32] usb 4-1: SerialNumber: syz [ 115.732470][ T5597] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.895522][ T5597] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.895574][ T5597] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.895620][ T5597] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 115.895642][ T5597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.966277][ T5597] usb 1-1: config 0 descriptor?? [ 116.077711][ T5597] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 116.359886][ T32] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 116.659829][ T32] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 116.700688][ T32] usb 4-1: USB disconnect, device number 3 [ 116.752075][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.606286][ T5597] usb 1-1: USB disconnect, device number 2 [ 119.730842][ T5706] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 119.893022][ T5706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.893078][ T5706] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.893121][ T5706] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 119.893138][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.967521][ T5706] usb 2-1: config 0 descriptor?? [ 120.034115][ T5706] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 121.562239][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.710751][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 121.714180][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.714230][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 121.714255][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.776012][ T10] usb 1-1: config 0 descriptor?? [ 122.045510][ T10] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 122.216425][ T10] usb 1-1: USB disconnect, device number 3 [ 122.543170][ T5623] usb 2-1: USB disconnect, device number 2 [ 123.319367][ T5984] netlink: 56 bytes leftover after parsing attributes in process `syz.2.88'. [ 124.090775][ T5623] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.304053][ T5623] usb 3-1: unable to get BOS descriptor or descriptor too short [ 124.307700][ T5623] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.307727][ T5623] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.313360][ T5623] usb 3-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 124.313628][ T5623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.313688][ T5623] usb 3-1: Product: syz [ 124.313729][ T5623] usb 3-1: Manufacturer: syz [ 124.313787][ T5623] usb 3-1: SerialNumber: syz [ 124.614761][ T6007] netlink: 56 bytes leftover after parsing attributes in process `syz.0.98'. [ 125.169352][ T5623] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 125.387811][ T5623] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 125.406256][ T5623] usb 3-1: USB disconnect, device number 2 [ 125.449247][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.673877][ T6031] netlink: 56 bytes leftover after parsing attributes in process `syz.0.108'. [ 126.060985][ T32] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 126.223717][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 126.231198][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.231249][ T32] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 126.231276][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.302613][ T32] usb 3-1: config 0 descriptor?? [ 126.533046][ T32] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 126.784624][ T10] usb 3-1: USB disconnect, device number 3 [ 126.849333][ T6058] netlink: 56 bytes leftover after parsing attributes in process `syz.0.118'. [ 128.050909][ T6088] netlink: 56 bytes leftover after parsing attributes in process `syz.3.132'. [ 129.176243][ T6117] netlink: 56 bytes leftover after parsing attributes in process `syz.1.145'. [ 129.960848][ T941] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.114133][ T941] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.114179][ T941] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 130.114202][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.181503][ T941] usb 2-1: config 0 descriptor?? [ 130.220003][ T6139] netlink: 'syz.0.155': attribute type 11 has an invalid length. [ 130.220027][ T6139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.155'. [ 130.243566][ T941] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 131.503025][ T6163] netlink: 'syz.2.166': attribute type 11 has an invalid length. [ 131.503049][ T6163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.166'. [ 132.242801][ T5706] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.401168][ T5706] usb 3-1: Using ep0 maxpacket: 8 [ 132.403998][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.404047][ T5706] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 132.404072][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.452317][ T5706] usb 3-1: config 0 descriptor?? [ 132.726513][ T5706] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 132.754451][ T10] usb 2-1: USB disconnect, device number 3 [ 132.899295][ T5706] usb 3-1: USB disconnect, device number 4 [ 132.974917][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.975012][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.105784][ T6184] netlink: 'syz.1.175': attribute type 11 has an invalid length. [ 133.105815][ T6184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'. [ 133.432887][ T6191] syz.0.178 uses obsolete (PF_INET,SOCK_PACKET) [ 134.010799][ T32] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 134.179038][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.179086][ T32] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 134.179111][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.260014][ T32] usb 3-1: config 0 descriptor?? [ 134.274013][ T32] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 134.321810][ T6208] netlink: 'syz.1.185': attribute type 11 has an invalid length. [ 134.321835][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.185'. [ 135.070814][ T5597] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.230691][ T5597] usb 4-1: Using ep0 maxpacket: 8 [ 135.233023][ T5597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.233071][ T5597] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.233096][ T5597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.294174][ T5597] usb 4-1: config 0 descriptor?? [ 135.372911][ T6231] netlink: 'syz.1.196': attribute type 11 has an invalid length. [ 135.372928][ T6231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.196'. [ 135.511762][ T5597] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 135.717829][ T5623] usb 4-1: USB disconnect, device number 4 [ 136.606548][ T6247] netlink: 'syz.3.203': attribute type 9 has an invalid length. [ 136.737480][ T6251] netlink: 'syz.3.205': attribute type 11 has an invalid length. [ 136.737504][ T6251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.205'. [ 136.820822][ T5706] usb 3-1: USB disconnect, device number 5 [ 137.120724][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.272363][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 137.274725][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.274777][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.274803][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.321755][ T10] usb 4-1: config 0 descriptor?? [ 137.552460][ T10] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 137.743446][ T10] usb 4-1: USB disconnect, device number 5 [ 138.368504][ T6277] netlink: 'syz.1.216': attribute type 11 has an invalid length. [ 138.368529][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 138.670782][ T5597] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.865205][ T5597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.865252][ T5597] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 138.865277][ T5597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.916217][ T5597] usb 4-1: config 0 descriptor?? [ 138.940533][ T5597] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 140.038987][ T6301] netlink: 'syz.2.226': attribute type 11 has an invalid length. [ 140.039004][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 140.057502][ T37] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.210744][ T37] usb 2-1: Using ep0 maxpacket: 8 [ 140.213738][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.213783][ T37] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 140.213799][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.218181][ T37] usb 2-1: config 0 descriptor?? [ 140.446399][ T37] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 140.671750][ T5597] usb 2-1: USB disconnect, device number 4 [ 141.448797][ T5706] usb 4-1: USB disconnect, device number 6 [ 141.639450][ T6324] netlink: 'syz.2.236': attribute type 11 has an invalid length. [ 141.639474][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 141.980762][ T5597] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.110742][ T5597] usb 3-1: device descriptor read/64, error -71 [ 142.201362][ T5706] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 142.360833][ T5597] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 142.361653][ T5706] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.365168][ T5706] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.365192][ T5706] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.413299][ T5706] usb 4-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 142.413327][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.413346][ T5706] usb 4-1: Product: syz [ 142.413360][ T5706] usb 4-1: Manufacturer: syz [ 142.413374][ T5706] usb 4-1: SerialNumber: syz [ 142.580780][ T5597] usb 3-1: device descriptor read/64, error -71 [ 142.694518][ T5597] usb usb3-port1: attempt power cycle [ 143.091803][ T5597] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 143.113661][ T5597] usb 3-1: device descriptor read/8, error -71 [ 143.400769][ T5597] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.421566][ T5597] usb 3-1: device descriptor read/8, error -71 [ 143.498466][ T5706] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 143.532075][ T5597] usb usb3-port1: unable to enumerate USB device [ 143.654206][ T6356] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 143.654229][ T6356] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 143.654256][ T6356] CPU: 1 UID: 0 PID: 6356 Comm: syz.1.248 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 143.654276][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.654287][ T6356] RIP: 0010:__schedule+0x4030/0x5550 [ 143.654312][ T6356] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 143.654327][ T6356] RSP: 0018:ffffc9000653faa0 EFLAGS: 00010003 [ 143.654349][ T6356] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 143.654361][ T6356] RDX: 0000000000000003 RSI: 0000000000000001 RDI: ffff8880b863c918 [ 143.654372][ T6356] RBP: ffffc9000653fc88 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 143.654385][ T6356] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: ffff8880b873c658 [ 143.654398][ T6356] R13: ffff888125b6b000 R14: 1ffff110170e7922 R15: 0000000000000014 [ 143.654411][ T6356] FS: 00007fe1559096c0(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 143.654426][ T6356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.654438][ T6356] CR2: 0000000000000000 CR3: 000000003fddc000 CR4: 00000000003526f0 [ 143.654452][ T6356] Call Trace: [ 143.654462][ T6356] [ 143.654480][ T6356] ? __pfx___schedule+0x10/0x10 [ 143.654501][ T6356] ? __lock_acquire+0x6b5/0x2d10 [ 143.654528][ T6356] preempt_schedule_irq+0x4d/0xa0 [ 143.654548][ T6356] irqentry_exit+0x14f/0x8c0 [ 143.654573][ T6356] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 143.654591][ T6356] RIP: 0010:packet_create+0x73e/0x8a0 [ 143.654616][ T6356] Code: 36 8b 1d 7d 68 87 05 bf 41 00 00 00 89 de e8 c9 39 bd f7 48 83 fb 40 0f 87 38 01 00 00 e8 0a 35 bd f7 65 41 ff 44 9e 04 31 c0 <48> 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e9 [ 143.654629][ T6356] RSP: 0018:ffffc9000653fdb8 EFLAGS: 00000287 [ 143.654643][ T6356] RAX: 00000000ffffffa2 RBX: dffffc0000000000 RCX: 0000000000080000 [ 143.654655][ T6356] RDX: ffffc90011aa1000 RSI: 000000000000007a RDI: 000000000000007b [ 143.654666][ T6356] RBP: ffff888038a00000 R08: ffff888038261f00 R09: 0000000000000003 [ 143.654678][ T6356] R10: 0000000000000100 R11: 000000000000000a R12: ffff88805ce4d800 [ 143.654689][ T6356] R13: 0000000000000006 R14: 0000000000000000 R15: 1ffff1100b9c9b00 [ 143.654706][ T6356] ? packet_create+0x499/0x8a0 [ 143.654732][ T6356] __sock_create+0x4e3/0x960 [ 143.654760][ T6356] ? __sock_create+0x344/0x960 [ 143.654786][ T6356] __sys_socket+0xd9/0x330 [ 143.654802][ T6356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.654819][ T6356] __x64_sys_socket+0x7a/0x90 [ 143.654835][ T6356] do_syscall_64+0x174/0x580 [ 143.654856][ T6356] ? trace_irq_disable+0x3b/0x140 [ 143.654876][ T6356] ? clear_bhb_loop+0x40/0x90 [ 143.654895][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.654911][ T6356] RIP: 0033:0x7fe157b1ce59 [ 143.654928][ T6356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.654942][ T6356] RSP: 002b:00007fe155909028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 143.654957][ T6356] RAX: ffffffffffffffda RBX: 00007fe157d96270 RCX: 00007fe157b1ce59 [ 143.654970][ T6356] RDX: 000000000000000c RSI: 0000000000000006 RDI: 0000000000000011 [ 143.654979][ T6356] RBP: 00007fe157bb2d6f R08: 0000000000000000 R09: 0000000000000000 [ 143.654989][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.654999][ T6356] R13: 00007fe157d96308 R14: 00007fe157d96270 R15: 00007ffc0f8a0ec8 [ 143.655024][ T6356] [ 143.655030][ T6356] Modules linked in: [ 143.655045][ T6356] ---[ end trace 0000000000000000 ]--- [ 143.655059][ T6356] RIP: 0010:__schedule+0x4030/0x5550 [ 143.655079][ T6356] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 143.655092][ T6356] RSP: 0018:ffffc9000653faa0 EFLAGS: 00010003 [ 143.655106][ T6356] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 143.655117][ T6356] RDX: 0000000000000003 RSI: 0000000000000001 RDI: ffff8880b863c918 [ 143.655129][ T6356] RBP: ffffc9000653fc88 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 143.655142][ T6356] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: ffff8880b873c658 [ 143.655155][ T6356] R13: ffff888125b6b000 R14: 1ffff110170e7922 R15: 0000000000000014 [ 143.655167][ T6356] FS: 00007fe1559096c0(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 143.655182][ T6356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.655193][ T6356] CR2: 0000000000000000 CR3: 000000003fddc000 CR4: 00000000003526f0 [ 143.655210][ T6356] Kernel panic - not syncing: Fatal exception [ 144.782042][ T6356] Shutting down cpus with NMI [ 144.782692][ T6356] Kernel Offset: disabled