last executing test programs: 15.027096082s ago: executing program 1 (id=2): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000102), 0x2) read(r0, &(0x7f0000000200)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000302), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000304), 0x2) read(r0, &(0x7f0000000200)=""/1, 0x1) 12.782660214s ago: executing program 1 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='add syz0 127.0.0.1:7000\n', 0x18) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f0000000070)='syz0\n', 0x5) close(r1) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) listen(r2, 0xa) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r3 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=0x0, &(0x7f0000001108)=0x0, &(0x7f0000001110)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r2, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}}) io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000d00)=@cell={0x23, 'syz0:', 'syz0'}, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 12.668263062s ago: executing program 3 (id=4): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018101c1b031c000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 11.779181436s ago: executing program 1 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x42, 0x1ff) pwrite64(r1, &(0x7f0000000500)='\nBTO', 0x4, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x2, 0x0) write(r2, &(0x7f0000000b00)='0000:00:02.0\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x0) 11.566831405s ago: executing program 4 (id=5): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60000000000010902120001010000000904000000ffffff00"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000240)={0x40, 0x1, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000480)={0x40, 0x1, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) r3 = syz_io_uring_setup(0x4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000001000)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r1, 0x0, &(0x7f0000001100)=[{&(0x7f0000001200)='saa7115 0x21\x00', 0xd}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000001000)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r2, 0x0, &(0x7f0000001100)=[{&(0x7f0000001200)='saa7115 0x21\x00', 0xd}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x4, 0x0, 0x0, 0x0, 0x0) 10.98928602s ago: executing program 1 (id=9): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, r2, 0x1}}, 0x50) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x8, 0xfa00, {&(0x7f0000000900)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120) 10.715178552s ago: executing program 2 (id=3): syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@random="112233445566", 0x6, 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000140)=@mgmt_frame=@beacon={{{}, {}, @device_a, @device_b, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000200)={0x0, 0x2faf080}, &(0x7f0000000240)) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000340)=@mgmt_frame=@action={{{}, {}, @device_a, @device_b, @from_mac=@device_b, {0x0, 0x3}}, @sa_query_req={0x8, 0x0, 0x1234}}, 0x1c) 8.442366814s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='5\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='4\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='4096\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:0\x00', 0x4) write(r4, &(0x7f0000000380)='1:1\x00', 0x4) write(r4, &(0x7f00000003c0)='1:2\x00', 0x4) write(r4, &(0x7f0000000400)='1:3\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='1\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-ram2/slot\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='2\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='3\x00', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r9, &(0x7f0000000680)='active\x00', 0x7) 8.168934196s ago: executing program 3 (id=13): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) ppoll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, &(0x7f0000000140)={0x1}, 0x0, 0x8) read(r0, &(0x7f0000000180)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0xfa}, 0x2) 7.474018639s ago: executing program 2 (id=14): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x400, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000040) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x0, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000310)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e21, 0x0, @loopback}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, r3}}, 0x120) 6.949902239s ago: executing program 4 (id=15): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) 6.213856722s ago: executing program 4 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='vivid.0\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/vimc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='vimc.0\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/vim2m/unbind\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='vim2m.0\x00', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vicodec/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='vicodec.0\x00', 0xa) syz_usb_connect(0x0, 0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002ffffff40450580800a03010203010902200001010080320904000002ffffff000705810140000107050202400000"], 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000500), 0x0, 0x0) read(r4, &(0x7f0000000600), 0x1000) 5.867905595s ago: executing program 0 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x42, 0x1ff) pwrite64(r1, &(0x7f0000000510)="000000a0", 0x4, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x2, 0x0) write(r2, &(0x7f0000000b00)='0000:00:02.0\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x0) 5.663992062s ago: executing program 0 (id=19): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl(r0, 0x8983, &(0x7f0000000040)="0000000065746830000000000000000000000000000000000300"/52) ioctl(r0, 0x8983, &(0x7f0000000080)="01000000657468302e3030303300"/52) 5.431952368s ago: executing program 3 (id=20): r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff0007058102400000070501024000000705820140000107050601400001"], 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000400)=""/64) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000000000004040000000000") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000440)=""/64) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000140)="0400"/15) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 4.890514628s ago: executing program 2 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0x0}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @local, 0x3}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x28, 0xfa00, {{0xa, 0x4e20, 0x0, @local, 0x3}, {0xa, 0x4e20, 0x0, @local, 0x3}, r3, 0x3e8}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000200)={0x4, 0x10, 0xfa00, {r3, 0x3e8}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120) 4.754434065s ago: executing program 0 (id=22): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./fake_bdev\x00', 0x8180, 0x7b1c8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./fake_bdev\x00', 0x2, 0x0) 4.343879326s ago: executing program 0 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000402a1101000001010203010902270001010080fa0904000003ffffff00070581024000000705820240000007050302400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0xc0, 0xb1, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/lirc0\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0100000002000000", 0x8) 2.987008809s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='pcspkr\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='acpi-thermal\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/acpi-thermal/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='pcspkr\x00', 0x7) 2.408804538s ago: executing program 3 (id=25): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x64) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x64, 0x2) r2 = memfd_create(&(0x7f0000000200)='memfd\x00', 0x0) ftruncate(r2, 0x1000) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) fsync(r1) 2.164125064s ago: executing program 2 (id=26): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000314010000000000000000000900020073797a30000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x2625a00}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1234, 0x0, @loopback}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0x0, 0x0, 0x0, @empty}, {0xa, 0x1234, 0x0, @loopback}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000e00)={0xc, 0x8, 0x150, {&(0x7f0000000f00)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000e00)={0xc, 0x8, 0x150, {&(0x7f0000000f00)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x120) 2.077971915s ago: executing program 4 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/backlight/acpi_video0/actual_brightness\x00', 0x0, 0x0) 1.179958539s ago: executing program 4 (id=28): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd0c39000101000000010902200001010080320904000002ffffff000705810200020007050102000200"], 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5446, 0x0) 824.209317ms ago: executing program 0 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000510)="000000a0", 0x4, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)='0000:00:02.0\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) 424.85607ms ago: executing program 3 (id=30): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000340)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000440)={0xc0, 0x9a, 0x4, '\x00s\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000600)={0x2}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000700), 0x1, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000800)={0x53, 0xfffffffffffffffe, 0xa, 0x0, @buffer={0x0, 0x200, &(0x7f0000000900)=""/512}, &(0x7f0000000a00)="2a00ffffffff00000100", &(0x7f0000000b00)=""/32, 0x1, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=31): r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109023c0001010080fa0904000006ff000000070581024000000705010240000007058202400000070502024000000705830240000007050302400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000240)=""/64) (async) syz_usb_ep_write(r0, 0x82, 0xe, &(0x7f0000000140)="8200000000000000001122334455") (async) syz_usb_ep_read(r0, 0x3, 0x40, &(0x7f0000000280)=""/64) (async) syz_usb_ep_write(r0, 0x83, 0x8, &(0x7f0000000180)="8400000000000000") (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="9000000000000000") nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1:1.0/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.31' (ED25519) to the list of known hosts. [ 74.187722][ T5582] cgroup: Unknown subsys name 'net' [ 74.428855][ T5582] cgroup: Unknown subsys name 'cpuset' [ 74.502833][ T5582] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.155108][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.488482][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.497728][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.518615][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.521989][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.575171][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.630089][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.649376][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.667240][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.692505][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.693073][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.694140][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.700435][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.713170][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.726865][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.728617][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.734955][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.736083][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.736853][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.737966][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.738391][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.753756][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.760566][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.766678][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.769268][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.783267][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.684744][ T5608] Bluetooth: hci2: command tx timeout [ 80.845674][ T5608] Bluetooth: hci1: command tx timeout [ 80.845790][ T5608] Bluetooth: hci3: command tx timeout [ 80.845881][ T5608] Bluetooth: hci4: command tx timeout [ 80.922503][ T5610] Bluetooth: hci0: command tx timeout [ 81.234098][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.234615][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.235106][ T5598] bridge_slave_0: entered allmulticast mode [ 81.237864][ T5598] bridge_slave_0: entered promiscuous mode [ 81.296091][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.296179][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.296282][ T5599] bridge_slave_0: entered allmulticast mode [ 81.297680][ T5599] bridge_slave_0: entered promiscuous mode [ 81.301354][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.301450][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.301675][ T5598] bridge_slave_1: entered allmulticast mode [ 81.315461][ T5598] bridge_slave_1: entered promiscuous mode [ 81.320781][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.320931][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.321086][ T5596] bridge_slave_0: entered allmulticast mode [ 81.329602][ T5596] bridge_slave_0: entered promiscuous mode [ 81.383557][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.383667][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.383819][ T5599] bridge_slave_1: entered allmulticast mode [ 81.385530][ T5599] bridge_slave_1: entered promiscuous mode [ 81.405378][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.405494][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.405997][ T5596] bridge_slave_1: entered allmulticast mode [ 81.408956][ T5596] bridge_slave_1: entered promiscuous mode [ 81.410515][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.410623][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.410797][ T5595] bridge_slave_0: entered allmulticast mode [ 81.419081][ T5595] bridge_slave_0: entered promiscuous mode [ 81.420893][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.421003][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.421465][ T5597] bridge_slave_0: entered allmulticast mode [ 81.427045][ T5597] bridge_slave_0: entered promiscuous mode [ 81.505504][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.505578][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.505682][ T5595] bridge_slave_1: entered allmulticast mode [ 81.507107][ T5595] bridge_slave_1: entered promiscuous mode [ 81.508042][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.508142][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.508275][ T5597] bridge_slave_1: entered allmulticast mode [ 81.509674][ T5597] bridge_slave_1: entered promiscuous mode [ 81.550234][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.602828][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.606675][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.609475][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.647102][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.667844][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.672993][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.682117][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.740928][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.751898][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.790406][ T5598] team0: Port device team_slave_0 added [ 81.859717][ T5599] team0: Port device team_slave_0 added [ 81.871347][ T5598] team0: Port device team_slave_1 added [ 81.890446][ T5596] team0: Port device team_slave_0 added [ 81.976362][ T5599] team0: Port device team_slave_1 added [ 81.979775][ T5596] team0: Port device team_slave_1 added [ 81.985361][ T5595] team0: Port device team_slave_0 added [ 81.990679][ T5597] team0: Port device team_slave_0 added [ 82.073466][ T5595] team0: Port device team_slave_1 added [ 82.076132][ T5597] team0: Port device team_slave_1 added [ 82.077125][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.077134][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.077148][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.183143][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.183157][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.183173][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.185448][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.185463][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.185477][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.186553][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.186568][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.186591][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.256485][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.256503][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.256529][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.259000][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.259015][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.259041][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.260488][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.260501][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.260524][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.267569][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.267586][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.267611][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.311946][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.311963][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.311987][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.317568][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.317585][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.317610][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.459095][ T5598] hsr_slave_0: entered promiscuous mode [ 82.460610][ T5598] hsr_slave_1: entered promiscuous mode [ 82.562742][ T5599] hsr_slave_0: entered promiscuous mode [ 82.563984][ T5599] hsr_slave_1: entered promiscuous mode [ 82.566072][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 82.566189][ T5599] Cannot create hsr debugfs directory [ 82.577061][ T5596] hsr_slave_0: entered promiscuous mode [ 82.578301][ T5596] hsr_slave_1: entered promiscuous mode [ 82.579554][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 82.579575][ T5596] Cannot create hsr debugfs directory [ 82.634686][ T5595] hsr_slave_0: entered promiscuous mode [ 82.636030][ T5595] hsr_slave_1: entered promiscuous mode [ 82.636925][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 82.638125][ T5595] Cannot create hsr debugfs directory [ 82.772471][ T5610] Bluetooth: hci2: command tx timeout [ 82.922374][ T5608] Bluetooth: hci3: command tx timeout [ 82.922410][ T5608] Bluetooth: hci1: command tx timeout [ 82.922479][ T5610] Bluetooth: hci4: command tx timeout [ 83.002419][ T5610] Bluetooth: hci0: command tx timeout [ 83.118761][ T5597] hsr_slave_0: entered promiscuous mode [ 83.119541][ T5597] hsr_slave_1: entered promiscuous mode [ 83.120087][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 83.120108][ T5597] Cannot create hsr debugfs directory [ 83.806591][ T5598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.855240][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.863097][ T5598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.886282][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.891050][ T5598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.917544][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.951150][ T5598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.990010][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.090588][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.136704][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.150003][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.185784][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.201610][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.226648][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.254519][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.290747][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.414394][ T5596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.450392][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.460748][ T5596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.487300][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.519069][ T5596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.553139][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.580726][ T5596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.606236][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.745186][ T5595] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.785697][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.801608][ T5595] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.835026][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.839158][ T5595] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.853625][ T5610] Bluetooth: hci2: command tx timeout [ 84.877407][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.906449][ T5595] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.936226][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.002327][ T5610] Bluetooth: hci3: command tx timeout [ 85.012321][ T5602] Bluetooth: hci1: command tx timeout [ 85.012420][ T5610] Bluetooth: hci4: command tx timeout [ 85.092839][ T5610] Bluetooth: hci0: command tx timeout [ 85.145224][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.159268][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.196778][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.201481][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.224857][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.235990][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.276622][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.288140][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.315521][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.388384][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.412688][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.457696][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.457920][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.518011][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.518097][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.570788][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.609001][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.638260][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.638401][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.688216][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.688354][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.750756][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.781690][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.798930][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.799005][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.860814][ T1748] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.866030][ T1748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.986050][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.064492][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.064693][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.070567][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.145190][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.145357][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.322965][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.387780][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.387884][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.469906][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.470106][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.925415][ T5610] Bluetooth: hci2: command tx timeout [ 86.963162][ T10] cfg80211: failed to load regulatory.db [ 87.082310][ T5610] Bluetooth: hci4: command tx timeout [ 87.082338][ T5610] Bluetooth: hci1: command tx timeout [ 87.082356][ T5610] Bluetooth: hci3: command tx timeout [ 87.162295][ T5602] Bluetooth: hci0: command tx timeout [ 87.207130][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.666033][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.731813][ T5598] veth0_vlan: entered promiscuous mode [ 87.881810][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.907703][ T5598] veth1_vlan: entered promiscuous mode [ 88.172512][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.177266][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.200380][ T5599] veth0_vlan: entered promiscuous mode [ 88.208836][ T5598] veth0_macvtap: entered promiscuous mode [ 88.260513][ T5598] veth1_macvtap: entered promiscuous mode [ 88.287952][ T5599] veth1_vlan: entered promiscuous mode [ 88.351947][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.397758][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.494817][ T5595] veth0_vlan: entered promiscuous mode [ 88.497745][ T5597] veth0_vlan: entered promiscuous mode [ 88.500947][ T5599] veth0_macvtap: entered promiscuous mode [ 88.508500][ T5596] veth0_vlan: entered promiscuous mode [ 88.588341][ T5599] veth1_macvtap: entered promiscuous mode [ 88.648692][ T5595] veth1_vlan: entered promiscuous mode [ 88.671692][ T5597] veth1_vlan: entered promiscuous mode [ 88.731879][ T5596] veth1_vlan: entered promiscuous mode [ 88.860006][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.925164][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.040109][ T5596] veth0_macvtap: entered promiscuous mode [ 89.114300][ T5597] veth0_macvtap: entered promiscuous mode [ 89.121037][ T5595] veth0_macvtap: entered promiscuous mode [ 89.131790][ T5596] veth1_macvtap: entered promiscuous mode [ 89.159262][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.159285][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.235133][ T5597] veth1_macvtap: entered promiscuous mode [ 89.261810][ T5595] veth1_macvtap: entered promiscuous mode [ 89.543341][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.567214][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.567235][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.645922][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.649394][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.663576][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.708055][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.711554][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.732453][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.732472][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.045308][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.045326][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.379231][ T144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.426693][ T1748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.426711][ T1748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.493860][ T1187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.574025][ T4325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.574067][ T4325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.574109][ T4325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.574136][ T4325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.574160][ T4325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.574185][ T4325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.574220][ T4325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.574246][ T4325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.574269][ T4325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.574293][ T4325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.574318][ T4325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.574345][ T4325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.574371][ T4325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.574400][ T4325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.574429][ T4325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.579308][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.579327][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.760646][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.760666][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.855615][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.855643][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.901431][ T36] audit: type=1800 audit(1785857008.207:2): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1" name="attr_allow_any_host" dev="configfs" ino=7879 res=0 errno=0 [ 91.955278][ T5800] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 91.955317][ T5800] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 91.955355][ T5800] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 91.993391][ T4325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.031552][ T5800] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 92.063083][ T5800] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 92.063360][ T5801] nvmet: adding nsid 1 to subsystem testnqn [ 92.118362][ T36] audit: type=1800 audit(1785857008.467:3): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1" name="addr_trtype" dev="configfs" ino=8468 res=0 errno=0 [ 92.126839][ T36] audit: type=1800 audit(1785857008.467:4): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1" name="addr_adrfam" dev="configfs" ino=8469 res=0 errno=0 [ 92.181251][ T36] audit: type=1800 audit(1785857008.527:5): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1" name="addr_traddr" dev="configfs" ino=8470 res=0 errno=0 [ 92.196211][ T36] audit: type=1800 audit(1785857008.547:6): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1" name="addr_trsvcid" dev="configfs" ino=7956 res=0 errno=0 [ 92.241611][ T5799] nvmet_rdma: binding CM ID to 172.20.20.20:4420 failed (-99) [ 92.459854][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.459872][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.540471][ T4325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.540654][ T4325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.710413][ T5805] kAFS: bad VL server IP address [ 92.878434][ T5799] nvme nvme0: rdma connection establishment failed (-104) [ 93.436704][ T5807] kAFS: unable to lookup cell 'syz0' [ 93.575472][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.575491][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.230324][ T5700] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.627507][ T5700] usb 4-1: Using ep0 maxpacket: 16 [ 94.662333][ T5584] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.715423][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.715457][ T5700] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.715497][ T5700] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 94.715519][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.862848][ T5584] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 0.00 [ 94.862882][ T5584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.357241][ T5700] usb 4-1: config 0 descriptor?? [ 95.425816][ T5831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.972027][ T5584] i2c-tiny-usb 5-1:1.0: version 0.00 found at bus 005 address 002 [ 96.048293][ T5830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.387502][ T5700] corsair-psu 0003:1B1C:1C03.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.3-1/input0 [ 97.527159][ T5700] corsair-psu 0003:1B1C:1C03.0001: unable to initialize device (-38) [ 98.010391][ T5700] corsair-psu 0003:1B1C:1C03.0001: probe with driver corsair-psu failed with error -38 [ 98.238127][ T5584] i2c i2c-1: failure reading functionality [ 98.318141][ T5848] lo speed is unknown, defaulting to 1000 [ 98.318808][ T5848] lo speed is unknown, defaulting to 1000 [ 98.449737][ T5833] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 98.493501][ T5848] lo speed is unknown, defaulting to 1000 [ 98.566304][ T5700] usb 4-1: USB disconnect, device number 2 [ 98.586573][ T5848] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 98.586614][ T5848] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 98.586657][ T5848] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 98.860066][ T5584] i2c i2c-1: connected i2c-tiny-usb device [ 99.014867][ T5848] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 99.262011][ T5584] usb 5-1: USB disconnect, device number 2 [ 99.749182][ T5848] lo speed is unknown, defaulting to 1000 [ 99.807446][ T5848] lo speed is unknown, defaulting to 1000 [ 99.840894][ T5848] lo speed is unknown, defaulting to 1000 [ 100.269396][ T5848] lo speed is unknown, defaulting to 1000 [ 100.273856][ T5848] lo speed is unknown, defaulting to 1000 [ 100.295337][ T5823] infiniband syz1: set active [ 100.295359][ T5823] infiniband syz1: added veth0 [ 100.372313][ T5700] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 100.622606][ T5584] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.674103][ T5823] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 100.674137][ T5823] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 100.674169][ T5823] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 100.775430][ T5584] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 100.794641][ T5584] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 100.794673][ T5584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.794691][ T5584] usb 5-1: Product: syz [ 100.794705][ T5584] usb 5-1: Manufacturer: syz [ 100.794719][ T5584] usb 5-1: SerialNumber: syz [ 101.027292][ T5864] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 101.126738][ T5823] RDS/IB: syz1: added [ 101.183285][ T5584] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 101.199326][ T5823] smc: adding ib device syz1 with port count 1 [ 101.199619][ T5823] smc: ib device syz1 port 1 has no pnetid [ 101.430994][ T5584] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 101.873373][ T5725] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.916668][ T5700] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 101.916705][ T5700] usb 4-1: can't read configurations, error -71 [ 102.106741][ T5725] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 102.106782][ T5725] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 102.106806][ T5725] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 102.147070][ T5725] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 102.147097][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.147114][ T5725] usb 1-1: Product: syz [ 102.147134][ T5725] usb 1-1: Manufacturer: syz [ 102.147147][ T5725] usb 1-1: SerialNumber: syz [ 102.242585][ T5885] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 102.242705][ T5885] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 102.242801][ T5885] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 102.305703][ T48] usb 5-1: USB disconnect, device number 3 [ 103.764887][ T32] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 103.838721][ T5725] redrat3 1-1:1.0: Problem fetching firmware ID [ 104.506937][ T5725] redrat3 1-1:1.0: Failed to read timeout from hardware [ 104.773112][ T5725] rc_core: IR keymap rc-hauppauge not found [ 104.773133][ T5725] Registered IR keymap rc-empty [ 104.831536][ T5725] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0 [ 104.931526][ T5725] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0/input14 [ 105.169802][ T5725] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 105.171478][ T5725] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 105.171529][ T5725] redrat3 1-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 105.264215][ T48] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.326328][ T5725] redrat3 1-1:1.0: probe with driver redrat3 failed with error -5 [ 105.409479][ T5700] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.441803][ T48] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 1.01 [ 105.441832][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.474686][ T5725] usb 1-1: USB disconnect, device number 2 [ 105.530206][ T4963] ================================================================== [ 105.530222][ T4963] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0 [ 105.530259][ T4963] Read of size 1 at addr ffff888011ad0748 by task udevd/4963 [ 105.530273][ T4963] [ 105.530295][ T4963] CPU: 0 UID: 0 PID: 4963 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.530317][ T4963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.530334][ T4963] Call Trace: [ 105.530340][ T4963] [ 105.530347][ T4963] dump_stack_lvl+0xe8/0x150 [ 105.530374][ T4963] print_address_description+0x55/0x1e0 [ 105.530397][ T4963] ? string+0x216/0x2d0 [ 105.530410][ T4963] print_report+0x58/0x70 [ 105.530431][ T4963] kasan_report+0x117/0x150 [ 105.530453][ T4963] ? string+0x216/0x2d0 [ 105.530473][ T4963] string+0x216/0x2d0 [ 105.530489][ T4963] vsnprintf+0x74a/0xef0 [ 105.530508][ T4963] add_uevent_var+0x1ce/0x460 [ 105.530526][ T4963] ? __pfx_add_uevent_var+0x10/0x10 [ 105.530540][ T4963] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 105.530557][ T4963] ? mutex_lock_nested+0x152/0x1d0 [ 105.530569][ T4963] ? rc_dev_uevent+0x34/0x1a0 [ 105.530583][ T4963] rc_dev_uevent+0x164/0x1a0 [ 105.530596][ T4963] dev_uevent+0x53a/0x870 [ 105.530613][ T4963] ? __pfx_dev_uevent+0x10/0x10 [ 105.530625][ T4963] ? __kasan_kmalloc+0x93/0xb0 [ 105.530640][ T4963] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 105.530655][ T4963] ? sysfs_file_kobj+0x1a/0x230 [ 105.530675][ T4963] ? uevent_show+0x15c/0x310 [ 105.530689][ T4963] uevent_show+0x1a0/0x310 [ 105.530705][ T4963] dev_attr_show+0x58/0xc0 [ 105.530718][ T4963] ? __pfx_dev_attr_show+0x10/0x10 [ 105.530731][ T4963] sysfs_kf_seq_show+0x331/0x490 [ 105.530747][ T4963] seq_read_iter+0x464/0xcb0 [ 105.530776][ T4963] vfs_read+0x59e/0xa90 [ 105.530798][ T4963] ? __pfx_vfs_read+0x10/0x10 [ 105.530817][ T4963] ? do_sys_openat2+0x14e/0x200 [ 105.530835][ T4963] ksys_read+0x156/0x270 [ 105.530850][ T4963] ? __pfx_ksys_read+0x10/0x10 [ 105.530867][ T4963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.530881][ T4963] do_syscall_64+0x174/0x580 [ 105.530900][ T4963] ? trace_irq_disable+0x3b/0x140 [ 105.530913][ T4963] ? clear_bhb_loop+0x40/0x90 [ 105.530941][ T4963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.530955][ T4963] RIP: 0033:0x7f41d607b407 [ 105.530978][ T4963] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 105.530989][ T4963] RSP: 002b:00007ffd8d2cf1c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 105.531005][ T4963] RAX: ffffffffffffffda RBX: 00007f41d5f8d880 RCX: 00007f41d607b407 [ 105.531017][ T4963] RDX: 0000000000001000 RSI: 000055d6d74fb040 RDI: 000000000000000c [ 105.531028][ T4963] RBP: 00007f41d61c3ff0 R08: 0000000000000000 R09: 0000000000000000 [ 105.531037][ T4963] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 105.531046][ T4963] R13: 00007f41d61c3ea0 R14: 0000000000000000 R15: 000055d6d74ea0d0 [ 105.531062][ T4963] [ 105.531067][ T4963] [ 105.531070][ T4963] Allocated by task 5725: [ 105.531077][ T4963] kasan_save_track+0x3e/0x80 [ 105.531091][ T4963] __kasan_kmalloc+0x93/0xb0 [ 105.531103][ T4963] __kmalloc_cache_noprof+0x3d2/0x6b0 [ 105.531116][ T4963] redrat3_dev_probe+0x477/0x2570 [ 105.531133][ T4963] usb_probe_interface+0x653/0xc60 [ 105.531149][ T4963] really_probe+0x254/0xae0 [ 105.531166][ T4963] __driver_probe_device+0x1e8/0x360 [ 105.531183][ T4963] driver_probe_device+0x4f/0x240 [ 105.531200][ T4963] __device_attach_driver+0x270/0x410 [ 105.531216][ T4963] bus_for_each_drv+0x25b/0x2f0 [ 105.531230][ T4963] __device_attach+0x2c7/0x450 [ 105.531246][ T4963] device_initial_probe+0xa1/0xd0 [ 105.531262][ T4963] bus_probe_device+0x12d/0x220 [ 105.531274][ T4963] device_add+0x7d7/0xb80 [ 105.531287][ T4963] usb_set_configuration+0x1ad8/0x2180 [ 105.531300][ T4963] usb_generic_driver_probe+0x8d/0x150 [ 105.531312][ T4963] usb_probe_device+0x1c3/0x3b0 [ 105.531326][ T4963] really_probe+0x254/0xae0 [ 105.531341][ T4963] __driver_probe_device+0x1e8/0x360 [ 105.531356][ T4963] driver_probe_device+0x4f/0x240 [ 105.531372][ T4963] __device_attach_driver+0x270/0x410 [ 105.531388][ T4963] bus_for_each_drv+0x25b/0x2f0 [ 105.531400][ T4963] __device_attach+0x2c7/0x450 [ 105.531415][ T4963] device_initial_probe+0xa1/0xd0 [ 105.531433][ T4963] bus_probe_device+0x12d/0x220 [ 105.531445][ T4963] device_add+0x7d7/0xb80 [ 105.531458][ T4963] usb_new_device+0x98d/0x1610 [ 105.531470][ T4963] hub_event+0x28cf/0x4cf0 [ 105.531481][ T4963] process_scheduled_works+0xa8e/0x14e0 [ 105.531497][ T4963] worker_thread+0xa47/0xfb0 [ 105.531510][ T4963] kthread+0x388/0x470 [ 105.531527][ T4963] ret_from_fork+0x514/0xb70 [ 105.531546][ T4963] ret_from_fork_asm+0x1a/0x30 [ 105.531558][ T4963] [ 105.531561][ T4963] Freed by task 5725: [ 105.531568][ T4963] kasan_save_track+0x3e/0x80 [ 105.531581][ T4963] kasan_save_free_info+0x40/0x50 [ 105.531598][ T4963] __kasan_slab_free+0x5c/0x80 [ 105.531610][ T4963] kfree+0x1c5/0x6c0 [ 105.531621][ T4963] redrat3_dev_probe+0x1bf4/0x2570 [ 105.531637][ T4963] usb_probe_interface+0x653/0xc60 [ 105.531652][ T4963] really_probe+0x254/0xae0 [ 105.531668][ T4963] __driver_probe_device+0x1e8/0x360 [ 105.531687][ T4963] driver_probe_device+0x4f/0x240 [ 105.531705][ T4963] __device_attach_driver+0x270/0x410 [ 105.531720][ T4963] bus_for_each_drv+0x25b/0x2f0 [ 105.531731][ T4963] __device_attach+0x2c7/0x450 [ 105.531746][ T4963] device_initial_probe+0xa1/0xd0 [ 105.531761][ T4963] bus_probe_device+0x12d/0x220 [ 105.531772][ T4963] device_add+0x7d7/0xb80 [ 105.531785][ T4963] usb_set_configuration+0x1ad8/0x2180 [ 105.531798][ T4963] usb_generic_driver_probe+0x8d/0x150 [ 105.531811][ T4963] usb_probe_device+0x1c3/0x3b0 [ 105.531825][ T4963] really_probe+0x254/0xae0 [ 105.531849][ T4963] __driver_probe_device+0x1e8/0x360 [ 105.531866][ T4963] driver_probe_device+0x4f/0x240 [ 105.531882][ T4963] __device_attach_driver+0x270/0x410 [ 105.531899][ T4963] bus_for_each_drv+0x25b/0x2f0 [ 105.531912][ T4963] __device_attach+0x2c7/0x450 [ 105.531939][ T4963] device_initial_probe+0xa1/0xd0 [ 105.531953][ T4963] bus_probe_device+0x12d/0x220 [ 105.531965][ T4963] device_add+0x7d7/0xb80 [ 105.531977][ T4963] usb_new_device+0x98d/0x1610 [ 105.531987][ T4963] hub_event+0x28cf/0x4cf0 [ 105.532000][ T4963] process_scheduled_works+0xa8e/0x14e0 [ 105.532014][ T4963] worker_thread+0xa47/0xfb0 [ 105.532027][ T4963] kthread+0x388/0x470 [ 105.532044][ T4963] ret_from_fork+0x514/0xb70 [ 105.532062][ T4963] ret_from_fork_asm+0x1a/0x30 [ 105.532074][ T4963] [ 105.532077][ T4963] The buggy address belongs to the object at ffff888011ad0000 [ 105.532077][ T4963] which belongs to the cache kmalloc-2k of size 2048 [ 105.532090][ T4963] The buggy address is located 1864 bytes inside of [ 105.532090][ T4963] freed 2048-byte region [ffff888011ad0000, ffff888011ad0800) [ 105.532103][ T4963] [ 105.532107][ T4963] The buggy address belongs to the physical page: [ 105.532126][ T4963] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888011ad5000 pfn:0x11ad0 [ 105.532144][ T4963] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 105.532156][ T4963] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 105.532169][ T4963] page_type: f5(slab) [ 105.532182][ T4963] raw: 0080000000000240 ffff88813ffb3000 ffffea0000a9da10 ffffea0001875410 [ 105.532193][ T4963] raw: ffff888011ad5000 0000000800080007 00000000f5000000 0000000000000000 [ 105.532204][ T4963] head: 0080000000000240 ffff88813ffb3000 ffffea0000a9da10 ffffea0001875410 [ 105.532215][ T4963] head: ffff888011ad5000 0000000800080007 00000000f5000000 0000000000000000 [ 105.532227][ T4963] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 105.532255][ T4963] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 105.532262][ T4963] page dumped because: kasan: bad access detected [ 105.532276][ T4963] page_owner tracks the page as allocated [ 105.532280][ T4963] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5599, tgid 5599 (syz-executor), ts 83472837862, free_ts 54334128835 [ 105.532306][ T4963] post_alloc_hook+0x1f9/0x250 [ 105.532326][ T4963] get_page_from_freelist+0x262a/0x26a0 [ 105.532342][ T4963] __alloc_frozen_pages_noprof+0x18d/0x380 [ 105.532355][ T4963] allocate_slab+0x79/0x5e0 [ 105.532371][ T4963] refill_objects+0x2d8/0x350 [ 105.532386][ T4963] __pcs_replace_empty_main+0x330/0x690 [ 105.532404][ T4963] __kmalloc_node_track_caller_noprof+0x62d/0x7c0 [ 105.532419][ T4963] pskb_expand_head+0x22c/0x13a0 [ 105.532440][ T4963] netlink_trim+0x1b3/0x2c0 [ 105.532453][ T4963] netlink_broadcast_filtered+0x6d/0xea0 [ 105.532466][ T4963] nlmsg_notify+0xe3/0x1a0 [ 105.532479][ T4963] __dev_notify_flags+0xf2/0x310 [ 105.532494][ T4963] netif_change_flags+0xde/0x1b0 [ 105.532506][ T4963] dev_change_flags+0x128/0x260 [ 105.532518][ T4963] ipvlan_set_port_mode+0x145/0x3e0 [ 105.532533][ T4963] ipvlan_link_new+0x727/0xa90 [ 105.532545][ T4963] page last free pid 5311 tgid 5311 stack trace: [ 105.532553][ T4963] __free_frozen_pages+0x10e7/0x11c0 [ 105.532566][ T4963] __slab_free+0x252/0x2a0 [ 105.532577][ T4963] qlist_free_all+0x99/0x100 [ 105.532590][ T4963] kasan_quarantine_reduce+0x148/0x160 [ 105.532601][ T4963] __kasan_slab_alloc+0x22/0x80 [ 105.532614][ T4963] __kmalloc_noprof+0x3b6/0x780 [ 105.532627][ T4963] tomoyo_realpath_from_path+0xef/0x640 [ 105.532645][ T4963] tomoyo_path_perm+0x283/0x560 [ 105.532659][ T4963] security_inode_getattr+0x12b/0x310 [ 105.532672][ T4963] vfs_getattr+0x23/0x70 [ 105.532689][ T4963] vfs_statx_path+0x2b/0x230 [ 105.532701][ T4963] vfs_statx+0x12e/0x200 [ 105.532710][ T4963] vfs_fstatat+0x11b/0x170 [ 105.532725][ T4963] __x64_sys_newfstatat+0x151/0x200 [ 105.532736][ T4963] do_syscall_64+0x174/0x580 [ 105.532753][ T4963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.532766][ T4963] [ 105.532769][ T4963] Memory state around the buggy address: [ 105.532777][ T4963] ffff888011ad0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.532786][ T4963] ffff888011ad0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.532794][ T4963] >ffff888011ad0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.532801][ T4963] ^ [ 105.532808][ T4963] ffff888011ad0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.532816][ T4963] ffff888011ad0800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 105.532822][ T4963] ================================================================== [ 105.622336][ T4963] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 105.622357][ T4963] CPU: 1 UID: 0 PID: 4963 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.622380][ T4963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.622391][ T4963] Call Trace: [ 105.622398][ T4963] [ 105.622406][ T4963] vpanic+0x56c/0xa60 [ 105.622430][ T4963] ? __pfx_vpanic+0x10/0x10 [ 105.622447][ T4963] ? __pfx___schedule+0x10/0x10 [ 105.622472][ T4963] panic+0xc5/0xd0 [ 105.622487][ T4963] ? __pfx_panic+0x10/0x10 [ 105.622503][ T4963] ? preempt_schedule_thunk+0x16/0x40 [ 105.622528][ T4963] ? string+0x216/0x2d0 [ 105.622545][ T4963] check_panic_on_warn+0x89/0xb0 [ 105.622562][ T4963] ? string+0x216/0x2d0 [ 105.622578][ T4963] end_report+0x73/0x170 [ 105.622598][ T4963] ? string+0x216/0x2d0 [ 105.622614][ T4963] kasan_report+0x128/0x150 [ 105.622633][ T4963] ? string+0x216/0x2d0 [ 105.622653][ T4963] string+0x216/0x2d0 [ 105.622672][ T4963] vsnprintf+0x74a/0xef0 [ 105.622695][ T4963] add_uevent_var+0x1ce/0x460 [ 105.622719][ T4963] ? __pfx_add_uevent_var+0x10/0x10 [ 105.622738][ T4963] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 105.622760][ T4963] ? mutex_lock_nested+0x152/0x1d0 [ 105.622784][ T4963] ? rc_dev_uevent+0x34/0x1a0 [ 105.622802][ T4963] rc_dev_uevent+0x164/0x1a0 [ 105.622819][ T4963] dev_uevent+0x53a/0x870 [ 105.622839][ T4963] ? __pfx_dev_uevent+0x10/0x10 [ 105.622856][ T4963] ? __kasan_kmalloc+0x93/0xb0 [ 105.622874][ T4963] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 105.622893][ T4963] ? sysfs_file_kobj+0x1a/0x230 [ 105.622917][ T4963] ? uevent_show+0x15c/0x310 [ 105.622936][ T4963] uevent_show+0x1a0/0x310 [ 105.622954][ T4963] dev_attr_show+0x58/0xc0 [ 105.622969][ T4963] ? __pfx_dev_attr_show+0x10/0x10 [ 105.622985][ T4963] sysfs_kf_seq_show+0x331/0x490 [ 105.623006][ T4963] seq_read_iter+0x464/0xcb0 [ 105.623034][ T4963] vfs_read+0x59e/0xa90 [ 105.623058][ T4963] ? __pfx_vfs_read+0x10/0x10 [ 105.623076][ T4963] ? do_sys_openat2+0x14e/0x200 [ 105.623102][ T4963] ksys_read+0x156/0x270 [ 105.623122][ T4963] ? __pfx_ksys_read+0x10/0x10 [ 105.623147][ T4963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.623163][ T4963] do_syscall_64+0x174/0x580 [ 105.623183][ T4963] ? trace_irq_disable+0x3b/0x140 [ 105.623198][ T4963] ? clear_bhb_loop+0x40/0x90 [ 105.623215][ T4963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.623230][ T4963] RIP: 0033:0x7f41d607b407 [ 105.623246][ T4963] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 105.623259][ T4963] RSP: 002b:00007ffd8d2cf1c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 105.623278][ T4963] RAX: ffffffffffffffda RBX: 00007f41d5f8d880 RCX: 00007f41d607b407 [ 105.623291][ T4963] RDX: 0000000000001000 RSI: 000055d6d74fb040 RDI: 000000000000000c [ 105.623303][ T4963] RBP: 00007f41d61c3ff0 R08: 0000000000000000 R09: 0000000000000000 [ 105.623313][ T4963] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 105.623323][ T4963] R13: 00007f41d61c3ea0 R14: 0000000000000000 R15: 000055d6d74ea0d0 [ 105.623343][ T4963] [ 105.623661][ T4963] Kernel Offset: disabled