last executing test programs: 4.513674544s ago: executing program 0 (id=130): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0xc0010140, 0x0, 0xfffffffffffffff7}]}) 4.423829797s ago: executing program 0 (id=131): recvmmsg(0xffffffffffffffff, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/21, 0x15}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f00000001c0)=0xfd87, 0x4) 4.208481141s ago: executing program 2 (id=135): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 4.01734678s ago: executing program 1 (id=137): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = dup(0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) 3.511534817s ago: executing program 0 (id=138): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 3.343020746s ago: executing program 2 (id=139): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0xc0010140, 0x0, 0xfffffffffffffff7}]}) 3.302407128s ago: executing program 0 (id=140): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa90009", @ANYBLOB="868f54"], 0x0) 3.138117815s ago: executing program 2 (id=141): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 2.68405339s ago: executing program 1 (id=146): recvmmsg(0xffffffffffffffff, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/21, 0x15}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f00000001c0)=0xfd87, 0x4) 1.853463573s ago: executing program 0 (id=150): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000030902200001000000000904000000ef0101"], 0x0) 1.747250425s ago: executing program 1 (id=151): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) bind$alg(r0, 0x0, 0x0) 1.607925973s ago: executing program 1 (id=152): r0 = syz_open_dev$vim2m(0x0, 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x80000000, 0x4, 0x4, 0x0, 0x9}) 1.493394426s ago: executing program 1 (id=154): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) 1.476967601s ago: executing program 3 (id=155): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1], 0x1, 0x400}) 1.45829627s ago: executing program 2 (id=156): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x0, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) 1.374579739s ago: executing program 2 (id=157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.2595902s ago: executing program 3 (id=158): ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x1000) 1.198216889s ago: executing program 3 (id=159): geteuid() r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000240)='.', 0x1a000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 859.584923ms ago: executing program 3 (id=160): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x5) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 748.017005ms ago: executing program 3 (id=161): syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 191.932048ms ago: executing program 2 (id=162): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e1800, 0x56) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 150.468254ms ago: executing program 3 (id=163): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RSTATu(r0, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x4fffffd, {0x0, 0xffffffff, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) 139.068382ms ago: executing program 1 (id=164): r0 = syz_open_dev$vim2m(0x0, 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x80000000, 0x4, 0x4, 0x0, 0x9}) 0s ago: executing program 0 (id=165): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, 0x0}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 53.706520][ T5277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.734001][ T5277] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts. syzkaller login: [ 80.286493][ T5602] cgroup: Unknown subsys name 'net' [ 80.528127][ T5602] cgroup: Unknown subsys name 'cpuset' [ 80.583061][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.483343][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.832453][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.857978][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.871314][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.874074][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.875416][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.905087][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.930814][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.933251][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.937184][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.939049][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.060418][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.087237][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.090073][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.095130][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.097462][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.131030][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.150671][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.154232][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.157359][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.158975][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.935312][ T60] Bluetooth: hci0: command tx timeout [ 86.941315][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.949106][ T1246] cfg80211: failed to load regulatory.db [ 86.951019][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.951300][ T5615] bridge_slave_0: entered allmulticast mode [ 86.955259][ T5615] bridge_slave_0: entered promiscuous mode [ 87.002541][ T60] Bluetooth: hci1: command tx timeout [ 87.023331][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.023643][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.023871][ T5615] bridge_slave_1: entered allmulticast mode [ 87.026234][ T5615] bridge_slave_1: entered promiscuous mode [ 87.103806][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.104051][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.104236][ T5619] bridge_slave_0: entered allmulticast mode [ 87.105927][ T5619] bridge_slave_0: entered promiscuous mode [ 87.150769][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.150934][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.151095][ T5619] bridge_slave_1: entered allmulticast mode [ 87.153300][ T5619] bridge_slave_1: entered promiscuous mode [ 87.162397][ T60] Bluetooth: hci3: command tx timeout [ 87.188304][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.220057][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.242447][ T60] Bluetooth: hci2: command tx timeout [ 87.297803][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.327621][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.327873][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.328106][ T5616] bridge_slave_0: entered allmulticast mode [ 87.330088][ T5616] bridge_slave_0: entered promiscuous mode [ 87.339895][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.340450][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.340694][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.340963][ T5618] bridge_slave_0: entered allmulticast mode [ 87.344723][ T5618] bridge_slave_0: entered promiscuous mode [ 87.360821][ T5615] team0: Port device team_slave_0 added [ 87.406492][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.406660][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.406814][ T5616] bridge_slave_1: entered allmulticast mode [ 87.408491][ T5616] bridge_slave_1: entered promiscuous mode [ 87.409605][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.409757][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.409907][ T5618] bridge_slave_1: entered allmulticast mode [ 87.411700][ T5618] bridge_slave_1: entered promiscuous mode [ 87.418986][ T5615] team0: Port device team_slave_1 added [ 87.646456][ T5619] team0: Port device team_slave_0 added [ 87.690295][ T5619] team0: Port device team_slave_1 added [ 87.696566][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.708590][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.711550][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.711565][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.711587][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.777934][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.786221][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.788020][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.788033][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.788055][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.862169][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.862181][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.862195][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.911230][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.911241][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.911255][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.917797][ T5616] team0: Port device team_slave_0 added [ 87.923686][ T5618] team0: Port device team_slave_0 added [ 87.946665][ T5616] team0: Port device team_slave_1 added [ 87.951632][ T5618] team0: Port device team_slave_1 added [ 88.057077][ T5615] hsr_slave_0: entered promiscuous mode [ 88.058405][ T5615] hsr_slave_1: entered promiscuous mode [ 88.078693][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.078728][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.078741][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.080690][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.080702][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.080716][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.120845][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.120860][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.120883][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.128960][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.128977][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.129001][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.142855][ T5619] hsr_slave_0: entered promiscuous mode [ 88.144725][ T5619] hsr_slave_1: entered promiscuous mode [ 88.146374][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 88.146479][ T5619] Cannot create hsr debugfs directory [ 88.373651][ T5616] hsr_slave_0: entered promiscuous mode [ 88.374863][ T5616] hsr_slave_1: entered promiscuous mode [ 88.375757][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 88.375778][ T5616] Cannot create hsr debugfs directory [ 88.382225][ T5618] hsr_slave_0: entered promiscuous mode [ 88.385257][ T5618] hsr_slave_1: entered promiscuous mode [ 88.386742][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 88.386764][ T5618] Cannot create hsr debugfs directory [ 89.002513][ T60] Bluetooth: hci0: command tx timeout [ 89.095301][ T60] Bluetooth: hci1: command tx timeout [ 89.242892][ T60] Bluetooth: hci3: command tx timeout [ 89.261359][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.315223][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.325108][ T60] Bluetooth: hci2: command tx timeout [ 89.326175][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.368880][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.371603][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.411391][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.438103][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.480180][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.585062][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.630202][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.643770][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.687995][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.691669][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.711555][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.736827][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.768220][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.941749][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.977928][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.989843][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.016039][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.022053][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.059002][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.086041][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.133735][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.275502][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.306702][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.315196][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.345684][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.352032][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.388215][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.399873][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.425696][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.460725][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.574313][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.619407][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.639237][ T1547] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.639418][ T1547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.691998][ T1547] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.692134][ T1547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.786596][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.828838][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.828978][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.865883][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.887371][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.887508][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.041907][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.093546][ T60] Bluetooth: hci0: command tx timeout [ 91.125933][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.126173][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.166175][ T60] Bluetooth: hci1: command tx timeout [ 91.172592][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.232799][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.232948][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.322981][ T60] Bluetooth: hci3: command tx timeout [ 91.338922][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.400878][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.401044][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.412674][ T60] Bluetooth: hci2: command tx timeout [ 91.485163][ T1547] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.485319][ T1547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.182004][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.500786][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.665603][ T5615] veth0_vlan: entered promiscuous mode [ 92.736783][ T5615] veth1_vlan: entered promiscuous mode [ 92.858162][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.901879][ T5616] veth0_vlan: entered promiscuous mode [ 92.975265][ T5615] veth0_macvtap: entered promiscuous mode [ 92.984774][ T5616] veth1_vlan: entered promiscuous mode [ 92.989544][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.021019][ T5615] veth1_macvtap: entered promiscuous mode [ 93.112033][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.132200][ T5618] veth0_vlan: entered promiscuous mode [ 93.156873][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.165646][ T60] Bluetooth: hci0: command tx timeout [ 93.212247][ T5616] veth0_macvtap: entered promiscuous mode [ 93.242869][ T60] Bluetooth: hci1: command tx timeout [ 93.245109][ T5618] veth1_vlan: entered promiscuous mode [ 93.249034][ T3808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.277810][ T3808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.280571][ T5616] veth1_macvtap: entered promiscuous mode [ 93.300585][ T3808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.321759][ T3808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.340908][ T5619] veth0_vlan: entered promiscuous mode [ 93.402483][ T60] Bluetooth: hci3: command tx timeout [ 93.482752][ T60] Bluetooth: hci2: command tx timeout [ 93.526731][ T5619] veth1_vlan: entered promiscuous mode [ 93.556374][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.753911][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.786208][ T5618] veth0_macvtap: entered promiscuous mode [ 93.826136][ T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.831138][ T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.853187][ T150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.856127][ T5618] veth1_macvtap: entered promiscuous mode [ 93.859870][ T150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.891901][ T1472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.891919][ T1472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.182762][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.183973][ T5619] veth0_macvtap: entered promiscuous mode [ 94.255690][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.255708][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.301676][ T5619] veth1_macvtap: entered promiscuous mode [ 94.330725][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.548365][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.551005][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.574884][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.579789][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.592006][ T1472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.592024][ T1472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.624122][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.757745][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.164551][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.256468][ T5766] syz.2.3 (5766) used greatest stack depth: 17728 bytes left [ 95.301537][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.358810][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.367786][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.382119][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.382136][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.737856][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.737876][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.227751][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.227770][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.242159][ T5772] input: syz0 as /devices/virtual/input/input5 [ 96.624607][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.624627][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.789959][ T5624] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.985949][ T1472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.985965][ T1472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.048691][ T5624] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.064208][ T5624] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.084064][ T5624] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.084141][ T5624] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 97.084163][ T5624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.212139][ T5624] usb 3-1: config 0 descriptor?? [ 97.307626][ T5624] rndis_host 3-1:0.0: rndis: master #0/ffff88805f5a1000 slave #1/0000000000000000 [ 97.497209][ T5777] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 97.572196][ T5624] usb 3-1: USB disconnect, device number 2 [ 97.919467][ T5782] warning: `syz.1.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.292791][ T38] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.539013][ T38] usb 2-1: config 0 has an invalid descriptor of length 84, skipping remainder of the config [ 98.539078][ T38] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.539196][ T38] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 98.539219][ T38] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.641977][ T38] usb 2-1: config 0 descriptor?? [ 99.061454][ T38] usb 2-1: string descriptor 0 read error: -71 [ 99.114233][ T5797] 9p: Bad value for 'wfdno' [ 99.130278][ T38] smsusb:smsusb_probe: board id=8, interface number 0 [ 99.130367][ T38] smsusb:smsusb_probe: Device initialized with return code -19 [ 99.527326][ T38] usb 2-1: USB disconnect, device number 2 [ 99.952481][ T1011] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.041530][ T5796] syz.3.11 (5796) used greatest stack depth: 17512 bytes left [ 100.189383][ T1011] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.189409][ T1011] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.215184][ T1011] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.215214][ T1011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.215239][ T1011] usb 3-1: SerialNumber: syz [ 100.303015][ T38] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.531690][ T38] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.531715][ T38] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.581234][ T38] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.581278][ T38] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.581296][ T38] usb 2-1: SerialNumber: syz [ 100.746574][ T1011] usb 3-1: 0:2 : does not exist [ 101.033564][ T38] usb 2-1: 0:2 : does not exist [ 101.126362][ T1011] usb 3-1: USB disconnect, device number 3 [ 101.292579][ T5350] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.456453][ T38] usb 2-1: USB disconnect, device number 3 [ 101.539063][ T5350] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.569362][ T5350] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.595675][ T5350] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.595709][ T5350] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 101.595721][ T5350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.699664][ T5350] usb 1-1: config 0 descriptor?? [ 101.762835][ T5350] rndis_host 1-1:0.0: rndis: master #0/ffff888033f6c000 slave #1/0000000000000000 [ 102.178111][ T823] usb 1-1: USB disconnect, device number 2 [ 102.991866][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.563409][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 103.959645][ T5630] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.120470][ T5630] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.120509][ T5630] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.130098][ T5630] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.130126][ T5630] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.130144][ T5630] usb 1-1: SerialNumber: syz [ 104.428688][ T5630] usb 1-1: 0:2 : does not exist [ 104.892225][ T5630] usb 1-1: USB disconnect, device number 3 [ 105.106462][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.181709][ T5913] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.352428][ T5630] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.496556][ T5630] usb 3-1: device descriptor read/64, error -71 [ 107.532577][ T5715] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.710036][ T5715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.710062][ T5715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.711380][ T5715] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 107.711406][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 107.711426][ T5715] usb 1-1: SerialNumber: syz [ 107.813591][ T5630] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.948843][ T5630] usb 3-1: device descriptor read/64, error -71 [ 108.037409][ T5715] usb 1-1: 0:2 : does not exist [ 108.056848][ T5630] usb usb3-port1: attempt power cycle [ 108.196629][ T5715] usb 1-1: USB disconnect, device number 4 [ 108.330322][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.433391][ T5630] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.465126][ T5630] usb 3-1: device descriptor read/8, error -71 [ 108.702497][ T5630] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 108.723482][ T5630] usb 3-1: device descriptor read/8, error -71 [ 108.834945][ T5630] usb usb3-port1: unable to enumerate USB device [ 109.092473][ T5350] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.142482][ T1011] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.273108][ T5350] usb 2-1: Using ep0 maxpacket: 8 [ 109.277501][ T5350] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 109.277530][ T5350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.277547][ T5350] usb 2-1: Product: syz [ 109.277554][ T5350] usb 2-1: Manufacturer: syz [ 109.277561][ T5350] usb 2-1: SerialNumber: syz [ 109.281484][ T5350] usb 2-1: config 0 descriptor?? [ 109.331269][ T1011] usb 4-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 109.331314][ T1011] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.331348][ T1011] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 109.331367][ T1011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.397370][ T1011] usb 4-1: config 0 descriptor?? [ 109.441225][ T1011] smsusb:smsusb_probe: board id=8, interface number 0 [ 109.441313][ T1011] smsusb:smsusb_probe: Device initialized with return code -19 [ 109.519732][ T5350] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 109.570907][ T5350] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 109.590030][ T5350] usb 2-1: USB disconnect, device number 4 [ 109.679383][ T5722] usb 4-1: USB disconnect, device number 2 [ 110.762735][ T5722] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.912543][ T5722] usb 2-1: Using ep0 maxpacket: 8 [ 110.935435][ T5630] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.957420][ T5722] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 110.957447][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.957466][ T5722] usb 2-1: Product: syz [ 110.957479][ T5722] usb 2-1: Manufacturer: syz [ 110.957492][ T5722] usb 2-1: SerialNumber: syz [ 110.995699][ T5722] usb 2-1: config 0 descriptor?? [ 111.075696][ T5630] usb 3-1: device descriptor read/64, error -71 [ 111.199734][ T5722] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 111.200023][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 111.224567][ T5722] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 111.251417][ T5722] usb 2-1: USB disconnect, device number 5 [ 111.312641][ T5630] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 111.442487][ T5630] usb 3-1: device descriptor read/64, error -71 [ 111.552838][ T5630] usb usb3-port1: attempt power cycle [ 111.872524][ T5722] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.903887][ T5630] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 111.925996][ T5630] usb 3-1: device descriptor read/8, error -71 [ 112.039364][ T5722] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.039412][ T5722] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 112.039433][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.123096][ T5722] usb 1-1: config 0 descriptor?? [ 112.156893][ T5722] smsusb:smsusb_probe: board id=8, interface number 0 [ 112.156992][ T5722] smsusb:smsusb_probe: Device initialized with return code -19 [ 112.164049][ T5630] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 112.183099][ T5630] usb 3-1: device descriptor read/8, error -71 [ 112.292961][ T5630] usb usb3-port1: unable to enumerate USB device [ 112.363749][ T5722] usb 1-1: USB disconnect, device number 5 [ 114.042497][ T5722] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.216402][ T5722] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.216447][ T5722] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 114.216469][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.260660][ T5722] usb 2-1: config 0 descriptor?? [ 114.281521][ T5722] smsusb:smsusb_probe: board id=8, interface number 0 [ 114.281606][ T5722] smsusb:smsusb_probe: Device initialized with return code -19 [ 114.504458][ T5722] usb 2-1: USB disconnect, device number 6 [ 115.052615][ T1246] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.225876][ T1246] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.228960][ T1246] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.231138][ T1246] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.231192][ T1246] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 115.231215][ T1246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.290294][ T1246] usb 4-1: config 0 descriptor?? [ 115.303631][ T1246] rndis_host 4-1:0.0: rndis: master #0/ffff88803a9aa000 slave #1/0000000000000000 [ 115.529280][ T1246] usb 4-1: USB disconnect, device number 3 [ 116.502524][ T1246] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 116.677267][ T1246] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.677315][ T1246] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 116.677336][ T1246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.757865][ T1246] usb 1-1: config 0 descriptor?? [ 116.793206][ T823] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 116.798501][ T1246] smsusb:smsusb_probe: board id=8, interface number 0 [ 116.798587][ T1246] smsusb:smsusb_probe: Device initialized with return code -19 [ 116.953060][ T823] usb 3-1: Using ep0 maxpacket: 8 [ 116.960833][ T823] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 116.960863][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.960879][ T823] usb 3-1: Product: syz [ 116.960887][ T823] usb 3-1: Manufacturer: syz [ 116.960895][ T823] usb 3-1: SerialNumber: syz [ 116.999991][ T1011] usb 1-1: USB disconnect, device number 6 [ 117.030048][ T823] usb 3-1: config 0 descriptor?? [ 117.233817][ T823] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 117.436985][ T823] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 117.454951][ T823] usb 3-1: USB disconnect, device number 12 [ 118.182468][ T1246] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.356653][ T1246] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.359173][ T1246] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.365180][ T1246] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.365241][ T1246] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 118.365264][ T1246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.429554][ T1246] usb 1-1: config 0 descriptor?? [ 118.457266][ T1246] rndis_host 1-1:0.0: rndis: master #0/ffff88803208d000 slave #1/0000000000000000 [ 118.667754][ T823] usb 1-1: USB disconnect, device number 7 [ 119.343987][ T6166] ======================================================= [ 119.343987][ T6166] WARNING: The mand mount option has been deprecated and [ 119.343987][ T6166] and is ignored by this kernel. Remove the mand [ 119.343987][ T6166] option from the mount to silence this warning. [ 119.343987][ T6166] ======================================================= [ 119.378367][ T6166] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 119.519192][ T0] ------------[ cut here ]------------ [ 119.519203][ T0] rq->clock_update_flags < RQCF_ACT_SKIP [ 119.519213][ T0] WARNING: kernel/sched/sched.h:1792 at update_curr_idle+0x1cf/0x260, CPU#1: swapper/1/0 [ 119.519248][ T0] Modules linked in: [ 119.519277][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.519293][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.519308][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 119.519328][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 7a 88 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 38 [ 119.519339][ T0] RSP: 0018:ffffc900001e7bf8 EFLAGS: 00010097 [ 119.519350][ T0] RAX: 0000000000000000 RBX: ffff8880b873ba40 RCX: 0000000000000002 [ 119.519360][ T0] RDX: ffff88802ab35d00 RSI: ffffffff8dbddc3c RDI: ffffffff8bcc5e80 [ 119.519369][ T0] RBP: ffffc900001e7e30 R08: ffff8880b873c91f R09: 0000000000000000 [ 119.519379][ T0] R10: ffff8880b873c910 R11: ffffffff8199f020 R12: dffffc0000000000 [ 119.519388][ T0] R13: ffffffff8dc13a18 R14: ffff88801e295d00 R15: ffff8880b873c620 [ 119.519398][ T0] FS: 0000000000000000(0000) GS:ffff888125b6f000(0000) knlGS:0000000000000000 [ 119.519410][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.519419][ T0] CR2: 0000561b5d54f168 CR3: 0000000038e90000 CR4: 00000000003526f0 [ 119.519431][ T0] Call Trace: [ 119.519440][ T0] [ 119.519449][ T0] put_prev_task_idle+0xd/0x20 [ 119.519476][ T0] __schedule+0x3da0/0x5550 [ 119.519506][ T0] ? trace_irq_disable+0x3b/0x140 [ 119.519525][ T0] ? __pfx___schedule+0x10/0x10 [ 119.519538][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 119.519560][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 119.519581][ T0] schedule_idle+0x51/0x90 [ 119.519596][ T0] do_idle+0x4a6/0x540 [ 119.519616][ T0] ? __pfx_do_idle+0x10/0x10 [ 119.519637][ T0] ? do_idle+0xc/0x540 [ 119.519657][ T0] cpu_startup_entry+0x43/0x60 [ 119.519677][ T0] start_secondary+0x101/0x110 [ 119.519693][ T0] common_startup_64+0x13e/0x157 [ 119.519724][ T0] [ 119.519731][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.519741][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.519756][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.519763][ T0] Call Trace: [ 119.519768][ T0] [ 119.519773][ T0] vpanic+0x56c/0xa60 [ 119.519805][ T0] ? __pfx__printk+0x10/0x10 [ 119.519822][ T0] ? __pfx_vpanic+0x10/0x10 [ 119.519840][ T0] ? is_bpf_text_address+0x292/0x2b0 [ 119.519859][ T0] ? is_bpf_text_address+0x26/0x2b0 [ 119.519883][ T0] panic+0xc5/0xd0 [ 119.519897][ T0] ? __pfx_panic+0x10/0x10 [ 119.519914][ T0] ? common_startup_64+0x13e/0x157 [ 119.519931][ T0] __warn+0x315/0x4c0 [ 119.519944][ T0] ? update_curr_idle+0x1cf/0x260 [ 119.519959][ T0] ? update_curr_idle+0x1cf/0x260 [ 119.519973][ T0] __report_bug+0x339/0x540 [ 119.519988][ T0] ? update_curr_idle+0x1cf/0x260 [ 119.520002][ T0] ? __pfx___report_bug+0x10/0x10 [ 119.520018][ T0] ? pick_task_fair+0x21a/0x1410 [ 119.520034][ T0] ? update_curr_idle+0x1cf/0x260 [ 119.520048][ T0] report_bug+0x16a/0x220 [ 119.520060][ T0] ? update_curr_idle+0x1cf/0x260 [ 119.520073][ T0] ? update_curr_idle+0x1d1/0x260 [ 119.520086][ T0] handle_bug+0x9c/0x200 [ 119.520100][ T0] exc_invalid_op+0x1a/0x50 [ 119.520112][ T0] asm_exc_invalid_op+0x1a/0x20 [ 119.520122][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 119.520137][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 7a 88 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 38 [ 119.520144][ T0] RSP: 0018:ffffc900001e7bf8 EFLAGS: 00010097 [ 119.520152][ T0] RAX: 0000000000000000 RBX: ffff8880b873ba40 RCX: 0000000000000002 [ 119.520158][ T0] RDX: ffff88802ab35d00 RSI: ffffffff8dbddc3c RDI: ffffffff8bcc5e80 [ 119.520165][ T0] RBP: ffffc900001e7e30 R08: ffff8880b873c91f R09: 0000000000000000 [ 119.520172][ T0] R10: ffff8880b873c910 R11: ffffffff8199f020 R12: dffffc0000000000 [ 119.520179][ T0] R13: ffffffff8dc13a18 R14: ffff88801e295d00 R15: ffff8880b873c620 [ 119.520188][ T0] ? __pfx_put_prev_task_idle+0x10/0x10 [ 119.520206][ T0] ? update_curr_idle+0xab/0x260 [ 119.520223][ T0] put_prev_task_idle+0xd/0x20 [ 119.520236][ T0] __schedule+0x3da0/0x5550 [ 119.520256][ T0] ? trace_irq_disable+0x3b/0x140 [ 119.520269][ T0] ? __pfx___schedule+0x10/0x10 [ 119.520277][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 119.520292][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 119.520307][ T0] schedule_idle+0x51/0x90 [ 119.520317][ T0] do_idle+0x4a6/0x540 [ 119.520331][ T0] ? __pfx_do_idle+0x10/0x10 [ 119.520346][ T0] ? do_idle+0xc/0x540 [ 119.520360][ T0] cpu_startup_entry+0x43/0x60 [ 119.520373][ T0] start_secondary+0x101/0x110 [ 119.520384][ T0] common_startup_64+0x13e/0x157 [ 119.520405][ T0] [ 120.602616][ T0] Shutting down cpus with NMI [ 120.602803][ T0] Kernel Offset: disabled