last executing test programs: 6.35894944s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x400000b0}]}) 5.464454944s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r2 = openat(r1, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='0x1d6b\x00', 0x6) r4 = openat(r2, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0x0104\x00', 0x6) r5 = openat(r2, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) write(r5, &(0x7f0000000290)='1\x00', 0x1) mkdirat(r2, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) write(r0, &(0x7f0000000880)='5\x00', 0x2) 5.449885055s ago: executing program 1 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000b40)={@val={0x1c, 0xf5}, @val={0x2, 0x0, 0x4}, @mpls={[], @generic="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"}}, 0xfce) 5.204836935s ago: executing program 2 (id=3): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0xffff88801fc23290) 4.989436327s ago: executing program 0 (id=5): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x4}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0x4, @empty, 0x6}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff, 0x9}, 0x9c) 4.793316414s ago: executing program 2 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='dummy_udc.1\x00', 0xb) 4.672438613s ago: executing program 2 (id=7): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 3.756692148s ago: executing program 3 (id=4): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.651715005s ago: executing program 1 (id=16): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 3.294572019s ago: executing program 2 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000b40)={@val={0x1c, 0xf5}, @val={0x2, 0x0, 0x4}, @mpls={[], @generic="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"}}, 0xfce) 3.293792426s ago: executing program 1 (id=18): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 2.509329398s ago: executing program 3 (id=8): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) 2.507712567s ago: executing program 1 (id=20): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.174499105s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r2, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r3, &(0x7f0000000180)='1\x00', 0x1) 1.460230196s ago: executing program 1 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000640)={0x1, 0x0, [{0xc1, 0x0, 0x45}]}) 27.333836ms ago: executing program 3 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) write(r4, &(0x7f00000003f0)='0\n\x00', 0x2) close(r4) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x0, 0x2) write$midi(r6, &(0x7f0000000900)='12345678', 0x8) nanosleep(&(0x7f0000000700)={0x0, 0xbebc200}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000b00)='\n\x00', 0x1) close(r7) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r2 = openat(r1, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='0x1d6b\x00', 0x6) r4 = openat(r2, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0x0104\x00', 0x6) r5 = openat(r2, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) write(r5, &(0x7f0000000290)='1\x00', 0x1) mkdirat(r2, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) write(r0, &(0x7f0000000880)='5\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 73.097073][ T5582] cgroup: Unknown subsys name 'net' [ 73.336055][ T5582] cgroup: Unknown subsys name 'cpuset' [ 73.392053][ T5582] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.461144][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.257117][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.277623][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.279272][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.299198][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.304996][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.379114][ T4912] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.398635][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.399567][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.417785][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.419423][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.420605][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.424388][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.426712][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.427087][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.428197][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.549207][ T5599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.567724][ T5599] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.570778][ T5599] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.574827][ T5599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.576030][ T5599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.393058][ T5599] Bluetooth: hci0: command tx timeout [ 80.471469][ T4912] Bluetooth: hci1: command tx timeout [ 80.471714][ T5599] Bluetooth: hci2: command tx timeout [ 80.508008][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.508852][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.509021][ T5596] bridge_slave_0: entered allmulticast mode [ 80.512539][ T5596] bridge_slave_0: entered promiscuous mode [ 80.525376][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.526748][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.527021][ T5601] bridge_slave_0: entered allmulticast mode [ 80.530295][ T5601] bridge_slave_0: entered promiscuous mode [ 80.571762][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.572071][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.572450][ T5596] bridge_slave_1: entered allmulticast mode [ 80.574375][ T5596] bridge_slave_1: entered promiscuous mode [ 80.575903][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.576083][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.576231][ T5601] bridge_slave_1: entered allmulticast mode [ 80.578004][ T5601] bridge_slave_1: entered promiscuous mode [ 80.711464][ T5599] Bluetooth: hci3: command tx timeout [ 80.728230][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.728612][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.728885][ T5600] bridge_slave_0: entered allmulticast mode [ 80.731226][ T5600] bridge_slave_0: entered promiscuous mode [ 80.766152][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.770605][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.771119][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.771602][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.771861][ T5600] bridge_slave_1: entered allmulticast mode [ 80.775070][ T5600] bridge_slave_1: entered promiscuous mode [ 80.776497][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.776798][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.777393][ T5603] bridge_slave_0: entered allmulticast mode [ 80.783702][ T5603] bridge_slave_0: entered promiscuous mode [ 80.796443][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.826421][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.827165][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.827432][ T5603] bridge_slave_1: entered allmulticast mode [ 80.830840][ T5603] bridge_slave_1: entered promiscuous mode [ 80.842652][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.029352][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.070215][ T5596] team0: Port device team_slave_0 added [ 81.076381][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.088580][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.092041][ T5601] team0: Port device team_slave_0 added [ 81.098241][ T5596] team0: Port device team_slave_1 added [ 81.121793][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.124379][ T5601] team0: Port device team_slave_1 added [ 81.204630][ T5600] team0: Port device team_slave_0 added [ 81.239485][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.239501][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.239515][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.246415][ T5600] team0: Port device team_slave_1 added [ 81.250992][ T5603] team0: Port device team_slave_0 added [ 81.257228][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.257242][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.257266][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.261169][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.261183][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.261207][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.291403][ T5603] team0: Port device team_slave_1 added [ 81.293660][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.293674][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.293698][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.438603][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.438614][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.438627][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.479755][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.479772][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.479797][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.483440][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.483453][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.483477][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.529210][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.529225][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.529250][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.637874][ T5596] hsr_slave_0: entered promiscuous mode [ 81.640600][ T5596] hsr_slave_1: entered promiscuous mode [ 81.666699][ T5601] hsr_slave_0: entered promiscuous mode [ 81.669044][ T5601] hsr_slave_1: entered promiscuous mode [ 81.671046][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 81.671163][ T5601] Cannot create hsr debugfs directory [ 81.807656][ T5600] hsr_slave_0: entered promiscuous mode [ 81.810036][ T5600] hsr_slave_1: entered promiscuous mode [ 81.813909][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 81.813932][ T5600] Cannot create hsr debugfs directory [ 81.905121][ T5603] hsr_slave_0: entered promiscuous mode [ 81.907348][ T5603] hsr_slave_1: entered promiscuous mode [ 81.909769][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 81.909792][ T5603] Cannot create hsr debugfs directory [ 82.471570][ T5599] Bluetooth: hci0: command tx timeout [ 82.555371][ T5599] Bluetooth: hci2: command tx timeout [ 82.555405][ T5599] Bluetooth: hci1: command tx timeout [ 82.792272][ T4912] Bluetooth: hci3: command tx timeout [ 82.922362][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.966884][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.978826][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.016921][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.025828][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.058892][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.078322][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.117674][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.295339][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.327427][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.332816][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.367495][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.401580][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.460000][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.493796][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.533811][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.759902][ T5603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.799205][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.808195][ T5603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.837657][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.851025][ T5603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.897414][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.919474][ T5603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.959241][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.102377][ T5601] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.147222][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.161725][ T5601] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.207949][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.220722][ T5601] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.259182][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.271687][ T5601] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.326634][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.440842][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.535569][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.553015][ T4912] Bluetooth: hci0: command tx timeout [ 84.582494][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.583273][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.611129][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.632206][ T4912] Bluetooth: hci1: command tx timeout [ 84.632249][ T4912] Bluetooth: hci2: command tx timeout [ 84.690404][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.690558][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.776812][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.800038][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.836053][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.836220][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.871578][ T4912] Bluetooth: hci3: command tx timeout [ 84.928230][ T1445] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.928401][ T1445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.949609][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.011924][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.012146][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.139756][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.169360][ T1445] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.169477][ T1445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.415092][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.487665][ T1555] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.489067][ T1555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.545191][ T1555] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.545417][ T1555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.325740][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.631994][ T4912] Bluetooth: hci0: command tx timeout [ 86.713782][ T4912] Bluetooth: hci2: command tx timeout [ 86.721454][ T4912] Bluetooth: hci1: command tx timeout [ 86.755897][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.863305][ T198] cfg80211: failed to load regulatory.db [ 86.950913][ T5596] veth0_vlan: entered promiscuous mode [ 86.955302][ T4912] Bluetooth: hci3: command tx timeout [ 86.997853][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.058194][ T5596] veth1_vlan: entered promiscuous mode [ 87.145037][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.242359][ T5600] veth0_vlan: entered promiscuous mode [ 87.287897][ T5596] veth0_macvtap: entered promiscuous mode [ 87.314266][ T5603] veth0_vlan: entered promiscuous mode [ 87.323981][ T5600] veth1_vlan: entered promiscuous mode [ 87.327202][ T5596] veth1_macvtap: entered promiscuous mode [ 87.394579][ T5603] veth1_vlan: entered promiscuous mode [ 87.420925][ T5601] veth0_vlan: entered promiscuous mode [ 87.434725][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.469892][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.495783][ T5601] veth1_vlan: entered promiscuous mode [ 87.528363][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.541414][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.557943][ T5600] veth0_macvtap: entered promiscuous mode [ 87.560651][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.591180][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.613629][ T5600] veth1_macvtap: entered promiscuous mode [ 87.689175][ T5603] veth0_macvtap: entered promiscuous mode [ 87.768535][ T5603] veth1_macvtap: entered promiscuous mode [ 87.974177][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.025311][ T5601] veth0_macvtap: entered promiscuous mode [ 88.039971][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.073348][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.075497][ T5601] veth1_macvtap: entered promiscuous mode [ 88.135279][ T1555] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.138278][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.160282][ T1555] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.177854][ T1555] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.184713][ T1555] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.202306][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.202330][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.243997][ T1482] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.263857][ T1482] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.323464][ T1482] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.344632][ T1482] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.347895][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.479932][ T1482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.479952][ T1482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.508829][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.761906][ T1482] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.785900][ T1482] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.886803][ T1482] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.076525][ T1482] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.162306][ T1429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.162325][ T1429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.404828][ T5749] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.407271][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.407289][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.756295][ T1482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.756326][ T1482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.923343][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.923360][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.216363][ T1445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.216382][ T1445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.385061][ T5756] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 90.935222][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.935242][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.324028][ T5801] smpboot: CPU 1 is now offline [ 95.333569][ T5802] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 95.373539][ T0] Disabled fast string operations [ 95.373627][ T0] ------------[ cut here ]------------ [ 95.373633][ T0] alternatives_patched [ 95.373649][ T0] WARNING: arch/x86/kernel/cpu/cpuid-deps.c:127 at do_clear_cpu_cap+0x416/0x450, CPU#1: swapper/1/0 [ 95.373688][ T0] Modules linked in: [ 95.373718][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S syzkaller #0 PREEMPT_{RT,(full)} [ 95.373738][ T0] Tainted: [S]=CPU_OUT_OF_SPEC [ 95.373744][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.373756][ T0] RIP: 0010:do_clear_cpu_cap+0x416/0x450 [ 95.373785][ T0] Code: 00 00 00 75 2d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f6 90 56 00 90 0f 0b 90 eb 94 e8 eb 90 56 00 90 <0f> 0b 90 e9 06 fd ff ff e8 3d 10 e1 09 48 c7 c1 a8 af d0 8f 80 e1 [ 95.373798][ T0] RSP: 0000:ffffc900001e7ba0 EFLAGS: 00010093 [ 95.373812][ T0] RAX: ffffffff816f12c5 RBX: dffffc0000000001 RCX: ffff88801e285dc0 [ 95.373824][ T0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.373832][ T0] RBP: ffffc900001e7cd8 R08: 0000000000000000 R09: 0000000000000000 [ 95.373842][ T0] R10: dffffc0000000000 R11: ffffed10170e4903 R12: 0000000000000070 [ 95.373853][ T0] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000070 [ 95.373864][ T0] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 95.373877][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.373888][ T0] CR2: 0000000000000000 CR3: 000000000e1b0000 CR4: 00000000003506b0 [ 95.373900][ T0] Call Trace: [ 95.373907][ T0] [ 95.373918][ T0] ? _printk+0xdd/0x130 [ 95.373939][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 95.373966][ T0] ? __pfx__printk+0x10/0x10 [ 95.373985][ T0] ? cpu_parse_topology+0x284/0x4a0 [ 95.374001][ T0] ? __lock_acquire+0x6df/0x2e40 [ 95.374020][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 95.374043][ T0] early_init_intel+0xbb9/0xf50 [ 95.374069][ T0] init_intel+0x28/0x780 [ 95.374089][ T0] identify_cpu+0xc7a/0x3660 [ 95.374136][ T0] identify_secondary_cpu+0xaa/0x160 [ 95.374159][ T0] ap_starting+0x9c/0x150 [ 95.374180][ T0] ? __pfx_ap_starting+0x10/0x10 [ 95.374200][ T0] ? slow_virt_to_phys+0x197/0x230 [ 95.374227][ T0] start_secondary+0x66/0x110 [ 95.374246][ T0] common_startup_64+0x13e/0x157 [ 95.374275][ T0] [ 95.374285][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.374299][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S syzkaller #0 PREEMPT_{RT,(full)} [ 95.374321][ T0] Tainted: [S]=CPU_OUT_OF_SPEC [ 95.374327][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.374337][ T0] Call Trace: [ 95.374344][ T0] [ 95.374350][ T0] vpanic+0x56c/0xa60 [ 95.374369][ T0] ? __pfx__printk+0x10/0x10 [ 95.374390][ T0] ? __pfx_vpanic+0x10/0x10 [ 95.374406][ T0] ? is_bpf_text_address+0x292/0x2b0 [ 95.374428][ T0] ? is_bpf_text_address+0x26/0x2b0 [ 95.374455][ T0] panic+0xc5/0xd0 [ 95.374472][ T0] ? __pfx_panic+0x10/0x10 [ 95.374495][ T0] ? common_startup_64+0x13e/0x157 [ 95.374518][ T0] __warn+0x315/0x4c0 [ 95.374534][ T0] ? do_clear_cpu_cap+0x416/0x450 [ 95.374563][ T0] ? do_clear_cpu_cap+0x416/0x450 [ 95.374591][ T0] __report_bug+0x276/0x570 [ 95.374612][ T0] ? do_clear_cpu_cap+0x416/0x450 [ 95.374639][ T0] ? __pfx___report_bug+0x10/0x10 [ 95.374661][ T0] ? __pfx_vprintk_store+0x10/0x10 [ 95.374690][ T0] ? do_clear_cpu_cap+0x416/0x450 [ 95.374716][ T0] report_bug+0x16a/0x220 [ 95.374735][ T0] ? do_clear_cpu_cap+0x416/0x450 [ 95.374761][ T0] ? do_clear_cpu_cap+0x418/0x450 [ 95.374787][ T0] handle_bug+0x9c/0x200 [ 95.374810][ T0] exc_invalid_op+0x1a/0x50 [ 95.374831][ T0] asm_exc_invalid_op+0x1a/0x20 [ 95.374850][ T0] RIP: 0010:do_clear_cpu_cap+0x416/0x450 [ 95.374880][ T0] Code: 00 00 00 75 2d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f6 90 56 00 90 0f 0b 90 eb 94 e8 eb 90 56 00 90 <0f> 0b 90 e9 06 fd ff ff e8 3d 10 e1 09 48 c7 c1 a8 af d0 8f 80 e1 [ 95.374895][ T0] RSP: 0000:ffffc900001e7ba0 EFLAGS: 00010093 [ 95.374911][ T0] RAX: ffffffff816f12c5 RBX: dffffc0000000001 RCX: ffff88801e285dc0 [ 95.374926][ T0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.374937][ T0] RBP: ffffc900001e7cd8 R08: 0000000000000000 R09: 0000000000000000 [ 95.374949][ T0] R10: dffffc0000000000 R11: ffffed10170e4903 R12: 0000000000000070 [ 95.374962][ T0] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000070 [ 95.374979][ T0] ? do_clear_cpu_cap+0x415/0x450 [ 95.375016][ T0] ? _printk+0xdd/0x130 [ 95.375037][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 95.375068][ T0] ? __pfx__printk+0x10/0x10 [ 95.375100][ T0] ? cpu_parse_topology+0x284/0x4a0 [ 95.375119][ T0] ? __lock_acquire+0x6df/0x2e40 [ 95.375138][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 95.375163][ T0] early_init_intel+0xbb9/0xf50 [ 95.375190][ T0] init_intel+0x28/0x780 [ 95.375210][ T0] identify_cpu+0xc7a/0x3660 [ 95.375245][ T0] identify_secondary_cpu+0xaa/0x160 [ 95.375270][ T0] ap_starting+0x9c/0x150 [ 95.375293][ T0] ? __pfx_ap_starting+0x10/0x10 [ 95.375314][ T0] ? slow_virt_to_phys+0x197/0x230 [ 95.375344][ T0] start_secondary+0x66/0x110 [ 95.375366][ T0] common_startup_64+0x13e/0x157 [ 95.375400][ T0] [ 96.487061][ T0] Shutting down cpus with NMI [ 96.487340][ T0] Kernel Offset: disabled