last executing test programs: 4.714705055s ago: executing program 2 (id=341): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x26}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xd01, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.569816917s ago: executing program 2 (id=343): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c570820f", 0x7) syz_emit_vhci(0x0, 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) 4.401268265s ago: executing program 2 (id=346): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000340)=""/152, 0x98}], 0x2) 2.734744817s ago: executing program 2 (id=351): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0x2a, 0x2, 0x0) r0 = syz_usbip_server_init(0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x281}, {r0, 0x4005}], 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x74]}, 0x8) fsopen(&(0x7f00000000c0)='qnx4\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2c) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, 0x0) dup(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="000008000100000000003d0000002a6ad5fde1b6554242ac10fef9878574f7e568ff42b7b7151d6986161da58b840d7a6e0eb304946c4b948e98ec852cd40c1b51c39a1487d8b9912cf4e3091607d53f02f0954c89d08eec9bb780ff23d2f0e347d88d0edf4ca5d5c4f8b2ed6a9e836bccb2c65020578c56730534689dc1cbb21044dc8cd15b50f1ed31887ebf8de493e0364362eec95799088df4f44503e5010000007867d80f8fdd6bdc48cab8187e71a8ff8f05285679ca69809a7b7d04e80a81a9e75924162806c973348c57c81c5ba24fde98d8006dafb1e0a6096257ced6ef5ff20b62e6e5042b0ebd20a4a1d845b4b3ca9750aba8758bcf311ae2e25444a729ef407df2abaac0ce"], 0x10b) 1.34243181s ago: executing program 1 (id=364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xb0}}, 0x0) 1.209356697s ago: executing program 1 (id=366): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf25210000000c0005001f0000000000000009001f007068793102000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x64008000) 1.15588195s ago: executing program 1 (id=367): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0xfb0, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100}, @fda={0x66646185, 0x9, 0x1, 0x100027}}, &(0x7f0000000200)={0x38, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.089192707s ago: executing program 1 (id=368): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x6a0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) 1.013563057s ago: executing program 1 (id=369): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r0, &(0x7f00000024c0)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r0, r0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006840)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x8000000, @empty, 0x2}, 0x1c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) syz_usb_disconnect(0xffffffffffffffff) 972.635092ms ago: executing program 0 (id=370): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x1}) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)) 915.20332ms ago: executing program 0 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0049364, &(0x7f0000000180)) 862.754464ms ago: executing program 2 (id=373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800044000000041080007400000000508000640000000010500020000000000080003400004001f0900010073797a30000000000900020073"], 0x94}}, 0x0) 851.526966ms ago: executing program 3 (id=374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000706"], 0x1c}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r0, 0x0, 0x0, 0x20, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 769.014541ms ago: executing program 0 (id=375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xb0}}, 0x0) 630.008327ms ago: executing program 3 (id=376): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf25210000000c0005001f0000000000000009001f007068793102000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x64008000) 612.676477ms ago: executing program 0 (id=377): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x6a0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) 598.130744ms ago: executing program 2 (id=378): lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) write$cgroup_int(r0, 0x0, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x6558}, @val={0x3, 0x1, 0x0, 0x1000, 0x7, 0x3}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @broadcast, @remote}}, 0x42) socket$inet(0xa, 0x801, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x5}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r2, 0x7, 0x4}, &(0x7f0000000380)=0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 522.507417ms ago: executing program 3 (id=379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 515.363343ms ago: executing program 0 (id=380): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0xfb0, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100}, @fda={0x66646185, 0x9, 0x1, 0x100027}}, &(0x7f0000000200)={0x38, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 391.989946ms ago: executing program 0 (id=381): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0x2a, 0x2, 0x0) r0 = syz_usbip_server_init(0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x281}, {r0, 0x4005}], 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x74]}, 0x8) fsopen(&(0x7f00000000c0)='qnx4\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2c) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, 0x0) dup(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x10b) 248.655454ms ago: executing program 3 (id=382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001d2845baa00000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020100000002e00c116b61089e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x24044000}, 0x10) 108.183115ms ago: executing program 3 (id=383): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0049364, &(0x7f0000000180)) 17.319295ms ago: executing program 1 (id=384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000706"], 0x1c}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) recvmmsg(r0, 0x0, 0x0, 0x20, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 0s ago: executing program 3 (id=385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e657200000048000280080002400100008408000340"], 0xb0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. [ 73.057851][ T5597] cgroup: Unknown subsys name 'net' [ 73.299119][ T5597] cgroup: Unknown subsys name 'cpuset' [ 73.352731][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.045077][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.641634][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.659017][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.691336][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.709347][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.729880][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.731511][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.748420][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.754835][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.755969][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.758064][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.758851][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.759782][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.766219][ T4924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.788779][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.792682][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.793584][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.798807][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.811462][ T4924] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.900673][ T4924] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.911402][ T4924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.834549][ T5614] Bluetooth: hci0: command tx timeout [ 80.851340][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.851646][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.855632][ T5612] bridge_slave_0: entered allmulticast mode [ 80.859458][ T5612] bridge_slave_0: entered promiscuous mode [ 80.900807][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.900987][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.901133][ T5610] bridge_slave_0: entered allmulticast mode [ 80.905439][ T5610] bridge_slave_0: entered promiscuous mode [ 80.913565][ T4924] Bluetooth: hci1: command tx timeout [ 80.913806][ T5614] Bluetooth: hci2: command tx timeout [ 80.927094][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.927356][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.927624][ T5612] bridge_slave_1: entered allmulticast mode [ 80.933983][ T5612] bridge_slave_1: entered promiscuous mode [ 80.977630][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.977900][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.980960][ T5610] bridge_slave_1: entered allmulticast mode [ 80.984364][ T5610] bridge_slave_1: entered promiscuous mode [ 80.992030][ T5614] Bluetooth: hci3: command tx timeout [ 81.009167][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.009452][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.009676][ T5611] bridge_slave_0: entered allmulticast mode [ 81.013698][ T5611] bridge_slave_0: entered promiscuous mode [ 81.019477][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.019773][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.019998][ T5609] bridge_slave_0: entered allmulticast mode [ 81.024976][ T5609] bridge_slave_0: entered promiscuous mode [ 81.081395][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.081679][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.100078][ T5611] bridge_slave_1: entered allmulticast mode [ 81.102674][ T5611] bridge_slave_1: entered promiscuous mode [ 81.104326][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.104689][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.104922][ T5609] bridge_slave_1: entered allmulticast mode [ 81.108567][ T5609] bridge_slave_1: entered promiscuous mode [ 81.146669][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.189809][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.203426][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.240143][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.262128][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.267612][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.319122][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.334552][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.606651][ T5612] team0: Port device team_slave_0 added [ 81.653074][ T5610] team0: Port device team_slave_0 added [ 81.668976][ T5612] team0: Port device team_slave_1 added [ 81.769896][ T5610] team0: Port device team_slave_1 added [ 81.803622][ T5611] team0: Port device team_slave_0 added [ 81.819932][ T5609] team0: Port device team_slave_0 added [ 81.894688][ T5611] team0: Port device team_slave_1 added [ 81.898990][ T5609] team0: Port device team_slave_1 added [ 81.930538][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.930549][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.930563][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.980458][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.980468][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.980483][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.983107][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.983122][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.983146][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.038770][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.038787][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.038810][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.060548][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.060565][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.060589][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.064992][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.065008][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.065031][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.099195][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.099221][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.099246][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.104461][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.104476][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.104499][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.298508][ T5612] hsr_slave_0: entered promiscuous mode [ 82.299975][ T5612] hsr_slave_1: entered promiscuous mode [ 82.343102][ T5610] hsr_slave_0: entered promiscuous mode [ 82.344486][ T5610] hsr_slave_1: entered promiscuous mode [ 82.345650][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 82.345738][ T5610] Cannot create hsr debugfs directory [ 82.394103][ T5611] hsr_slave_0: entered promiscuous mode [ 82.395407][ T5611] hsr_slave_1: entered promiscuous mode [ 82.396319][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 82.396342][ T5611] Cannot create hsr debugfs directory [ 82.581302][ T5609] hsr_slave_0: entered promiscuous mode [ 82.583500][ T5609] hsr_slave_1: entered promiscuous mode [ 82.585552][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 82.585577][ T5609] Cannot create hsr debugfs directory [ 82.913801][ T5614] Bluetooth: hci0: command tx timeout [ 82.994903][ T4924] Bluetooth: hci1: command tx timeout [ 82.995176][ T5614] Bluetooth: hci2: command tx timeout [ 83.072145][ T5614] Bluetooth: hci3: command tx timeout [ 83.389823][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.450987][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.464600][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.489879][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.512859][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.548849][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.558374][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.588128][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.717757][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.757622][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.760220][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.799157][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.805350][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.837166][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.869632][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.905837][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.099133][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.131344][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.144483][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.188464][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.196576][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.251738][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.278401][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.317704][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.440048][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.478298][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.494347][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.536872][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.541183][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.560806][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.573686][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.615418][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.678183][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.800894][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.847239][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.864458][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.864632][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.947247][ T1421] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.947411][ T1421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.992061][ T5614] Bluetooth: hci0: command tx timeout [ 85.049804][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.082275][ T4924] Bluetooth: hci1: command tx timeout [ 85.082361][ T5614] Bluetooth: hci2: command tx timeout [ 85.134025][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.134177][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.154345][ T5614] Bluetooth: hci3: command tx timeout [ 85.178141][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.198386][ T1421] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.199259][ T1421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.315438][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.397175][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.397857][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.456141][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.489906][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.490128][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.685025][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.747137][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.747230][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.824959][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.825054][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.481674][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.878755][ T823] cfg80211: failed to load regulatory.db [ 86.966571][ T5612] veth0_vlan: entered promiscuous mode [ 87.009081][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.072495][ T5614] Bluetooth: hci0: command tx timeout [ 87.100323][ T5612] veth1_vlan: entered promiscuous mode [ 87.153661][ T5614] Bluetooth: hci2: command tx timeout [ 87.153693][ T5614] Bluetooth: hci1: command tx timeout [ 87.216087][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.232067][ T4924] Bluetooth: hci3: command tx timeout [ 87.425704][ T5612] veth0_macvtap: entered promiscuous mode [ 87.465340][ T5610] veth0_vlan: entered promiscuous mode [ 87.474485][ T5612] veth1_macvtap: entered promiscuous mode [ 87.504522][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.538739][ T5611] veth0_vlan: entered promiscuous mode [ 87.551124][ T5610] veth1_vlan: entered promiscuous mode [ 87.591097][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.610257][ T5611] veth1_vlan: entered promiscuous mode [ 87.629023][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.685583][ T1023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.695572][ T1023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.700803][ T1023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.707202][ T1023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.889504][ T5610] veth0_macvtap: entered promiscuous mode [ 87.945842][ T5609] veth0_vlan: entered promiscuous mode [ 88.041054][ T5610] veth1_macvtap: entered promiscuous mode [ 88.069479][ T5611] veth0_macvtap: entered promiscuous mode [ 88.173621][ T5611] veth1_macvtap: entered promiscuous mode [ 88.207113][ T5609] veth1_vlan: entered promiscuous mode [ 88.308123][ T1431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.308153][ T1431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.334789][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.371118][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.409728][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.427344][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.481431][ T1025] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.512761][ T1025] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.518130][ T1025] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.519336][ T1431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.519354][ T1431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.551423][ T1025] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.578589][ T1025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.617986][ T1025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.662429][ T1025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.664445][ T5609] veth0_macvtap: entered promiscuous mode [ 88.676094][ T1025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.790202][ T5609] veth1_macvtap: entered promiscuous mode [ 89.683538][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.731061][ T1499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.731080][ T1499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.809259][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.886129][ T1452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.886151][ T1452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.947176][ T3546] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.950302][ T3546] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.988067][ T3546] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.040320][ T3546] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.117602][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.117621][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.269832][ T1452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.269851][ T1452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.451061][ T823] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.752570][ T823] usb 3-1: Using ep0 maxpacket: 8 [ 90.812890][ T823] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 90.812946][ T823] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.812967][ T823] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.812991][ T823] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.813016][ T823] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.813059][ T823] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.813083][ T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.977809][ T1499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.977832][ T1499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.607368][ T823] usb 3-1: GET_CAPABILITIES returned 0 [ 91.607414][ T823] usbtmc 3-1:16.0: can't read capabilities [ 91.655435][ T5773] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 91.751164][ T1431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.751183][ T1431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.245406][ T823] usb 3-1: USB disconnect, device number 2 [ 92.826796][ T5779] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.629846][ T5791] process 'syz.3.8' launched './file2' with NULL argv: empty string added [ 93.665735][ T5792] binder_alloc: 5785: binder_alloc_buf, no vma [ 94.612086][ T38] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 94.827518][ T38] usb 4-1: unable to get BOS descriptor or descriptor too short [ 94.854239][ T38] usb 4-1: not running at top speed; connect to a high speed hub [ 94.858918][ T38] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 94.858946][ T38] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 94.858966][ T38] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 94.858984][ T38] usb 4-1: config 14 has no interface number 0 [ 94.858999][ T38] usb 4-1: config 14 has no interface number 1 [ 94.859063][ T38] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 94.859085][ T38] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 94.859107][ T38] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.859131][ T38] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.859151][ T38] usb 4-1: config 14 interface 57 has no altsetting 0 [ 94.859166][ T38] usb 4-1: config 14 interface 228 has no altsetting 0 [ 94.980071][ T38] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 94.980102][ T38] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.980122][ T38] usb 4-1: Product: syz [ 94.980137][ T38] usb 4-1: Manufacturer: syz [ 94.980151][ T38] usb 4-1: SerialNumber: syz [ 95.549881][ T38] legousbtower 4-1:14.57: interrupt endpoints not found [ 95.975511][ T38] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 96.004490][ T38] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 96.089240][ T4924] Bluetooth: hci0: Invalid handle: 0x0f82 > 0x0eff [ 96.723142][ T5824] usb 4-1: LEGO USB Tower reset control request failed [ 96.948016][ T5816] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.968487][ T5816] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.033710][ T5722] usb 4-1: USB disconnect, device number 2 [ 97.211546][ T5722] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 97.277764][ T5816] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.380573][ T5816] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.380711][ T5816] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.434624][ T5816] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.493470][ T5816] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.493612][ T5816] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.567543][ T5816] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.669188][ T5816] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.669274][ T5816] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.798976][ T5816] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.019426][ T5828] 9p: Bad value for 'rfdno' [ 98.206572][ T5837] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 98.206601][ T5837] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 98.263675][ T5837] vhci_hcd vhci_hcd.0: Device attached [ 98.435556][ T4924] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.452145][ T5721] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 98.513391][ T5721] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 99.082454][ T5838] vhci_hcd: connection reset by peer [ 99.125323][ T1025] vhci_hcd vhci_hcd.1: stop threads [ 99.125956][ T1025] vhci_hcd vhci_hcd.1: release socket [ 99.126190][ T1025] vhci_hcd vhci_hcd.1: disconnect device [ 99.397186][ T4924] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.553043][ T4924] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.719798][ T4924] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.514458][ T4924] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.487259][ T4924] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.618971][ T5341] hid (null): global environment stack underflow [ 101.642204][ T4924] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.671281][ T5341] hid-generic 616F:20C2607D:F72986D9.0001: global environment stack underflow [ 101.671304][ T5341] hid-generic 616F:20C2607D:F72986D9.0001: item 0 1 1 11 parsing failed [ 101.690529][ T5341] hid-generic 616F:20C2607D:F72986D9.0001: probe with driver hid-generic failed with error -22 [ 101.792245][ T4924] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.047588][ T4924] Bluetooth: hci3: Invalid handle: 0x0f82 > 0x0eff [ 102.592151][ T5614] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.562188][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.718215][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.721473][ T5721] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 103.872581][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.712456][ T5878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.712623][ T5878] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.742559][ T5878] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.742757][ T5878] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.277200][ T823] hid (null): global environment stack underflow [ 111.301069][ T823] hid-generic 616F:20C2607D:F72986D9.0002: global environment stack underflow [ 111.301090][ T823] hid-generic 616F:20C2607D:F72986D9.0002: item 0 1 1 11 parsing failed [ 111.301682][ T823] hid-generic 616F:20C2607D:F72986D9.0002: probe with driver hid-generic failed with error -22 [ 111.846888][ T5614] Bluetooth: hci3: Invalid handle: 0x0f82 > 0x0eff [ 112.049207][ T5908] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 112.049237][ T5908] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 112.062281][ T5908] vhci_hcd vhci_hcd.0: Device attached [ 112.274057][ T5708] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 112.362597][ T5708] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 112.650288][ T5900] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.670607][ T5900] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.692219][ T5900] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.692391][ T5900] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.745224][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 112.954586][ T5909] vhci_hcd: connection reset by peer [ 112.955031][ T1452] vhci_hcd vhci_hcd.1: stop threads [ 112.955053][ T1452] vhci_hcd vhci_hcd.1: release socket [ 112.990208][ T1452] vhci_hcd vhci_hcd.1: disconnect device [ 113.597325][ T4924] Bluetooth: hci2: Invalid handle: 0x0f82 > 0x0eff [ 113.699956][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.70'. [ 114.037098][ T5973] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 114.037126][ T5973] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.041332][ T5973] vhci_hcd vhci_hcd.0: Device attached [ 114.222055][ T38] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 114.291939][ T38] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 114.423789][ T5954] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.426539][ T5954] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.426808][ T5954] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.427054][ T5954] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.632271][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'. [ 114.947149][ T5975] vhci_hcd: connection reset by peer [ 114.947717][ T1023] vhci_hcd vhci_hcd.3: stop threads [ 114.947738][ T1023] vhci_hcd vhci_hcd.3: release socket [ 114.969105][ T1023] vhci_hcd vhci_hcd.3: disconnect device [ 115.065478][ T6005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.87'. [ 115.258926][ T4924] Bluetooth: hci2: Invalid handle: 0x0f82 > 0x0eff [ 115.500457][ T6020] Zero length message leads to an empty skb [ 115.637602][ T6026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.96'. [ 116.069060][ T6010] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.069291][ T6010] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.069462][ T6010] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 116.083303][ T6010] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.487081][ T6044] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 116.487109][ T6044] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 116.505106][ T6044] vhci_hcd vhci_hcd.0: Device attached [ 116.684780][ T6051] netlink: 32 bytes leftover after parsing attributes in process `syz.3.107'. [ 116.964683][ T6062] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.964922][ T6062] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.968970][ T6062] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 116.969160][ T6062] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.240992][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 117.382405][ T6045] vhci_hcd: connection closed [ 117.392125][ T1431] vhci_hcd vhci_hcd.1: stop threads [ 117.392149][ T1431] vhci_hcd vhci_hcd.1: release socket [ 117.392219][ T1431] vhci_hcd vhci_hcd.1: disconnect device [ 117.502121][ T5708] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 117.718766][ T6089] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.719035][ T6089] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.719154][ T6089] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.719321][ T6089] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.075097][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 118.384439][ T6108] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.384713][ T6108] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.385895][ T6108] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.386162][ T6108] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.526793][ T6115] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 118.526821][ T6115] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 118.550912][ T6115] vhci_hcd vhci_hcd.0: Device attached [ 118.711568][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 118.722070][ T823] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 118.790452][ T823] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 119.314488][ T6142] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.345376][ T6142] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.345454][ T6142] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.396736][ T6142] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.396994][ T6142] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.408645][ T38] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 119.436068][ T6116] vhci_hcd: connection reset by peer [ 119.469736][ T1431] vhci_hcd vhci_hcd.1: stop threads [ 119.469762][ T1431] vhci_hcd vhci_hcd.1: release socket [ 119.489591][ T1431] vhci_hcd vhci_hcd.1: disconnect device [ 119.560211][ T6151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.147'. [ 120.189846][ T6167] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.218881][ T6167] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.219073][ T6167] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.240294][ T6167] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.240400][ T6167] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.244828][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.158'. [ 120.348511][ T6174] No control pipe specified [ 120.729127][ T6188] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 120.729159][ T6188] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 120.729272][ T6188] vhci_hcd vhci_hcd.0: Device attached [ 120.900626][ T6198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.168'. [ 121.002146][ T5700] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 121.064752][ T6204] No control pipe specified [ 121.066294][ T5700] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 121.154788][ T6205] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.157236][ T6205] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.157305][ T6205] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.199883][ T6205] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.200198][ T6205] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.617624][ T6189] vhci_hcd: connection reset by peer [ 121.619870][ T1452] vhci_hcd vhci_hcd.3: stop threads [ 121.619889][ T1452] vhci_hcd vhci_hcd.3: release socket [ 121.619943][ T1452] vhci_hcd vhci_hcd.3: disconnect device [ 121.762809][ T6223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.179'. [ 121.827493][ T6225] No control pipe specified [ 121.983288][ T6227] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.983500][ T6227] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.983708][ T6227] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.998959][ T6227] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.999054][ T6227] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.465307][ T6243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.188'. [ 122.688092][ T6248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 122.751420][ T6253] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 122.751448][ T6253] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 122.763672][ T6253] vhci_hcd vhci_hcd.0: Device attached [ 122.958140][ T6260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.193'. [ 123.632811][ T6254] vhci_hcd: connection closed [ 123.633216][ T56] vhci_hcd vhci_hcd.3: stop threads [ 123.633248][ T56] vhci_hcd vhci_hcd.3: release socket [ 123.639902][ T56] vhci_hcd vhci_hcd.3: disconnect device [ 123.867161][ T823] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 124.032037][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.032062][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.157266][ T6272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.197'. [ 124.460601][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.202'. [ 124.754782][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.754805][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.823999][ T6248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.824743][ T6248] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.824897][ T6248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.386088][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 125.582323][ T6308] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.583215][ T6308] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.595409][ T6308] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.595498][ T6308] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 125.666332][ T6308] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.182061][ T5700] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 126.423836][ T6333] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.445789][ T6333] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.450385][ T6333] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.450457][ T6333] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.484389][ T6333] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.259513][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 128.512000][ T4924] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.512039][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.512069][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.118346][ T6387] No control pipe specified [ 129.472070][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.539965][ T6354] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.540230][ T6354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.540395][ T6354] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.541027][ T6354] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.976607][ T6410] No control pipe specified [ 130.495928][ T6428] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.496026][ T6428] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 130.524408][ T6428] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.524604][ T6428] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.524821][ T6428] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.690320][ T6435] No control pipe specified [ 131.353707][ T6451] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.370095][ T6451] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.371517][ T6451] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.373668][ T6451] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.373746][ T6451] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 131.439481][ T6459] autofs: Bad value for 'fd' [ 132.148904][ T6478] autofs: Bad value for 'fd' [ 132.352809][ T6480] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.353008][ T6480] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.353180][ T6480] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 132.353568][ T6480] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.353647][ T6480] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.768863][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 132.852293][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.854080][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.993620][ T6497] autofs: Bad value for 'fd' [ 134.432068][ T4924] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.432099][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.432109][ T4924] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.232143][ T5614] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.255383][ T6503] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.255594][ T6503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.255861][ T6503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.256051][ T6503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.394345][ T6521] autofs: Unknown parameter '0x0000000000000000' [ 135.822710][ T6532] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.823015][ T6532] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.823081][ T6532] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.847369][ T6541] 9p: Bad value for 'rfdno' [ 135.874216][ T6532] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.874403][ T6532] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.090846][ T6547] autofs: Unknown parameter '0x0000000000000000' [ 136.549927][ T6562] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.550191][ T6562] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.577835][ T6562] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.578124][ T6562] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.578195][ T6562] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 136.625069][ T6568] 9p: Bad value for 'rfdno' [ 136.699409][ T6570] autofs: Unknown parameter '0x0000000000000000' [ 137.234359][ T6587] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.234511][ T6587] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.236790][ T6587] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.236884][ T6587] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 137.269147][ T6587] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.363474][ T6594] autofs: Unknown parameter '0x0000000000000000' [ 138.795201][ T6614] autofs: Unknown parameter '0x0000000000000000' [ 138.822365][ T6612] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.822586][ T6612] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 138.822779][ T6612] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.822972][ T6612] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.872110][ T5341] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.052812][ T5341] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.074193][ T5341] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 139.074223][ T5341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 139.074243][ T5341] usb 4-1: Product: syz [ 139.074257][ T5341] usb 4-1: Manufacturer: syz [ 139.074271][ T5341] usb 4-1: SerialNumber: syz [ 139.447644][ T5341] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 140.430689][ T5700] usb 4-1: USB disconnect, device number 3 [ 140.586550][ T5700] usblp0: removed [ 140.742114][ T6634] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 140.742141][ T6634] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 140.742232][ T6634] vhci_hcd vhci_hcd.0: Device attached [ 140.832709][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.832771][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.832803][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.833015][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.873896][ T6642] autofs: Unknown parameter '0x0000000000000000' [ 140.932288][ T823] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 140.992169][ T823] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 141.202512][ T6644] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.202701][ T6644] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.202855][ T6644] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.203055][ T6644] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.894799][ T6637] vhci_hcd: connection reset by peer [ 141.895563][ T162] vhci_hcd vhci_hcd.2: stop threads [ 141.895586][ T162] vhci_hcd vhci_hcd.2: release socket [ 141.895906][ T162] vhci_hcd vhci_hcd.2: disconnect device [ 141.929817][ T6665] autofs: Unknown parameter 'fd0x0000000000000000' [ 142.350748][ T6680] 9p: Bad value for 'rfdno' [ 142.434756][ T6685] autofs: Unknown parameter 'fd0x0000000000000000' [ 142.458746][ T6683] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.459082][ T6683] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.460133][ T6683] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.463599][ T6683] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.818020][ T6702] binder: BINDER_SET_CONTEXT_MGR already set [ 142.818034][ T6702] binder: 6701:6702 ioctl 4018620d 200000004a80 returned -16 [ 142.886592][ T6705] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 142.886643][ T6705] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 142.924180][ T6705] vhci_hcd vhci_hcd.0: Device attached [ 143.102173][ T5708] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 143.182554][ T5708] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 143.227720][ T6712] autofs: Unknown parameter 'fd0x0000000000000000' [ 143.418733][ T6716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.385'. [ 143.453277][ T6714] ------------[ cut here ]------------ [ 143.453290][ T6714] task_rq(p) != rq [ 143.453301][ T6714] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#1: syz.1.384/6714 [ 143.453338][ T6714] Modules linked in: [ 143.453372][ T6714] CPU: 1 UID: 0 PID: 6714 Comm: syz.1.384 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 143.453391][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.453405][ T6714] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 143.453428][ T6714] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 143.453442][ T6714] RSP: 0018:ffffc90005aff740 EFLAGS: 00010006 [ 143.453455][ T6714] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae [ 143.453470][ T6714] RDX: 0000000000000000 RSI: ffff88802b520000 RDI: ffff8880b873ba40 [ 143.453480][ T6714] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 143.453492][ T6714] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 143.453504][ T6714] R13: 1ffff110170e78d6 R14: ffff88802b520000 R15: ffffffff8dc257d0 [ 143.453516][ T6714] FS: 00007fc107f6e6c0(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 143.453530][ T6714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.453541][ T6714] CR2: 000000110c4465ba CR3: 000000003a8d0000 CR4: 00000000003526f0 [ 143.453555][ T6714] Call Trace: [ 143.453567][ T6714] [ 143.453576][ T6714] set_next_task_fair+0xa68/0xce0 [ 143.453600][ T6714] __schedule+0x3e03/0x5550 [ 143.453637][ T6714] ? __pfx___schedule+0x10/0x10 [ 143.453670][ T6714] ? schedule+0x90/0x360 [ 143.453694][ T6714] schedule+0x164/0x360 [ 143.453712][ T6714] __futex_wait+0x1f0/0x420 [ 143.453737][ T6714] ? __pfx___futex_wait+0x10/0x10 [ 143.453757][ T6714] ? __pfx_futex_wake_mark+0x10/0x10 [ 143.453788][ T6714] futex_wait+0x121/0x390 [ 143.453807][ T6714] ? __pfx_futex_wait+0x10/0x10 [ 143.453829][ T6714] ? sk_setsockopt+0x2655/0x2c70 [ 143.453853][ T6714] do_futex+0x43d/0x4f0 [ 143.453880][ T6714] ? __pfx_do_futex+0x10/0x10 [ 143.453914][ T6714] __se_sys_futex+0x3a8/0x450 [ 143.453943][ T6714] ? __pfx___se_sys_futex+0x10/0x10 [ 143.453972][ T6714] ? __x64_sys_futex+0x21/0xf0 [ 143.453995][ T6714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.454016][ T6714] do_syscall_64+0x174/0x580 [ 143.454040][ T6714] ? trace_irq_disable+0x3b/0x140 [ 143.454054][ T6714] ? clear_bhb_loop+0x40/0x90 [ 143.454068][ T6714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.454079][ T6714] RIP: 0033:0x7fc109d1ce59 [ 143.454094][ T6714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.454103][ T6714] RSP: 002b:00007fc107f6e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 143.454115][ T6714] RAX: ffffffffffffffda RBX: 00007fc109f95fa8 RCX: 00007fc109d1ce59 [ 143.454122][ T6714] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc109f95fa8 [ 143.454130][ T6714] RBP: 00007fc109f95fa0 R08: 0000000000000000 R09: 0000000000000000 [ 143.454136][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.454143][ T6714] R13: 00007fc109f96038 R14: 00007ffcc7988ef0 R15: 00007ffcc7988fd8 [ 143.454159][ T6714] [ 143.454165][ T6714] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 143.454174][ T6714] CPU: 1 UID: 0 PID: 6714 Comm: syz.1.384 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 143.454186][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.454192][ T6714] Call Trace: [ 143.454196][ T6714] [ 143.454200][ T6714] vpanic+0x56c/0xa60 [ 143.454217][ T6714] ? __pfx__printk+0x10/0x10 [ 143.454228][ T6714] ? __pfx_vpanic+0x10/0x10 [ 143.454243][ T6714] ? is_bpf_text_address+0x292/0x2b0 [ 143.454259][ T6714] ? is_bpf_text_address+0x26/0x2b0 [ 143.454277][ T6714] panic+0xc5/0xd0 [ 143.454292][ T6714] ? __pfx_panic+0x10/0x10 [ 143.454314][ T6714] __warn+0x315/0x4c0 [ 143.454334][ T6714] ? hrtick_start_fair+0x196/0x1f0 [ 143.454348][ T6714] ? hrtick_start_fair+0x196/0x1f0 [ 143.454362][ T6714] __report_bug+0x339/0x540 [ 143.454380][ T6714] ? hrtick_start_fair+0x196/0x1f0 [ 143.454393][ T6714] ? __pfx___report_bug+0x10/0x10 [ 143.454409][ T6714] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 143.454437][ T6714] ? hrtick_start_fair+0x196/0x1f0 [ 143.454450][ T6714] report_bug+0x16a/0x220 [ 143.454464][ T6714] ? hrtick_start_fair+0x196/0x1f0 [ 143.454477][ T6714] ? hrtick_start_fair+0x198/0x1f0 [ 143.454490][ T6714] handle_bug+0x9c/0x200 [ 143.454505][ T6714] exc_invalid_op+0x1a/0x50 [ 143.454520][ T6714] asm_exc_invalid_op+0x1a/0x20 [ 143.454530][ T6714] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 143.454544][ T6714] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 143.454553][ T6714] RSP: 0018:ffffc90005aff740 EFLAGS: 00010006 [ 143.454561][ T6714] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae [ 143.454569][ T6714] RDX: 0000000000000000 RSI: ffff88802b520000 RDI: ffff8880b873ba40 [ 143.454577][ T6714] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 143.454584][ T6714] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 143.454592][ T6714] R13: 1ffff110170e78d6 R14: ffff88802b520000 R15: ffffffff8dc257d0 [ 143.454604][ T6714] ? set_next_task_fair+0xa4e/0xce0 [ 143.454619][ T6714] set_next_task_fair+0xa68/0xce0 [ 143.454634][ T6714] __schedule+0x3e03/0x5550 [ 143.454658][ T6714] ? __pfx___schedule+0x10/0x10 [ 143.454674][ T6714] ? schedule+0x90/0x360 [ 143.454687][ T6714] schedule+0x164/0x360 [ 143.454699][ T6714] __futex_wait+0x1f0/0x420 [ 143.454715][ T6714] ? __pfx___futex_wait+0x10/0x10 [ 143.454728][ T6714] ? __pfx_futex_wake_mark+0x10/0x10 [ 143.454750][ T6714] futex_wait+0x121/0x390 [ 143.454762][ T6714] ? __pfx_futex_wait+0x10/0x10 [ 143.454777][ T6714] ? sk_setsockopt+0x2655/0x2c70 [ 143.454793][ T6714] do_futex+0x43d/0x4f0 [ 143.454812][ T6714] ? __pfx_do_futex+0x10/0x10 [ 143.454831][ T6714] __se_sys_futex+0x3a8/0x450 [ 143.454849][ T6714] ? __pfx___se_sys_futex+0x10/0x10 [ 143.454870][ T6714] ? __x64_sys_futex+0x21/0xf0 [ 143.454886][ T6714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.454898][ T6714] do_syscall_64+0x174/0x580 [ 143.454920][ T6714] ? trace_irq_disable+0x3b/0x140 [ 143.454933][ T6714] ? clear_bhb_loop+0x40/0x90 [ 143.454946][ T6714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.454957][ T6714] RIP: 0033:0x7fc109d1ce59 [ 143.454968][ T6714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.454976][ T6714] RSP: 002b:00007fc107f6e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 143.454987][ T6714] RAX: ffffffffffffffda RBX: 00007fc109f95fa8 RCX: 00007fc109d1ce59 [ 143.454995][ T6714] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc109f95fa8 [ 143.455001][ T6714] RBP: 00007fc109f95fa0 R08: 0000000000000000 R09: 0000000000000000 [ 143.455008][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.455014][ T6714] R13: 00007fc109f96038 R14: 00007ffcc7988ef0 R15: 00007ffcc7988fd8 [ 143.455030][ T6714] [ 144.557312][ T6714] Shutting down cpus with NMI [ 144.557794][ T6714] Kernel Offset: disabled