last executing test programs: 3.876422066s ago: executing program 2 (id=227): bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$packet(r0, &(0x7f0000000080)="0b0377002e00090800000000000000000c4dfaf1c8e5", 0x16, 0x0, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.737797632s ago: executing program 2 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x5, 0x300) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) 3.298925157s ago: executing program 3 (id=232): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0}) 3.279385209s ago: executing program 2 (id=233): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x109081, 0x34) 3.020287876s ago: executing program 3 (id=235): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r1}) 2.590722056s ago: executing program 3 (id=239): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.348729158s ago: executing program 3 (id=241): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 2.12898664s ago: executing program 3 (id=243): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000000009040009010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) 1.933958427s ago: executing program 1 (id=246): bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$packet(r0, &(0x7f0000000080)="0b0377002e00090800000000000000000c4dfaf1c8e5", 0x16, 0x0, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.724214527s ago: executing program 2 (id=247): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r1}) 1.70758983s ago: executing program 1 (id=248): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) 1.303449367s ago: executing program 1 (id=249): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.085999282s ago: executing program 1 (id=250): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r1, &(0x7f0000000200)={0x0, 0x26, 0x1, @thr={0x0, 0x0}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) close(r2) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x7, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0xffffffff, 0x1, 0x8, 0x1, 0x100, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r2, 0x852ac000) 978.391213ms ago: executing program 2 (id=251): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 770.205823ms ago: executing program 0 (id=252): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 764.517489ms ago: executing program 1 (id=253): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 631.266268ms ago: executing program 0 (id=254): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0}) 617.393346ms ago: executing program 2 (id=255): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x109081, 0x34) 517.496657ms ago: executing program 0 (id=256): bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000480)=0xc, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="0b0377002e00090800000000000000000c4dfaf1c8e5", 0x16, 0x0, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 305.80368ms ago: executing program 0 (id=257): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) 234.503028ms ago: executing program 0 (id=258): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 139.719747ms ago: executing program 1 (id=259): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r1}) 49.318248ms ago: executing program 3 (id=260): openat$ptmx(0xffffffffffffff9c, 0x0, 0x48100, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f7574650000000800"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@broadcast, @in=@empty, 0x4e21, 0x4, 0x4e20, 0x0, 0x2}, {0x40, 0xae, 0xffffffff, 0x9, 0x9, 0x9, 0x9, 0x5}, {0x10000, 0x7, 0x8}, 0x2, 0x6e6bbf, 0x1, 0x2a515e8a9e1e315e, 0x1}, {{@in6=@loopback, 0x4d2, 0x3c}, 0xa, @in=@multicast2, 0x3503, 0x4, 0x0, 0x48, 0x54, 0x1ff, 0x1}}, 0xe8) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8000000000007ffb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x3, {0x1, @raw_data="9db463c5bd340181eb27dc90d7156ac0911d350884300cc718700eef1b2f5f8a5f2afeac293a1cfc06938ad041fcc5da7a100d8b3be7ba33e4f82d72ede4ed761f9ac9890578e8017e505d5d9fb7b5b200ad2d4ee93ba649e13d58e3b8edb6c93a759d7c5bba3199696b85dba326ef1b6befe960da1321a900ba581b1a19987a1bb16680ce3b01a1220fe05d9753f4ca089cdfd2f6e04646062201c6447bae763f46e1eba150256de2bd8e000e7389e50c90c4c970e249835366ad7d4919005e188de86c3ebd240a"}, 0xfffffe00}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) 0s ago: executing program 0 (id=261): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r1, &(0x7f0000000200)={0x0, 0x26, 0x1, @thr={0x0, 0x0}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) close(r2) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x7, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0xffffffff, 0x1, 0x8, 0x1, 0x100, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r2, 0x852ac000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. [ 92.089182][ T1246] cfg80211: failed to load regulatory.db [ 93.115454][ T5591] cgroup: Unknown subsys name 'net' [ 93.354099][ T5591] cgroup: Unknown subsys name 'cpuset' [ 93.409342][ T5591] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.626259][ T5591] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.797312][ T4921] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.814665][ T4921] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.816805][ T4921] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.838417][ T4921] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.885403][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.922735][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.943666][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.951383][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.954417][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.956199][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.984553][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.992656][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.020334][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.046722][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.048347][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.059109][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.061717][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.095946][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.101935][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.114411][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.182510][ T5621] Bluetooth: hci1: command tx timeout [ 101.182516][ T5614] Bluetooth: hci2: command tx timeout [ 101.259573][ T5621] Bluetooth: hci3: command tx timeout [ 101.261796][ T5621] Bluetooth: hci0: command tx timeout [ 101.493141][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.494642][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.494875][ T5611] bridge_slave_0: entered allmulticast mode [ 101.497420][ T5611] bridge_slave_0: entered promiscuous mode [ 101.538191][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.538423][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.538977][ T5612] bridge_slave_0: entered allmulticast mode [ 101.550963][ T5612] bridge_slave_0: entered promiscuous mode [ 101.592650][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.593000][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.593498][ T5611] bridge_slave_1: entered allmulticast mode [ 101.597504][ T5611] bridge_slave_1: entered promiscuous mode [ 101.631245][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.631507][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.631725][ T5612] bridge_slave_1: entered allmulticast mode [ 101.634174][ T5612] bridge_slave_1: entered promiscuous mode [ 101.636177][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.636407][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.636739][ T5613] bridge_slave_0: entered allmulticast mode [ 101.640733][ T5613] bridge_slave_0: entered promiscuous mode [ 101.734984][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.735246][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.735449][ T5613] bridge_slave_1: entered allmulticast mode [ 101.737917][ T5613] bridge_slave_1: entered promiscuous mode [ 101.854092][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.888103][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.971903][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.972332][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.972562][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.972752][ T5610] bridge_slave_0: entered allmulticast mode [ 101.975553][ T5610] bridge_slave_0: entered promiscuous mode [ 102.013825][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.029640][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.075765][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.076038][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.076237][ T5610] bridge_slave_1: entered allmulticast mode [ 102.081595][ T5610] bridge_slave_1: entered promiscuous mode [ 102.110528][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.196770][ T5611] team0: Port device team_slave_0 added [ 102.208270][ T5612] team0: Port device team_slave_0 added [ 102.265704][ T5611] team0: Port device team_slave_1 added [ 102.270434][ T5612] team0: Port device team_slave_1 added [ 102.285635][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.293404][ T5613] team0: Port device team_slave_0 added [ 102.347359][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.358097][ T5613] team0: Port device team_slave_1 added [ 102.440461][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.440475][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.440498][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.444583][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.444596][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.444617][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.558368][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.558383][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.558403][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.578192][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.578238][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.578329][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.597569][ T5610] team0: Port device team_slave_0 added [ 102.617721][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.617774][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.617893][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.714778][ T5610] team0: Port device team_slave_1 added [ 102.716466][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.716478][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.716499][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.860391][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.860404][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.860424][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.936010][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.936023][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.936043][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.002053][ T5611] hsr_slave_0: entered promiscuous mode [ 103.003833][ T5611] hsr_slave_1: entered promiscuous mode [ 103.024959][ T5612] hsr_slave_0: entered promiscuous mode [ 103.026570][ T5612] hsr_slave_1: entered promiscuous mode [ 103.028046][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 103.028137][ T5612] Cannot create hsr debugfs directory [ 103.258998][ T5614] Bluetooth: hci1: command tx timeout [ 103.259032][ T5614] Bluetooth: hci2: command tx timeout [ 103.335076][ T5613] hsr_slave_0: entered promiscuous mode [ 103.336653][ T5613] hsr_slave_1: entered promiscuous mode [ 103.337920][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 103.337950][ T5613] Cannot create hsr debugfs directory [ 103.348944][ T5621] Bluetooth: hci0: command tx timeout [ 103.348977][ T5621] Bluetooth: hci3: command tx timeout [ 103.531097][ T5610] hsr_slave_0: entered promiscuous mode [ 103.532718][ T5610] hsr_slave_1: entered promiscuous mode [ 103.533971][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 103.534003][ T5610] Cannot create hsr debugfs directory [ 104.336835][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.395408][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.411286][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.450386][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.463193][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.494687][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.522962][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.551043][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.685768][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.723711][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.741083][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.786667][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.799597][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.835454][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.866751][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.907055][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.113345][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.155694][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.173981][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.215852][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.231131][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.266302][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.303898][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.339311][ T5621] Bluetooth: hci1: command tx timeout [ 105.339410][ T5614] Bluetooth: hci2: command tx timeout [ 105.360009][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.420690][ T5621] Bluetooth: hci0: command tx timeout [ 105.420930][ T5614] Bluetooth: hci3: command tx timeout [ 105.570011][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.610052][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.627931][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.655063][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.671744][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.715185][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.730734][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.768284][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.838057][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.964752][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.025481][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.025770][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.051584][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.183688][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.184180][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.282158][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.341056][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.341237][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.387099][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.433421][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.434013][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.553925][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.627284][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.627493][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.657872][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.734858][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.735077][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.857462][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.947624][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.947799][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.036625][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.036894][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.420472][ T5621] Bluetooth: hci2: command tx timeout [ 107.420519][ T5621] Bluetooth: hci1: command tx timeout [ 107.509997][ T60] Bluetooth: hci3: command tx timeout [ 107.510038][ T60] Bluetooth: hci0: command tx timeout [ 107.840777][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.012443][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.334640][ T5611] veth0_vlan: entered promiscuous mode [ 108.474705][ T5611] veth1_vlan: entered promiscuous mode [ 108.496611][ T5612] veth0_vlan: entered promiscuous mode [ 108.544341][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.588103][ T5612] veth1_vlan: entered promiscuous mode [ 108.768401][ T5611] veth0_macvtap: entered promiscuous mode [ 108.803470][ T5611] veth1_macvtap: entered promiscuous mode [ 108.822673][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.856165][ T5612] veth0_macvtap: entered promiscuous mode [ 108.903687][ T5612] veth1_macvtap: entered promiscuous mode [ 108.929430][ T5613] veth0_vlan: entered promiscuous mode [ 108.965704][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.007288][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.022240][ T5613] veth1_vlan: entered promiscuous mode [ 109.051103][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.090727][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.111916][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.117761][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.152669][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.168439][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.262836][ T1235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.281997][ T1235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.307639][ T1235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.380730][ T1235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.380963][ T5610] veth0_vlan: entered promiscuous mode [ 109.656890][ T5613] veth0_macvtap: entered promiscuous mode [ 109.676326][ T5610] veth1_vlan: entered promiscuous mode [ 109.816948][ T5613] veth1_macvtap: entered promiscuous mode [ 110.012067][ T308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.012084][ T308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.115945][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.133304][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.133325][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.185942][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.272253][ T5610] veth0_macvtap: entered promiscuous mode [ 110.285325][ T1432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.286817][ T1432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.286837][ T1432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.316799][ T1175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.336125][ T1175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.336698][ T1175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.425824][ T5610] veth1_macvtap: entered promiscuous mode [ 110.501413][ T308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.501451][ T308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.927768][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.086912][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.287579][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.303131][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.399917][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.451774][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.494030][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.494052][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.566856][ T5760] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.739646][ T5614] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 111.739704][ T5614] CPU: 1 UID: 0 PID: 5614 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 111.739732][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.739748][ T5614] Workqueue: hci2 hci_rx_work [ 111.739798][ T5614] Call Trace: [ 111.739811][ T5614] [ 111.739832][ T5614] dump_stack_lvl+0xe8/0x150 [ 111.739867][ T5614] sysfs_create_dir_ns+0x271/0x2a0 [ 111.739908][ T5614] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 111.739935][ T5614] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 111.739980][ T5614] ? rt_spin_unlock+0x160/0x200 [ 111.740022][ T5614] kobject_add_internal+0x631/0xd10 [ 111.740072][ T5614] kobject_add+0x163/0x240 [ 111.740116][ T5614] ? __pfx_kobject_add+0x10/0x10 [ 111.740163][ T5614] ? get_device_parent+0x370/0x3a0 [ 111.740199][ T5614] device_add+0x408/0xb90 [ 111.740232][ T5614] hci_conn_add_sysfs+0xd5/0x210 [ 111.740262][ T5614] le_conn_complete_evt+0x10e6/0x16b0 [ 111.740308][ T5614] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 111.740344][ T5614] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 111.740376][ T5614] ? lockdep_hardirqs_on+0x7a/0x110 [ 111.740410][ T5614] ? skb_pull_data+0xfb/0x200 [ 111.740450][ T5614] hci_le_conn_complete_evt+0x187/0x470 [ 111.740492][ T5614] hci_event_packet+0x659/0xef0 [ 111.740527][ T5614] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 111.740550][ T5614] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 111.740580][ T5614] ? __pfx_hci_event_packet+0x10/0x10 [ 111.740606][ T5614] ? rt_spin_unlock+0x14f/0x200 [ 111.740640][ T5614] ? hci_send_to_monitor+0xe2/0x590 [ 111.740680][ T5614] hci_rx_work+0x3ee/0x1040 [ 111.740720][ T5614] ? process_one_work+0x8be/0x1630 [ 111.740755][ T5614] process_one_work+0x98b/0x1630 [ 111.740824][ T5614] ? __pfx_process_one_work+0x10/0x10 [ 111.740859][ T5614] ? do_raw_spin_lock+0x12b/0x2f0 [ 111.740907][ T5614] worker_thread+0xb49/0x1140 [ 111.740966][ T5614] kthread+0x388/0x470 [ 111.740988][ T5614] ? __pfx_worker_thread+0x10/0x10 [ 111.741019][ T5614] ? __pfx_kthread+0x10/0x10 [ 111.741044][ T5614] ret_from_fork+0x514/0xb70 [ 111.741074][ T5614] ? __pfx_ret_from_fork+0x10/0x10 [ 111.741101][ T5614] ? __switch_to+0xc79/0x1410 [ 111.741124][ T5614] ? __pfx_kthread+0x10/0x10 [ 111.741151][ T5614] ret_from_fork_asm+0x1a/0x30 [ 111.741193][ T5614] [ 111.741996][ T5614] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 111.742042][ T5614] Bluetooth: hci2: failed to register connection device [ 112.322687][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.322710][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.815534][ T308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.815555][ T308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.413113][ T308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.413135][ T308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.823961][ T5779] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10'. [ 115.287423][ T5785] sg_write: data in/out 229340/136 bytes for SCSI command 0x0-- guessing data in; [ 115.287423][ T5785] program syz.1.12 not setting count and/or reply_len properly [ 115.524274][ T5781] syz.3.5 (5781) used greatest stack depth: 17112 bytes left [ 116.025276][ T5614] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 116.025305][ T5614] CPU: 1 UID: 0 PID: 5614 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.025334][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.025349][ T5614] Workqueue: hci1 hci_rx_work [ 116.025384][ T5614] Call Trace: [ 116.025393][ T5614] [ 116.025404][ T5614] dump_stack_lvl+0xe8/0x150 [ 116.025437][ T5614] sysfs_create_dir_ns+0x271/0x2a0 [ 116.025476][ T5614] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 116.025501][ T5614] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 116.025544][ T5614] ? rt_spin_unlock+0x160/0x200 [ 116.025569][ T5614] kobject_add_internal+0x631/0xd10 [ 116.025614][ T5614] kobject_add+0x163/0x240 [ 116.025655][ T5614] ? __pfx_kobject_add+0x10/0x10 [ 116.025703][ T5614] ? get_device_parent+0x370/0x3a0 [ 116.025737][ T5614] device_add+0x408/0xb90 [ 116.025769][ T5614] hci_conn_add_sysfs+0xd5/0x210 [ 116.025798][ T5614] le_conn_complete_evt+0x10e6/0x16b0 [ 116.025841][ T5614] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 116.025874][ T5614] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 116.025902][ T5614] ? lockdep_hardirqs_on+0x7a/0x110 [ 116.025934][ T5614] ? skb_pull_data+0xfb/0x200 [ 116.026099][ T5614] hci_le_conn_complete_evt+0x187/0x470 [ 116.026146][ T5614] hci_event_packet+0x659/0xef0 [ 116.026179][ T5614] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 116.026204][ T5614] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 116.026232][ T5614] ? __pfx_hci_event_packet+0x10/0x10 [ 116.026255][ T5614] ? rt_spin_unlock+0x14f/0x200 [ 116.026285][ T5614] ? hci_send_to_monitor+0xe2/0x590 [ 116.026323][ T5614] hci_rx_work+0x3ee/0x1040 [ 116.026366][ T5614] ? process_one_work+0x8be/0x1630 [ 116.026401][ T5614] process_one_work+0x98b/0x1630 [ 116.026465][ T5614] ? __pfx_process_one_work+0x10/0x10 [ 116.026496][ T5614] ? do_raw_spin_lock+0x12b/0x2f0 [ 116.026538][ T5614] worker_thread+0xb49/0x1140 [ 116.026603][ T5614] kthread+0x388/0x470 [ 116.026630][ T5614] ? __pfx_worker_thread+0x10/0x10 [ 116.026665][ T5614] ? __pfx_kthread+0x10/0x10 [ 116.026692][ T5614] ret_from_fork+0x514/0xb70 [ 116.026723][ T5614] ? __pfx_ret_from_fork+0x10/0x10 [ 116.026749][ T5614] ? __switch_to+0xc79/0x1410 [ 116.026774][ T5614] ? __pfx_kthread+0x10/0x10 [ 116.026803][ T5614] ret_from_fork_asm+0x1a/0x30 [ 116.026860][ T5614] [ 116.026923][ T5614] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 116.026965][ T5614] Bluetooth: hci1: failed to register connection device [ 117.155829][ T5814] sg_write: data in/out 229340/136 bytes for SCSI command 0x0-- guessing data in; [ 117.155829][ T5814] program syz.0.23 not setting count and/or reply_len properly [ 117.968588][ T5822] usb usb7: usbfs: process 5822 (syz.1.26) did not claim interface 0 before use [ 118.691125][ T5836] sg_write: data in/out 229340/136 bytes for SCSI command 0x0-- guessing data in; [ 118.691125][ T5836] program syz.3.33 not setting count and/or reply_len properly [ 118.767589][ T5614] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 119.087043][ T5847] usb usb7: usbfs: process 5847 (syz.0.37) did not claim interface 0 before use [ 119.426950][ T37] audit: type=1326 audit(1781644662.610:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.3.38" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe0be99ce59 code=0x0 [ 120.579222][ T60] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 120.579252][ T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 120.579280][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.579296][ T60] Workqueue: hci3 hci_rx_work [ 120.579326][ T60] Call Trace: [ 120.579336][ T60] [ 120.579346][ T60] dump_stack_lvl+0xe8/0x150 [ 120.579379][ T60] sysfs_create_dir_ns+0x271/0x2a0 [ 120.579418][ T60] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 120.579444][ T60] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 120.579486][ T60] ? rt_spin_unlock+0x160/0x200 [ 120.579511][ T60] kobject_add_internal+0x631/0xd10 [ 120.579558][ T60] kobject_add+0x163/0x240 [ 120.579598][ T60] ? __pfx_kobject_add+0x10/0x10 [ 120.579642][ T60] ? get_device_parent+0x370/0x3a0 [ 120.579674][ T60] device_add+0x408/0xb90 [ 120.579707][ T60] hci_conn_add_sysfs+0xd5/0x210 [ 120.579736][ T60] le_conn_complete_evt+0x10e6/0x16b0 [ 120.579779][ T60] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 120.579812][ T60] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 120.579841][ T60] ? lockdep_hardirqs_on+0x7a/0x110 [ 120.579872][ T60] ? skb_pull_data+0xfb/0x200 [ 120.579909][ T60] hci_le_conn_complete_evt+0x187/0x470 [ 120.579950][ T60] hci_event_packet+0x659/0xef0 [ 120.579996][ T60] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 120.580019][ T60] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 120.580048][ T60] ? __pfx_hci_event_packet+0x10/0x10 [ 120.580072][ T60] ? rt_spin_unlock+0x14f/0x200 [ 120.580105][ T60] ? hci_send_to_monitor+0xe2/0x590 [ 120.580143][ T60] hci_rx_work+0x3ee/0x1040 [ 120.580181][ T60] ? process_one_work+0x8be/0x1630 [ 120.580215][ T60] process_one_work+0x98b/0x1630 [ 120.580274][ T60] ? __pfx_process_one_work+0x10/0x10 [ 120.580306][ T60] ? do_raw_spin_lock+0x12b/0x2f0 [ 120.580351][ T60] worker_thread+0xb49/0x1140 [ 120.580415][ T60] kthread+0x388/0x470 [ 120.580443][ T60] ? __pfx_worker_thread+0x10/0x10 [ 120.580476][ T60] ? __pfx_kthread+0x10/0x10 [ 120.580504][ T60] ret_from_fork+0x514/0xb70 [ 120.580539][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 120.580567][ T60] ? __switch_to+0xc79/0x1410 [ 120.580594][ T60] ? __pfx_kthread+0x10/0x10 [ 120.580622][ T60] ret_from_fork_asm+0x1a/0x30 [ 120.580672][ T60] [ 120.581269][ T60] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 120.581315][ T60] Bluetooth: hci3: failed to register connection device [ 121.372176][ T5897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.58'. [ 121.930424][ T49] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.203859][ T49] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 122.203893][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.203915][ T49] usb 3-1: Product: syz [ 122.203929][ T49] usb 3-1: Manufacturer: syz [ 122.203945][ T49] usb 3-1: SerialNumber: syz [ 122.508203][ T60] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 122.508232][ T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 122.508260][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 122.508277][ T60] Workqueue: hci0 hci_rx_work [ 122.508308][ T60] Call Trace: [ 122.508317][ T60] [ 122.508328][ T60] dump_stack_lvl+0xe8/0x150 [ 122.508361][ T60] sysfs_create_dir_ns+0x271/0x2a0 [ 122.508402][ T60] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 122.508429][ T60] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 122.508471][ T60] ? rt_spin_unlock+0x160/0x200 [ 122.508496][ T60] kobject_add_internal+0x631/0xd10 [ 122.508542][ T60] kobject_add+0x163/0x240 [ 122.508597][ T60] ? __pfx_kobject_add+0x10/0x10 [ 122.508640][ T60] ? get_device_parent+0x370/0x3a0 [ 122.508673][ T60] device_add+0x408/0xb90 [ 122.508706][ T60] hci_conn_add_sysfs+0xd5/0x210 [ 122.508735][ T60] le_conn_complete_evt+0x10e6/0x16b0 [ 122.508781][ T60] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 122.508815][ T60] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 122.508844][ T60] ? lockdep_hardirqs_on+0x7a/0x110 [ 122.508876][ T60] ? skb_pull_data+0xfb/0x200 [ 122.508917][ T60] hci_le_conn_complete_evt+0x187/0x470 [ 122.508957][ T60] hci_event_packet+0x659/0xef0 [ 122.508991][ T60] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 122.509012][ T60] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 122.509053][ T60] ? __pfx_hci_event_packet+0x10/0x10 [ 122.509079][ T60] ? rt_spin_unlock+0x14f/0x200 [ 122.509111][ T60] ? hci_send_to_monitor+0xe2/0x590 [ 122.509150][ T60] hci_rx_work+0x3ee/0x1040 [ 122.509188][ T60] ? process_one_work+0x8be/0x1630 [ 122.509222][ T60] process_one_work+0x98b/0x1630 [ 122.509279][ T60] ? __pfx_process_one_work+0x10/0x10 [ 122.509313][ T60] ? do_raw_spin_lock+0x12b/0x2f0 [ 122.509358][ T60] worker_thread+0xb49/0x1140 [ 122.509425][ T60] kthread+0x388/0x470 [ 122.509453][ T60] ? __pfx_worker_thread+0x10/0x10 [ 122.509487][ T60] ? __pfx_kthread+0x10/0x10 [ 122.509515][ T60] ret_from_fork+0x514/0xb70 [ 122.509547][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 122.509577][ T60] ? __switch_to+0xc79/0x1410 [ 122.509602][ T60] ? __pfx_kthread+0x10/0x10 [ 122.509630][ T60] ret_from_fork_asm+0x1a/0x30 [ 122.509681][ T60] [ 122.512390][ T60] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 122.512481][ T60] Bluetooth: hci0: failed to register connection device [ 122.893225][ T49] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 122.893286][ T49] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 122.893309][ T49] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 122.959875][ T49] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 123.021969][ T49] usb 3-1: USB disconnect, device number 2 [ 123.309176][ T5924] netlink: 36 bytes leftover after parsing attributes in process `syz.0.68'. [ 123.727761][ T5930] sg_write: data in/out 425948/136 bytes for SCSI command 0x0-- guessing data in; [ 123.727761][ T5930] program syz.3.71 not setting count and/or reply_len properly [ 124.315303][ T5945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.77'. [ 124.512649][ T5614] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 124.663079][ T5957] sg_write: data in/out 425948/136 bytes for SCSI command 0x0-- guessing data in; [ 124.663079][ T5957] program syz.3.82 not setting count and/or reply_len properly [ 125.226856][ T5969] netlink: 36 bytes leftover after parsing attributes in process `syz.3.88'. [ 125.617877][ T5980] sg_write: data in/out 425948/136 bytes for SCSI command 0x0-- guessing data in; [ 125.617877][ T5980] program syz.3.93 not setting count and/or reply_len properly [ 125.869606][ T5986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.97'. [ 126.269905][ T5614] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 126.545929][ T6002] sg_write: data in/out 425948/136 bytes for SCSI command 0x0-- guessing data in; [ 126.545929][ T6002] program syz.1.103 not setting count and/or reply_len properly [ 126.807616][ T6009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.106'. [ 127.029782][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 127.568443][ T6031] sg_write: data in/out 425948/136 bytes for SCSI command 0x0-- guessing data in; [ 127.568443][ T6031] program syz.2.114 not setting count and/or reply_len properly [ 127.948452][ T6037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.116'. [ 128.448523][ T6053] sg_write: data in/out 425948/136 bytes for SCSI command 0x0-- guessing data in; [ 128.448523][ T6053] program syz.1.123 not setting count and/or reply_len properly [ 128.844712][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.127'. [ 129.728003][ T6084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.136'. [ 129.963951][ T6093] sg_write: data in/out 425948/136 bytes for SCSI command 0x0-- guessing data in; [ 129.963951][ T6093] program syz.1.139 not setting count and/or reply_len properly [ 130.364967][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.145'. [ 130.706541][ T6115] sg_write: data in/out 425948/136 bytes for SCSI command 0x0-- guessing data in; [ 130.706541][ T6115] program syz.3.149 not setting count and/or reply_len properly [ 131.090891][ T6128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.155'. [ 131.176958][ T6130] capability: warning: `syz.3.157' uses deprecated v2 capabilities in a way that may be insecure [ 131.282922][ T49] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 131.450589][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 131.470975][ T6138] sg_write: data in/out 425948/136 bytes for SCSI command 0x0-- guessing data in; [ 131.470975][ T6138] program syz.3.160 not setting count and/or reply_len properly [ 131.514592][ T49] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 131.514626][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.514648][ T49] usb 2-1: Product: syz [ 131.514752][ T49] usb 2-1: Manufacturer: syz [ 131.514769][ T49] usb 2-1: SerialNumber: syz [ 131.595754][ T49] r8152-cfgselector 2-1: Unknown version 0x0000 [ 131.595783][ T49] r8152-cfgselector 2-1: config 0 descriptor?? [ 131.871925][ T49] r8152-cfgselector 2-1: Needed 1 retries to read version [ 131.871978][ T49] r8152-cfgselector 2-1: Unknown version 0x0000 [ 131.872585][ T49] r8152-cfgselector 2-1: No union descriptors [ 132.027276][ T37] audit: type=1326 audit(1781644675.200:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.0.163" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf2ea9ce59 code=0x0 [ 132.163163][ T5780] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 132.680358][ T6164] sg_write: data in/out 425948/136 bytes for SCSI command 0x0-- guessing data in; [ 132.680358][ T6164] program syz.3.169 not setting count and/or reply_len properly [ 133.033069][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.033206][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.806844][ T6208] sg_write: data in/out 425948/136 bytes for SCSI command 0x0-- guessing data in; [ 134.806844][ T6208] program syz.3.189 not setting count and/or reply_len properly [ 135.696942][ T6233] sg_write: data in/out 425948/136 bytes for SCSI command 0x0-- guessing data in; [ 135.696942][ T6233] program syz.0.200 not setting count and/or reply_len properly [ 139.244119][ T6300] netlink: 40 bytes leftover after parsing attributes in process `syz.1.226'. [ 141.198853][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 141.428769][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 141.448801][ T32] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.448836][ T32] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.448861][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 141.448893][ T32] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 141.448914][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.540269][ T32] usb 4-1: config 0 descriptor?? [ 142.086065][ T32] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 142.086117][ T32] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 142.086144][ T32] nzxt-smart2 0003:1E71:2009.0001: collection stack underflow [ 142.086170][ T32] nzxt-smart2 0003:1E71:2009.0001: item 0 0 0 12 parsing failed [ 142.087154][ T32] nzxt-smart2 0003:1E71:2009.0001: probe with driver nzxt-smart2 failed with error -22 [ 142.307214][ T10] usb 4-1: USB disconnect, device number 2 [ 143.043709][ T0] ------------[ cut here ]------------ [ 143.043721][ T0] rq->clock_update_flags < RQCF_ACT_SKIP [ 143.043732][ T0] WARNING: kernel/sched/sched.h:1792 at update_curr_idle+0x1cf/0x260, CPU#1: swapper/1/0 [ 143.043775][ T0] Modules linked in: [ 143.043791][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 143.043810][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.043821][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 143.043848][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 3a 98 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 4c [ 143.043863][ T0] RSP: 0018:ffffc900001e7bf8 EFLAGS: 00010097 [ 143.043877][ T0] RAX: 0000000000000000 RBX: ffff8880b873ba40 RCX: 0000000000000002 [ 143.043889][ T0] RDX: ffff8880318b9f00 RSI: ffffffff8dbdec30 RDI: ffffffff8bcc4d80 [ 143.043902][ T0] RBP: ffffc900001e7e30 R08: ffff8880b873c91f R09: 0000000000000000 [ 143.043914][ T0] R10: ffff8880b873c910 R11: ffffffff819a0020 R12: dffffc0000000000 [ 143.043927][ T0] R13: ffffffff8dc14a58 R14: ffff88801e29dd00 R15: ffff8880b873c620 [ 143.043940][ T0] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 143.043954][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.043966][ T0] CR2: 000000110c38ef89 CR3: 0000000037502000 CR4: 00000000003526f0 [ 143.043981][ T0] Call Trace: [ 143.043988][ T0] [ 143.043998][ T0] put_prev_task_idle+0xd/0x20 [ 143.044025][ T0] __schedule+0x3da0/0x5550 [ 143.044066][ T0] ? __pfx___schedule+0x10/0x10 [ 143.044084][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 143.044114][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 143.044150][ T0] schedule_idle+0x51/0x90 [ 143.044170][ T0] do_idle+0x4a6/0x540 [ 143.044197][ T0] ? __pfx_do_idle+0x10/0x10 [ 143.044224][ T0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 143.044250][ T0] cpu_startup_entry+0x43/0x60 [ 143.044275][ T0] start_secondary+0x101/0x110 [ 143.044295][ T0] common_startup_64+0x13e/0x157 [ 143.044335][ T0] [ 143.044344][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 143.044356][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 143.044375][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.044385][ T0] Call Trace: [ 143.044391][ T0] [ 143.044397][ T0] vpanic+0x56c/0xa60 [ 143.044424][ T0] ? __pfx__printk+0x10/0x10 [ 143.044444][ T0] ? __pfx_vpanic+0x10/0x10 [ 143.044468][ T0] ? is_bpf_text_address+0x292/0x2b0 [ 143.044494][ T0] ? is_bpf_text_address+0x26/0x2b0 [ 143.044525][ T0] panic+0xc5/0xd0 [ 143.044551][ T0] ? __pfx_panic+0x10/0x10 [ 143.044583][ T0] ? common_startup_64+0x13e/0x157 [ 143.044617][ T0] __warn+0x315/0x4c0 [ 143.044643][ T0] ? update_curr_idle+0x1cf/0x260 [ 143.044671][ T0] ? update_curr_idle+0x1cf/0x260 [ 143.044698][ T0] __report_bug+0x339/0x540 [ 143.044726][ T0] ? update_curr_idle+0x1cf/0x260 [ 143.044753][ T0] ? __pfx___report_bug+0x10/0x10 [ 143.044783][ T0] ? pick_task_fair+0x21a/0x1410 [ 143.044813][ T0] ? update_curr_idle+0x1cf/0x260 [ 143.044839][ T0] report_bug+0x16a/0x220 [ 143.044862][ T0] ? update_curr_idle+0x1cf/0x260 [ 143.044907][ T0] ? update_curr_idle+0x1d1/0x260 [ 143.044933][ T0] handle_bug+0x9c/0x200 [ 143.044959][ T0] exc_invalid_op+0x1a/0x50 [ 143.044985][ T0] asm_exc_invalid_op+0x1a/0x20 [ 143.045003][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 143.045063][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 3a 98 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 4c [ 143.045077][ T0] RSP: 0018:ffffc900001e7bf8 EFLAGS: 00010097 [ 143.045108][ T0] RAX: 0000000000000000 RBX: ffff8880b873ba40 RCX: 0000000000000002 [ 143.045120][ T0] RDX: ffff8880318b9f00 RSI: ffffffff8dbdec30 RDI: ffffffff8bcc4d80 [ 143.045133][ T0] RBP: ffffc900001e7e30 R08: ffff8880b873c91f R09: 0000000000000000 [ 143.045151][ T0] R10: ffff8880b873c910 R11: ffffffff819a0020 R12: dffffc0000000000 [ 143.045164][ T0] R13: ffffffff8dc14a58 R14: ffff88801e29dd00 R15: ffff8880b873c620 [ 143.045181][ T0] ? __pfx_put_prev_task_idle+0x10/0x10 [ 143.045215][ T0] ? update_curr_idle+0xab/0x260 [ 143.045243][ T0] put_prev_task_idle+0xd/0x20 [ 143.045268][ T0] __schedule+0x3da0/0x5550 [ 143.045309][ T0] ? __pfx___schedule+0x10/0x10 [ 143.045327][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 143.045356][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 143.045383][ T0] schedule_idle+0x51/0x90 [ 143.045403][ T0] do_idle+0x4a6/0x540 [ 143.045429][ T0] ? __pfx_do_idle+0x10/0x10 [ 143.045456][ T0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 143.045482][ T0] cpu_startup_entry+0x43/0x60 [ 143.045507][ T0] start_secondary+0x101/0x110 [ 143.045526][ T0] common_startup_64+0x13e/0x157 [ 143.045565][ T0] [ 144.156726][ T0] Shutting down cpus with NMI [ 144.157376][ T0] Kernel Offset: disabled