last executing test programs: 4.202272468s ago: executing program 1 (id=63): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x4008, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@sack_perm, @window={0x3, 0x7, 0x7}, @mss={0x2, 0x8}, @mss, @sack_perm, @mss={0x2, 0x5}, @mss={0x2, 0x94}, @sack_perm], 0x8) sendmsg(r0, &(0x7f0000008500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="c8986d", 0x3}], 0x1}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) 4.057798304s ago: executing program 3 (id=64): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "0f6b01fa00a30c00", "9e8ecc7bb535247672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "0002d900", "a1014200000102a0"}, 0x38) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x400, 0x8c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x28, 0x0, 0x0) 3.824560638s ago: executing program 3 (id=65): socket$inet6(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) iopl(0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004844}, 0x0) r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x1, 0x0) 3.482050805s ago: executing program 2 (id=69): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) msgget$private(0x0, 0x3ac) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x56, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.278182453s ago: executing program 1 (id=70): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000500)=0x40, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000540)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000580)=0x2, 0x4) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@timestamp, @sack_perm], 0x20000000000000c7) sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="c8", 0x1}], 0x1}, 0x4000800) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) sendto$inet(r0, &(0x7f0000000740)='<', 0xfdef, 0x805, 0x0, 0x0) 2.866194346s ago: executing program 0 (id=73): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80, 0x51}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0xfff2, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.522773952s ago: executing program 2 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='100', 0x3) pipe(0x0) mkdirat(0xffffffffffffffff, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd06, 0x0) unshare(0x40000000) 2.384177613s ago: executing program 3 (id=75): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0x400000f2, 0x0, 0xfffffffffffffffd}]}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0xf, 0x2, 0x70000, 0x2000, &(0x7f0000340000/0x2000)=nil}) fstat(r4, &(0x7f0000000140)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 2.382505913s ago: executing program 1 (id=76): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.240368308s ago: executing program 0 (id=77): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d0e, &(0x7f0000000040)={0x8, 0x4}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.164370806s ago: executing program 0 (id=78): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) 2.15639044s ago: executing program 2 (id=79): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.114335459s ago: executing program 1 (id=80): setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) ioperm(0x4, 0x8, 0x5) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) unshare(0x6a040000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000080)={0x6, 'caif0\x00', {0x8}, 0x3}) 1.967885257s ago: executing program 0 (id=81): socket$kcm(0xa, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) recvfrom$inet(r1, &(0x7f0000000200)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1.699805215s ago: executing program 2 (id=82): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r1, 0x4, 0x0) 1.176610426s ago: executing program 3 (id=83): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x3, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa5, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0xcf9, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x0, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x8, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x7, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0xa, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10022, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)=@phonet, 0x80, 0x0, 0x0, &(0x7f0000000700)=""/6, 0x6}, 0x40010040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 915.841506ms ago: executing program 0 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='270', 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x40000000) 818.748879ms ago: executing program 3 (id=85): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') unshare(0x20000400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, r0, 0x1000, 0x1, 0x16, 0x100000000}) 660.919721ms ago: executing program 3 (id=86): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x86, 0x7, 0x7ffffffc, 0x717e387b, 0x40, "1aec4a0624788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 281.482884ms ago: executing program 1 (id=87): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x2000400c) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000081}, 0x4080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x632, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 255.958426ms ago: executing program 0 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0\x00', 0x1) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/cpu/smt/control\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='off\x00', 0x3) write(r1, &(0x7f0000000200)='on\x00', 0x2) close(r1) 177.452366ms ago: executing program 2 (id=89): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5db3}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) 68.233886ms ago: executing program 1 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x30000, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r2, 0x1) flock(r1, 0x1) flock(r0, 0x5) 0s ago: executing program 2 (id=91): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@tipc_packet={0xb, 0x6, "47cf2c", 0x2c, 0x6, 0x5764972646e6bd40, @dev={0xfe, 0x80, '\x00', 0xf}, @remote, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x1, 0xb, 0x2, 0x2, 0x0, 0x0, 0x1, 0x5, 0x4, 0x1, 0x0, 0x3, 0x3, 0x4e24, 0x4e24}, 0x2, 0x1}, 0x1, 0x2}, 0x1}}}}}}}, 0x62) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:2766' (ED25519) to the list of known hosts. [ 33.525909][ T5656] cgroup: Unknown subsys name 'net' [ 33.664299][ T5656] cgroup: Unknown subsys name 'cpuset' [ 33.666760][ T5656] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.557167][ T5656] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.039213][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.040081][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.040637][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.040697][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.042082][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.042386][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.042396][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.042628][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.043304][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.043391][ T5743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.043785][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.045523][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.046076][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.046190][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.046670][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.047125][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.047740][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.047854][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.055539][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.057080][ T5732] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.577553][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.577600][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.577657][ T5729] bridge_slave_0: entered allmulticast mode [ 38.578895][ T5729] bridge_slave_0: entered promiscuous mode [ 38.592495][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.592538][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.592595][ T5729] bridge_slave_1: entered allmulticast mode [ 38.593331][ T5729] bridge_slave_1: entered promiscuous mode [ 38.635562][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.635631][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.635691][ T5733] bridge_slave_0: entered allmulticast mode [ 38.636418][ T5733] bridge_slave_0: entered promiscuous mode [ 38.647470][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.647545][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.647627][ T5731] bridge_slave_0: entered allmulticast mode [ 38.648342][ T5731] bridge_slave_0: entered promiscuous mode [ 38.651992][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.652034][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.652088][ T5731] bridge_slave_1: entered allmulticast mode [ 38.652808][ T5731] bridge_slave_1: entered promiscuous mode [ 38.653426][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.653464][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.653514][ T5733] bridge_slave_1: entered allmulticast mode [ 38.654522][ T5733] bridge_slave_1: entered promiscuous mode [ 38.663621][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.690294][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.697811][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.699023][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.699228][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.699267][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.699325][ T5730] bridge_slave_0: entered allmulticast mode [ 38.700017][ T5730] bridge_slave_0: entered promiscuous mode [ 38.702018][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.713868][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.726605][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.726652][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.726798][ T5730] bridge_slave_1: entered allmulticast mode [ 38.727505][ T5730] bridge_slave_1: entered promiscuous mode [ 38.735068][ T5729] team0: Port device team_slave_0 added [ 38.735920][ T5733] team0: Port device team_slave_0 added [ 38.736915][ T5729] team0: Port device team_slave_1 added [ 38.749819][ T5733] team0: Port device team_slave_1 added [ 38.762289][ T5731] team0: Port device team_slave_0 added [ 38.774741][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.784222][ T5731] team0: Port device team_slave_1 added [ 38.784649][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.784658][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.784670][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.785824][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.785831][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.785843][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.786322][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.786330][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.786342][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.786848][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.786855][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.786867][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.788195][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.820512][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.820526][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.820544][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.828061][ T5730] team0: Port device team_slave_0 added [ 38.829792][ T5730] team0: Port device team_slave_1 added [ 38.831046][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.831055][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.831067][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.879045][ T5729] hsr_slave_0: entered promiscuous mode [ 38.879791][ T5729] hsr_slave_1: entered promiscuous mode [ 38.886236][ T5733] hsr_slave_0: entered promiscuous mode [ 38.886675][ T5733] hsr_slave_1: entered promiscuous mode [ 38.886969][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 38.887006][ T5733] Cannot create hsr debugfs directory [ 38.887451][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.887460][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.887474][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.888552][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.888560][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.888572][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.933931][ T5731] hsr_slave_0: entered promiscuous mode [ 38.934360][ T5731] hsr_slave_1: entered promiscuous mode [ 38.935200][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 38.935212][ T5731] Cannot create hsr debugfs directory [ 38.982666][ T5730] hsr_slave_0: entered promiscuous mode [ 38.983137][ T5730] hsr_slave_1: entered promiscuous mode [ 38.983475][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 38.983487][ T5730] Cannot create hsr debugfs directory [ 39.222418][ T5729] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.230001][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.235960][ T5729] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.240652][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.247130][ T5729] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.252270][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.258799][ T5729] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.261689][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.300642][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.305297][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.309138][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.312758][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.313149][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.318201][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.320199][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.320244][ T5729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.320690][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.320737][ T5729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.334005][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.338391][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.393563][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.393617][ T5733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.393718][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.393781][ T5733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.396100][ T5730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.398753][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.401848][ T692] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.403611][ T692] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.405845][ T692] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.411095][ T692] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.438715][ T5730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.441824][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.443315][ T5730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.448596][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.449274][ T5730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.452254][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.521156][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.524130][ T5731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.527679][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.534067][ T5731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.536822][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.540144][ T5731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.542402][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.543152][ T5731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.548368][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.563622][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.575519][ T692] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.575602][ T692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.591423][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.591472][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.614363][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.639614][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.646832][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.662448][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.662497][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.664190][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.664230][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.671167][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.689253][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.689340][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.690982][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.691024][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.698052][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.709567][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.722459][ T692] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.722527][ T692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.732631][ T692] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.732686][ T692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.983296][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.993436][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.018668][ T5729] veth0_vlan: entered promiscuous mode [ 40.023032][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.026094][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.029620][ T5729] veth1_vlan: entered promiscuous mode [ 40.054527][ T5733] veth0_vlan: entered promiscuous mode [ 40.066626][ T5733] veth1_vlan: entered promiscuous mode [ 40.097736][ T5729] veth0_macvtap: entered promiscuous mode [ 40.102970][ T5731] veth0_vlan: entered promiscuous mode [ 40.103200][ T5730] veth0_vlan: entered promiscuous mode [ 40.107952][ T5729] veth1_macvtap: entered promiscuous mode [ 40.110537][ T5733] veth0_macvtap: entered promiscuous mode [ 40.113954][ T66] Bluetooth: hci2: command tx timeout [ 40.113957][ T5742] Bluetooth: hci0: command tx timeout [ 40.113964][ T5746] Bluetooth: hci1: command tx timeout [ 40.114380][ T66] Bluetooth: hci3: command tx timeout [ 40.122357][ T5733] veth1_macvtap: entered promiscuous mode [ 40.125265][ T5730] veth1_vlan: entered promiscuous mode [ 40.127231][ T5731] veth1_vlan: entered promiscuous mode [ 40.133720][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.146135][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.151580][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.166186][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.185110][ T5731] veth0_macvtap: entered promiscuous mode [ 40.196452][ T5730] veth0_macvtap: entered promiscuous mode [ 40.201412][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.201545][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.201577][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.201607][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.207593][ T5731] veth1_macvtap: entered promiscuous mode [ 40.212467][ T5730] veth1_macvtap: entered promiscuous mode [ 40.231347][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.234194][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.242939][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.261329][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.261355][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.261373][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.286344][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.294615][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.294630][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.300568][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.314567][ T692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.314579][ T692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.329309][ T692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.329321][ T692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.346808][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.346819][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.353586][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.353620][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.353638][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.353656][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.353674][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.353692][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.353709][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.353727][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.356779][ T692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.356790][ T692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.390401][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.390413][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.397976][ T692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.397987][ T692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.401517][ T5733] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.410257][ T5733] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.416176][ T5733] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.417285][ T5733] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.426357][ T5733] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.430563][ T692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.430574][ T692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.545120][ T5886] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 40.616334][ T5892] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET) [ 42.191589][ T5742] Bluetooth: hci3: command tx timeout [ 42.191606][ T5746] Bluetooth: hci2: command tx timeout [ 42.191639][ T5745] Bluetooth: hci1: command tx timeout [ 42.204727][ T5745] Bluetooth: hci0: command tx timeout [ 42.438357][ T5919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.496838][ T5919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.549352][ T5919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.591364][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 42.591392][ T5745] Bluetooth: hci4: command 0x1003 tx timeout [ 42.651359][ T1474] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 42.812827][ T1474] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 42.814141][ T1474] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 42.815373][ T1474] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 42.817401][ T1474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.817413][ T1474] usb 5-1: Product: syz [ 42.817420][ T1474] usb 5-1: Manufacturer: syz [ 42.817427][ T1474] usb 5-1: SerialNumber: syz [ 42.824259][ T1474] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 42.828640][ T1474] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 42.832773][ T1474] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 43.676011][ T5930] cgroup: fork rejected by pids controller in /syz3 [ 43.833800][ T1474] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 44.006248][ T1474] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 44.007242][ T1474] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 44.007256][ T1474] usb 7-1: config 0 has no interface number 0 [ 44.007278][ T1474] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 44.008978][ T1474] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.008989][ T1474] usb 7-1: Product: syz [ 44.008996][ T1474] usb 7-1: Manufacturer: syz [ 44.009003][ T1474] usb 7-1: SerialNumber: syz [ 44.014398][ T1474] usb 7-1: config 0 descriptor?? [ 44.028878][ T1474] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 44.281289][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 44.281360][ T66] Bluetooth: hci2: command tx timeout [ 44.281394][ T66] Bluetooth: hci0: command tx timeout [ 44.281414][ T66] Bluetooth: hci1: command tx timeout [ 44.281522][ T5745] Bluetooth: hci3: command tx timeout [ 44.442453][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.444101][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 44.444117][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.444894][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 44.444906][ T9] usb 6-1: SerialNumber: syz [ 44.447203][ T5972] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 44.655086][ T5972] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 45.153082][ T5917] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 45.153380][ T5917] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 45.153400][ T5917] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 45.153722][ T5917] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 45.159093][ T5879] usb 5-1: USB disconnect, device number 2 [ 45.164795][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 45.166781][ T5980] Zero length message leads to an empty skb [ 45.193552][ T5879] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 45.198640][ T5879] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 45.199160][ T5879] ti_usb_3410_5052 5-1:2.0: device disconnected [ 45.300164][ T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 45.307037][ T9] usb 6-1: USB disconnect, device number 2 [ 46.282472][ C3] usb 7-1: yurex_control_callback - control failed: -2 [ 46.284670][ T9] usb 7-1: USB disconnect, device number 2 [ 46.291642][ T9] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 46.352074][ T5742] Bluetooth: hci3: command tx timeout [ 46.352096][ T5742] Bluetooth: hci1: command tx timeout [ 46.352108][ T5742] Bluetooth: hci2: command tx timeout [ 46.352188][ T5745] Bluetooth: hci0: command tx timeout [ 47.076322][ T6014] Console: switching to colour dummy device 80x25 [ 47.170512][ T43] audit: type=1326 audit(1791739440.560:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.0.35" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 47.171845][ T43] audit: type=1326 audit(1791739440.560:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.0.35" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 47.173596][ T43] audit: type=1326 audit(1791739440.570:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.0.35" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf710762b code=0x7ffc0000 [ 47.175070][ T43] audit: type=1326 audit(1791739440.570:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.0.35" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 47.175497][ T43] audit: type=1326 audit(1791739440.570:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.0.35" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 47.175536][ T43] audit: type=1326 audit(1791739440.570:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.0.35" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 47.175618][ T43] audit: type=1326 audit(1791739440.570:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.0.35" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf710762b code=0x7ffc0000 [ 47.175755][ T43] audit: type=1326 audit(1791739440.570:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.0.35" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 47.175899][ T43] audit: type=1326 audit(1791739440.570:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.0.35" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 47.177398][ T43] audit: type=1326 audit(1791739440.570:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.0.35" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 47.185678][ T5745] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 47.185691][ T5745] CPU: 3 UID: 0 PID: 5745 Comm: kworker/u34:7 Not tainted syzkaller #0 PREEMPT(full) [ 47.185706][ T5745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.185714][ T5745] Workqueue: hci3 hci_rx_work [ 47.185732][ T5745] Call Trace: [ 47.185736][ T5745] [ 47.185741][ T5745] dump_stack_lvl+0x100/0x190 [ 47.185772][ T5745] sysfs_warn_dup.cold+0x1c/0x28 [ 47.185793][ T5745] sysfs_create_dir_ns+0x24b/0x2b0 [ 47.185811][ T5745] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 47.185827][ T5745] ? find_held_lock+0x2b/0x80 [ 47.185841][ T5745] ? kobject_add_internal+0x25f/0x930 [ 47.185855][ T5745] ? kobject_add_internal+0x25f/0x930 [ 47.185870][ T5745] ? do_raw_spin_unlock+0x145/0x1e0 [ 47.185885][ T5745] kobject_add_internal+0x2c8/0x930 [ 47.185901][ T5745] kobject_add+0x16a/0x1e0 [ 47.185915][ T5745] ? __pfx_kobject_add+0x10/0x10 [ 47.185928][ T5745] ? class_to_subsys+0x10f/0x150 [ 47.185946][ T5745] ? kobject_put+0xb9/0x640 [ 47.185963][ T5745] ? _raw_spin_unlock+0x28/0x50 [ 47.185983][ T5745] device_add+0x294/0x1970 [ 47.185999][ T5745] ? __pfx_dev_set_name+0x10/0x10 [ 47.186016][ T5745] ? __pfx_device_add+0x10/0x10 [ 47.186032][ T5745] ? mgmt_send_event_skb+0x2fb/0x460 [ 47.186053][ T5745] hci_conn_add_sysfs+0x1a3/0x260 [ 47.186073][ T5745] le_conn_complete_evt+0x122f/0x2130 [ 47.186092][ T5745] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 47.186107][ T5745] ? hci_event_packet+0x186/0xcd0 [ 47.186120][ T5745] ? hci_event_packet+0x186/0xcd0 [ 47.186137][ T5745] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 47.186153][ T5745] ? skb_pull_data+0x15f/0x1e0 [ 47.186172][ T5745] hci_le_meta_evt+0x34a/0x5f0 [ 47.186188][ T5745] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 47.186205][ T5745] hci_event_packet+0x51c/0xcd0 [ 47.186220][ T5745] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 47.186236][ T5745] ? __pfx_hci_event_packet+0x10/0x10 [ 47.186254][ T5745] ? lockdep_hardirqs_on+0x7d/0x110 [ 47.186274][ T5745] hci_rx_work+0x451/0xfc0 [ 47.186291][ T5745] process_one_work+0xac7/0x1b10 [ 47.186313][ T5745] ? __pfx_process_one_work+0x10/0x10 [ 47.186329][ T5745] ? lock_acquire+0x1d1/0x380 [ 47.186349][ T5745] ? __pfx_hci_rx_work+0x10/0x10 [ 47.186364][ T5745] worker_thread+0x5ef/0xe50 [ 47.186383][ T5745] ? __pfx_worker_thread+0x10/0x10 [ 47.186397][ T5745] ? kthread+0x13a/0x450 [ 47.186409][ T5745] ? __pfx_worker_thread+0x10/0x10 [ 47.186422][ T5745] kthread+0x373/0x450 [ 47.186435][ T5745] ? __pfx_kthread+0x10/0x10 [ 47.186448][ T5745] ret_from_fork+0x730/0xd60 [ 47.186460][ T5745] ? __pfx_ret_from_fork+0x10/0x10 [ 47.186472][ T5745] ? __switch_to+0x800/0x10f0 [ 47.186486][ T5745] ? __pfx_kthread+0x10/0x10 [ 47.186500][ T5745] ret_from_fork_asm+0x1a/0x30 [ 47.186519][ T5745] [ 47.186558][ T5745] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 47.186579][ T5745] Bluetooth: hci3: failed to register connection device [ 47.201280][ T5879] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 47.220895][ T6020] process 'syz.3.34' launched './file0' with NULL argv: empty string added [ 47.361320][ T5879] usb 7-1: Using ep0 maxpacket: 8 [ 47.362557][ T5879] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 47.363405][ T5879] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 47.363419][ T5879] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 47.363431][ T5879] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 47.363442][ T5879] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 47.363463][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.576968][ T5879] usb 7-1: GET_CAPABILITIES returned 0 [ 47.576992][ T5879] usbtmc 7-1:16.0: can't read capabilities [ 47.781449][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.782212][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.782717][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.782742][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.782773][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.782790][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.782807][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.782823][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.782840][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.783084][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.783116][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.784089][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.784110][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.784127][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.784144][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.784160][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 47.787201][ T854] usb 7-1: USB disconnect, device number 3 [ 48.343148][ T6038] FAULT_INJECTION: forcing a failure. [ 48.343148][ T6038] name failslab, interval 1, probability 0, space 0, times 1 [ 48.343169][ T6038] CPU: 2 UID: 0 PID: 6038 Comm: syz.0.42 Not tainted syzkaller #0 PREEMPT(full) [ 48.343183][ T6038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.343202][ T6038] Call Trace: [ 48.343207][ T6038] [ 48.343212][ T6038] dump_stack_lvl+0x100/0x190 [ 48.343233][ T6038] should_fail_ex.cold+0x5/0xa [ 48.343248][ T6038] should_failslab+0xc2/0x120 [ 48.343267][ T6038] __kmalloc_noprof+0xfc/0x840 [ 48.343283][ T6038] ? rcu_is_watching+0x13/0xc0 [ 48.343296][ T6038] ? tomoyo_realpath_from_path+0xb6/0x690 [ 48.343317][ T6038] tomoyo_realpath_from_path+0xb6/0x690 [ 48.343342][ T6038] tomoyo_path2_perm+0x29f/0x700 [ 48.343356][ T6038] ? tomoyo_path2_perm+0x291/0x700 [ 48.343370][ T6038] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 48.343399][ T6038] ? do_raw_spin_lock+0x128/0x260 [ 48.343416][ T6038] tomoyo_path_rename+0xfc/0x1a0 [ 48.343435][ T6038] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 48.343454][ T6038] ? do_raw_spin_unlock+0x145/0x1e0 [ 48.343470][ T6038] security_path_rename+0x18e/0x3c0 [ 48.343490][ T6038] filename_renameat2+0x731/0xa60 [ 48.343506][ T6038] ? __pfx_filename_renameat2+0x10/0x10 [ 48.343519][ T6038] ? lock_acquire+0x1d1/0x380 [ 48.343535][ T6038] ? __might_fault+0xc5/0x140 [ 48.343548][ T6038] ? __might_fault+0xc5/0x140 [ 48.343568][ T6038] ? do_getname+0x191/0x390 [ 48.343581][ T6038] __ia32_sys_renameat2+0xee/0x140 [ 48.343593][ T6038] __do_fast_syscall_32+0x13a/0x8b0 [ 48.343608][ T6038] do_fast_syscall_32+0x32/0x70 [ 48.343619][ T6038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 48.343634][ T6038] RIP: 0023:0xf73aefec [ 48.343648][ T6038] Code: Unable to access opcode bytes at 0xf73aefc2. [ 48.343653][ T6038] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000161 [ 48.343664][ T6038] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 48.343671][ T6038] RDX: 0000000000000004 RSI: 0000000080000740 RDI: 0000000000000001 [ 48.343678][ T6038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 48.343685][ T6038] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 48.343692][ T6038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.343707][ T6038] [ 48.343724][ T6038] ERROR: Out of memory at tomoyo_realpath_from_path. [ 49.099183][ T6050] TC_ACT_REPEAT abuse ? [ 49.524065][ T6055] warning: `syz.0.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.094959][ T6081] binder: 6079:6081 unknown command 0 [ 51.094971][ T6081] binder: 6079:6081 ioctl c0306201 800004c0 returned -22 [ 51.198999][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.199542][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.452174][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.459570][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.682485][ T6091] bridge_slave_1: left allmulticast mode [ 51.682496][ T6091] bridge_slave_1: left promiscuous mode [ 51.682606][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.692013][ T5783] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.692037][ T5783] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.692055][ T5783] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.692073][ T5783] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.940619][ T6097] FAULT_INJECTION: forcing a failure. [ 51.940619][ T6097] name failslab, interval 1, probability 0, space 0, times 0 [ 51.940637][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.0.61 Not tainted syzkaller #0 PREEMPT(full) [ 51.940650][ T6097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.940658][ T6097] Call Trace: [ 51.940662][ T6097] [ 51.940667][ T6097] dump_stack_lvl+0x100/0x190 [ 51.940688][ T6097] should_fail_ex.cold+0x5/0xa [ 51.940705][ T6097] should_failslab+0xc2/0x120 [ 51.940725][ T6097] kmem_cache_alloc_noprof+0x92/0x6a0 [ 51.940742][ T6097] ? security_file_alloc+0x34/0x2c0 [ 51.940760][ T6097] security_file_alloc+0x34/0x2c0 [ 51.940777][ T6097] init_file+0x95/0x480 [ 51.940795][ T6097] alloc_empty_file+0x79/0x1c0 [ 51.940806][ T6097] alloc_file_pseudo+0x183/0x290 [ 51.940818][ T6097] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 51.940829][ T6097] ? inode_init_always_gfp+0xc90/0xfb0 [ 51.940849][ T6097] sock_alloc_file+0x50/0x210 [ 51.940865][ T6097] do_accept+0x242/0x530 [ 51.940877][ T6097] ? do_raw_spin_lock+0x128/0x260 [ 51.940890][ T6097] ? __pfx_do_accept+0x10/0x10 [ 51.940910][ T6097] __sys_accept4+0x108/0x200 [ 51.940922][ T6097] ? __pfx___sys_accept4+0x10/0x10 [ 51.940938][ T6097] __ia32_sys_accept4+0x94/0x100 [ 51.940950][ T6097] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.940969][ T6097] __do_fast_syscall_32+0x13a/0x8b0 [ 51.940983][ T6097] do_fast_syscall_32+0x32/0x70 [ 51.940996][ T6097] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.941011][ T6097] RIP: 0023:0xf73aefec [ 51.941023][ T6097] Code: Unable to access opcode bytes at 0xf73aefc2. [ 51.941029][ T6097] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 51.941041][ T6097] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 51.941049][ T6097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.941056][ T6097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.941063][ T6097] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.941071][ T6097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.941085][ T6097] [ 51.992812][ T6095] Illegal XDP return value 4294967282 on prog (id 5) dev syz_tun, expect packet loss! [ 52.288518][ T6103] netlink: 'syz.0.62': attribute type 4 has an invalid length. [ 52.335735][ T6103] netlink: 'syz.0.62': attribute type 4 has an invalid length. [ 52.432349][ T6107] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 52.432496][ T6107] CIFS: Attempting to mount //127.0.0.1/share [ 52.432833][ T6107] FAULT_INJECTION: forcing a failure. [ 52.432833][ T6107] name failslab, interval 1, probability 0, space 0, times 0 [ 52.432851][ T6107] CPU: 1 UID: 0 PID: 6107 Comm: syz.0.66 Not tainted syzkaller #0 PREEMPT(full) [ 52.432865][ T6107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.432873][ T6107] Call Trace: [ 52.432877][ T6107] [ 52.432882][ T6107] dump_stack_lvl+0x100/0x190 [ 52.432902][ T6107] should_fail_ex.cold+0x5/0xa [ 52.432919][ T6107] should_failslab+0xc2/0x120 ** 5 printk messages dropped ** [ 52.432957][ T6107] ? __kasan_kmalloc+0xaa/0xb0 ** 124 printk messages dropped ** [ 52.434496][ T6107] CIFS: VFS: cifs_mount failed w/return code = -12 ** 591 printk messages dropped ** [ 52.655707][ T6112] fuse: Bad value for 'fd' [ 52.659480][ T6111] FAULT_INJECTION: forcing a failure. [ 52.659480][ T6111] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.659499][ T6111] CPU: 2 UID: 0 PID: 6111 Comm: syz.2.67 Not tainted syzkaller #0 PREEMPT(full) [ 52.659514][ T6111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.659521][ T6111] Call Trace: [ 52.659526][ T6111] [ 52.659530][ T6111] dump_stack_lvl+0x100/0x190 [ 52.659552][ T6111] should_fail_ex.cold+0x5/0xa [ 52.659568][ T6111] _copy_from_iter+0x1f4/0x1690 [ 52.659584][ T6111] ? trace_kmem_cache_alloc+0xdd/0x100 [ 52.659602][ T6111] ? __kasan_slab_alloc+0x89/0x90 [ 52.659622][ T6111] ? __pfx__copy_from_iter+0x10/0x10 [ 52.659635][ T6111] ? __asan_memset+0x23/0x50 [ 52.659651][ T6111] ? __build_skb_around+0x278/0x390 [ 52.659672][ T6111] ? is_vmalloc_addr+0x86/0xa0 [ 52.659688][ T6111] netlink_sendmsg+0x808/0xda0 [ 52.659712][ T6111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.659728][ T6111] ? apparmor_socket_sendmsg+0x165/0x280 [ 52.659745][ T6111] sock_write_iter+0x53a/0x5b0 [ 52.659763][ T6111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.659777][ T6111] ? __pfx_sock_write_iter+0x10/0x10 [ 52.659804][ T6111] do_iter_readv_writev+0x6f7/0x930 [ 52.659820][ T6111] ? __pfx_do_iter_readv_writev+0x10/0x10 ** 43 printk messages dropped ** ** 161 printk messages dropped ** ** 166 printk messages dropped ** ** 161 printk messages dropped ** ** 162 printk messages dropped ** ** 165 printk messages dropped ** ** 162 printk messages dropped ** ** 163 printk messages dropped ** ** 159 printk messages dropped ** ** 155 printk messages dropped ** ** 160 printk messages dropped ** ** 65 printk messages dropped ** [ 53.297140][ T6120] netlink: 128 bytes leftover after parsing attributes in process `syz.0.72'. [ 53.854204][ T6124] FAULT_INJECTION: forcing a failure. [ 53.854204][ T6124] name failslab, interval 1, probability 0, space 0, times 0 [ 53.854221][ T6124] CPU: 2 UID: 0 PID: 6124 Comm: syz.2.74 Not tainted syzkaller #0 PREEMPT(full) [ 53.854236][ T6124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.854245][ T6124] Call Trace: [ 53.854250][ T6124] [ 53.854255][ T6124] dump_stack_lvl+0x100/0x190 [ 53.854278][ T6124] should_fail_ex.cold+0x5/0xa [ 53.854294][ T6124] should_failslab+0xc2/0x120 [ 53.854313][ T6124] __kmalloc_noprof+0xfc/0x840 [ 53.854329][ T6124] ? trace_kmalloc+0xeb/0x110 [ 53.854347][ T6124] ? lsm_blob_alloc+0x68/0x90 [ 53.854368][ T6124] lsm_blob_alloc+0x68/0x90 [ 53.854386][ T6124] security_sk_alloc+0x2d/0x290 [ 53.854399][ T6124] sk_prot_alloc+0x12a/0x2a0 [ 53.854417][ T6124] sk_alloc+0x36/0xe80 [ 53.854431][ T6124] __netlink_create+0x5e/0x2c0 [ 53.854449][ T6124] __netlink_kernel_create+0xed/0x750 [ 53.854462][ T6124] ? __kasan_kmalloc+0xaa/0xb0 [ 53.854478][ T6124] ? __pfx___netlink_kernel_create+0x10/0x10 [ 53.854490][ T6124] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 53.854504][ T6124] ? uevent_net_init+0xd3/0x330 [ 53.854523][ T6124] uevent_net_init+0xf8/0x330 [ 53.854538][ T6124] ? __pfx_uevent_net_init+0x10/0x10 [ 53.854553][ T6124] ? __kasan_kmalloc+0xaa/0xb0 [ 53.854569][ T6124] ? __pfx_uevent_net_rcv+0x10/0x10 [ 53.854589][ T6124] ? __pfx_uevent_net_init+0x10/0x10 [ 53.854604][ T6124] ops_init+0x1e2/0x5f0 [ 53.854621][ T6124] setup_net+0x118/0x3a0 [ 53.854636][ T6124] ? __pfx_setup_net+0x10/0x10 [ 53.854657][ T6124] copy_net_ns+0x345/0x7a0 [ 53.854675][ T6124] create_new_namespaces+0x3ea/0xac0 [ 53.854696][ T6124] unshare_nsproxy_namespaces+0xf2/0x220 [ 53.854716][ T6124] ksys_unshare+0x4a2/0xb30 [ 53.854732][ T6124] ? __pfx_ksys_unshare+0x10/0x10 [ 53.854749][ T6124] __ia32_sys_unshare+0x30/0x40 [ 53.854762][ T6124] __do_fast_syscall_32+0x13a/0x8b0 ** 169 printk messages dropped ** ** 134 printk messages dropped ** ** 134 printk messages dropped ** ** 125 printk messages dropped ** ** 125 printk messages dropped ** ** 124 printk messages dropped ** ** 139 printk messages dropped ** ** 153 printk messages dropped ** ** 132 printk messages dropped ** ** 136 printk messages dropped ** ** 124 printk messages dropped ** ** 129 printk messages dropped ** ** 142 printk messages dropped ** ** 151 printk messages dropped ** ** 91 printk messages dropped ** [ 54.208051][ C3] net_ratelimit: 52 callbacks suppressed [ 54.254584][ T6136] FAULT_INJECTION: forcing a failure. [ 54.254584][ T6136] name failslab, interval 1, probability 0, space 0, times 0 [ 54.254607][ T6136] CPU: 2 UID: 0 PID: 6136 Comm: syz.2.79 Not tainted syzkaller #0 PREEMPT(full) [ 54.254623][ T6136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.254630][ T6136] Call Trace: [ 54.254635][ T6136] [ 54.254640][ T6136] dump_stack_lvl+0x100/0x190 [ 54.254659][ T6136] should_fail_ex.cold+0x5/0xa [ 54.254682][ T6136] should_failslab+0xc2/0x120 [ 54.254711][ T6136] kmem_cache_alloc_noprof+0x92/0x6a0 [ 54.254735][ T6136] ? __asan_memcpy+0x3c/0x60 [ 54.254751][ T6136] ? __kernfs_new_node+0xd2/0xa10 [ 54.254772][ T6136] __kernfs_new_node+0xd2/0xa10 [ 54.254785][ T6136] ? __pfx_string+0x10/0x10 [ 54.254803][ T6136] ? __pfx___kernfs_new_node+0x10/0x10 [ 54.254816][ T6136] ? lock_acquire+0x1d1/0x380 [ 54.254834][ T6136] ? kernfs_root+0x23/0x2a0 [ 54.254856][ T6136] ? find_held_lock+0x2b/0x80 [ 54.254876][ T6136] ? kernfs_root+0xee/0x2a0 [ 54.254902][ T6136] ? kernfs_root+0xee/0x2a0 ** 81 printk messages dropped ** ** 121 printk messages dropped ** [ 54.325024][ T6136] kobject: kobject_add_internal failed for xprt-0-tcp (error: -12 parent: switch-0) ** 2096 printk messages dropped ** [ 55.397791][ T6152] FAULT_INJECTION: forcing a failure. [ 55.397791][ T6152] name failslab, interval 1, probability 0, space 0, times 0 [ 55.397809][ T6152] CPU: 1 UID: 0 PID: 6152 Comm: syz.0.84 Not tainted syzkaller #0 PREEMPT(full) [ 55.397822][ T6152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.397830][ T6152] Call Trace: [ 55.397834][ T6152] [ 55.397839][ T6152] dump_stack_lvl+0x100/0x190 [ 55.397858][ T6152] should_fail_ex.cold+0x5/0xa [ 55.397874][ T6152] should_failslab+0xc2/0x120 [ 55.397892][ T6152] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 55.397910][ T6152] ? kasan_save_track+0x14/0x30 [ 55.397928][ T6152] ? __udp_init+0x37/0x90 [ 55.397948][ T6152] kmemdup_noprof+0x29/0x60 [ 55.397962][ T6152] ? __pfx___udp_init+0x10/0x10 [ 55.397979][ T6152] __udp_init+0x37/0x90 [ 55.397997][ T6152] ip_vs_protocol_net_init+0x194/0x300 [ 55.398016][ T6152] __ip_vs_init+0x239/0x520 [ 55.398030][ T6152] ? __pfx___ip_vs_init+0x10/0x10 [ 55.398041][ T6152] ops_init+0x1e2/0x5f0 [ 55.398058][ T6152] setup_net+0x118/0x3a0 [ 55.398074][ T6152] ? __pfx_setup_net+0x10/0x10 [ 55.398093][ T6152] copy_net_ns+0x345/0x7a0 [ 55.398111][ T6152] create_new_namespaces+0x3ea/0xac0 [ 55.398132][ T6152] unshare_nsproxy_namespaces+0xf2/0x220 [ 55.398152][ T6152] ksys_unshare+0x4a2/0xb30 [ 55.398165][ T6152] ? __pfx_ksys_unshare+0x10/0x10 [ 55.398183][ T6152] __ia32_sys_unshare+0x30/0x40 [ 55.398195][ T6152] __do_fast_syscall_32+0x13a/0x8b0 [ 55.398210][ T6152] do_fast_syscall_32+0x32/0x70 [ 55.398222][ T6152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.398237][ T6152] RIP: 0023:0xf73aefec [ 55.398251][ T6152] Code: Unable to access opcode bytes at 0xf73aefc2. [ 55.398257][ T6152] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 55.398269][ T6152] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 55.398277][ T6152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.398283][ T6152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.398290][ T6152] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.398297][ T6152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.398312][ T6152] [ 55.527862][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 55.527873][ T43] audit: type=1800 audit(1791739448.920:39): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.85" name="syzkaller1" dev="sda1" ino=2039 res=0 errno=0 [ 55.736634][ T6157] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 55.736661][ T6157] CPU: 0 UID: 0 PID: 6157 Comm: syz.3.86 Not tainted syzkaller #0 PREEMPT(full) [ 55.736678][ T6157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.736698][ T6157] Call Trace: [ 55.736702][ T6157] [ 55.736707][ T6157] dump_stack_lvl+0x100/0x190 [ 55.736728][ T6157] sysfs_warn_dup.cold+0x1c/0x28 [ 55.736753][ T6157] sysfs_create_dir_ns+0x24b/0x2b0 [ 55.736771][ T6157] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 55.736789][ T6157] ? find_held_lock+0x2b/0x80 [ 55.736803][ T6157] ? kobject_add_internal+0x25f/0x930 [ 55.736818][ T6157] ? kobject_add_internal+0x25f/0x930 [ 55.736835][ T6157] ? class_dir_child_ns_type+0xd/0x60 [ 55.736853][ T6157] kobject_add_internal+0x2c8/0x930 [ 55.736870][ T6157] kobject_add+0x16a/0x1e0 [ 55.736884][ T6157] ? __pfx_kobject_add+0x10/0x10 [ 55.736899][ T6157] ? get_device_parent+0x1b3/0x4c0 [ 55.736914][ T6157] ? kobject_put+0xb9/0x640 [ 55.736932][ T6157] device_add+0x294/0x1970 [ 55.736947][ T6157] ? lockdep_init_map_type+0x5c/0x250 [ 55.736966][ T6157] ? __pfx_device_add+0x10/0x10 [ 55.736980][ T6157] ? lockdep_init_map_type+0x5c/0x250 [ 55.736998][ T6157] ? __init_waitqueue_head+0xca/0x150 [ 55.737015][ T6157] tty_register_device_attr+0x388/0x810 [ 55.737029][ T6157] ? lockdep_init_map_type+0x5c/0x250 [ 55.737046][ T6157] ? __pfx_tty_register_device_attr+0x10/0x10 [ 55.737064][ T6157] ? tty_port_init+0x156/0x1c0 [ 55.737079][ T6157] gsm_activate_mux+0x155/0x2a0 [ 55.737094][ T6157] gsmld_ioctl+0xbbc/0x15c0 [ 55.737113][ T6157] ? __pfx_gsmld_ioctl+0x10/0x10 [ 55.737140][ T6157] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.737185][ T6157] ? __pfx_gsmld_ioctl+0x10/0x10 [ 55.737201][ T6157] tty_compat_ioctl+0x396/0x420 [ 55.737215][ T6157] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 55.737230][ T6157] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 55.737250][ T6157] __do_fast_syscall_32+0x13a/0x8b0 [ 55.737265][ T6157] do_fast_syscall_32+0x32/0x70 [ 55.737277][ T6157] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.737292][ T6157] RIP: 0023:0xf73eefec [ 55.737306][ T6157] Code: Unable to access opcode bytes at 0xf73eefc2. [ 55.737312][ T6157] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 55.737323][ T6157] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000404c4701 [ 55.737331][ T6157] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.737338][ T6157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.737345][ T6157] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.737352][ T6157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.737366][ T6157] [ 55.737399][ T6157] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 56.204837][ T6161] smpboot: CPU 1 is now offline [ 56.229528][ T6166] smpboot: Booting Node 0 Proce ** replaying previous printk message ** [ 56.229528][ T6166] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 56.233863][ T5729] ------------[ cut here ]------------ [ 56.233869][ T5729] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 56.233874][ T5729] WARNING: kernel/sched/sched.h:1665 at update_rq_clock+0x40a/0xd20, CPU#0: syz-executor/5729 [ 56.243723][ T5729] Modules linked in: [ 56.245087][ T5729] CPU: 0 UID: 0 PID: 5729 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 56.247808][ T5729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.250770][ T5729] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 56.252405][ T5729] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 56.258046][ T5729] RSP: 0018:ffffc90003fff358 EFLAGS: 00010046 [ 56.259828][ T5729] RAX: 0000000000000000 RBX: ffff88802b13c040 RCX: 0000000000000001 [ 56.262167][ T5729] RDX: 0000000000000046 RSI: ffffffff8e3bae09 RDI: ffffffff8c625b80 [ 56.264499][ T5729] RBP: ffffc90003fff4f8 R08: 0000000000000001 R09: 0000000000000001 [ 56.266811][ T5729] R10: ffff88802b03cbd8 R11: 0000000000000000 R12: ffffffff9245c9e4 [ 56.269164][ T5729] R13: ffff88802b13cf20 R14: ffff88802b13c040 R15: 0000000000000001 [ 56.271485][ T5729] FS: 0000000000000000(0000) GS:ffff88809574a000(0063) knlGS:000000005780e480 [ 56.274079][ T5729] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 56.276036][ T5729] CR2: 0000000032e16ff8 CR3: 0000000066814000 CR4: 0000000000352ef0 [ 56.278400][ T5729] Call Trace: [ 56.279400][ T5729] [ 56.280287][ T5729] __schedule+0x1c69/0x6920 [ 56.281675][ T5729] ? __pfx___schedule+0x10/0x10 [ 56.283141][ T5729] ? mark_held_locks+0x40/0x70 [ 56.284571][ T5729] preempt_schedule_irq+0x4e/0x90 [ 56.286065][ T5729] irqentry_exit+0x205/0xa10 [ 56.287439][ T5729] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 56.289237][ T5729] RIP: 0010:lock_acquire+0x5e/0x380 [ 56.290807][ T5729] Code: 05 0f 76 a6 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 1e ae 5e 10 0f 82 c9 02 00 00 8b 35 9e df 5e 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ad 75 a6 13 0f 85 09 03 00 00 48 83 c4 [ 56.296500][ T5729] RSP: 0018:ffffc90003fff610 EFLAGS: 00000206 [ 56.298343][ T5729] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 56.300713][ T5729] RDX: 0000000000000000 RSI: ffffffff8e3bae09 RDI: ffffffff8c625b80 [ 56.303463][ T5729] RBP: ffff8880299b3440 R08: 0000000000015afa R09: 00000000000001d9 [ 56.305835][ T5729] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000001 [ 56.308202][ T5729] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 56.310571][ T5729] ? __pfx___might_resched+0x10/0x10 [ 56.312180][ T5729] ? __might_fault+0xc5/0x140 [ 56.313621][ T5729] __might_fault+0xde/0x140 [ 56.315003][ T5729] ? __might_fault+0xc5/0x140 [ 56.316419][ T5729] xt_obj_to_user+0xbd/0x120 [ 56.317829][ T5729] xt_compat_target_to_user+0x1ae/0x3f0 [ 56.319510][ T5729] compat_get_entries+0x5af/0x7f0 [ 56.321056][ T5729] ? __pfx_compat_get_entries+0x10/0x10 [ 56.322711][ T5729] ? lock_acquire+0x1d1/0x380 [ 56.324134][ T5729] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 56.325765][ T5729] ? bpf_lsm_capable+0x9/0x10 [ 56.327202][ T5729] ? security_capable+0x80/0x260 [ 56.328690][ T5729] do_ipt_get_ctl+0x5c1/0xab0 [ 56.330109][ T5729] ? __mutex_unlock_slowpath+0x35d/0x930 [ 56.331846][ T5729] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 56.333451][ T5729] ? __sys_socket+0x1c0/0x260 [ 56.334925][ T5729] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 56.336744][ T5729] ? lock_acquire+0x1d1/0x380 [ 56.338200][ T5729] ? __might_fault+0xc5/0x140 [ 56.339653][ T5729] ? nf_sockopt_find.isra.0+0x222/0x290 [ 56.341355][ T5729] nf_getsockopt+0x7c/0xe0 [ 56.342736][ T5729] ip_getsockopt+0x192/0x1e0 [ 56.344177][ T5729] ? __pfx_ip_getsockopt+0x10/0x10 [ 56.345705][ T5729] tcp_getsockopt+0xa1/0x110 [ 56.347119][ T5729] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 56.348869][ T5729] do_sock_getsockopt+0x50a/0x6e0 [ 56.350377][ T5729] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 56.352015][ T5729] ? fd_install+0xa2/0x580 [ 56.353374][ T5729] ? lock_acquire+0x1d1/0x380 [ 56.354760][ T5729] ? __might_fault+0xc5/0x140 [ 56.356165][ T5729] __sys_getsockopt+0x133/0x1d0 [ 56.357637][ T5729] ? __ia32_compat_sys_socketcall+0x6af/0x770 [ 56.359414][ T5729] __ia32_compat_sys_socketcall+0x6af/0x770 [ 56.361145][ T5729] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 56.363059][ T5729] ? xfd_validate_state+0x129/0x190 [ 56.364603][ T5729] __do_fast_syscall_32+0x13a/0x8b0 [ 56.366137][ T5729] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.367654][ T5729] do_fast_syscall_32+0x32/0x70 [ 56.369096][ T5729] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.370947][ T5729] RIP: 0023:0xf73befec [ 56.372176][ T5729] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 56.377837][ T5729] RSP: 002b:00000000ffc86030 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 56.380280][ T5729] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000ffc86068 [ 56.382589][ T5729] RDX: 00000000f73aaff4 RSI: 00000000ffc8613c RDI: 00000000ffc860e4 [ 56.384885][ T5729] RBP: 00000000f73af494 R08: 0000000000000000 R09: 0000000000000000 [ 56.387180][ T5729] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 56.389509][ T5729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.391807][ T5729] [ 56.392735][ T5729] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 56.394860][ T5729] CPU: 0 UID: 0 PID: 5729 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 56.397584][ T5729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.400561][ T5729] Call Trace: [ 56.401572][ T5729] [ 56.402467][ T5729] dump_stack_lvl+0x100/0x190 [ 56.403890][ T5729] vpanic+0x553/0x970 [ 56.405084][ T5729] ? __pfx_vpanic+0x10/0x10 [ 56.406439][ T5729] panic+0xd1/0xe0 [ 56.407533][ T5729] ? __pfx_panic+0x10/0x10 [ 56.408835][ T5729] check_panic_on_warn.cold+0x19/0x34 [ 56.410427][ T5729] ? update_rq_clock+0x40a/0xd20 [ 56.411863][ T5729] __warn.cold+0x191/0x318 [ 56.413186][ T5729] __report_bug+0x30f/0x440 [ 56.414538][ T5729] ? update_rq_clock+0x40a/0xd20 [ 56.415982][ T5729] ? __pfx___report_bug+0x10/0x10 [ 56.417486][ T5729] ? pick_eevdf+0x23e/0x880 [ 56.418830][ T5729] ? update_rq_clock+0x40a/0xd20 [ 56.420268][ T5729] report_bug+0xb3/0x220 [ 56.421543][ T5729] ? update_rq_clock+0x40a/0xd20 [ 56.422986][ T5729] handle_bug+0x16a/0x2a0 [ 56.424263][ T5729] exc_invalid_op+0x17/0x50 [ 56.425625][ T5729] asm_exc_invalid_op+0x1a/0x20 [ 56.427059][ T5729] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 56.428687][ T5729] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 56.434269][ T5729] RSP: 0018:ffffc90003fff358 EFLAGS: 00010046 [ 56.436054][ T5729] RAX: 0000000000000000 RBX: ffff88802b13c040 RCX: 0000000000000001 [ 56.438557][ T5729] RDX: 0000000000000046 RSI: ffffffff8e3bae09 RDI: ffffffff8c625b80 [ 56.441126][ T5729] RBP: ffffc90003fff4f8 R08: 0000000000000001 R09: 0000000000000001 [ 56.443441][ T5729] R10: ffff88802b03cbd8 R11: 0000000000000000 R12: ffffffff9245c9e4 [ 56.445720][ T5729] R13: ffff88802b13cf20 R14: ffff88802b13c040 R15: 0000000000000001 [ 56.448020][ T5729] ? update_rq_clock+0x9c/0xd20 [ 56.449491][ T5729] __schedule+0x1c69/0x6920 [ 56.450861][ T5729] ? __pfx___schedule+0x10/0x10 [ 56.452327][ T5729] ? mark_held_locks+0x40/0x70 [ 56.453782][ T5729] preempt_schedule_irq+0x4e/0x90 [ 56.455299][ T5729] irqentry_exit+0x205/0xa10 [ 56.456662][ T5729] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 56.458437][ T5729] RIP: 0010:lock_acquire+0x5e/0x380 [ 56.460022][ T5729] Code: 05 0f 76 a6 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 1e ae 5e 10 0f 82 c9 02 00 00 8b 35 9e df 5e 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ad 75 a6 13 0f 85 09 03 00 00 48 83 c4 [ 56.465632][ T5729] RSP: 0018:ffffc90003fff610 EFLAGS: 00000206 [ 56.467405][ T5729] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 56.470378][ T5729] RDX: 0000000000000000 RSI: ffffffff8e3bae09 RDI: ffffffff8c625b80 [ 56.472927][ T5729] RBP: ffff8880299b3440 R08: 0000000000015afa R09: 00000000000001d9 [ 56.475294][ T5729] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000001 [ 56.477611][ T5729] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 56.480268][ T5729] ? __pfx___might_resched+0x10/0x10 [ 56.482238][ T5729] ? __might_fault+0xc5/0x140 [ 56.483655][ T5729] __might_fault+0xde/0x140 [ 56.484996][ T5729] ? __might_fault+0xc5/0x140 [ 56.486394][ T5729] xt_obj_to_user+0xbd/0x120 [ 56.487780][ T5729] xt_compat_target_to_user+0x1ae/0x3f0 [ 56.489864][ T5729] compat_get_entries+0x5af/0x7f0 [ 56.491630][ T5729] ? __pfx_compat_get_entries+0x10/0x10 [ 56.493723][ T5729] ? lock_acquire+0x1d1/0x380 [ 56.495264][ T5729] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 56.496865][ T5729] ? bpf_lsm_capable+0x9/0x10 [ 56.498272][ T5729] ? security_capable+0x80/0x260 [ 56.499737][ T5729] do_ipt_get_ctl+0x5c1/0xab0 [ 56.501132][ T5729] ? __mutex_unlock_slowpath+0x35d/0x930 [ 56.502800][ T5729] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 56.504350][ T5729] ? __sys_socket+0x1c0/0x260 [ 56.505750][ T5729] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 56.507520][ T5729] ? lock_acquire+0x1d1/0x380 [ 56.509172][ T5729] ? __might_fault+0xc5/0x140 [ 56.510867][ T5729] ? nf_sockopt_find.isra.0+0x222/0x290 [ 56.513006][ T5729] nf_getsockopt+0x7c/0xe0 [ 56.514745][ T5729] ip_getsockopt+0x192/0x1e0 [ 56.516578][ T5729] ? __pfx_ip_getsockopt+0x10/0x10 [ 56.518597][ T5729] tcp_getsockopt+0xa1/0x110 [ 56.520412][ T5729] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 56.522698][ T5729] do_sock_getsockopt+0x50a/0x6e0 [ 56.524663][ T5729] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 56.526828][ T5729] ? fd_install+0xa2/0x580 [ 56.528596][ T5729] ? lock_acquire+0x1d1/0x380 [ 56.530453][ T5729] ? __might_fault+0xc5/0x140 [ 56.532291][ T5729] __sys_getsockopt+0x133/0x1d0 [ 56.534202][ T5729] ? __ia32_compat_sys_socketcall+0x6af/0x770 [ 56.536564][ T5729] __ia32_compat_sys_socketcall+0x6af/0x770 [ 56.538887][ T5729] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 56.541240][ T5729] ? xfd_validate_state+0x129/0x190 [ 56.543048][ T5729] __do_fast_syscall_32+0x13a/0x8b0 [ 56.544574][ T5729] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.546152][ T5729] do_fast_syscall_32+0x32/0x70 [ 56.547632][ T5729] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.549545][ T5729] RIP: 0023:0xf73befec [ 56.550758][ T5729] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 56.556433][ T5729] RSP: 002b:00000000ffc86030 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 56.558923][ T5729] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000ffc86068 [ 56.561235][ T5729] RDX: 00000000f73aaff4 RSI: 00000000ffc8613c RDI: 00000000ffc860e4 [ 56.563529][ T5729] RBP: 00000000f73af494 R08: 0000000000000000 R09: 0000000000000000 [ 56.565867][ T5729] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 56.568237][ T5729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.570603][ T5729] [ 57.644134][ T5729] Shutting down cpus with NMI [ 57.646202][ T5729] Kernel Offset: disabled [ 57.647597][ T5729] Rebooting in 86400 seconds..