last executing test programs: 3.818090132s ago: executing program 0 (id=1): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3fff, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x4}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x52) write(r5, &(0x7f0000000400)="00000000090209000101008032120100", 0x10) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') 2.923800454s ago: executing program 3 (id=4): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x148, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x58, 0x2, {{'cbc(serpent)\x00'}, 0x80, "000102030405060708090a0b0c0d0e0f"}}]}, 0x148}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x32}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000200)={&(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="200000000000000029000000360000000001000000000000c00400000000010020"], 0x40}, 0x0) 2.296722239s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/intel_agp/drivers/pci:agpgart-intel/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0000:00:00.0\x00', 0xd) close(r0) 2.167118419s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/debug/exception-trace\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x167) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) write(r1, &(0x7f0000000480)='3', 0x1) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000300)="eb", 0x1}], 0x1, 0x0) 1.631935505s ago: executing program 3 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='2', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='1', 0x1) close(r4) nanosleep(&(0x7f0000000300)={0x1, 0x1dcd6500}, 0x0) 1.631240134s ago: executing program 2 (id=6): delete_module(&(0x7f0000000040)='kvm_intel\x00', 0x0) delete_module(&(0x7f0000000080)='kvm_amd\x00', 0x0) delete_module(&(0x7f00000000c0)='kvm\x00', 0x0) 1.505265419s ago: executing program 1 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='core\n', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/mem_sleep\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='deep\n', 0x5) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='mem\n', 0x4) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/power/state\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='disk\n', 0x5) close(r5) 1.482763999s ago: executing program 2 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_freeze_timeout\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='100', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='freezer', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/state\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='mem', 0x3) 1.079322069s ago: executing program 0 (id=9): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) 708.637907ms ago: executing program 3 (id=10): socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='127.0.0.1:/export\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff000000070501024000000705020240"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='e:my_read_msr1 msr/read_ms', 0x1a) write(r1, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0xa423, 0x800, 0x1, 0x40055}, &(0x7f0000000380)=0x0, 0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r4, 0x0, r5, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x14) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz0\x00', {0x1, 0x200, 0x1, 0x1}, 0x1, [0xfa, 0x21, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffd, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8001, 0xffffff2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, &(0x7f00000001c0)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000005c0)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000600)="18000000010003", 0x7) 434.771659ms ago: executing program 0 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='sysfs\x00', &(0x7f0000000200)='./mysys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='core\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='disk\x00', 0x4) 0s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='sysfs\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/devices/0000:00:1f.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='1\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000d00)='1\x00', 0x1) close(r3) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:1706' (ED25519) to the list of known hosts. syzkaller login: [ 82.139497][ T5730] cgroup: Unknown subsys name 'net' [ 82.315926][ T5730] cgroup: Unknown subsys name 'cpuset' [ 82.384318][ T5730] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.031740][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.031792][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.813802][ T5730] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.263768][ T31] cfg80211: failed to load regulatory.db [ 99.205181][ T5760] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.207296][ T5760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.207817][ T5760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.208783][ T68] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.239839][ T5769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.242283][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.242599][ T5769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.242891][ T5769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.243879][ T5768] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.243979][ T5768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.254634][ T5768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.259282][ T5768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.259425][ T5768] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.304294][ T5768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.305020][ T5768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.315315][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.315958][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.316723][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.346199][ T68] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.387922][ T5760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.120112][ T5757] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.122985][ T5763] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 100.125685][ T5757] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.129976][ T5757] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.145279][ T5758] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 100.256691][ T5761] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 100.392482][ T5757] infiniband rxe0: set active [ 100.393189][ T5757] infiniband rxe0: added rxe_eth0 [ 100.460904][ T59] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.464900][ T5757] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 100.464941][ T5757] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 100.464984][ T5757] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 100.533431][ T5757] RDS/IB: rxe0: added [ 100.533605][ T5757] smc: adding ib device rxe0 with port count 1 [ 100.533654][ T5757] smc: ib device rxe0 port 1 has no pnetid [ 100.562842][ T59] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.580402][ T5757] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.953953][ T5757] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.291954][ T5760] Bluetooth: hci0: command tx timeout [ 101.418911][ T5760] Bluetooth: hci1: command tx timeout [ 101.419612][ T5760] Bluetooth: hci2: command tx timeout [ 101.422231][ T5757] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.499310][ T5760] Bluetooth: hci3: command tx timeout [ 101.654941][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.657975][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.658120][ T5763] bridge_slave_0: entered allmulticast mode [ 101.669250][ T5763] bridge_slave_0: entered promiscuous mode [ 101.716310][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.716386][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.716473][ T5763] bridge_slave_1: entered allmulticast mode [ 101.717822][ T5763] bridge_slave_1: entered promiscuous mode [ 101.782900][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.782969][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.783066][ T5761] bridge_slave_0: entered allmulticast mode [ 101.784660][ T5761] bridge_slave_0: entered promiscuous mode [ 101.884532][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.887444][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.945327][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.945455][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.945561][ T5761] bridge_slave_1: entered allmulticast mode [ 101.946847][ T5761] bridge_slave_1: entered promiscuous mode [ 102.069286][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.075604][ T5763] team0: Port device team_slave_0 added [ 102.096217][ T5763] team0: Port device team_slave_1 added [ 102.096815][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.096954][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.097061][ T5758] bridge_slave_0: entered allmulticast mode [ 102.099443][ T5758] bridge_slave_0: entered promiscuous mode [ 102.101807][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.101876][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.102000][ T5758] bridge_slave_1: entered allmulticast mode [ 102.104184][ T5758] bridge_slave_1: entered promiscuous mode [ 102.138870][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.208637][ T5757] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.210144][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.210158][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.210178][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.263492][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.267025][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.268152][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.268166][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.268187][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.296776][ T5761] team0: Port device team_slave_0 added [ 102.394423][ T5761] team0: Port device team_slave_1 added [ 102.399352][ T5758] team0: Port device team_slave_0 added [ 102.401809][ T5758] team0: Port device team_slave_1 added [ 102.621099][ T5763] hsr_slave_0: entered promiscuous mode [ 102.623486][ T5763] hsr_slave_1: entered promiscuous mode [ 102.648101][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.648116][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.648133][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.692995][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.693011][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.693031][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.694614][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.694625][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.694643][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.696395][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.696410][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.696432][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.980094][ T5761] hsr_slave_0: entered promiscuous mode [ 102.980925][ T5761] hsr_slave_1: entered promiscuous mode [ 102.981506][ T5761] debugfs: 'hsr0' already exists in 'hsr' [ 102.981576][ T5761] Cannot create hsr debugfs directory [ 102.985678][ T5758] hsr_slave_0: entered promiscuous mode [ 102.986238][ T5758] hsr_slave_1: entered promiscuous mode [ 102.986647][ T5758] debugfs: 'hsr0' already exists in 'hsr' [ 102.986664][ T5758] Cannot create hsr debugfs directory [ 103.348727][ T5760] Bluetooth: hci0: command tx timeout [ 103.501798][ T5760] Bluetooth: hci2: command tx timeout [ 103.501834][ T5760] Bluetooth: hci1: command tx timeout [ 103.579852][ T5760] Bluetooth: hci3: command tx timeout [ 103.794526][ T5763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.834711][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.835477][ T5763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.861258][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.007018][ T5763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.052542][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.053325][ T5763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.057557][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.059777][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.062339][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.062461][ T5757] bridge_slave_0: entered allmulticast mode [ 104.063869][ T5757] bridge_slave_0: entered promiscuous mode [ 104.144622][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.144718][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.144855][ T5757] bridge_slave_1: entered allmulticast mode [ 104.146522][ T5757] bridge_slave_1: entered promiscuous mode [ 104.245086][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.257674][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.360139][ T5757] team0: Port device team_slave_0 added [ 104.360239][ T5761] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.367659][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.370732][ T5761] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.382624][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.383700][ T5761] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.393925][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.429627][ T5757] team0: Port device team_slave_1 added [ 104.440752][ T5761] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.460831][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.596841][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.596860][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.596881][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.600269][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.600285][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.600306][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.783633][ T5757] hsr_slave_0: entered promiscuous mode [ 104.784646][ T5757] hsr_slave_1: entered promiscuous mode [ 104.785386][ T5757] debugfs: 'hsr0' already exists in 'hsr' [ 104.785405][ T5757] Cannot create hsr debugfs directory [ 104.807523][ T5758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.825589][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.826370][ T5758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.835426][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.854418][ T5758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.885122][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.885910][ T5758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.924279][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.115187][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.120113][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.243033][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.284593][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.292716][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.292858][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.365168][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.365258][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.401466][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.401555][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.403623][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.403696][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.449078][ T5760] Bluetooth: hci0: command tx timeout [ 105.541047][ T5763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.541070][ T5763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.578792][ T5760] Bluetooth: hci1: command tx timeout [ 105.583877][ T5760] Bluetooth: hci2: command tx timeout [ 105.668762][ T5760] Bluetooth: hci3: command tx timeout [ 105.686236][ T5757] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.697668][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.698649][ T5757] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.705867][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.712646][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.752480][ T5757] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.768749][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.769517][ T5757] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.802027][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.838907][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.863683][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.863732][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.916050][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.916139][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.177978][ T5758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.177998][ T5758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.413477][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.468394][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.513821][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.513898][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.515443][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.515509][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.565846][ T5757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.565868][ T5757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.790732][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.902681][ T5763] veth0_vlan: entered promiscuous mode [ 106.912619][ T5763] veth1_vlan: entered promiscuous mode [ 106.956567][ T5763] veth0_macvtap: entered promiscuous mode [ 106.973207][ T5763] veth1_macvtap: entered promiscuous mode [ 107.072593][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.146069][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.400090][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.423773][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.514917][ T5760] Bluetooth: hci0: command tx timeout [ 107.580233][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.590345][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.664427][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.678862][ T5760] Bluetooth: hci1: command tx timeout [ 107.678904][ T5760] Bluetooth: hci2: command tx timeout [ 107.696923][ T5761] veth0_vlan: entered promiscuous mode [ 107.743170][ T5765] Bluetooth: hci3: command tx timeout [ 107.752449][ T15] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.753031][ T15] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.814515][ T5761] veth1_vlan: entered promiscuous mode [ 107.829398][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.829419][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.936492][ T5761] veth0_macvtap: entered promiscuous mode [ 107.940807][ T5761] veth1_macvtap: entered promiscuous mode [ 107.964611][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.964631][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.964790][ T5757] veth0_vlan: entered promiscuous mode [ 108.011991][ T5757] veth1_vlan: entered promiscuous mode [ 108.019317][ T5758] veth0_vlan: entered promiscuous mode [ 108.053854][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.070281][ T5758] veth1_vlan: entered promiscuous mode [ 108.136726][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.317318][ T5757] veth0_macvtap: entered promiscuous mode [ 108.347170][ T5758] veth0_macvtap: entered promiscuous mode [ 108.360899][ T5757] veth1_macvtap: entered promiscuous mode [ 108.387968][ T5763] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.419581][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.420615][ T5763] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 108.423281][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.466313][ T5758] veth1_macvtap: entered promiscuous mode [ 108.523819][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.524505][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.524746][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.525107][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.525239][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.525429][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.525532][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.525655][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.530085][ T5763] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 108.533203][ T5763] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 108.545599][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.626894][ T5763] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 108.681991][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.849059][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.849082][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.991072][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.991116][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.991148][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.991179][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.991289][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.991304][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.384221][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.384244][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.751355][ T206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.751375][ T206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.854592][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.854614][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.959103][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 110.028598][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.028620][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.803025][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 111.021720][ T5927] FAULT_INJECTION: forcing a failure. [ 111.021720][ T5927] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.021761][ T5927] CPU: 2 UID: 0 PID: 5927 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 111.021782][ T5927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.021793][ T5927] Call Trace: [ 111.021800][ T5927] [ 111.021807][ T5927] dump_stack_lvl+0x100/0x190 [ 111.021837][ T5927] should_fail_ex.cold+0x5/0xa [ 111.021861][ T5927] save_fsave_header+0x14c/0x2f0 [ 111.021884][ T5927] ? lockdep_hardirqs_on+0x7d/0x110 [ 111.021912][ T5927] ? __pfx_save_fsave_header+0x10/0x10 [ 111.021949][ T5927] ? copy_fpstate_to_sigframe+0x2b8/0xae0 [ 111.021976][ T5927] ? __local_bh_enable_ip+0xa5/0x120 [ 111.022009][ T5927] copy_fpstate_to_sigframe+0x755/0xae0 [ 111.022040][ T5927] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 111.022069][ T5927] ? __sigqueue_free+0xc3/0x2a0 [ 111.022093][ T5927] ? collect_signal+0x271/0x550 [ 111.022114][ T5927] ? x86_task_fpu+0x5f/0x90 [ 111.022139][ T5927] get_sigframe+0x3fb/0x940 [ 111.022170][ T5927] ? __pfx_get_sigframe+0x10/0x10 [ 111.022195][ T5927] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.022222][ T5927] ? siginfo_layout+0x156/0x290 [ 111.022248][ T5927] ? get_signal+0x16b/0x21e0 [ 111.022266][ T5927] ia32_setup_frame+0xe5/0x990 [ 111.022291][ T5927] ? __pfx_ia32_setup_frame+0x10/0x10 [ 111.022318][ T5927] arch_do_signal_or_restart+0x571/0x7a0 [ 111.022346][ T5927] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 111.022379][ T5927] ? xfd_validate_state+0x129/0x190 [ 111.022411][ T5927] exit_to_user_mode_loop+0x139/0x700 [ 111.022432][ T5927] ? rcu_is_watching+0x13/0xc0 [ 111.022457][ T5927] __do_fast_syscall_32+0x59f/0x8b0 [ 111.022480][ T5927] do_fast_syscall_32+0x32/0x70 [ 111.022527][ T5927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.022552][ T5927] RIP: 0023:0xf743efec [ 111.022573][ T5927] Code: Unable to access opcode bytes at 0xf743efc2. [ 111.022582][ T5927] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 000000000000013c [ 111.022603][ T5927] RAX: fffffffffffffffc RBX: 0000000000000004 RCX: 0000000080000240 [ 111.022616][ T5927] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.022626][ T5927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.022657][ T5927] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.022670][ T5927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.022696][ T5927] [ 111.164648][ T5936] PM: suspend entry (deep) [ 111.409105][ T13] Filesystems sync: 0.242 seconds [ 111.624949][ T5940] PM: suspend entry (deep) [ 111.624965][ T5940] PM: suspend exit [ 111.626190][ T5931] smpboot: CPU 1 is now offline [ 112.009399][ T5936] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.009491][ T5936] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.018372][ T5936] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.036366][ T5936] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.036580][ T5936] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.079768][ T5936] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.084164][ T5936] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.084221][ T5936] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.111099][ T5936] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.113609][ T5936] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.113724][ T5936] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.158749][ T5936] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.223610][ T5936] Freezing user space processes [ 112.228833][ T1477] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 112.234158][ T5936] Freezing user space processes completed (elapsed 0.010 seconds) [ 112.234447][ T5936] OOM killer disabled. [ 112.234457][ T5936] Freezing remaining freezable tasks [ 112.340155][ T5936] Freezing remaining freezable tasks failed after 0.105 seconds (0 tasks refusing to freeze, wq_busy=1): [ 112.340243][ T5936] Showing freezable workqueues that are still busy: [ 112.340252][ T5936] workqueue usb_hub_wq: flags=0x104 [ 112.340263][ T5936] pwq 10: cpus=2 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 112.340299][ T5936] in-flight: 1477:hub_event for 0s hub_event [ 112.340641][ T5936] Restarting kernel threads ... [ 112.367487][ T5936] Done restarting kernel threads. [ 112.421151][ T5936] OOM killer enabled. [ 112.421163][ T5936] Restarting tasks: Starting [ 112.430216][ T5936] Restarting tasks: Done [ 112.430517][ T5936] random: crng reseeded on system resumption [ 112.431976][ T5936] hwrng_fill thread creation failed [ 112.434971][ T5940] PM: hibernation: hibernation entry [ 112.500986][ T5936] PM: suspend exit [ 112.532036][ T5940] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.532215][ T5940] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.532384][ T5940] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.532531][ T5940] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.699873][ T5868] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.705324][ T13] Filesystems sync: 0.168 seconds [ 112.720013][ T5950] input: syz0 as /devices/virtual/input/input5 [ 112.855596][ T5954] Bluetooth: MGMT ver 1.23 [ 112.912552][ T5940] Freezing user space processes [ 112.977583][ T5940] Freezing user space processes completed (elapsed 0.065 seconds) [ 112.977613][ T5940] OOM killer disabled. [ 113.259578][ C0] ------------[ cut here ]------------ [ 113.259625][ C0] cpu_t != t [ 113.259651][ C0] WARNING: arch/x86/kernel/cpu/mce/core.c:1770 at mce_timer_fn+0x289/0x2e0, CPU#0: swapper/0/0 [ 113.267234][ C0] Modules linked in: [ 113.270217][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 113.278101][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.287597][ C0] RIP: 0010:mce_timer_fn+0x289/0x2e0 [ 113.290650][ C0] Code: 58 00 4d 01 e4 4d 39 ec 4d 0f 47 e5 31 ff 4c 89 e6 e8 eb e4 58 00 4d 85 e4 0f 84 20 ff ff ff e9 f7 fe ff ff e8 38 ea 58 00 90 <0f> 0b 90 e9 cf fd ff ff 4c 89 f6 48 c7 c7 a0 ee bf 8f e8 f0 17 85 [ 113.313010][ C0] RSP: 0018:ffffc90000007c20 EFLAGS: 00010246 [ 113.315788][ C0] RAX: 0000000000000000 RBX: ffff88802b023440 RCX: 0000000000000101 [ 113.324816][ C0] RDX: ffffffff8fa91580 RSI: ffffffff81b2b878 RDI: ffffffff8e6a9920 [ 113.335239][ C0] RBP: ffff88802b123440 R08: 0000000000000001 R09: 0000000000000000 [ 113.354150][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 113.376526][ C0] R13: 8000000000000101 R14: 1ffff92000000f8d R15: ffffffff81b2b5f0 [ 113.392691][ C0] FS: 0000000000000000(0000) GS:ffff88809574a000(0000) knlGS:0000000000000000 [ 113.408977][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.412782][ C0] CR2: 000055fc6901f468 CR3: 000000006e5a7000 CR4: 0000000000352ef0 [ 113.420188][ C0] Call Trace: [ 113.424586][ C0] [ 113.428496][ C0] call_timer_fn+0x198/0x5f0 [ 113.432234][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 113.435414][ C0] ? __raise_softirq_irqoff+0x59/0xa0 [ 113.439109][ C0] ? __run_timers+0x747/0xb00 [ 113.441863][ C0] ? rcu_is_watching+0x13/0xc0 [ 113.445734][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 113.452111][ C0] __run_timers+0x757/0xb00 [ 113.455548][ C0] ? __pfx___run_timers+0x10/0x10 [ 113.460367][ C0] ? clockevents_program_event+0x1bf/0x820 [ 113.465324][ C0] ? lock_acquire+0x1d1/0x380 [ 113.471080][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 113.474226][ C0] run_timer_base+0x114/0x190 [ 113.476883][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 113.481226][ C0] run_timer_softirq+0x10/0x50 [ 113.483641][ C0] handle_softirqs+0x1e6/0x9d0 [ 113.485690][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 113.488710][ C0] ? _raw_spin_unlock+0x28/0x50 [ 113.492044][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 113.495283][ C0] __irq_exit_rcu+0x16a/0x210 [ 113.497985][ C0] irq_exit_rcu+0x9/0x30 [ 113.500326][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 113.503401][ C0] [ 113.505075][ C0] [ 113.506731][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 113.510203][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 113.513369][ C0] Code: 47 98 02 e9 53 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 46 19 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 113.523442][ C0] RSP: 0018:ffffffff8fa07cf0 EFLAGS: 00000206 [ 113.526393][ C0] RAX: 00000000000b4c4d RBX: ffffffff8fa91580 RCX: ffffffff8bd27275 [ 113.530253][ C0] RDX: 0000000000000001 RSI: ffffffff8e3e0fb5 RDI: ffffffff8c625a80 [ 113.535194][ C0] RBP: fffffbfff1f522b0 R08: 0000000000000001 R09: ffffed10056067bd [ 113.540011][ C0] R10: ffff88802b033deb R11: 0000000000000000 R12: 0000000000000000 [ 113.545089][ C0] R13: 0000000000000000 R14: 1ffffffff1f40fa2 R15: dffffc0000000000 [ 113.549881][ C0] ? ct_kernel_exit+0x125/0x180 [ 113.552887][ C0] default_idle+0x9/0x10 [ 113.555803][ C0] default_idle_call+0x6c/0xb0 [ 113.558792][ C0] do_idle+0x3ae/0x5b0 [ 113.561211][ C0] ? __pfx_do_idle+0x10/0x10 [ 113.563876][ C0] ? rest_init+0x2bf/0x2e0 [ 113.566418][ C0] cpu_startup_entry+0x4f/0x60 [ 113.569197][ C0] rest_init+0x2d3/0x2e0 [ 113.572031][ C0] ? __pfx_rest_init+0x10/0x10 [ 113.574804][ C0] ? __pfx_kernel_init+0x10/0x10 [ 113.577834][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 113.581324][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 113.585548][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 113.589307][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 113.592782][ C0] start_kernel+0x48e/0x490 [ 113.595561][ C0] x86_64_start_reservations+0x24/0x30 [ 113.599254][ C0] x86_64_start_kernel+0x12b/0x130 [ 113.602938][ C0] common_startup_64+0x13e/0x158 [ 113.606267][ C0] [ 113.608459][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 113.612983][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 113.618533][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.625709][ C0] Call Trace: [ 113.628687][ C0] [ 113.630801][ C0] dump_stack_lvl+0x100/0x190 [ 113.634337][ C0] vpanic+0x553/0x970 [ 113.637057][ C0] ? __pfx_vpanic+0x10/0x10 [ 113.639988][ C0] panic+0xd1/0xe0 [ 113.641593][ C0] ? __pfx_panic+0x10/0x10 [ 113.643885][ C0] check_panic_on_warn.cold+0x19/0x34 [ 113.647112][ C0] ? mce_timer_fn+0x289/0x2e0 [ 113.650036][ C0] __warn.cold+0x191/0x318 [ 113.652806][ C0] __report_bug+0x30f/0x440 [ 113.655937][ C0] ? mce_timer_fn+0x289/0x2e0 [ 113.658501][ C0] ? __pfx___report_bug+0x10/0x10 [ 113.661578][ C0] ? sta_info_get_bss+0x266/0x440 [ 113.664378][ C0] ? look_up_lock_class+0x64/0x120 [ 113.668168][ C0] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 113.672447][ C0] ? register_lock_class+0x3f/0x7b0 [ 113.675466][ C0] ? mce_timer_fn+0x289/0x2e0 [ 113.677852][ C0] report_bug+0xb3/0x220 [ 113.681004][ C0] ? mce_timer_fn+0x289/0x2e0 [ 113.684013][ C0] handle_bug+0x16a/0x2a0 [ 113.687013][ C0] exc_invalid_op+0x17/0x50 [ 113.691703][ C0] asm_exc_invalid_op+0x1a/0x20 [ 113.695921][ C0] RIP: 0010:mce_timer_fn+0x289/0x2e0 [ 113.699179][ C0] Code: 58 00 4d 01 e4 4d 39 ec 4d 0f 47 e5 31 ff 4c 89 e6 e8 eb e4 58 00 4d 85 e4 0f 84 20 ff ff ff e9 f7 fe ff ff e8 38 ea 58 00 90 <0f> 0b 90 e9 cf fd ff ff 4c 89 f6 48 c7 c7 a0 ee bf 8f e8 f0 17 85 [ 113.712839][ C0] RSP: 0018:ffffc90000007c20 EFLAGS: 00010246 [ 113.717378][ C0] RAX: 0000000000000000 RBX: ffff88802b023440 RCX: 0000000000000101 [ 113.723991][ C0] RDX: ffffffff8fa91580 RSI: ffffffff81b2b878 RDI: ffffffff8e6a9920 [ 113.731299][ C0] RBP: ffff88802b123440 R08: 0000000000000001 R09: 0000000000000000 [ 113.736177][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 113.741571][ C0] R13: 8000000000000101 R14: 1ffff92000000f8d R15: ffffffff81b2b5f0 [ 113.746393][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 113.749526][ C0] ? mce_timer_fn+0x288/0x2e0 [ 113.752636][ C0] call_timer_fn+0x198/0x5f0 [ 113.755817][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 113.759077][ C0] ? __raise_softirq_irqoff+0x59/0xa0 [ 113.762387][ C0] ? __run_timers+0x747/0xb00 [ 113.765740][ C0] ? rcu_is_watching+0x13/0xc0 [ 113.769588][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 113.772938][ C0] __run_timers+0x757/0xb00 [ 113.775767][ C0] ? __pfx___run_timers+0x10/0x10 [ 113.779073][ C0] ? clockevents_program_event+0x1bf/0x820 [ 113.783979][ C0] ? lock_acquire+0x1d1/0x380 [ 113.787079][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 113.790445][ C0] run_timer_base+0x114/0x190 [ 113.793496][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 113.796984][ C0] run_timer_softirq+0x10/0x50 [ 113.799986][ C0] handle_softirqs+0x1e6/0x9d0 [ 113.802953][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 113.806370][ C0] ? _raw_spin_unlock+0x28/0x50 [ 113.809534][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 113.813093][ C0] __irq_exit_rcu+0x16a/0x210 [ 113.816040][ C0] irq_exit_rcu+0x9/0x30 [ 113.818851][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 113.822379][ C0] [ 113.824558][ C0] [ 113.827239][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 113.835232][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 113.841735][ C0] Code: 47 98 02 e9 53 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 46 19 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 113.855264][ C0] RSP: 0018:ffffffff8fa07cf0 EFLAGS: 00000206 [ 113.860351][ C0] RAX: 00000000000b4c4d RBX: ffffffff8fa91580 RCX: ffffffff8bd27275 [ 113.864348][ C0] RDX: 0000000000000001 RSI: ffffffff8e3e0fb5 RDI: ffffffff8c625a80 [ 113.867328][ C0] RBP: fffffbfff1f522b0 R08: 0000000000000001 R09: ffffed10056067bd [ 113.870092][ C0] R10: ffff88802b033deb R11: 0000000000000000 R12: 0000000000000000 [ 113.873027][ C0] R13: 0000000000000000 R14: 1ffffffff1f40fa2 R15: dffffc0000000000 [ 113.878008][ C0] ? ct_kernel_exit+0x125/0x180 [ 113.880404][ C0] default_idle+0x9/0x10 [ 113.882596][ C0] default_idle_call+0x6c/0xb0 [ 113.885177][ C0] do_idle+0x3ae/0x5b0 [ 113.887331][ C0] ? __pfx_do_idle+0x10/0x10 [ 113.889937][ C0] ? rest_init+0x2bf/0x2e0 [ 113.892355][ C0] cpu_startup_entry+0x4f/0x60 [ 113.895762][ C0] rest_init+0x2d3/0x2e0 [ 113.898697][ C0] ? __pfx_rest_init+0x10/0x10 [ 113.901969][ C0] ? __pfx_kernel_init+0x10/0x10 [ 113.905954][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 113.909949][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 113.912956][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 113.916374][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 113.920420][ C0] start_kernel+0x48e/0x490 [ 113.923078][ C0] x86_64_start_reservations+0x24/0x30 [ 113.926198][ C0] x86_64_start_kernel+0x12b/0x130 [ 113.928790][ C0] common_startup_64+0x13e/0x158 [ 113.932299][ C0] [ 113.947338][ C0] Kernel Offset: disabled [ 113.950108][ C0] Rebooting in 86400 seconds..