Warning: Permanently added '[localhost]:63299' (ED25519) to the list of known hosts.
[ 44.267469][ T43] kauditd_printk_skb: 17 callbacks suppressed
[ 44.267483][ T43] audit: type=1400 audit(1789041581.856:138): avc: denied { execute } for pid=5723 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[ 44.267803][ T43] audit: type=1400 audit(1789041581.856:139): avc: denied { execute_no_trans } for pid=5723 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
2026/09/10 11:59:42 parsed 1 programs
2026/09/10 11:59:42 serving rpc on tcp://39371
[ 45.338702][ T43] audit: type=1400 audit(1789041582.926:140): avc: denied { node_bind } for pid=5723 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 47.988304][ T43] audit: type=1400 audit(1789041585.576:141): avc: denied { mounton } for pid=5732 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 47.991841][ T43] audit: type=1400 audit(1789041585.576:142): avc: denied { mount } for pid=5732 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 47.995573][ T5732] cgroup: Unknown subsys name 'net'
[ 47.997497][ T43] audit: type=1400 audit(1789041585.586:143): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 48.119744][ T5732] cgroup: Unknown subsys name 'cpuset'
[ 48.123091][ T5732] cgroup: Unknown subsys name 'rlimit'
[ 48.292692][ T43] audit: type=1400 audit(1789041585.876:144): avc: denied { setattr } for pid=5732 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 48.293262][ T43] audit: type=1400 audit(1789041585.876:145): avc: denied { create } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 48.293565][ T43] audit: type=1400 audit(1789041585.876:146): avc: denied { write } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 48.293929][ T43] audit: type=1400 audit(1789041585.876:147): avc: denied { read } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 48.357608][ T5734] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 49.106593][ T5732] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 51.113274][ T43] kauditd_printk_skb: 10 callbacks suppressed
[ 51.113334][ T43] audit: type=1400 audit(1789041588.696:158): avc: denied { execmem } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 51.117886][ T43] audit: type=1400 audit(1789041588.706:159): avc: denied { read } for pid=5739 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 51.118122][ T43] audit: type=1400 audit(1789041588.706:160): avc: denied { open } for pid=5739 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 51.118923][ T43] audit: type=1400 audit(1789041588.706:161): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 51.185219][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 51.185238][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 51.205131][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 51.205148][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 51.210042][ T43] audit: type=1400 audit(1789041588.796:162): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 51.211266][ T43] audit: type=1400 audit(1789041588.796:163): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzkaller.HMvQka/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 51.212148][ T43] audit: type=1400 audit(1789041588.796:164): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 51.213766][ T43] audit: type=1400 audit(1789041588.796:165): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzkaller.HMvQka/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 51.214429][ T43] audit: type=1400 audit(1789041588.796:166): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzkaller.HMvQka/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 51.218988][ T43] audit: type=1400 audit(1789041588.806:167): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 51.283003][ T5739] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 52.334687][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state
[ 52.335192][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state
[ 52.335288][ T5767] bridge_slave_0: entered allmulticast mode
[ 52.336716][ T5767] bridge_slave_0: entered promiscuous mode
[ 52.344797][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state
[ 52.345056][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state
[ 52.345153][ T5767] bridge_slave_1: entered allmulticast mode
[ 52.346266][ T5767] bridge_slave_1: entered promiscuous mode
[ 52.381627][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 52.383486][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 52.401564][ T5767] team0: Port device team_slave_0 added
[ 52.402738][ T5767] team0: Port device team_slave_1 added
[ 52.418270][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 52.418281][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 52.418300][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 52.419522][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 52.419529][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 52.419542][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 52.449540][ T5767] hsr_slave_0: entered promiscuous mode
[ 52.449977][ T5767] hsr_slave_1: entered promiscuous mode
[ 52.558471][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 52.563023][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 52.564046][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 52.566283][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 52.566769][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 52.569172][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 52.569626][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 52.572256][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 52.587060][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state
[ 52.587169][ T5767] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 52.587421][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state
[ 52.587466][ T5767] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 52.619921][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0
[ 52.630270][ T74] bridge0: port 1(bridge_slave_0) entered disabled state
[ 52.631497][ T74] bridge0: port 2(bridge_slave_1) entered disabled state
[ 52.635765][ T5767] 8021q: adding VLAN 0 to HW filter on device team0
[ 52.645557][ T74] bridge0: port 1(bridge_slave_0) entered blocking state
[ 52.645640][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 52.647232][ T74] bridge0: port 2(bridge_slave_1) entered blocking state
[ 52.647311][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 52.898842][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 52.925491][ T5767] veth0_vlan: entered promiscuous mode
[ 52.930336][ T5767] veth1_vlan: entered promiscuous mode
[ 52.944202][ T5767] veth0_macvtap: entered promiscuous mode
[ 52.946497][ T5767] veth1_macvtap: entered promiscuous mode
[ 52.955591][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 52.960342][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 53.005300][ T5750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 53.025285][ T5576] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 53.025312][ T5576] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 53.025335][ T5576] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 53.044736][ T5576] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 53.103915][ T5576] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 53.139478][ T5576] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 53.179541][ T5576] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 53.395099][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 53.396214][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 53.396597][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 53.398249][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 53.398775][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/09/10 11:59:52 executed programs: 0
[ 54.794822][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 54.796385][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 54.797401][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 54.798054][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 54.798465][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 55.206322][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[ 55.206393][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[ 55.206479][ T5858] bridge_slave_0: entered allmulticast mode
[ 55.207740][ T5858] bridge_slave_0: entered promiscuous mode
[ 55.210579][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[ 55.210709][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[ 55.210809][ T5858] bridge_slave_1: entered allmulticast mode
[ 55.212230][ T5858] bridge_slave_1: entered promiscuous mode
[ 55.235353][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 55.237990][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 55.260949][ T5858] team0: Port device team_slave_0 added
[ 55.263346][ T5858] team0: Port device team_slave_1 added
[ 55.287661][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 55.287676][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 55.287698][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 55.289670][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 55.289683][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 55.289704][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 55.319290][ T5858] hsr_slave_0: entered promiscuous mode
[ 55.319744][ T5858] hsr_slave_1: entered promiscuous mode
[ 55.320042][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[ 55.320111][ T5858] Cannot create hsr debugfs directory
[ 55.749705][ T5576] bridge_slave_1: left allmulticast mode
[ 55.749734][ T5576] bridge_slave_1: left promiscuous mode
[ 55.750122][ T5576] bridge0: port 2(bridge_slave_1) entered disabled state
[ 55.753162][ T5576] bridge_slave_0: left allmulticast mode
[ 55.753175][ T5576] bridge_slave_0: left promiscuous mode
[ 55.753720][ T5576] bridge0: port 1(bridge_slave_0) entered disabled state
[ 55.828728][ T5576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 55.830304][ T5576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 55.831071][ T5576] bond0 (unregistering): Released all slaves
[ 55.879747][ T5576] hsr_slave_0: left promiscuous mode
[ 55.880116][ T5576] hsr_slave_1: left promiscuous mode
[ 55.880557][ T5576] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 55.880572][ T5576] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 55.881235][ T5576] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 55.881245][ T5576] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 55.884720][ T5576] veth1_macvtap: left promiscuous mode
[ 55.884746][ T5576] veth0_macvtap: left promiscuous mode
[ 55.884792][ T5576] veth1_vlan: left promiscuous mode
[ 55.884828][ T5576] veth0_vlan: left promiscuous mode
[ 56.005909][ T5576] team0 (unregistering): Port device team_slave_1 removed
[ 56.010413][ T5576] team0 (unregistering): Port device team_slave_0 removed
[ 56.073773][ T5439] 8021q: adding VLAN 0 to HW filter on device eth2
[ 56.164959][ T43] kauditd_printk_skb: 26 callbacks suppressed
[ 56.164977][ T43] audit: type=1400 audit(1789041593.746:194): avc: denied { write } for pid=5884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 56.228690][ T43] audit: type=1400 audit(1789041593.816:195): avc: denied { write } for pid=5887 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 56.282296][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 56.284388][ T5858] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 56.284774][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 56.295879][ T5858] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 56.296567][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 56.302086][ T5858] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 56.302637][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 56.306909][ T5858] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 56.352290][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[ 56.364397][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[ 56.376102][ T37] bridge0: port 1(bridge_slave_0) entered blocking state
[ 56.376192][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 56.377985][ T37] bridge0: port 2(bridge_slave_1) entered blocking state
[ 56.378066][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 56.405359][ T43] audit: type=1400 audit(1789041593.986:196): avc: denied { write } for pid=5896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 56.479839][ T43] audit: type=1400 audit(1789041594.066:197): avc: denied { write } for pid=5901 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 56.570135][ T43] audit: type=1400 audit(1789041594.156:198): avc: denied { write } for pid=5903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 56.643054][ T43] audit: type=1400 audit(1789041594.226:199): avc: denied { write } for pid=5906 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 56.845951][ T5818] Bluetooth: hci0: command tx timeout
[ 56.991460][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 57.019649][ T5858] veth0_vlan: entered promiscuous mode
[ 57.022536][ T5858] veth1_vlan: entered promiscuous mode
[ 57.046301][ T5858] veth0_macvtap: entered promiscuous mode
[ 57.049776][ T5858] veth1_macvtap: entered promiscuous mode
[ 57.055695][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 57.060135][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 57.105008][ T5750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 57.105033][ T5750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 57.105050][ T5750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 57.105067][ T5750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 57.121275][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 57.121293][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 57.143405][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 57.143419][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 57.202888][ T5917] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.17/5917
[ 57.202909][ T5917] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 57.202941][ T5917] CPU: 3 UID: 0 PID: 5917 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 57.202959][ T5917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 57.202969][ T5917] Call Trace:
[ 57.202975][ T5917]
[ 57.202981][ T5917] dump_stack_lvl+0x100/0x190
[ 57.203007][ T5917] check_preemption_disabled+0xd2/0xe0
[ 57.203033][ T5917] ? tun_queue_purge+0x1ee/0x340
[ 57.203049][ T5917] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 57.203073][ T5917] ? tun_queue_purge+0x1ee/0x340
[ 57.203089][ T5917] trace_kfree_skb+0x18b/0x230
[ 57.203114][ T5917] sk_skb_reason_drop+0xb7/0x1b0
[ 57.203136][ T5917] tun_queue_purge+0x1ee/0x340
[ 57.203156][ T5917] __tun_detach+0xb70/0x1850
[ 57.203172][ T5917] ? locks_remove_file+0xd1/0x600
[ 57.203203][ T5917] ? __pfx_tun_chr_close+0x10/0x10
[ 57.203219][ T5917] tun_chr_close+0xc2/0x220
[ 57.203235][ T5917] ? __pfx_tun_chr_close+0x10/0x10
[ 57.203251][ T5917] __fput+0x3ff/0xb50
[ 57.203285][ T5917] task_work_run+0x150/0x240
[ 57.203311][ T5917] ? __pfx_task_work_run+0x10/0x10
[ 57.203342][ T5917] exit_to_user_mode_loop+0x1d8/0x700
[ 57.203363][ T5917] ? rcu_is_watching+0x13/0xc0
[ 57.203386][ T5917] do_syscall_64+0x661/0x790
[ 57.203410][ T5917] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 57.203427][ T5917] RIP: 0033:0x7f917eb9e159
[ 57.203441][ T5917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 57.203455][ T5917] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 57.203468][ T5917] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 57.203474][ T5917] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 57.203481][ T5917] RBP: 000000000000deea R08: 0000000000000001 R09: 0000000000000000
[ 57.203487][ T5917] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 57.203493][ T5917] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 57.203506][ T5917]
[ 57.203874][ T5917] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.17/5917
[ 57.203885][ T5917] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 57.203902][ T5917] CPU: 3 UID: 0 PID: 5917 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 57.203914][ T5917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 57.203920][ T5917] Call Trace:
[ 57.203923][ T5917]
[ 57.203927][ T5917] dump_stack_lvl+0x100/0x190
[ 57.203943][ T5917] check_preemption_disabled+0xd2/0xe0
[ 57.203959][ T5917] ? tun_queue_purge+0x1ee/0x340
[ 57.203968][ T5917] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 57.203984][ T5917] ? tun_queue_purge+0x1ee/0x340
[ 57.203994][ T5917] trace_kfree_skb+0x18b/0x230
[ 57.204010][ T5917] sk_skb_reason_drop+0xb7/0x1b0
[ 57.204023][ T5917] tun_queue_purge+0x1ee/0x340
[ 57.204036][ T5917] __tun_detach+0xb70/0x1850
[ 57.204046][ T5917] ? locks_remove_file+0xd1/0x600
[ 57.204066][ T5917] ? __pfx_tun_chr_close+0x10/0x10
[ 57.204076][ T5917] tun_chr_close+0xc2/0x220
[ 57.204087][ T5917] ? __pfx_tun_chr_close+0x10/0x10
[ 57.204096][ T5917] __fput+0x3ff/0xb50
[ 57.204113][ T5917] task_work_run+0x150/0x240
[ 57.204129][ T5917] ? __pfx_task_work_run+0x10/0x10
[ 57.204149][ T5917] exit_to_user_mode_loop+0x1d8/0x700
[ 57.204161][ T5917] ? rcu_is_watching+0x13/0xc0
[ 57.204176][ T5917] do_syscall_64+0x661/0x790
[ 57.204191][ T5917] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 57.204202][ T5917] RIP: 0033:0x7f917eb9e159
[ 57.204211][ T5917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 57.204220][ T5917] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 57.204230][ T5917] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 57.204237][ T5917] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 57.204243][ T5917] RBP: 000000000000deea R08: 0000000000000001 R09: 0000000000000000
[ 57.204249][ T5917] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 57.204255][ T5917] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 57.204268][ T5917]
[ 58.835506][ T5918] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.18/5918
[ 58.835524][ T5918] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 58.835551][ T5918] CPU: 3 UID: 0 PID: 5918 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full)
[ 58.835566][ T5918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 58.835575][ T5918] Call Trace:
[ 58.835580][ T5918]
[ 58.835606][ T5918] dump_stack_lvl+0x100/0x190
[ 58.835629][ T5918] check_preemption_disabled+0xd2/0xe0
[ 58.835651][ T5918] ? tun_queue_purge+0x1ee/0x340
[ 58.835664][ T5918] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 58.835684][ T5918] ? tun_queue_purge+0x1ee/0x340
[ 58.835703][ T5918] trace_kfree_skb+0x18b/0x230
[ 58.835723][ T5918] sk_skb_reason_drop+0xb7/0x1b0
[ 58.835741][ T5918] tun_queue_purge+0x1ee/0x340
[ 58.835759][ T5918] __tun_detach+0xb70/0x1850
[ 58.835771][ T5918] ? locks_remove_file+0xd1/0x600
[ 58.835798][ T5918] ? __pfx_tun_chr_close+0x10/0x10
[ 58.835812][ T5918] tun_chr_close+0xc2/0x220
[ 58.835825][ T5918] ? __pfx_tun_chr_close+0x10/0x10
[ 58.835838][ T5918] __fput+0x3ff/0xb50
[ 58.835860][ T5918] task_work_run+0x150/0x240
[ 58.835882][ T5918] ? __pfx_task_work_run+0x10/0x10
[ 58.835907][ T5918] exit_to_user_mode_loop+0x1d8/0x700
[ 58.835924][ T5918] ? rcu_is_watching+0x13/0xc0
[ 58.835944][ T5918] do_syscall_64+0x661/0x790
[ 58.835964][ T5918] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 58.835979][ T5918] RIP: 0033:0x7f917eb9e159
[ 58.835990][ T5918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 58.836003][ T5918] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 58.836018][ T5918] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 58.836027][ T5918] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 58.836034][ T5918] RBP: 000000000000e54e R08: 0000000000000001 R09: 0000000000000000
[ 58.836043][ T5918] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 58.836051][ T5918] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 58.836069][ T5918]
[ 58.836175][ T5918] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.18/5918
[ 58.836186][ T5918] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 58.836209][ T5918] CPU: 3 UID: 0 PID: 5918 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full)
[ 58.836223][ T5918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 58.836230][ T5918] Call Trace:
[ 58.836235][ T5918]
[ 58.836240][ T5918] dump_stack_lvl+0x100/0x190
[ 58.836260][ T5918] check_preemption_disabled+0xd2/0xe0
[ 58.836281][ T5918] ? tun_queue_purge+0x1ee/0x340
[ 58.836293][ T5918] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 58.836313][ T5918] ? tun_queue_purge+0x1ee/0x340
[ 58.836326][ T5918] trace_kfree_skb+0x18b/0x230
[ 58.836346][ T5918] sk_skb_reason_drop+0xb7/0x1b0
[ 58.836363][ T5918] tun_queue_purge+0x1ee/0x340
[ 58.836381][ T5918] __tun_detach+0xb70/0x1850
[ 58.836393][ T5918] ? locks_remove_file+0xd1/0x600
[ 58.836418][ T5918] ? __pfx_tun_chr_close+0x10/0x10
[ 58.836432][ T5918] tun_chr_close+0xc2/0x220
[ 58.836445][ T5918] ? __pfx_tun_chr_close+0x10/0x10
[ 58.836458][ T5918] __fput+0x3ff/0xb50
[ 58.836479][ T5918] task_work_run+0x150/0x240
[ 58.836500][ T5918] ? __pfx_task_work_run+0x10/0x10
[ 58.836525][ T5918] exit_to_user_mode_loop+0x1d8/0x700
[ 58.836541][ T5918] ? rcu_is_watching+0x13/0xc0
[ 58.836560][ T5918] do_syscall_64+0x661/0x790
[ 58.836579][ T5918] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 58.836593][ T5918] RIP: 0033:0x7f917eb9e159
[ 58.836604][ T5918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 58.836616][ T5918] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 58.836629][ T5918] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 58.836637][ T5918] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 58.836645][ T5918] RBP: 000000000000e54e R08: 0000000000000001 R09: 0000000000000000
[ 58.836653][ T5918] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 58.836661][ T5918] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 58.836679][ T5918]
[ 58.925083][ T5818] Bluetooth: hci0: command tx timeout
2026/09/10 11:59:57 executed programs: 4
[ 61.006239][ T5818] Bluetooth: hci0: command tx timeout
[ 61.181486][ T5930] check_preemption_disabled: 16 callbacks suppressed
[ 61.181498][ T5930] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.30/5930
[ 61.181507][ T5930] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 61.181529][ T5930] CPU: 2 UID: 0 PID: 5930 Comm: syz.0.30 Not tainted syzkaller #0 PREEMPT(full)
[ 61.181541][ T5930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 61.181548][ T5930] Call Trace:
[ 61.181551][ T5930]
[ 61.181556][ T5930] dump_stack_lvl+0x100/0x190
[ 61.181573][ T5930] check_preemption_disabled+0xd2/0xe0
[ 61.181590][ T5930] ? tun_queue_purge+0x1ee/0x340
[ 61.181601][ T5930] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 61.181616][ T5930] ? tun_queue_purge+0x1ee/0x340
[ 61.181627][ T5930] trace_kfree_skb+0x18b/0x230
[ 61.181642][ T5930] sk_skb_reason_drop+0xb7/0x1b0
[ 61.181656][ T5930] tun_queue_purge+0x1ee/0x340
[ 61.181669][ T5930] __tun_detach+0xb70/0x1850
[ 61.181679][ T5930] ? locks_remove_file+0xd1/0x600
[ 61.181699][ T5930] ? __pfx_tun_chr_close+0x10/0x10
[ 61.181709][ T5930] tun_chr_close+0xc2/0x220
[ 61.181720][ T5930] ? __pfx_tun_chr_close+0x10/0x10
[ 61.181729][ T5930] __fput+0x3ff/0xb50
[ 61.181748][ T5930] task_work_run+0x150/0x240
[ 61.181765][ T5930] ? __pfx_task_work_run+0x10/0x10
[ 61.181785][ T5930] exit_to_user_mode_loop+0x1d8/0x700
[ 61.181798][ T5930] ? rcu_is_watching+0x13/0xc0
[ 61.181813][ T5930] do_syscall_64+0x661/0x790
[ 61.181828][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.181840][ T5930] RIP: 0033:0x7f917eb9e159
[ 61.181849][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 61.181859][ T5930] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 61.181870][ T5930] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 61.181876][ T5930] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 61.181883][ T5930] RBP: 000000000000ee7a R08: 0000000000000001 R09: 0000000000000000
[ 61.181889][ T5930] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 61.181895][ T5930] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 61.181908][ T5930]
[ 61.181989][ T5930] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.30/5930
[ 61.181997][ T5930] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 61.182014][ T5930] CPU: 2 UID: 0 PID: 5930 Comm: syz.0.30 Not tainted syzkaller #0 PREEMPT(full)
[ 61.182025][ T5930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 61.182031][ T5930] Call Trace:
[ 61.182034][ T5930]
[ 61.182038][ T5930] dump_stack_lvl+0x100/0x190
[ 61.182053][ T5930] check_preemption_disabled+0xd2/0xe0
[ 61.182073][ T5930] ? tun_queue_purge+0x1ee/0x340
[ 61.182086][ T5930] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 61.182109][ T5930] ? tun_queue_purge+0x1ee/0x340
[ 61.182126][ T5930] trace_kfree_skb+0x18b/0x230
[ 61.182149][ T5930] sk_skb_reason_drop+0xb7/0x1b0
[ 61.182163][ T5930] tun_queue_purge+0x1ee/0x340
[ 61.182176][ T5930] __tun_detach+0xb70/0x1850
[ 61.182185][ T5930] ? locks_remove_file+0xd1/0x600
[ 61.182205][ T5930] ? __pfx_tun_chr_close+0x10/0x10
[ 61.182216][ T5930] tun_chr_close+0xc2/0x220
[ 61.182226][ T5930] ? __pfx_tun_chr_close+0x10/0x10
[ 61.182236][ T5930] __fput+0x3ff/0xb50
[ 61.182260][ T5930] task_work_run+0x150/0x240
[ 61.182276][ T5930] ? __pfx_task_work_run+0x10/0x10
[ 61.182295][ T5930] exit_to_user_mode_loop+0x1d8/0x700
[ 61.182308][ T5930] ? rcu_is_watching+0x13/0xc0
[ 61.182323][ T5930] do_syscall_64+0x661/0x790
[ 61.182338][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.182348][ T5930] RIP: 0033:0x7f917eb9e159
[ 61.182357][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 61.182366][ T5930] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 61.182376][ T5930] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 61.182383][ T5930] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 61.182389][ T5930] RBP: 000000000000ee7a R08: 0000000000000001 R09: 0000000000000000
[ 61.182395][ T5930] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 61.182401][ T5930] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 61.182414][ T5930]
[ 61.366465][ T5931] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.31/5931
[ 61.366485][ T5931] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 61.366513][ T5931] CPU: 2 UID: 0 PID: 5931 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(full)
[ 61.366531][ T5931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 61.366541][ T5931] Call Trace:
[ 61.366547][ T5931]
[ 61.366553][ T5931] dump_stack_lvl+0x100/0x190
[ 61.366579][ T5931] check_preemption_disabled+0xd2/0xe0
[ 61.366605][ T5931] ? tun_queue_purge+0x1ee/0x340
[ 61.366618][ T5931] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 61.366640][ T5931] ? tun_queue_purge+0x1ee/0x340
[ 61.366656][ T5931] trace_kfree_skb+0x18b/0x230
[ 61.366687][ T5931] sk_skb_reason_drop+0xb7/0x1b0
[ 61.366708][ T5931] tun_queue_purge+0x1ee/0x340
[ 61.366728][ T5931] __tun_detach+0xb70/0x1850
[ 61.366739][ T5931] ? locks_remove_file+0xd1/0x600
[ 61.366770][ T5931] ? __pfx_tun_chr_close+0x10/0x10
[ 61.366786][ T5931] tun_chr_close+0xc2/0x220
[ 61.366802][ T5931] ? __pfx_tun_chr_close+0x10/0x10
[ 61.366817][ T5931] __fput+0x3ff/0xb50
[ 61.366838][ T5931] task_work_run+0x150/0x240
[ 61.366864][ T5931] ? __pfx_task_work_run+0x10/0x10
[ 61.366905][ T5931] exit_to_user_mode_loop+0x1d8/0x700
[ 61.366925][ T5931] ? rcu_is_watching+0x13/0xc0
[ 61.366945][ T5931] do_syscall_64+0x661/0x790
[ 61.366968][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.366985][ T5931] RIP: 0033:0x7f917eb9e159
[ 61.366999][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 61.367014][ T5931] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 61.367030][ T5931] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 61.367040][ T5931] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 61.367048][ T5931] RBP: 000000000000ef2f R08: 0000000000000001 R09: 0000000000000000
[ 61.367054][ T5931] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 61.367064][ T5931] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 61.367087][ T5931]
[ 61.367217][ T5931] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.31/5931
[ 61.367230][ T5931] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 61.367254][ T5931] CPU: 2 UID: 0 PID: 5931 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(full)
[ 61.367270][ T5931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 61.367276][ T5931] Call Trace:
[ 61.367281][ T5931]
[ 61.367287][ T5931] dump_stack_lvl+0x100/0x190
[ 61.367310][ T5931] check_preemption_disabled+0xd2/0xe0
[ 61.367334][ T5931] ? tun_queue_purge+0x1ee/0x340
[ 61.367349][ T5931] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 61.367370][ T5931] ? tun_queue_purge+0x1ee/0x340
[ 61.367383][ T5931] trace_kfree_skb+0x18b/0x230
[ 61.367407][ T5931] sk_skb_reason_drop+0xb7/0x1b0
[ 61.367427][ T5931] tun_queue_purge+0x1ee/0x340
[ 61.367450][ T5931] __tun_detach+0xb70/0x1850
[ 61.367483][ T5931] ? locks_remove_file+0xd1/0x600
[ 61.367509][ T5931] ? __pfx_tun_chr_close+0x10/0x10
[ 61.367527][ T5931] tun_chr_close+0xc2/0x220
[ 61.367543][ T5931] ? __pfx_tun_chr_close+0x10/0x10
[ 61.367558][ T5931] __fput+0x3ff/0xb50
[ 61.367604][ T5931] task_work_run+0x150/0x240
[ 61.367630][ T5931] ? __pfx_task_work_run+0x10/0x10
[ 61.367660][ T5931] exit_to_user_mode_loop+0x1d8/0x700
[ 61.367684][ T5931] ? rcu_is_watching+0x13/0xc0
[ 61.367702][ T5931] do_syscall_64+0x661/0x790
[ 61.367725][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.367742][ T5931] RIP: 0033:0x7f917eb9e159
[ 61.367755][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 61.367769][ T5931] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 61.367784][ T5931] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 61.367792][ T5931] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 61.367798][ T5931] RBP: 000000000000ef2f R08: 0000000000000001 R09: 0000000000000000
[ 61.367807][ T5931] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 61.367817][ T5931] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 61.367840][ T5931]
[ 61.587175][ T5932] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.32/5932
[ 61.587197][ T5932] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 61.587229][ T5932] CPU: 1 UID: 0 PID: 5932 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT(full)
[ 61.587249][ T5932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 61.587260][ T5932] Call Trace:
[ 61.587266][ T5932]
[ 61.587273][ T5932] dump_stack_lvl+0x100/0x190
[ 61.587301][ T5932] check_preemption_disabled+0xd2/0xe0
[ 61.587329][ T5932] ? tun_queue_purge+0x1ee/0x340
[ 61.587347][ T5932] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 61.587373][ T5932] ? tun_queue_purge+0x1ee/0x340
[ 61.587391][ T5932] trace_kfree_skb+0x18b/0x230
[ 61.587418][ T5932] sk_skb_reason_drop+0xb7/0x1b0
[ 61.587442][ T5932] tun_queue_purge+0x1ee/0x340
[ 61.587466][ T5932] __tun_detach+0xb70/0x1850
[ 61.587483][ T5932] ? locks_remove_file+0xd1/0x600
[ 61.587517][ T5932] ? __pfx_tun_chr_close+0x10/0x10
[ 61.587535][ T5932] tun_chr_close+0xc2/0x220
[ 61.587551][ T5932] ? __pfx_tun_chr_close+0x10/0x10
[ 61.587567][ T5932] __fput+0x3ff/0xb50
[ 61.587619][ T5932] task_work_run+0x150/0x240
[ 61.587648][ T5932] ? __pfx_task_work_run+0x10/0x10
[ 61.587682][ T5932] exit_to_user_mode_loop+0x1d8/0x700
[ 61.587703][ T5932] ? rcu_is_watching+0x13/0xc0
[ 61.587727][ T5932] do_syscall_64+0x661/0x790
[ 61.587753][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.587773][ T5932] RIP: 0033:0x7f917eb9e159
[ 61.587788][ T5932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 61.587805][ T5932] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 61.587828][ T5932] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 61.587839][ T5932] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 61.587850][ T5932] RBP: 000000000000f00f R08: 0000000000000001 R09: 0000000000000000
[ 61.587861][ T5932] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 61.587871][ T5932] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 61.587896][ T5932]
[ 61.587946][ T5932] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.32/5932
[ 61.587959][ T5932] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 61.587986][ T5932] CPU: 1 UID: 0 PID: 5932 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT(full)
[ 61.588020][ T5932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 61.588030][ T5932] Call Trace:
[ 61.588036][ T5932]
[ 61.588043][ T5932] dump_stack_lvl+0x100/0x190
[ 61.588070][ T5932] check_preemption_disabled+0xd2/0xe0
[ 61.588097][ T5932] ? tun_queue_purge+0x1ee/0x340
[ 61.588113][ T5932] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 61.588139][ T5932] ? tun_queue_purge+0x1ee/0x340
[ 61.588156][ T5932] trace_kfree_skb+0x18b/0x230
[ 61.588181][ T5932] sk_skb_reason_drop+0xb7/0x1b0
[ 61.588204][ T5932] tun_queue_purge+0x1ee/0x340
[ 61.588228][ T5932] __tun_detach+0xb70/0x1850
[ 61.588245][ T5932] ? locks_remove_file+0xd1/0x600
[ 61.588280][ T5932] ? __pfx_tun_chr_close+0x10/0x10
[ 61.588298][ T5932] tun_chr_close+0xc2/0x220
[ 61.588315][ T5932] ? __pfx_tun_chr_close+0x10/0x10
[ 61.588332][ T5932] __fput+0x3ff/0xb50
[ 61.588360][ T5932] task_work_run+0x150/0x240
[ 61.588388][ T5932] ? __pfx_task_work_run+0x10/0x10
[ 61.588422][ T5932] exit_to_user_mode_loop+0x1d8/0x700
[ 61.588443][ T5932] ? rcu_is_watching+0x13/0xc0
[ 61.588468][ T5932] do_syscall_64+0x661/0x790
[ 61.588494][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.588512][ T5932] RIP: 0033:0x7f917eb9e159
[ 61.588526][ T5932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 61.588541][ T5932] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 61.588557][ T5932] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 61.588568][ T5932] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 61.588579][ T5932] RBP: 000000000000f00f R08: 0000000000000001 R09: 0000000000000000
[ 61.588589][ T5932] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 61.588600][ T5932] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 61.588624][ T5932]
[ 61.837661][ T5934] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.34/5934
[ 61.837682][ T5934] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 61.837715][ T5934] CPU: 1 UID: 0 PID: 5934 Comm: syz.0.34 Not tainted syzkaller #0 PREEMPT(full)
[ 61.837735][ T5934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 61.837745][ T5934] Call Trace:
[ 61.837751][ T5934]
[ 61.837758][ T5934] dump_stack_lvl+0x100/0x190
[ 61.837784][ T5934] check_preemption_disabled+0xd2/0xe0
[ 61.837819][ T5934] ? tun_queue_purge+0x1ee/0x340
[ 61.837835][ T5934] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 61.837862][ T5934] ? tun_queue_purge+0x1ee/0x340
[ 61.837879][ T5934] trace_kfree_skb+0x18b/0x230
[ 61.837906][ T5934] sk_skb_reason_drop+0xb7/0x1b0
[ 61.837930][ T5934] tun_queue_purge+0x1ee/0x340
[ 61.837954][ T5934] __tun_detach+0xb70/0x1850
[ 61.837971][ T5934] ? locks_remove_file+0xd1/0x600
[ 61.838006][ T5934] ? __pfx_tun_chr_close+0x10/0x10
[ 61.838024][ T5934] tun_chr_close+0xc2/0x220
[ 61.838042][ T5934] ? __pfx_tun_chr_close+0x10/0x10
[ 61.838059][ T5934] __fput+0x3ff/0xb50
[ 61.838089][ T5934] task_work_run+0x150/0x240
[ 61.838117][ T5934] ? __pfx_task_work_run+0x10/0x10
[ 61.838151][ T5934] exit_to_user_mode_loop+0x1d8/0x700
[ 61.838173][ T5934] ? rcu_is_watching+0x13/0xc0
[ 61.838199][ T5934] do_syscall_64+0x661/0x790
[ 61.838224][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.838256][ T5934] RIP: 0033:0x7f917eb9e159
[ 61.838271][ T5934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 61.838287][ T5934] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 61.838306][ T5934] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 61.838317][ T5934] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 61.838327][ T5934] RBP: 000000000000f109 R08: 0000000000000001 R09: 0000000000000000
[ 61.838338][ T5934] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 61.838348][ T5934] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 61.838373][ T5934]
[ 61.838502][ T5934] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.34/5934
[ 61.838516][ T5934] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 61.838543][ T5934] CPU: 1 UID: 0 PID: 5934 Comm: syz.0.34 Not tainted syzkaller #0 PREEMPT(full)
[ 61.838562][ T5934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 61.838572][ T5934] Call Trace:
[ 61.838577][ T5934]
[ 61.838583][ T5934] dump_stack_lvl+0x100/0x190
[ 61.838610][ T5934] check_preemption_disabled+0xd2/0xe0
[ 61.838636][ T5934] ? tun_queue_purge+0x1ee/0x340
[ 61.838652][ T5934] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 61.838678][ T5934] ? tun_queue_purge+0x1ee/0x340
[ 61.838696][ T5934] trace_kfree_skb+0x18b/0x230
[ 61.838722][ T5934] sk_skb_reason_drop+0xb7/0x1b0
[ 61.838745][ T5934] tun_queue_purge+0x1ee/0x340
[ 61.838769][ T5934] __tun_detach+0xb70/0x1850
[ 61.838786][ T5934] ? locks_remove_file+0xd1/0x600
[ 61.838824][ T5934] ? __pfx_tun_chr_close+0x10/0x10
[ 61.838843][ T5934] tun_chr_close+0xc2/0x220
[ 61.838861][ T5934] ? __pfx_tun_chr_close+0x10/0x10
[ 61.838878][ T5934] __fput+0x3ff/0xb50
[ 61.838907][ T5934] task_work_run+0x150/0x240
[ 61.838934][ T5934] ? __pfx_task_work_run+0x10/0x10
[ 61.838968][ T5934] exit_to_user_mode_loop+0x1d8/0x700
[ 61.838989][ T5934] ? rcu_is_watching+0x13/0xc0
[ 61.839015][ T5934] do_syscall_64+0x661/0x790
[ 61.839041][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.839059][ T5934] RIP: 0033:0x7f917eb9e159
[ 61.839073][ T5934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 61.839089][ T5934] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 61.839105][ T5934] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 61.839116][ T5934] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 61.839126][ T5934] RBP: 000000000000f109 R08: 0000000000000001 R09: 0000000000000000
[ 61.839137][ T5934] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 61.839147][ T5934] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 61.839171][ T5934]
[ 62.004121][ T5935] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.35/5935
[ 62.004141][ T5935] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 62.004174][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(full)
[ 62.004193][ T5935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 62.004204][ T5935] Call Trace:
[ 62.004210][ T5935]
[ 62.004217][ T5935] dump_stack_lvl+0x100/0x190
[ 62.004245][ T5935] check_preemption_disabled+0xd2/0xe0
[ 62.004274][ T5935] ? tun_queue_purge+0x1ee/0x340
[ 62.004291][ T5935] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 62.004317][ T5935] ? tun_queue_purge+0x1ee/0x340
[ 62.004335][ T5935] trace_kfree_skb+0x18b/0x230
[ 62.004362][ T5935] sk_skb_reason_drop+0xb7/0x1b0
[ 62.004385][ T5935] tun_queue_purge+0x1ee/0x340
[ 62.004409][ T5935] __tun_detach+0xb70/0x1850
[ 62.004426][ T5935] ? locks_remove_file+0xd1/0x600
[ 62.004461][ T5935] ? __pfx_tun_chr_close+0x10/0x10
[ 62.004479][ T5935] tun_chr_close+0xc2/0x220
[ 62.004497][ T5935] ? __pfx_tun_chr_close+0x10/0x10
[ 62.004514][ T5935] __fput+0x3ff/0xb50
[ 62.004543][ T5935] task_work_run+0x150/0x240
[ 62.004571][ T5935] ? __pfx_task_work_run+0x10/0x10
[ 62.004605][ T5935] exit_to_user_mode_loop+0x1d8/0x700
[ 62.004627][ T5935] ? rcu_is_watching+0x13/0xc0
[ 62.004654][ T5935] do_syscall_64+0x661/0x790
[ 62.004679][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 62.004698][ T5935] RIP: 0033:0x7f917eb9e159
[ 62.004713][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 62.004729][ T5935] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 62.004746][ T5935] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 62.004757][ T5935] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 62.004768][ T5935] RBP: 000000000000f1af R08: 0000000000000001 R09: 0000000000000000
[ 62.004778][ T5935] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 62.004789][ T5935] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 62.004818][ T5935]
[ 62.006464][ T5935] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.35/5935
[ 62.006479][ T5935] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 62.006507][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(full)
[ 62.006525][ T5935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 62.006535][ T5935] Call Trace:
[ 62.006541][ T5935]
[ 62.006547][ T5935] dump_stack_lvl+0x100/0x190
[ 62.006574][ T5935] check_preemption_disabled+0xd2/0xe0
[ 62.006601][ T5935] ? tun_queue_purge+0x1ee/0x340
[ 62.006617][ T5935] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 62.006643][ T5935] ? tun_queue_purge+0x1ee/0x340
[ 62.006661][ T5935] trace_kfree_skb+0x18b/0x230
[ 62.006687][ T5935] sk_skb_reason_drop+0xb7/0x1b0
[ 62.006710][ T5935] tun_queue_purge+0x1ee/0x340
[ 62.006733][ T5935] __tun_detach+0xb70/0x1850
[ 62.006750][ T5935] ? locks_remove_file+0xd1/0x600
[ 62.006784][ T5935] ? __pfx_tun_chr_close+0x10/0x10
[ 62.006802][ T5935] tun_chr_close+0xc2/0x220
[ 62.006824][ T5935] ? __pfx_tun_chr_close+0x10/0x10
[ 62.006840][ T5935] __fput+0x3ff/0xb50
[ 62.006869][ T5935] task_work_run+0x150/0x240
[ 62.006897][ T5935] ? __pfx_task_work_run+0x10/0x10
[ 62.006930][ T5935] exit_to_user_mode_loop+0x1d8/0x700
[ 62.006951][ T5935] ? rcu_is_watching+0x13/0xc0
[ 62.006995][ T5935] do_syscall_64+0x661/0x790
[ 62.007021][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 62.007040][ T5935] RIP: 0033:0x7f917eb9e159
[ 62.007054][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 62.007069][ T5935] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 62.007086][ T5935] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 62.007113][ T5935] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 62.007124][ T5935] RBP: 000000000000f1af R08: 0000000000000001 R09: 0000000000000000
[ 62.007134][ T5935] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 62.007144][ T5935] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 62.007168][ T5935]
[ 63.085151][ T5818] Bluetooth: hci0: command tx timeout
2026/09/10 12:00:02 executed programs: 54
[ 66.252883][ T5982] check_preemption_disabled: 70 callbacks suppressed
[ 66.252896][ T5982] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.82/5982
[ 66.252904][ T5982] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 66.252925][ T5982] CPU: 3 UID: 0 PID: 5982 Comm: syz.0.82 Not tainted syzkaller #0 PREEMPT(full)
[ 66.252938][ T5982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 66.252944][ T5982] Call Trace:
[ 66.252948][ T5982]
[ 66.252952][ T5982] dump_stack_lvl+0x100/0x190
[ 66.252969][ T5982] check_preemption_disabled+0xd2/0xe0
[ 66.252987][ T5982] ? tun_queue_purge+0x1ee/0x340
[ 66.252997][ T5982] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 66.253013][ T5982] ? tun_queue_purge+0x1ee/0x340
[ 66.253023][ T5982] trace_kfree_skb+0x18b/0x230
[ 66.253039][ T5982] sk_skb_reason_drop+0xb7/0x1b0
[ 66.253053][ T5982] tun_queue_purge+0x1ee/0x340
[ 66.253065][ T5982] __tun_detach+0xb70/0x1850
[ 66.253075][ T5982] ? locks_remove_file+0xd1/0x600
[ 66.253095][ T5982] ? __pfx_tun_chr_close+0x10/0x10
[ 66.253106][ T5982] tun_chr_close+0xc2/0x220
[ 66.253116][ T5982] ? __pfx_tun_chr_close+0x10/0x10
[ 66.253126][ T5982] __fput+0x3ff/0xb50
[ 66.253143][ T5982] task_work_run+0x150/0x240
[ 66.253160][ T5982] ? __pfx_task_work_run+0x10/0x10
[ 66.253179][ T5982] exit_to_user_mode_loop+0x1d8/0x700
[ 66.253192][ T5982] ? rcu_is_watching+0x13/0xc0
[ 66.253207][ T5982] do_syscall_64+0x661/0x790
[ 66.253222][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 66.253233][ T5982] RIP: 0033:0x7f917eb9e159
[ 66.253243][ T5982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 66.253252][ T5982] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 66.253263][ T5982] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 66.253270][ T5982] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 66.253276][ T5982] RBP: 000000000001024b R08: 0000000000000001 R09: 0000000000000000
[ 66.253282][ T5982] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 66.253288][ T5982] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 66.253301][ T5982]
[ 66.253378][ T5982] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.82/5982
[ 66.253387][ T5982] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 66.253403][ T5982] CPU: 3 UID: 0 PID: 5982 Comm: syz.0.82 Not tainted syzkaller #0 PREEMPT(full)
[ 66.253414][ T5982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 66.253420][ T5982] Call Trace:
[ 66.253423][ T5982]
[ 66.253427][ T5982] dump_stack_lvl+0x100/0x190
[ 66.253443][ T5982] check_preemption_disabled+0xd2/0xe0
[ 66.253459][ T5982] ? tun_queue_purge+0x1ee/0x340
[ 66.253468][ T5982] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 66.253484][ T5982] ? tun_queue_purge+0x1ee/0x340
[ 66.253494][ T5982] trace_kfree_skb+0x18b/0x230
[ 66.253509][ T5982] sk_skb_reason_drop+0xb7/0x1b0
[ 66.253523][ T5982] tun_queue_purge+0x1ee/0x340
[ 66.253536][ T5982] __tun_detach+0xb70/0x1850
[ 66.253545][ T5982] ? locks_remove_file+0xd1/0x600
[ 66.253565][ T5982] ? __pfx_tun_chr_close+0x10/0x10
[ 66.253576][ T5982] tun_chr_close+0xc2/0x220
[ 66.253586][ T5982] ? __pfx_tun_chr_close+0x10/0x10
[ 66.253596][ T5982] __fput+0x3ff/0xb50
[ 66.253612][ T5982] task_work_run+0x150/0x240
[ 66.253628][ T5982] ? __pfx_task_work_run+0x10/0x10
[ 66.253647][ T5982] exit_to_user_mode_loop+0x1d8/0x700
[ 66.253660][ T5982] ? rcu_is_watching+0x13/0xc0
[ 66.253675][ T5982] do_syscall_64+0x661/0x790
[ 66.253690][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 66.253700][ T5982] RIP: 0033:0x7f917eb9e159
[ 66.253708][ T5982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 66.253718][ T5982] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 66.253727][ T5982] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 66.253734][ T5982] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 66.253740][ T5982] RBP: 000000000001024b R08: 0000000000000001 R09: 0000000000000000
[ 66.253746][ T5982] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 66.253752][ T5982] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 66.253764][ T5982]
[ 66.431182][ T5983] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.83/5983
[ 66.431198][ T5983] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 66.431220][ T5983] CPU: 3 UID: 0 PID: 5983 Comm: syz.0.83 Not tainted syzkaller #0 PREEMPT(full)
[ 66.431232][ T5983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 66.431238][ T5983] Call Trace:
[ 66.431241][ T5983]
[ 66.431246][ T5983] dump_stack_lvl+0x100/0x190
[ 66.431263][ T5983] check_preemption_disabled+0xd2/0xe0
[ 66.431280][ T5983] ? tun_queue_purge+0x1ee/0x340
[ 66.431290][ T5983] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 66.431306][ T5983] ? tun_queue_purge+0x1ee/0x340
[ 66.431316][ T5983] trace_kfree_skb+0x18b/0x230
[ 66.431332][ T5983] sk_skb_reason_drop+0xb7/0x1b0
[ 66.431346][ T5983] tun_queue_purge+0x1ee/0x340
[ 66.431359][ T5983] __tun_detach+0xb70/0x1850
[ 66.431369][ T5983] ? locks_remove_file+0xd1/0x600
[ 66.431390][ T5983] ? __pfx_tun_chr_close+0x10/0x10
[ 66.431401][ T5983] tun_chr_close+0xc2/0x220
[ 66.431411][ T5983] ? __pfx_tun_chr_close+0x10/0x10
[ 66.431421][ T5983] __fput+0x3ff/0xb50
[ 66.431438][ T5983] task_work_run+0x150/0x240
[ 66.431455][ T5983] ? __pfx_task_work_run+0x10/0x10
[ 66.431474][ T5983] exit_to_user_mode_loop+0x1d8/0x700
[ 66.431487][ T5983] ? rcu_is_watching+0x13/0xc0
[ 66.431503][ T5983] do_syscall_64+0x661/0x790
[ 66.431519][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 66.431530][ T5983] RIP: 0033:0x7f917eb9e159
[ 66.431540][ T5983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 66.431572][ T5983] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 66.431584][ T5983] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 66.431591][ T5983] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 66.431597][ T5983] RBP: 00000000000102fd R08: 0000000000000001 R09: 0000000000000000
[ 66.431603][ T5983] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 66.431610][ T5983] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 66.431622][ T5983]
[ 66.431700][ T5983] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.83/5983
[ 66.431709][ T5983] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 66.431731][ T5983] CPU: 3 UID: 0 PID: 5983 Comm: syz.0.83 Not tainted syzkaller #0 PREEMPT(full)
[ 66.431742][ T5983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 66.431748][ T5983] Call Trace:
[ 66.431751][ T5983]
[ 66.431755][ T5983] dump_stack_lvl+0x100/0x190
[ 66.431771][ T5983] check_preemption_disabled+0xd2/0xe0
[ 66.431787][ T5983] ? tun_queue_purge+0x1ee/0x340
[ 66.431796][ T5983] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 66.431812][ T5983] ? tun_queue_purge+0x1ee/0x340
[ 66.431822][ T5983] trace_kfree_skb+0x18b/0x230
[ 66.431837][ T5983] sk_skb_reason_drop+0xb7/0x1b0
[ 66.431851][ T5983] tun_queue_purge+0x1ee/0x340
[ 66.431864][ T5983] __tun_detach+0xb70/0x1850
[ 66.431873][ T5983] ? locks_remove_file+0xd1/0x600
[ 66.431893][ T5983] ? __pfx_tun_chr_close+0x10/0x10
[ 66.431904][ T5983] tun_chr_close+0xc2/0x220
[ 66.431914][ T5983] ? __pfx_tun_chr_close+0x10/0x10
[ 66.431923][ T5983] __fput+0x3ff/0xb50
[ 66.431940][ T5983] task_work_run+0x150/0x240
[ 66.431956][ T5983] ? __pfx_task_work_run+0x10/0x10
[ 66.431975][ T5983] exit_to_user_mode_loop+0x1d8/0x700
[ 66.431988][ T5983] ? rcu_is_watching+0x13/0xc0
[ 66.432003][ T5983] do_syscall_64+0x661/0x790
[ 66.432018][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 66.432028][ T5983] RIP: 0033:0x7f917eb9e159
[ 66.432037][ T5983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 66.432046][ T5983] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 66.432056][ T5983] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 66.432062][ T5983] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 66.432068][ T5983] RBP: 00000000000102fd R08: 0000000000000001 R09: 0000000000000000
[ 66.432074][ T5983] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 66.432080][ T5983] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 66.432093][ T5983]
[ 66.628839][ T5985] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.85/5985
[ 66.628861][ T5985] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 66.628891][ T5985] CPU: 2 UID: 0 PID: 5985 Comm: syz.0.85 Not tainted syzkaller #0 PREEMPT(full)
[ 66.628909][ T5985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 66.628919][ T5985] Call Trace:
[ 66.628925][ T5985]
[ 66.628932][ T5985] dump_stack_lvl+0x100/0x190
[ 66.628957][ T5985] check_preemption_disabled+0xd2/0xe0
[ 66.628982][ T5985] ? tun_queue_purge+0x1ee/0x340
[ 66.628998][ T5985] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 66.629022][ T5985] ? tun_queue_purge+0x1ee/0x340
[ 66.629038][ T5985] trace_kfree_skb+0x18b/0x230
[ 66.629061][ T5985] sk_skb_reason_drop+0xb7/0x1b0
[ 66.629082][ T5985] tun_queue_purge+0x1ee/0x340
[ 66.629104][ T5985] __tun_detach+0xb70/0x1850
[ 66.629119][ T5985] ? locks_remove_file+0xd1/0x600
[ 66.629149][ T5985] ? __pfx_tun_chr_close+0x10/0x10
[ 66.629166][ T5985] tun_chr_close+0xc2/0x220
[ 66.629182][ T5985] ? __pfx_tun_chr_close+0x10/0x10
[ 66.629196][ T5985] __fput+0x3ff/0xb50
[ 66.629222][ T5985] task_work_run+0x150/0x240
[ 66.629247][ T5985] ? __pfx_task_work_run+0x10/0x10
[ 66.629283][ T5985] exit_to_user_mode_loop+0x1d8/0x700
[ 66.629303][ T5985] ? rcu_is_watching+0x13/0xc0
[ 66.629328][ T5985] do_syscall_64+0x661/0x790
[ 66.629352][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 66.629369][ T5985] RIP: 0033:0x7f917eb9e159
[ 66.629382][ T5985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 66.629396][ T5985] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 66.629413][ T5985] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 66.629423][ T5985] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 66.629433][ T5985] RBP: 00000000000103c0 R08: 0000000000000001 R09: 0000000000000000
[ 66.629442][ T5985] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 66.629452][ T5985] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 66.629474][ T5985]
[ 66.629596][ T5985] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.85/5985
[ 66.629609][ T5985] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 66.629633][ T5985] CPU: 2 UID: 0 PID: 5985 Comm: syz.0.85 Not tainted syzkaller #0 PREEMPT(full)
[ 66.629650][ T5985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 66.629659][ T5985] Call Trace:
[ 66.629664][ T5985]
[ 66.629670][ T5985] dump_stack_lvl+0x100/0x190
[ 66.629695][ T5985] check_preemption_disabled+0xd2/0xe0
[ 66.629719][ T5985] ? tun_queue_purge+0x1ee/0x340
[ 66.629733][ T5985] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 66.629757][ T5985] ? tun_queue_purge+0x1ee/0x340
[ 66.629772][ T5985] trace_kfree_skb+0x18b/0x230
[ 66.629796][ T5985] sk_skb_reason_drop+0xb7/0x1b0
[ 66.629816][ T5985] tun_queue_purge+0x1ee/0x340
[ 66.629837][ T5985] __tun_detach+0xb70/0x1850
[ 66.629852][ T5985] ? locks_remove_file+0xd1/0x600
[ 66.629883][ T5985] ? __pfx_tun_chr_close+0x10/0x10
[ 66.629900][ T5985] tun_chr_close+0xc2/0x220
[ 66.629915][ T5985] ? __pfx_tun_chr_close+0x10/0x10
[ 66.629930][ T5985] __fput+0x3ff/0xb50
[ 66.629957][ T5985] task_work_run+0x150/0x240
[ 66.629981][ T5985] ? __pfx_task_work_run+0x10/0x10
[ 66.630012][ T5985] exit_to_user_mode_loop+0x1d8/0x700
[ 66.630032][ T5985] ? rcu_is_watching+0x13/0xc0
[ 66.630055][ T5985] do_syscall_64+0x661/0x790
[ 66.630077][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 66.630094][ T5985] RIP: 0033:0x7f917eb9e159
[ 66.630106][ T5985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 66.630139][ T5985] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 66.630155][ T5985] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 66.630165][ T5985] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 66.630174][ T5985] RBP: 00000000000103c0 R08: 0000000000000001 R09: 0000000000000000
[ 66.630184][ T5985] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 66.630194][ T5985] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 66.630217][ T5985]
[ 66.830507][ T5987] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.87/5987
[ 66.830529][ T5987] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 66.830560][ T5987] CPU: 3 UID: 0 PID: 5987 Comm: syz.0.87 Not tainted syzkaller #0 PREEMPT(full)
[ 66.830578][ T5987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 66.830587][ T5987] Call Trace:
[ 66.830593][ T5987]
[ 66.830600][ T5987] dump_stack_lvl+0x100/0x190
[ 66.830630][ T5987] check_preemption_disabled+0xd2/0xe0
[ 66.830660][ T5987] ? tun_queue_purge+0x1ee/0x340
[ 66.830678][ T5987] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 66.830701][ T5987] ? tun_queue_purge+0x1ee/0x340
[ 66.830717][ T5987] trace_kfree_skb+0x18b/0x230
[ 66.830741][ T5987] sk_skb_reason_drop+0xb7/0x1b0
[ 66.830761][ T5987] tun_queue_purge+0x1ee/0x340
[ 66.830783][ T5987] __tun_detach+0xb70/0x1850
[ 66.830801][ T5987] ? locks_remove_file+0xd1/0x600
[ 66.830835][ T5987] ? __pfx_tun_chr_close+0x10/0x10
[ 66.830852][ T5987] tun_chr_close+0xc2/0x220
[ 66.830868][ T5987] ? __pfx_tun_chr_close+0x10/0x10
[ 66.830882][ T5987] __fput+0x3ff/0xb50
[ 66.830907][ T5987] task_work_run+0x150/0x240
[ 66.830932][ T5987] ? __pfx_task_work_run+0x10/0x10
[ 66.830966][ T5987] exit_to_user_mode_loop+0x1d8/0x700
[ 66.830988][ T5987] ? rcu_is_watching+0x13/0xc0
[ 66.831011][ T5987] do_syscall_64+0x661/0x790
[ 66.831034][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 66.831051][ T5987] RIP: 0033:0x7f917eb9e159
[ 66.831079][ T5987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 66.831095][ T5987] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 66.831113][ T5987] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 66.831125][ T5987] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 66.831137][ T5987] RBP: 0000000000010486 R08: 0000000000000001 R09: 0000000000000000
[ 66.831146][ T5987] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 66.831155][ T5987] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 66.831177][ T5987]
[ 66.831345][ T5987] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.87/5987
[ 66.831358][ T5987] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 66.831381][ T5987] CPU: 3 UID: 0 PID: 5987 Comm: syz.0.87 Not tainted syzkaller #0 PREEMPT(full)
[ 66.831398][ T5987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 66.831408][ T5987] Call Trace:
[ 66.831414][ T5987]
[ 66.831422][ T5987] dump_stack_lvl+0x100/0x190
[ 66.831448][ T5987] check_preemption_disabled+0xd2/0xe0
[ 66.831471][ T5987] ? tun_queue_purge+0x1ee/0x340
[ 66.831485][ T5987] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 66.831508][ T5987] ? tun_queue_purge+0x1ee/0x340
[ 66.831523][ T5987] trace_kfree_skb+0x18b/0x230
[ 66.831565][ T5987] sk_skb_reason_drop+0xb7/0x1b0
[ 66.831592][ T5987] tun_queue_purge+0x1ee/0x340
[ 66.831622][ T5987] __tun_detach+0xb70/0x1850
[ 66.831638][ T5987] ? locks_remove_file+0xd1/0x600
[ 66.831667][ T5987] ? __pfx_tun_chr_close+0x10/0x10
[ 66.831683][ T5987] tun_chr_close+0xc2/0x220
[ 66.831699][ T5987] ? __pfx_tun_chr_close+0x10/0x10
[ 66.831713][ T5987] __fput+0x3ff/0xb50
[ 66.831739][ T5987] task_work_run+0x150/0x240
[ 66.831768][ T5987] ? __pfx_task_work_run+0x10/0x10
[ 66.831799][ T5987] exit_to_user_mode_loop+0x1d8/0x700
[ 66.831817][ T5987] ? rcu_is_watching+0x13/0xc0
[ 66.831840][ T5987] do_syscall_64+0x661/0x790
[ 66.831862][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 66.831878][ T5987] RIP: 0033:0x7f917eb9e159
[ 66.831892][ T5987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 66.831909][ T5987] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 66.831926][ T5987] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 66.831936][ T5987] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 66.831945][ T5987] RBP: 0000000000010486 R08: 0000000000000001 R09: 0000000000000000
[ 66.831953][ T5987] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 66.831962][ T5987] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 66.831984][ T5987]
[ 67.113324][ T5989] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.89/5989
[ 67.113345][ T5989] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 67.113377][ T5989] CPU: 0 UID: 0 PID: 5989 Comm: syz.0.89 Not tainted syzkaller #0 PREEMPT(full)
[ 67.113397][ T5989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 67.113407][ T5989] Call Trace:
[ 67.113413][ T5989]
[ 67.113420][ T5989] dump_stack_lvl+0x100/0x190
[ 67.113448][ T5989] check_preemption_disabled+0xd2/0xe0
[ 67.113475][ T5989] ? tun_queue_purge+0x1ee/0x340
[ 67.113491][ T5989] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 67.113517][ T5989] ? tun_queue_purge+0x1ee/0x340
[ 67.113533][ T5989] trace_kfree_skb+0x18b/0x230
[ 67.113558][ T5989] sk_skb_reason_drop+0xb7/0x1b0
[ 67.113583][ T5989] tun_queue_purge+0x1ee/0x340
[ 67.113606][ T5989] __tun_detach+0xb70/0x1850
[ 67.113624][ T5989] ? locks_remove_file+0xd1/0x600
[ 67.113664][ T5989] ? __pfx_tun_chr_close+0x10/0x10
[ 67.113680][ T5989] tun_chr_close+0xc2/0x220
[ 67.113698][ T5989] ? __pfx_tun_chr_close+0x10/0x10
[ 67.113715][ T5989] __fput+0x3ff/0xb50
[ 67.113743][ T5989] task_work_run+0x150/0x240
[ 67.113770][ T5989] ? __pfx_task_work_run+0x10/0x10
[ 67.113801][ T5989] exit_to_user_mode_loop+0x1d8/0x700
[ 67.113824][ T5989] ? rcu_is_watching+0x13/0xc0
[ 67.113849][ T5989] do_syscall_64+0x661/0x790
[ 67.113875][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 67.113894][ T5989] RIP: 0033:0x7f917eb9e159
[ 67.113910][ T5989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 67.113924][ T5989] RSP: 002b:00007ffdcab35888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 67.113939][ T5989] RAX: 0000000000000000 RBX: 00007ffdcab35970 RCX: 00007f917eb9e159
[ 67.113948][ T5989] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 67.113956][ T5989] RBP: 00000000000105a6 R08: 0000000000000001 R09: 0000000000000000
[ 67.113964][ T5989] R10: 0000001b32120000 R11: 0000000000000246 R12: 0000000000000000
[ 67.113972][ T5989] R13: 00007f917ee25fac R14: 00007f917ee25fa8 R15: 00007f917ee25fa0
[ 67.113991][ T5989]
[ 67.114159][ T5989] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.89/5989
[ 67.114171][ T5989] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 67.114192][ T5989] CPU: 0 UID: 0 PID: 5989 Comm: syz.0.89 Not tainted syzkaller #0 PREEMPT(full)
[ 67.114207][ T5989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 67.114215][ T5989] Call Trace:
[ 67.114219][ T5989]
[ 67.114224][ T5989] dump_stack_lvl+0x100/0x190
[ 67.114244][ T5989] check_preemption_disabled+0xd2/0xe0
[ 67.114265][ T5989] ? tun_queue_purge+0x1ee/0x340
[ 67.114277][ T5989] net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[ 67.114297][ T5989] ? tun_queue_purge+0x1ee/0x340
[ 67.114310][ T5989] trace_kfree_skb+0x18b/0x230
[ 67.114330][ T5989] sk_skb_reason_drop+0xb7/0x1b0