last executing test programs: 7.452690188s ago: executing program 1 (id=8): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1', 0x1) unshare(0x44040200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 5.147982389s ago: executing program 3 (id=18): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 4.864528602s ago: executing program 3 (id=20): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='bfq\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r2, 0x0, 0x0) syz_clone(0x10f00, &(0x7f00000002c0), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) pread64(r0, &(0x7f00000003c0), 0x8, 0x0) pread64(r0, &(0x7f0000000400), 0x8, 0x1000) pread64(r0, &(0x7f0000000440), 0x8, 0x2000) pread64(r0, &(0x7f0000000480), 0x8, 0x3000) pread64(r0, &(0x7f00000004c0), 0x8, 0x4000) pread64(r0, &(0x7f0000000500), 0x8, 0x5000) pread64(r0, &(0x7f0000000540), 0x8, 0x6000) pread64(r0, &(0x7f0000000580), 0x8, 0x7000) pread64(r0, &(0x7f00000005c0), 0x8, 0x8000) pread64(r0, &(0x7f0000000600), 0x8, 0x9000) pread64(r0, &(0x7f0000000640), 0x8, 0xa000) pread64(r0, &(0x7f0000000680), 0x8, 0xb000) pread64(r0, &(0x7f0000000740), 0x8, 0xe000) pread64(r0, &(0x7f0000000780), 0x8, 0xf000) pread64(r0, &(0x7f00000007c0), 0x8, 0x10000) pread64(r0, &(0x7f0000000800), 0x8, 0x20000) pread64(r0, &(0x7f0000000840), 0x8, 0x30000) pread64(r0, &(0x7f0000000880), 0x8, 0x40000) pread64(r0, &(0x7f0000000900), 0x8, 0x60000) pread64(r0, &(0x7f0000000940), 0x8, 0x70000) pread64(r0, &(0x7f0000000980), 0x8, 0x80000) pread64(r0, &(0x7f00000009c0), 0x8, 0x90000) pread64(r0, &(0x7f0000000a00), 0x8, 0xa0000) pread64(r0, &(0x7f0000000a40), 0x8, 0xb0000) pread64(r0, &(0x7f0000000a80), 0x8, 0xc0000) pread64(r0, &(0x7f0000000ac0), 0x8, 0xd0000) pread64(r0, &(0x7f0000000b00), 0x8, 0xe0000) pread64(r0, &(0x7f0000000b40), 0x8, 0xf0000) 4.630168482s ago: executing program 0 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./myconfig/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='super-speed', 0xb) close(r0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./mydev/ttyACM0\x00', 0x802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./mydev/kmsg\x00', 0x1, 0x0) write(r3, &(0x7f0000002500)='hello world\n', 0xc) close(r3) write(r2, &(0x7f0000002500)='hello world\n', 0xc) read(r2, &(0x7f0000002600), 0x100) 4.167509091s ago: executing program 3 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n\x00', 0x2) write(r0, &(0x7f00000001a0)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='5\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/machinecheck/machinecheck0/tolerant\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/machinecheck/machinecheck0/bank0\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='1\n\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) write(r4, &(0x7f0000000780)='1\n\x00', 0x2) 3.537021009s ago: executing program 0 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n\x00', 0x2) write(r0, &(0x7f00000001a0)='1\n\x00', 0x2) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='1\n\x00', 0x2) 3.090150123s ago: executing program 3 (id=27): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000440)='1\x00', 0x2) 3.043189597s ago: executing program 1 (id=28): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x2) 2.614814521s ago: executing program 1 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n\x00', 0x2) 2.501745339s ago: executing program 3 (id=31): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='bfq\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r2, 0x0, 0x0) syz_clone(0x10f00, &(0x7f00000002c0), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) pread64(r0, &(0x7f00000003c0), 0x8, 0x0) pread64(r0, &(0x7f0000000400), 0x8, 0x1000) pread64(r0, &(0x7f0000000440), 0x8, 0x2000) pread64(r0, &(0x7f0000000480), 0x8, 0x3000) pread64(r0, &(0x7f00000004c0), 0x8, 0x4000) pread64(r0, &(0x7f0000000500), 0x8, 0x5000) pread64(r0, &(0x7f0000000540), 0x8, 0x6000) pread64(r0, &(0x7f0000000580), 0x8, 0x7000) pread64(r0, &(0x7f00000005c0), 0x8, 0x8000) pread64(r0, &(0x7f0000000600), 0x8, 0x9000) pread64(r0, &(0x7f0000000640), 0x8, 0xa000) pread64(r0, &(0x7f0000000680), 0x8, 0xb000) pread64(r0, &(0x7f0000000740), 0x8, 0xe000) pread64(r0, &(0x7f0000000780), 0x8, 0xf000) pread64(r0, &(0x7f00000007c0), 0x8, 0x10000) pread64(r0, &(0x7f0000000800), 0x8, 0x20000) pread64(r0, &(0x7f0000000840), 0x8, 0x30000) pread64(r0, &(0x7f0000000880), 0x8, 0x40000) pread64(r0, &(0x7f0000000900), 0x8, 0x60000) pread64(r0, &(0x7f0000000940), 0x8, 0x70000) pread64(r0, &(0x7f0000000980), 0x8, 0x80000) pread64(r0, &(0x7f00000009c0), 0x8, 0x90000) pread64(r0, &(0x7f0000000a00), 0x8, 0xa0000) pread64(r0, &(0x7f0000000a40), 0x8, 0xb0000) pread64(r0, &(0x7f0000000a80), 0x8, 0xc0000) pread64(r0, &(0x7f0000000ac0), 0x8, 0xd0000) pread64(r0, &(0x7f0000000b00), 0x8, 0xe0000) pread64(r0, &(0x7f0000000b40), 0x8, 0xf0000) 2.180473177s ago: executing program 2 (id=32): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='5\n\x00', 0x2) 2.148912753s ago: executing program 0 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./myconfig/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='super-speed', 0xb) close(r0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000002200)='devtmpfs\x00', 0x0, 0x0) nanosleep(0x0, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./mydev/ttyACM0\x00', 0x802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./mydev/kmsg\x00', 0x1, 0x0) write(r3, &(0x7f0000002500)='hello world\n', 0xc) close(r3) write(r2, &(0x7f0000002500)='hello world\n', 0xc) read(r2, &(0x7f0000002600), 0x100) 2.022539138s ago: executing program 1 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n\x00', 0x2) write(r0, &(0x7f00000001a0)='1\n\x00', 0x2) close(r0) write(0xffffffffffffffff, &(0x7f0000000280)='5\n\x00', 0x2) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/machinecheck/machinecheck0/bank0\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='1\n\x00', 0x2) 1.876946601s ago: executing program 2 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n\x00', 0x2) write(r0, &(0x7f00000001a0)='1\n\x00', 0x2) 1.749610799s ago: executing program 3 (id=36): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1', 0x1) unshare(0x44040200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 1.425704787s ago: executing program 2 (id=37): syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) mkdir(&(0x7f00000000c0)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000400)='0', 0x1) close(r0) write(0xffffffffffffffff, &(0x7f0000000480)='1\x00', 0x2) mkdir(&(0x7f00000004c0)='./config/cluster/ocfs2/heartbeat\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/cluster/ocfs2/heartbeat/region0/blocks\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/cluster/ocfs2/heartbeat/region0/dev\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='3\x00', 0x2) 1.139283256s ago: executing program 1 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n\x00', 0x2) write(r0, &(0x7f00000001a0)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='5\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/machinecheck/machinecheck0/tolerant\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/machinecheck/machinecheck0/bank0\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='1\n\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) write(r4, &(0x7f0000000780)='1\n\x00', 0x2) 1.026167062s ago: executing program 2 (id=39): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_async', 0x1, 0x0) write(r0, 0x0, 0x0) 1.025916567s ago: executing program 0 (id=40): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001b00), 0x0) 633.048079ms ago: executing program 2 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n\x00', 0x2) write(r0, &(0x7f00000001a0)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='1\n\x00', 0x2) 567.61907ms ago: executing program 0 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n\x00', 0x2) 121.172437ms ago: executing program 2 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='5\n\x00', 0x2) 65.192711ms ago: executing program 0 (id=44): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='bfq\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r2, 0x0, 0x0) syz_clone(0x10f00, &(0x7f00000002c0), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) pread64(r0, &(0x7f00000003c0), 0x8, 0x0) pread64(r0, &(0x7f0000000400), 0x8, 0x1000) pread64(r0, &(0x7f0000000440), 0x8, 0x2000) pread64(r0, &(0x7f0000000480), 0x8, 0x3000) pread64(r0, &(0x7f00000004c0), 0x8, 0x4000) pread64(r0, &(0x7f0000000500), 0x8, 0x5000) pread64(r0, &(0x7f0000000540), 0x8, 0x6000) pread64(r0, &(0x7f0000000580), 0x8, 0x7000) pread64(r0, &(0x7f00000005c0), 0x8, 0x8000) pread64(r0, &(0x7f0000000600), 0x8, 0x9000) pread64(r0, &(0x7f0000000640), 0x8, 0xa000) pread64(r0, &(0x7f0000000680), 0x8, 0xb000) pread64(r0, &(0x7f0000000740), 0x8, 0xe000) pread64(r0, &(0x7f0000000780), 0x8, 0xf000) pread64(r0, &(0x7f00000007c0), 0x8, 0x10000) pread64(r0, &(0x7f0000000800), 0x8, 0x20000) pread64(r0, &(0x7f0000000840), 0x8, 0x30000) pread64(r0, &(0x7f0000000880), 0x8, 0x40000) pread64(r0, &(0x7f0000000900), 0x8, 0x60000) pread64(r0, &(0x7f0000000940), 0x8, 0x70000) pread64(r0, &(0x7f0000000980), 0x8, 0x80000) pread64(r0, &(0x7f00000009c0), 0x8, 0x90000) pread64(r0, &(0x7f0000000a00), 0x8, 0xa0000) pread64(r0, &(0x7f0000000a40), 0x8, 0xb0000) pread64(r0, &(0x7f0000000a80), 0x8, 0xc0000) pread64(r0, &(0x7f0000000ac0), 0x8, 0xd0000) pread64(r0, &(0x7f0000000b00), 0x8, 0xe0000) pread64(r0, &(0x7f0000000b40), 0x8, 0xf0000) 0s ago: executing program 1 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n\x00', 0x2) write(r0, &(0x7f00000001a0)='1\n\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. [ 91.934834][ T1263] cfg80211: failed to load regulatory.db [ 93.526749][ T5576] cgroup: Unknown subsys name 'net' [ 93.770230][ T5576] cgroup: Unknown subsys name 'cpuset' [ 93.823008][ T5576] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.811341][ T5576] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.470813][ T5595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.476449][ T5595] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.480094][ T5595] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.510366][ T5595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.514550][ T5595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.631870][ T5595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.657244][ T5595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.658142][ T5595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.661147][ T5595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.670777][ T5595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.758398][ T4905] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.791084][ T4905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.805991][ T4905] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.822148][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.827510][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.850500][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.870880][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.877561][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.894816][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.895604][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.543884][ T4905] Bluetooth: hci0: command tx timeout [ 100.782761][ T4905] Bluetooth: hci1: command tx timeout [ 100.942417][ T4905] Bluetooth: hci3: command tx timeout [ 100.976055][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.976330][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.976548][ T5592] bridge_slave_0: entered allmulticast mode [ 100.980599][ T5592] bridge_slave_0: entered promiscuous mode [ 101.022378][ T4905] Bluetooth: hci2: command tx timeout [ 101.054195][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.054451][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.054666][ T5592] bridge_slave_1: entered allmulticast mode [ 101.058886][ T5592] bridge_slave_1: entered promiscuous mode [ 101.165063][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.165399][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.165606][ T5597] bridge_slave_0: entered allmulticast mode [ 101.168257][ T5597] bridge_slave_0: entered promiscuous mode [ 101.242758][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.243176][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.243433][ T5597] bridge_slave_1: entered allmulticast mode [ 101.246370][ T5597] bridge_slave_1: entered promiscuous mode [ 101.296446][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.297149][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.297520][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.297837][ T5599] bridge_slave_0: entered allmulticast mode [ 101.300509][ T5599] bridge_slave_0: entered promiscuous mode [ 101.379995][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.380434][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.380757][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.380967][ T5599] bridge_slave_1: entered allmulticast mode [ 101.396457][ T5599] bridge_slave_1: entered promiscuous mode [ 101.482389][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.482815][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.483118][ T5598] bridge_slave_0: entered allmulticast mode [ 101.485907][ T5598] bridge_slave_0: entered promiscuous mode [ 101.555142][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.555620][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.556022][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.556624][ T5598] bridge_slave_1: entered allmulticast mode [ 101.559308][ T5598] bridge_slave_1: entered promiscuous mode [ 101.641286][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.673726][ T5592] team0: Port device team_slave_0 added [ 101.679989][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.735677][ T5592] team0: Port device team_slave_1 added [ 101.740548][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.790669][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.842978][ T5597] team0: Port device team_slave_0 added [ 101.848083][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.905115][ T5597] team0: Port device team_slave_1 added [ 101.933584][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.933602][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.933623][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.939030][ T5599] team0: Port device team_slave_0 added [ 102.016893][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.016909][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.016929][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.020802][ T5599] team0: Port device team_slave_1 added [ 102.082904][ T5598] team0: Port device team_slave_0 added [ 102.120371][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.120384][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.120404][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.142908][ T5598] team0: Port device team_slave_1 added [ 102.195312][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.195325][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.195345][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.256219][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.256232][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.256253][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.342545][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.342557][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.342577][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.348027][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.348040][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.348059][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.451855][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.451868][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.451888][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.500301][ T5592] hsr_slave_0: entered promiscuous mode [ 102.505153][ T5592] hsr_slave_1: entered promiscuous mode [ 102.622755][ T4905] Bluetooth: hci0: command tx timeout [ 102.862374][ T4905] Bluetooth: hci1: command tx timeout [ 102.883349][ T5597] hsr_slave_0: entered promiscuous mode [ 102.885572][ T5597] hsr_slave_1: entered promiscuous mode [ 102.887850][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 102.887978][ T5597] Cannot create hsr debugfs directory [ 102.995003][ T5599] hsr_slave_0: entered promiscuous mode [ 102.996782][ T5599] hsr_slave_1: entered promiscuous mode [ 102.998219][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 102.998243][ T5599] Cannot create hsr debugfs directory [ 103.034210][ T4905] Bluetooth: hci3: command tx timeout [ 103.087397][ T5598] hsr_slave_0: entered promiscuous mode [ 103.089194][ T5598] hsr_slave_1: entered promiscuous mode [ 103.090629][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 103.090653][ T5598] Cannot create hsr debugfs directory [ 103.102350][ T4905] Bluetooth: hci2: command tx timeout [ 104.020018][ T5592] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.087041][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.104936][ T5592] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.137917][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.154970][ T5592] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.188679][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.219845][ T5592] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.249151][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.428516][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.461117][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.476372][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.520073][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.530398][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.569661][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.610816][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.638706][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.702418][ T4905] Bluetooth: hci0: command tx timeout [ 104.832892][ T5598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.871684][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.889031][ T5598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.910602][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.942674][ T4905] Bluetooth: hci1: command tx timeout [ 104.944169][ T5598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.988895][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.026573][ T5598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.066811][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.112458][ T4905] Bluetooth: hci3: command tx timeout [ 105.182479][ T4905] Bluetooth: hci2: command tx timeout [ 105.229069][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.259017][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.280822][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.308243][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.325757][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.373814][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.386246][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.430843][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.506021][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.661128][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.724490][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.725103][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.794473][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.828592][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.828804][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.950366][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.001595][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.001877][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.035100][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.101077][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.101217][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.215066][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.246806][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.300408][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.300693][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.376869][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.377338][ T1218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.478117][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.559650][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.570161][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.620745][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.620928][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.788551][ T4905] Bluetooth: hci0: command tx timeout [ 107.022765][ T4905] Bluetooth: hci1: command tx timeout [ 107.193740][ T4905] Bluetooth: hci3: command tx timeout [ 107.274948][ T4905] Bluetooth: hci2: command tx timeout [ 107.498974][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.947550][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.090876][ T5592] veth0_vlan: entered promiscuous mode [ 108.229044][ T5592] veth1_vlan: entered promiscuous mode [ 108.456243][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.512100][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.536158][ T5599] veth0_vlan: entered promiscuous mode [ 108.596491][ T5599] veth1_vlan: entered promiscuous mode [ 108.618017][ T5592] veth0_macvtap: entered promiscuous mode [ 108.660471][ T5592] veth1_macvtap: entered promiscuous mode [ 108.817472][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.855680][ T5597] veth0_vlan: entered promiscuous mode [ 108.873249][ T5599] veth0_macvtap: entered promiscuous mode [ 108.887692][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.888381][ T5598] veth0_vlan: entered promiscuous mode [ 108.932159][ T5599] veth1_macvtap: entered promiscuous mode [ 108.958921][ T3270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.975364][ T5597] veth1_vlan: entered promiscuous mode [ 108.988350][ T3270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.004668][ T3270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.027615][ T5598] veth1_vlan: entered promiscuous mode [ 109.037454][ T3270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.142452][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.284860][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.440946][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.497081][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.504952][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.544481][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.618998][ T5597] veth0_macvtap: entered promiscuous mode [ 109.670483][ T5598] veth0_macvtap: entered promiscuous mode [ 109.754261][ T5597] veth1_macvtap: entered promiscuous mode [ 109.816597][ T5598] veth1_macvtap: entered promiscuous mode [ 109.855530][ T3289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.859148][ T3289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.131160][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.169409][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.203817][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.210257][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.210279][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.289857][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.359375][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.368721][ T3270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.368774][ T3270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.410473][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.426870][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.473612][ T3289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.474231][ T3289] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.479649][ T3289] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.485435][ T3289] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.510033][ T3289] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.857479][ T3289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.857501][ T3289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.868270][ T5739] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81705062 (__mcheck_cpu_init_prepare_banks+0x1f2/0x3d0) [ 111.868346][ T5739] Call Trace: [ 111.868355][ T5739] [ 111.868372][ T5739] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 111.868420][ T5739] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 111.868467][ T5739] mce_cpu_restart+0x11a/0x2c0 [ 111.868506][ T5739] ? __pfx_mce_cpu_restart+0x10/0x10 [ 111.868537][ T5739] smp_call_function_many_cond+0xf83/0x1500 [ 111.868568][ T5739] ? __pfx_mce_cpu_restart+0x10/0x10 [ 111.868612][ T5739] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 111.868637][ T5739] ? lockdep_hardirqs_on+0x7a/0x110 [ 111.868659][ T5739] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 111.868684][ T5739] ? __pfx_mce_cpu_restart+0x10/0x10 [ 111.868716][ T5739] on_each_cpu_cond_mask+0x3f/0x80 [ 111.868743][ T5739] set_bank+0x3a8/0x4e0 [ 111.868775][ T5739] ? __pfx_set_bank+0x10/0x10 [ 111.868808][ T5739] ? sysfs_file_kobj+0x1e4/0x230 [ 111.868841][ T5739] ? sysfs_kf_write+0x166/0x260 [ 111.868888][ T5739] ? __pfx_sysfs_kf_write+0x10/0x10 [ 111.868923][ T5739] kernfs_fop_write_iter+0x3a5/0x540 [ 111.868962][ T5739] vfs_write+0x61e/0xbb0 [ 111.868998][ T5739] ? __pfx_vfs_write+0x10/0x10 [ 111.869028][ T5739] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 111.869051][ T5739] ? lockdep_hardirqs_on+0x7a/0x110 [ 111.869072][ T5739] ? mutex_lock_nested+0x152/0x1d0 [ 111.869098][ T5739] ? fdget_pos+0x252/0x320 [ 111.869128][ T5739] ksys_write+0x156/0x270 [ 111.869154][ T5739] ? __pfx_ksys_write+0x10/0x10 [ 111.869189][ T5739] do_syscall_64+0x17b/0x530 [ 111.869212][ T5739] ? irqentry_exit+0x10f/0x8f0 [ 111.869233][ T5739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.869256][ T5739] ? clear_bhb_loop+0x40/0x90 [ 111.869286][ T5739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.869309][ T5739] RIP: 0033:0x7f99963fdf99 [ 111.869348][ T5739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.869367][ T5739] RSP: 002b:00007f9994614028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.869394][ T5739] RAX: ffffffffffffffda RBX: 00007f9996686180 RCX: 00007f99963fdf99 [ 111.869411][ T5739] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000004 [ 111.869425][ T5739] RBP: 00007f9996494ec4 R08: 0000000000000000 R09: 0000000000000000 [ 111.869438][ T5739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.869452][ T5739] R13: 00007f9996686218 R14: 00007f9996686180 R15: 00007ffc7c69d6f8 [ 111.869486][ T5739] [ 112.338336][ T5736] smpboot: CPU 1 is now offline [ 112.457430][ T3289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.457446][ T3289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.795854][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.795872][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.884780][ T5738] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 113.149019][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.149041][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.288899][ T1219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.288922][ T1219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.378352][ T5770] smpboot: CPU 1 is now offline [ 115.755679][ T5773] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 116.826389][ T5794] smpboot: CPU 1 is now offline [ 117.028849][ T5798] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 117.531608][ T5809] smpboot: CPU 1 is now offline [ 117.869240][ T5810] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 118.406589][ T28] IRQ fixup: irq 34 move in progress, old vector 49 [ 118.408567][ T5818] smpboot: CPU 1 is now offline [ 118.864037][ T5820] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 119.669092][ T5839] smpboot: CPU 1 is now offline [ 119.835376][ T5842] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 120.715398][ T5856] smpboot: CPU 1 is now offline [ 121.010079][ T5859] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 121.342320][ C0] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000025: 0000 [#1] SMP KASAN PTI [ 121.342347][ C0] KASAN: maybe wild-memory-access in range [0xdead000000000128-0xdead00000000012f] [ 121.342388][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.342414][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.342427][ C0] RIP: 0010:detach_timer+0x120/0x2d0 [ 121.342457][ C0] Code: c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 a9 51 80 00 4d 89 3c 24 4d 85 ff 74 46 e8 cb f9 13 00 49 83 c7 08 4c 89 f8 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 ff e8 82 51 80 00 4d 89 27 80 7c 24 04 00 [ 121.342477][ C0] RSP: 0018:ffffc90000157af8 EFLAGS: 00010802 [ 121.342498][ C0] RAX: 1bd5a00000000025 RBX: 1ffff110170e4694 RCX: ffff88801daf0000 [ 121.342516][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 121.342530][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 121.342545][ C0] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: ffffc90000157c00 [ 121.342563][ C0] R13: ffff8880b87234a8 R14: 1ffff110170e4695 R15: dead00000000012a [ 121.342580][ C0] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 121.342600][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.342616][ C0] CR2: 000000110c2bcc52 CR3: 0000000028794000 CR4: 00000000003526f0 [ 121.342645][ C0] Call Trace: [ 121.342653][ C0] [ 121.342665][ C0] __run_timer_base+0x5f8/0x9b0 [ 121.342696][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 121.342721][ C0] ? lock_acquire+0x115/0x350 [ 121.342761][ C0] run_timer_softirq+0x67/0x170 [ 121.342784][ C0] handle_softirqs+0x1d9/0x6c0 [ 121.342813][ C0] run_ktimerd+0x69/0x100 [ 121.342840][ C0] smpboot_thread_fn+0x57c/0xa80 [ 121.342868][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 121.342898][ C0] kthread+0x388/0x470 [ 121.342929][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 121.342955][ C0] ? __pfx_kthread+0x10/0x10 [ 121.342984][ C0] ret_from_fork+0x514/0xb70 [ 121.343017][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 121.343047][ C0] ? __switch_to+0xc89/0x1420 [ 121.343073][ C0] ? __pfx_kthread+0x10/0x10 [ 121.343102][ C0] ret_from_fork_asm+0x1a/0x30 [ 121.343141][ C0] [ 121.343149][ C0] Modules linked in: [ 121.343174][ C0] ---[ end trace 0000000000000000 ]--- [ 121.343190][ C0] RIP: 0010:detach_timer+0x120/0x2d0 [ 121.343215][ C0] Code: c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 a9 51 80 00 4d 89 3c 24 4d 85 ff 74 46 e8 cb f9 13 00 49 83 c7 08 4c 89 f8 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 ff e8 82 51 80 00 4d 89 27 80 7c 24 04 00 [ 121.343234][ C0] RSP: 0018:ffffc90000157af8 EFLAGS: 00010802 [ 121.343252][ C0] RAX: 1bd5a00000000025 RBX: 1ffff110170e4694 RCX: ffff88801daf0000 [ 121.343270][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 121.343283][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 121.343298][ C0] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: ffffc90000157c00 [ 121.343315][ C0] R13: ffff8880b87234a8 R14: 1ffff110170e4695 R15: dead00000000012a [ 121.343332][ C0] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 121.343350][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.343366][ C0] CR2: 000000110c2bcc52 CR3: 0000000028794000 CR4: 00000000003526f0 [ 121.343387][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 121.343532][ C0] Kernel Offset: disabled