last executing test programs: 5.488022614s ago: executing program 3 (id=4): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc02) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000440)={0xed}) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="48c5177a"], 0x69) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$video(0x0, 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080) madvise(&(0x7f0000110000/0x4000)=nil, 0x4000, 0x17) r4 = socket(0x10, 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x8943, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$usbfs(0x0, 0x6, 0x101140) ioperm(0x1, 0x10001, 0xe) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x1, 0x0, 0x2, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r8, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card3/oss_mixer\x00', 0x8000, 0x0) dup3(r7, r8, 0x80000) socket$inet6_udplite(0xa, 0x2, 0x88) 4.866238664s ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000380)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x9, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x91, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e22, 0x7d, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x0, @void}, "6279cb22459ff50866ff829694a603d3c443eead410baf7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d68030697e95d9cff97f976b3ac6d8c10e10601a959b4bf18b7d52cd3b5a4c19759c5eb55c033fbf5a6b311de39eb228702b8bf55388a273db8f23105e37c7125"}}}}, 0x9f) (fail_nth: 4) 4.663028556s ago: executing program 4 (id=6): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000080), &(0x7f00000000c0)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r7, 0xc4c03d09, 0x0) read$FUSE(r6, 0x0, 0x0) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000580), 0x4) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/oss_mixer\x00', 0x400000, 0x0) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat(r9, &(0x7f0000000440)='./file0\x00', 0x80) bind$802154_dgram(r8, &(0x7f00000001c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r10 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r10) 4.641937149s ago: executing program 1 (id=2): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) mknod(0x0, 0x8001420, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_io_uring_setup(0x952, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x393}, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, 0x0, 0x7ffffffe) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_dev$vim2m(&(0x7f0000000280), 0x1, 0x2) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r7}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 4.491652122s ago: executing program 3 (id=7): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000040)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x40, 0x18, 0x6, "53039ac9da66"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x40, 0x3, 0xae, {0xae, 0x7, "be1d1e963e4a3c865723ee9af49d8cbb0a3fa1d230e9e991a00e6fd8f6ceee36d242190f3370e95f1192921fd7720a9c173bfc32798b1b05d4b53f233a05822bca4a7cabfa88e82c6c48621eae9e286a032421a41da4d5ecb06d7fc9c61df00cdb0bc46f48799d9ea2274283adff249cf47d3fdb9363fe5eca223fa02caedcb5581f7724805d912ed0a096ae23513560ede234310dfae1b3068be26b4e5ab91fff620585895964e6859ec192"}}, &(0x7f0000000000)={0x0, 0x3, 0x20, @string={0x20, 0x3, "5ae8df340d4c6fd7b13d0f9390a4f8314ce2bea36e8c2fcdcbadae958551"}}, &(0x7f0000000180)={0x0, 0x22, 0x1c, {[@global=@item_4={0x3, 0x1, 0x7, "113ff1f9"}, @main=@item_4={0x3, 0x0, 0x9, "eaf635f7"}, @global=@item_4={0x3, 0x1, 0x5, "fa9f28c0"}, @main=@item_012={0x2, 0x0, 0xc, 'Py'}, @main=@item_4={0x3, 0x0, 0xb, "ca011f7c"}, @main=@item_4={0x3, 0x0, 0xa, "249dd0ec"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xe9, 0x1, {0x22, 0x489}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x40, 0x12, 0xe0, "9475088faab2e458febfc63e55cafe2a4292893358801b2b4dde9bb83a6c861fe6814a9d07a78d80831428872dc85a412b0be7b83cebf681a009ce28dda4e3b83ccc7552242a360e7305faa35d1c38df98766f1e0f3362e7c01c1bea3d2fedbb05d9b24daee0414aeb62f801ced10a1ffbc8a35201f392b4bc451ff8a9da1dc51a7120abe2cce1059267b65162fde3b485d8c326ec508cea8dc3309d1cdf9dfc26d317180827ae9fd5571d48e1c0c768c5a5a52a85e3214835fbe1949c2f89a5fc8c8538acd05893a8f01208a7d70f434772793607bbc8d280744022ec1bfd6e"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x1, 0x57, "30a3f12db2987f2d69e687f7d800b65c58a4fda5704ce21660d0d224e2dae4f8be01016eb51e290891047de35deb084867c9e9ac21f274b8b808e9da590c9d6f087822590cdf9d5b6ebae76ba13dfbcb2a8a1d794b5bc3"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x31}}) 4.108144992s ago: executing program 2 (id=3): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x2000000, 0x2, 0x5911, 0x2}) 3.90265319s ago: executing program 4 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 3.789340284s ago: executing program 0 (id=1): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB='\x000\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000540)={0x0, 0xb3765c6765b39a42, 0x1, "d0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)={0x40, 0x15, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x40, &(0x7f00000006c0)={0x0, 0x5dda, 0x10100, 0x0, 0x268, 0x0, r3}, &(0x7f0000000140), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x80c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40000000, 0x54}, &(0x7f0000000180)=0x0, &(0x7f0000000040)) read$FUSE(r2, &(0x7f0000000740)={0x2020}, 0x2020) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0x381b, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000340), 0x11000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) 3.646663835s ago: executing program 4 (id=9): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400040076e674090000006f5f7465616d00000008000500060000000c001700040004"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aa", 0xf, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000840)={'dummy0\x00', @remote}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_io_uring_setup(0x57a0, &(0x7f0000000080)={0x0, 0xd498, 0x40, 0x1, 0x348}, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r7, &(0x7f00000007c0)={0x2020}, 0x2020) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000009c0)={0x1f0, r1, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x81e, 0x7f}}}}, [@NL80211_ATTR_FRAME={0x109, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @broadcast, @from_mac=@broadcast, {0xc, 0x2}}, 0x2001, 0x2a, @random=0x5b16, @val={0x1, 0x1, [{0x5, 0x1}]}, @void, [{0xdd, 0xd0, "0926167e8551660dc092b751c41fa720e4e81afd088d4d803324c730c13a19212f0d45b3c6d2873d0ed3f69b1e75f3e42ed417a40bdf00786e819df0f4762ec737a084dff3231c68c92e93e284c8d8f3e8f8d46cd475a36b4ec78897a90060ef12fc344979528977000135ee907f0ff89930c8ccdaf8478a83071afa8c6b6b8593e10716c81929869684880114125cc48cca09faad1e568a6b6ec3c660aea6697b0650a361b9aa71a85cfdb58bd98ab1ee16204093ae33596874aaefdf0b2d03d6e3906405d8f43de2e4057976196c52"}, {0xdd, 0x10, "65c22e826da353463020975411472fc6"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3dc00}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}], @NL80211_ATTR_FRAME={0x46, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @broadcast, @initial, {0x0, 0x7}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}}, @tdls_setup_req={0xc, 0x0, "", 0x8, @val=0x1000, @val={0x1, 0x3, [{0x6c}, {0x6c, 0x1}, {0x2}]}, @val={0x2d, 0x1a, {0x800, 0x1, 0x6, 0x0, {0x1, 0x8, 0x0, 0xd, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x300, 0x6a, 0x9}}, @void}}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004081) 3.508165437s ago: executing program 4 (id=10): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811f10103010902"], 0x0) (async) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000b, 0x4000010, r2, 0x4e919000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}, {@access_client}], [], 0x6b}}) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffbd) (async) r5 = io_uring_setup(0x5eb2, &(0x7f0000000080)={0x0, 0x1720, 0x1000, 0x1, 0x335}) r6 = io_uring_setup(0x30df, &(0x7f0000000000)={0x0, 0x200054cd, 0x8, 0x1, 0x1ea, 0x0, r5}) close_range(r6, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x99) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) (async) chdir(&(0x7f0000000140)='./file0\x00') r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) (async) write$binfmt_script(r7, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x0) syz_usb_disconnect(r0) 3.383674113s ago: executing program 4 (id=11): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$vcsu(0x0, 0x1, 0x20800) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) dup(0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000026ac40dbd9b2cdc34f11d934a8dd2893120d53c64547c7e39269dc6d238a1eca"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000bb80)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 2.507495564s ago: executing program 1 (id=12): socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) ioctl$FIONREAD(r3, 0x541b, 0xfffffffffffffffe) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x7d) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'nr0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x2e2e, 0x0, 0x0, 0x0, 0x0, 0x3}}) 1.769086131s ago: executing program 1 (id=13): getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000380), &(0x7f00000004c0)=0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x5) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r4) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) syz_genetlink_get_family_id$nbd(0x0, r4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/219, 0xdb}], 0x1) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_pts(r5, 0x26002) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r6, 0xc0286404, &(0x7f0000000040)={&(0x7f000038e000/0x2000)=nil}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.72411969s ago: executing program 2 (id=14): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$isdn(0x22, 0x2, 0x25) gettid() openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141101) dup(r4) 1.284659801s ago: executing program 3 (id=15): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x600000) ioctl$BLKOPENZONE(r4, 0x40101286, &(0x7f0000000300)={0x0, 0x7}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x15}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, 0x0, 0x400, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0x2, 0x7fffffff, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x6, &(0x7f00000004c0), &(0x7f0000000500)=[{0x4, 0x1, 0xc, 0x2}, {0x5, 0x3, 0x8, 0x4}, {0x4, 0x2, 0x2, 0xa}, {0x5, 0x2, 0x1, 0xa}, {0x3, 0x1, 0xc, 0x6}, {0x3, 0x4, 0x4, 0x1}], 0x10, 0x76}, 0x94) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000580), &(0x7f00000005c0)=0x10, 0x400) close(r2) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, [], [], [], [0xd]}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x5) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000340), 0x3, 0x490280) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0xffa4, 0x20}, 0x5000) 1.204481168s ago: executing program 1 (id=16): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r4}}, 0x48) (fail_nth: 6) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 1.000572428s ago: executing program 2 (id=17): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000580), 0x4) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/oss_mixer\x00', 0x400000, 0x0) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat(r8, &(0x7f0000000440)='./file0\x00', 0x80) bind$802154_dgram(r7, &(0x7f00000001c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r9 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r9) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r9}) 337.101567ms ago: executing program 0 (id=18): socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000004400000007020000f8ffffffb703000002000000b7040000000000008500"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair(0x22, 0x80001, 0x1, 0x0) syz_socket_connect_nvme_tcp() setitimer(0x1, &(0x7f0000000000)={{0x100, 0x5}, {0xb, 0x4}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 222.674839ms ago: executing program 3 (id=19): syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = socket(0x1e, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3801006c000314010029bd7000ffdbdf250900020073793a1300000000b2004100736977001400330076657468305f746f5f62726964676500826491911051"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001980)=ANY=[@ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000200"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001840)={r4, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xeb, &(0x7f0000001640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001680), &(0x7f00000016c0), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001880)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000018c0)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x1, '\x00', r7, r8, 0x1, 0x0, 0x3}, 0x50) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100) (async) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) (async) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) ioctl$FIONCLEX(r3, 0x5450) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x3, &(0x7f00000003c0)=[{0x9, 0x6, 0xb6, 0x8}, {0x9, 0x9, 0xff, 0x1}, {0x5, 0xac, 0x9, 0x10}]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000001940)={@id={0x2, 0x0, @c}}) rename(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) r11 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r11) shutdown(r1, 0x2) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x6, @local}, 0x10) (async) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x6, @local}, 0x10) 0s ago: executing program 1 (id=20): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCOUTQ(r4, 0x5411, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r3, 0x541b, &(0x7f0000000080)={'dummy0\x00'}) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 47.191880][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 47.191894][ T30] audit: type=1400 audit(1752584457.800:57): avc: denied { transition } for pid=5675 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.222408][ T30] audit: type=1400 audit(1752584457.800:58): avc: denied { noatsecure } for pid=5675 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.242279][ T30] audit: type=1400 audit(1752584457.830:59): avc: denied { write } for pid=5675 comm="sh" path="pipe:[4126]" dev="pipefs" ino=4126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 47.264640][ T30] audit: type=1400 audit(1752584457.830:60): avc: denied { rlimitinh } for pid=5675 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.299779][ T30] audit: type=1400 audit(1752584457.830:61): avc: denied { siginh } for pid=5675 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. [ 56.702696][ T30] audit: type=1400 audit(1752584467.310:62): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.706271][ T5815] cgroup: Unknown subsys name 'net' [ 56.725498][ T30] audit: type=1400 audit(1752584467.310:63): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.754290][ T30] audit: type=1400 audit(1752584467.360:64): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.893923][ T5815] cgroup: Unknown subsys name 'cpuset' [ 56.902587][ T5815] cgroup: Unknown subsys name 'rlimit' [ 57.067747][ T30] audit: type=1400 audit(1752584467.670:65): avc: denied { setattr } for pid=5815 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.091201][ T30] audit: type=1400 audit(1752584467.670:66): avc: denied { create } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.121488][ T30] audit: type=1400 audit(1752584467.670:67): avc: denied { write } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.142086][ T30] audit: type=1400 audit(1752584467.670:68): avc: denied { read } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.164163][ T30] audit: type=1400 audit(1752584467.700:69): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.184875][ T5817] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 57.189146][ T30] audit: type=1400 audit(1752584467.700:70): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.220837][ T30] audit: type=1400 audit(1752584467.720:71): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.093505][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.814932][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 61.814947][ T30] audit: type=1400 audit(1752584472.410:78): avc: denied { create } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.901064][ T30] audit: type=1400 audit(1752584472.420:79): avc: denied { read write } for pid=5825 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.937649][ T30] audit: type=1400 audit(1752584472.420:80): avc: denied { open } for pid=5825 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.961887][ T30] audit: type=1400 audit(1752584472.470:81): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="socket:[4060]" dev="sockfs" ino=4060 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.023289][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.026707][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.039325][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.041212][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.047113][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.061289][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.061924][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.068638][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.076245][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.087996][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.090765][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.104455][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.112037][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.122320][ T30] audit: type=1400 audit(1752584472.720:82): avc: denied { read } for pid=5829 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.131404][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.152917][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.177480][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.182060][ T30] audit: type=1400 audit(1752584472.720:83): avc: denied { open } for pid=5829 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.209206][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.210338][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.216578][ T30] audit: type=1400 audit(1752584472.720:84): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.244939][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.252797][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.260133][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.268380][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.276657][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.276888][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.292201][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.555261][ T30] audit: type=1400 audit(1752584473.160:85): avc: denied { module_request } for pid=5829 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.616492][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 62.705322][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 62.834992][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.843481][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.850811][ T5829] bridge_slave_0: entered allmulticast mode [ 62.858206][ T5829] bridge_slave_0: entered promiscuous mode [ 62.875104][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 62.892490][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.899629][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.907077][ T5829] bridge_slave_1: entered allmulticast mode [ 62.913872][ T5829] bridge_slave_1: entered promiscuous mode [ 62.991369][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 63.001686][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 63.016641][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.024025][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.031270][ T5825] bridge_slave_0: entered allmulticast mode [ 63.037923][ T5825] bridge_slave_0: entered promiscuous mode [ 63.046586][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.081654][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.088735][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.096097][ T5825] bridge_slave_1: entered allmulticast mode [ 63.102801][ T5825] bridge_slave_1: entered promiscuous mode [ 63.110465][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.198688][ T5829] team0: Port device team_slave_0 added [ 63.204828][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.212630][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.219739][ T5832] bridge_slave_0: entered allmulticast mode [ 63.226594][ T5832] bridge_slave_0: entered promiscuous mode [ 63.249097][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.265232][ T5829] team0: Port device team_slave_1 added [ 63.274233][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.281560][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.288849][ T5832] bridge_slave_1: entered allmulticast mode [ 63.296306][ T5832] bridge_slave_1: entered promiscuous mode [ 63.302790][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.309855][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.317164][ T5838] bridge_slave_0: entered allmulticast mode [ 63.324622][ T5838] bridge_slave_0: entered promiscuous mode [ 63.332133][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.339192][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.346869][ T5838] bridge_slave_1: entered allmulticast mode [ 63.353639][ T5838] bridge_slave_1: entered promiscuous mode [ 63.361952][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.424306][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.431671][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.458300][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.469954][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.477255][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.484424][ T5836] bridge_slave_0: entered allmulticast mode [ 63.491152][ T5836] bridge_slave_0: entered promiscuous mode [ 63.518866][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.526046][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.552253][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.563759][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.570840][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.579320][ T5836] bridge_slave_1: entered allmulticast mode [ 63.586074][ T5836] bridge_slave_1: entered promiscuous mode [ 63.603326][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.614155][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.625975][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.636803][ T5825] team0: Port device team_slave_0 added [ 63.658521][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.686850][ T5825] team0: Port device team_slave_1 added [ 63.695013][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.706784][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.750013][ T5832] team0: Port device team_slave_0 added [ 63.757903][ T5838] team0: Port device team_slave_0 added [ 63.766129][ T5838] team0: Port device team_slave_1 added [ 63.796074][ T5832] team0: Port device team_slave_1 added [ 63.809307][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.818076][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.844258][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.866368][ T5829] hsr_slave_0: entered promiscuous mode [ 63.872477][ T5829] hsr_slave_1: entered promiscuous mode [ 63.881845][ T5836] team0: Port device team_slave_0 added [ 63.903888][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.910858][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.936906][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.950014][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.957169][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.983747][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.009200][ T5836] team0: Port device team_slave_1 added [ 64.023312][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.030290][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.056561][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.085542][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.092527][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.118634][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.130834][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.137867][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.163810][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.191672][ T5831] Bluetooth: hci0: command tx timeout [ 64.197368][ T5831] Bluetooth: hci2: command tx timeout [ 64.199166][ T5153] Bluetooth: hci1: command tx timeout [ 64.244233][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.251294][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.277467][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.308073][ T5838] hsr_slave_0: entered promiscuous mode [ 64.314171][ T5838] hsr_slave_1: entered promiscuous mode [ 64.319994][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.327845][ T5838] Cannot create hsr debugfs directory [ 64.336663][ T5825] hsr_slave_0: entered promiscuous mode [ 64.343337][ T5825] hsr_slave_1: entered promiscuous mode [ 64.349224][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.356859][ T5153] Bluetooth: hci3: command tx timeout [ 64.357121][ T5153] Bluetooth: hci4: command tx timeout [ 64.363082][ T5825] Cannot create hsr debugfs directory [ 64.377304][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.384392][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.410346][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.429466][ T5832] hsr_slave_0: entered promiscuous mode [ 64.435661][ T5832] hsr_slave_1: entered promiscuous mode [ 64.441952][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.449494][ T5832] Cannot create hsr debugfs directory [ 64.582514][ T5836] hsr_slave_0: entered promiscuous mode [ 64.588553][ T5836] hsr_slave_1: entered promiscuous mode [ 64.595224][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.602840][ T5836] Cannot create hsr debugfs directory [ 64.840111][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.855786][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.865794][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.884587][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.928105][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.947677][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.966167][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.975872][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.065773][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.080796][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.099770][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.109000][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.125476][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.172508][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.195299][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.203278][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.214719][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.223952][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.243401][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.263784][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.271051][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.280719][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.287827][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.304158][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.348747][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.355881][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.380462][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.391899][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.415626][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.425214][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.438077][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.445204][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.571312][ T30] audit: type=1400 audit(1752584476.160:86): avc: denied { sys_module } for pid=5829 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.586853][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.644564][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.664722][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.755571][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.787392][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.794518][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.806534][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.813699][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.830782][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.850637][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.868877][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.876034][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.893863][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.900953][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.917665][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.948306][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.997489][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.004655][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.017638][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.024727][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.040255][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.056399][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.243148][ T5838] veth0_vlan: entered promiscuous mode [ 66.266970][ T5838] veth1_vlan: entered promiscuous mode [ 66.278935][ T5153] Bluetooth: hci1: command tx timeout [ 66.278940][ T5831] Bluetooth: hci0: command tx timeout [ 66.281426][ T5831] Bluetooth: hci2: command tx timeout [ 66.413988][ T5838] veth0_macvtap: entered promiscuous mode [ 66.431453][ T5831] Bluetooth: hci3: command tx timeout [ 66.433280][ T5153] Bluetooth: hci4: command tx timeout [ 66.446344][ T5838] veth1_macvtap: entered promiscuous mode [ 66.488158][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.526139][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.547668][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.574279][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.612043][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.620817][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.633553][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.642507][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.670738][ T5829] veth0_vlan: entered promiscuous mode [ 66.677617][ T5825] veth0_vlan: entered promiscuous mode [ 66.685987][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.708794][ T5829] veth1_vlan: entered promiscuous mode [ 66.737686][ T5825] veth1_vlan: entered promiscuous mode [ 66.780163][ T5836] veth0_vlan: entered promiscuous mode [ 66.829417][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.830933][ T5829] veth0_macvtap: entered promiscuous mode [ 66.849411][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.855898][ T5825] veth0_macvtap: entered promiscuous mode [ 66.870151][ T5836] veth1_vlan: entered promiscuous mode [ 66.900117][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.900495][ T5825] veth1_macvtap: entered promiscuous mode [ 66.908669][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.919322][ T5832] veth0_vlan: entered promiscuous mode [ 66.928698][ T5829] veth1_macvtap: entered promiscuous mode [ 66.948262][ T30] audit: type=1400 audit(1752584477.550:87): avc: denied { mounton } for pid=5838 comm="syz-executor" path="/root/syzkaller.gdBMuM/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.974633][ T30] audit: type=1400 audit(1752584477.550:88): avc: denied { mount } for pid=5838 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.004277][ T5832] veth1_vlan: entered promiscuous mode [ 67.020688][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.022798][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.045035][ T30] audit: type=1400 audit(1752584477.550:89): avc: denied { mounton } for pid=5838 comm="syz-executor" path="/root/syzkaller.gdBMuM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.054309][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.079015][ T30] audit: type=1400 audit(1752584477.560:90): avc: denied { mount } for pid=5838 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.103367][ T30] audit: type=1400 audit(1752584477.560:91): avc: denied { mounton } for pid=5838 comm="syz-executor" path="/root/syzkaller.gdBMuM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.139292][ T30] audit: type=1400 audit(1752584477.560:92): avc: denied { mounton } for pid=5838 comm="syz-executor" path="/root/syzkaller.gdBMuM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.168650][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.180636][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.190266][ T30] audit: type=1400 audit(1752584477.570:93): avc: denied { unmount } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.214408][ T30] audit: type=1400 audit(1752584477.580:94): avc: denied { mounton } for pid=5838 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.230220][ T5836] veth0_macvtap: entered promiscuous mode [ 67.243598][ T30] audit: type=1400 audit(1752584477.580:95): avc: denied { mount } for pid=5838 comm="syz-executor" name="/" dev="gadgetfs" ino=7255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.266942][ T30] audit: type=1400 audit(1752584477.610:96): avc: denied { mount } for pid=5838 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.292500][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.303426][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.314123][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.323028][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.335625][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.344462][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.353646][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.362559][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.377950][ T5836] veth1_macvtap: entered promiscuous mode [ 67.383351][ T5940] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.395663][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.399433][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.419372][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.428523][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.437380][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.446305][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.520218][ T5832] veth0_macvtap: entered promiscuous mode [ 67.558612][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.573744][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.583005][ T5832] veth1_macvtap: entered promiscuous mode [ 67.625558][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.635912][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.692347][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.693010][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.717179][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.738249][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.744418][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.753696][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.813575][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.822557][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.832248][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.840956][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.860602][ T5943] syzkaller1: entered promiscuous mode [ 67.866296][ T5943] syzkaller1: entered allmulticast mode [ 67.893567][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.905983][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.932692][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.944096][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.354274][ T5153] Bluetooth: hci1: command tx timeout [ 68.354284][ T5831] Bluetooth: hci2: command tx timeout [ 68.354312][ T5831] Bluetooth: hci0: command tx timeout [ 68.506411][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.518308][ T5831] Bluetooth: hci3: command tx timeout [ 68.521483][ T5833] Bluetooth: hci4: command tx timeout [ 68.545304][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.571306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.656173][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.673611][ T5889] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.691670][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.851211][ T972] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.862538][ T5889] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 68.889617][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.905146][ T5889] usb 4-1: Product: syz [ 68.909612][ T5889] usb 4-1: Manufacturer: syz [ 68.927160][ T5889] usb 4-1: SerialNumber: syz [ 68.964554][ T5889] usb 4-1: config 0 descriptor?? [ 69.062723][ T972] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.125017][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.170147][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 69.201302][ T5963] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.251416][ T972] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.273597][ T972] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.341346][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.374344][ T972] usb 3-1: config 0 descriptor?? [ 69.381154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.381236][ T5963] usb 1-1: Using ep0 maxpacket: 32 [ 69.443184][ T5963] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 69.458692][ T5979] netlink: zone id is out of range [ 69.503840][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.521429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 69.539680][ T5963] usb 1-1: config 0 descriptor?? [ 69.566041][ T5963] as10x_usb: device has been detected [ 69.571091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 69.591241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 69.804558][ T5963] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 69.813417][ T5979] netlink: set zone limit has 4 unknown bytes [ 69.842313][ T5963] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 69.869097][ T972] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 69.905932][ T972] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 69.935124][ T5979] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11'. [ 70.012727][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 70.045519][ T5963] as10x_usb: error during firmware upload part1 [ 70.064884][ T5963] Registered device nBox DVB-T Dongle [ 70.080815][ T5876] usb 3-1: USB disconnect, device number 2 [ 70.254044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.361227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.451101][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 70.471632][ T5833] Bluetooth: hci0: command tx timeout [ 70.477236][ T5833] Bluetooth: hci1: command tx timeout [ 70.485602][ T5833] Bluetooth: hci2: command tx timeout [ 70.501152][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 70.511560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.592912][ T5153] Bluetooth: hci3: command tx timeout [ 70.593338][ T5833] Bluetooth: hci4: command tx timeout [ 70.629388][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 70.640563][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 70.651532][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 70.661477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.721747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.733212][ T5981] fido_id[5981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 70.749252][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 70.773661][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 70.871390][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 70.899054][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 70.924456][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.931532][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.940599][ T5963] usb 1-1: USB disconnect, device number 2 [ 70.964738][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 70.989595][ T5963] Unregistered device nBox DVB-T Dongle [ 71.003966][ T5963] as10x_usb: device has been disconnected [ 71.324497][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 71.347733][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 71.359565][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 71.369912][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 71.384305][ T5991] delete_channel: no stack [ 71.442697][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 71.497725][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 71.658708][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.122793][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 72.122806][ T30] audit: type=1400 audit(1752584482.730:151): avc: denied { open } for pid=5998 comm="syz.1.16" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 72.206564][ T30] audit: type=1400 audit(1752584482.730:152): avc: denied { create } for pid=5998 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.482611][ T6007] FAULT_INJECTION: forcing a failure. [ 72.482611][ T6007] name failslab, interval 1, probability 0, space 0, times 0 [ 72.508137][ T30] audit: type=1400 audit(1752584483.090:153): avc: denied { map_read map_write } for pid=6003 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.575947][ T6009] Bluetooth: MGMT ver 1.23 [ 72.601594][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 72.615563][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 72.645730][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: syz.2.17 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 72.645756][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.645765][ T6007] Call Trace: [ 72.645770][ T6007] [ 72.645777][ T6007] dump_stack_lvl+0x16c/0x1f0 [ 72.645803][ T6007] should_fail_ex+0x512/0x640 [ 72.645823][ T6007] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 72.645846][ T6007] should_failslab+0xc2/0x120 [ 72.645869][ T6007] __kmalloc_cache_node_noprof+0x6d/0x420 [ 72.645890][ T6007] ? __get_vm_area_node+0x101/0x330 [ 72.645910][ T6007] __get_vm_area_node+0x101/0x330 [ 72.645934][ T6007] __vmalloc_node_range_noprof+0x271/0x14b0 [ 72.645952][ T6007] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 72.645973][ T6007] ? find_held_lock+0x2b/0x80 [ 72.645995][ T6007] ? avc_has_perm_noaudit+0x117/0x3b0 [ 72.646017][ T6007] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 72.646040][ T6007] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 72.646059][ T6007] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 72.646087][ T6007] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 72.646103][ T6007] __vmalloc_node_noprof+0xad/0xf0 [ 72.646120][ T6007] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 72.646140][ T6007] bpf_prog_alloc_no_stats+0x54/0x630 [ 72.646158][ T6007] ? security_capable+0x7e/0x260 [ 72.646178][ T6007] bpf_prog_alloc+0x3b/0x230 [ 72.646193][ T6007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.646214][ T6007] bpf_prog_load+0x1a04/0x2490 [ 72.646241][ T6007] ? __pfx_bpf_prog_load+0x10/0x10 [ 72.646260][ T6007] ? avc_has_perm_noaudit+0x149/0x3b0 [ 72.646291][ T6007] ? selinux_bpf+0xde/0x130 [ 72.646305][ T6007] ? bpf_lsm_bpf+0x9/0x10 [ 72.646338][ T6007] __sys_bpf+0x433c/0x4d80 [ 72.646363][ T6007] ? __pfx___sys_bpf+0x10/0x10 [ 72.646384][ T6007] ? ksys_write+0x190/0x250 [ 72.646409][ T6007] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 72.646445][ T6007] ? fput+0x70/0xf0 [ 72.646458][ T6007] ? ksys_write+0x1ac/0x250 [ 72.646477][ T6007] ? __pfx_ksys_write+0x10/0x10 [ 72.646500][ T6007] __x64_sys_bpf+0x78/0xc0 [ 72.646522][ T6007] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.646543][ T6007] do_syscall_64+0xcd/0x4c0 [ 72.646566][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.646581][ T6007] RIP: 0033:0x7ff9b458e929 [ 72.646595][ T6007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.646609][ T6007] RSP: 002b:00007ff9b5487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.646625][ T6007] RAX: ffffffffffffffda RBX: 00007ff9b47b6160 RCX: 00007ff9b458e929 [ 72.646636][ T6007] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 72.646646][ T6007] RBP: 00007ff9b5487090 R08: 0000000000000000 R09: 0000000000000000 [ 72.646655][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.646664][ T6007] R13: 0000000000000000 R14: 00007ff9b47b6160 R15: 00007ffff8f3c258 [ 72.646686][ T6007] [ 72.648821][ T6007] syz.2.17: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 72.949413][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.973167][ T30] audit: type=1400 audit(1752584483.150:154): avc: denied { create } for pid=6008 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.991276][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 73.011006][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 73.026988][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.039128][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 73.056513][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 73.258909][ T6007] ,cpuset=/,mems_allowed=0-1 [ 73.272974][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: syz.2.17 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 73.272989][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.272996][ T6007] Call Trace: [ 73.273000][ T6007] [ 73.273004][ T6007] dump_stack_lvl+0x16c/0x1f0 [ 73.273023][ T6007] warn_alloc+0x248/0x3a0 [ 73.273039][ T6007] ? __pfx_warn_alloc+0x10/0x10 [ 73.273052][ T6007] ? kasan_quarantine_reduce+0x1b9/0x1e0 [ 73.273071][ T6007] ? __kasan_kmalloc+0x8a/0xb0 [ 73.273085][ T6007] ? __get_vm_area_node+0x208/0x330 [ 73.273099][ T6007] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 73.273113][ T6007] ? find_held_lock+0x2b/0x80 [ 73.273127][ T6007] ? avc_has_perm_noaudit+0x117/0x3b0 [ 73.273139][ T6007] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 73.273156][ T6007] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 73.273169][ T6007] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 73.273188][ T6007] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 73.273200][ T6007] __vmalloc_node_noprof+0xad/0xf0 [ 73.273212][ T6007] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 73.273225][ T6007] bpf_prog_alloc_no_stats+0x54/0x630 [ 73.273237][ T6007] ? security_capable+0x7e/0x260 [ 73.273251][ T6007] bpf_prog_alloc+0x3b/0x230 [ 73.273261][ T6007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.273275][ T6007] bpf_prog_load+0x1a04/0x2490 [ 73.273293][ T6007] ? __pfx_bpf_prog_load+0x10/0x10 [ 73.273307][ T6007] ? avc_has_perm_noaudit+0x149/0x3b0 [ 73.273326][ T6007] ? selinux_bpf+0xde/0x130 [ 73.273336][ T6007] ? bpf_lsm_bpf+0x9/0x10 [ 73.273349][ T6007] __sys_bpf+0x433c/0x4d80 [ 73.273365][ T6007] ? __pfx___sys_bpf+0x10/0x10 [ 73.273381][ T6007] ? ksys_write+0x190/0x250 [ 73.273397][ T6007] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 73.273421][ T6007] ? fput+0x70/0xf0 [ 73.273430][ T6007] ? ksys_write+0x1ac/0x250 [ 73.273444][ T6007] ? __pfx_ksys_write+0x10/0x10 [ 73.273460][ T6007] __x64_sys_bpf+0x78/0xc0 [ 73.273475][ T6007] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.273490][ T6007] do_syscall_64+0xcd/0x4c0 [ 73.273506][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.273517][ T6007] RIP: 0033:0x7ff9b458e929 [ 73.273526][ T6007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.273537][ T6007] RSP: 002b:00007ff9b5487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.273547][ T6007] RAX: ffffffffffffffda RBX: 00007ff9b47b6160 RCX: 00007ff9b458e929 [ 73.273554][ T6007] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 73.273560][ T6007] RBP: 00007ff9b5487090 R08: 0000000000000000 R09: 0000000000000000 [ 73.273566][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.273572][ T6007] R13: 0000000000000000 R14: 00007ff9b47b6160 R15: 00007ffff8f3c258 [ 73.273585][ T6007] [ 73.273589][ T6007] Mem-Info: [ 75.473088][ T30] audit: type=1400 audit(1752584483.160:155): avc: denied { read write } for pid=6008 comm="syz.0.18" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.736172][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 75.950541][ T30] audit: type=1400 audit(1752584483.160:156): avc: denied { open } for pid=6008 comm="syz.0.18" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.062418][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 76.304019][ T6017] batman_adv: batadv0: Adding interface: dummy0 [ 76.366871][ T6017] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.402468][ T6017] batman_adv: batadv0: Interface activated: dummy0 [ 85.840982][ C0] sched: DL replenish lagged too much [ 96.644306][ T6007] active_anon:7437 inactive_anon:0 isolated_anon:0 [ 96.644306][ T6007] active_file:1512 inactive_file:40587 isolated_file:0 [ 96.644306][ T6007] unevictable:768 dirty:764 writeback:0 [ 96.644306][ T6007] slab_reclaimable:10750 slab_unreclaimable:163122 [ 96.644306][ T6007] mapped:29767 shmem:1359 pagetables:1149 [ 96.644306][ T6007] sec_pagetables:0 bounce:0 [ 96.644306][ T6007] kernel_misc_reclaimable:0 [ 96.644306][ T6007] free:1222868 free_pcp:46754 free_cma:0 [ 106.782657][ T30] audit: type=1400 audit(1752584483.170:157): avc: denied { create } for pid=6010 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 210.460925][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 210.467912][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P24/1:b..l P5191/1:b..l P5889/1:b..l P5838/1:b..l [ 210.479329][ C1] rcu: (detected by 1, t=10503 jiffies, g=7917, q=773609 ncpus=2) [ 210.487233][ C1] task:syz-executor state:R running task stack:23864 pid:5838 tgid:5838 ppid:5823 task_flags:0x400140 flags:0x00004002 [ 210.501315][ C1] Call Trace: [ 210.504598][ C1] [ 210.507530][ C1] __schedule+0x116a/0x5de0 [ 210.512045][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 210.517437][ C1] ? __pfx___schedule+0x10/0x10 [ 210.522293][ C1] ? __lock_acquire+0x622/0x1c90 [ 210.527240][ C1] ? mark_held_locks+0x49/0x80 [ 210.532012][ C1] preempt_schedule_irq+0x51/0x90 [ 210.537048][ C1] irqentry_exit+0x36/0x90 [ 210.541474][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 210.547455][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 210.552655][ C1] Code: 45 38 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 f2 fc 10 0f 0f 82 74 02 00 00 8b 35 da 2e 11 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 45 38 12 0f 85 c7 02 00 00 48 83 c4 [ 210.572278][ C1] RSP: 0018:ffffc90003e9f1e8 EFLAGS: 00000206 [ 210.578350][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c4e00 RCX: 000000008ab2ced4 [ 210.586325][ C1] RDX: 0000000000000000 RSI: ffffffff8de0d97d RDI: ffffffff8c158f60 [ 210.594299][ C1] RBP: 0000000000000002 R08: 8ba6408306292a6a R09: 0000000000000000 [ 210.602273][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 210.611111][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.619098][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 210.624305][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 210.630471][ C1] unwind_next_frame+0xd1/0x20a0 [ 210.635411][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 210.640539][ C1] ? tomoyo_encode+0x29/0x50 [ 210.645259][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 210.651430][ C1] arch_stack_walk+0x94/0x100 [ 210.656122][ C1] ? tomoyo_encode+0x29/0x50 [ 210.660726][ C1] stack_trace_save+0x8e/0xc0 [ 210.665412][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 210.670784][ C1] ? __lock_acquire+0x622/0x1c90 [ 210.675710][ C1] save_stack+0x160/0x1f0 [ 210.680043][ C1] ? __pfx_save_stack+0x10/0x10 [ 210.684897][ C1] ? __free_frozen_pages+0x7fe/0x1180 [ 210.690278][ C1] ? __put_partials+0x16d/0x1c0 [ 210.695114][ C1] ? qlist_free_all+0x4d/0x120 [ 210.699881][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 210.705514][ C1] ? __kasan_kmalloc+0x8a/0xb0 [ 210.710272][ C1] ? __kmalloc_noprof+0x223/0x510 [ 210.715282][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 210.720135][ C1] ? tomoyo_encode+0x29/0x50 [ 210.724734][ C1] ? page_ext_put+0x3e/0xd0 [ 210.729240][ C1] __reset_page_owner+0x84/0x1a0 [ 210.734169][ C1] __free_frozen_pages+0x7fe/0x1180 [ 210.739376][ C1] __put_partials+0x16d/0x1c0 [ 210.744062][ C1] qlist_free_all+0x4d/0x120 [ 210.748647][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 210.753486][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 210.758946][ C1] __kasan_kmalloc+0x8a/0xb0 [ 210.763541][ C1] __kmalloc_noprof+0x223/0x510 [ 210.768391][ C1] tomoyo_encode2+0x100/0x3e0 [ 210.773063][ C1] tomoyo_encode+0x29/0x50 [ 210.777484][ C1] tomoyo_realpath_from_path+0x18f/0x6e0 [ 210.783129][ C1] tomoyo_check_open_permission+0x2ab/0x3c0 [ 210.789017][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 210.795440][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 210.800475][ C1] tomoyo_file_open+0x6b/0x90 [ 210.805151][ C1] security_file_open+0x84/0x1e0 [ 210.810091][ C1] do_dentry_open+0x596/0x1c10 [ 210.814853][ C1] vfs_open+0x82/0x3f0 [ 210.818930][ C1] path_openat+0x1de4/0x2cb0 [ 210.823536][ C1] ? __pfx_path_openat+0x10/0x10 [ 210.828471][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 210.833409][ C1] do_filp_open+0x20b/0x470 [ 210.837937][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 210.842995][ C1] ? alloc_fd+0x471/0x7d0 [ 210.847344][ C1] do_sys_openat2+0x11b/0x1d0 [ 210.852028][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 210.857237][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 210.862450][ C1] __x64_sys_openat+0x174/0x210 [ 210.867305][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 210.872690][ C1] do_syscall_64+0xcd/0x4c0 [ 210.877204][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.883107][ C1] RIP: 0033:0x7f142358e221 [ 210.887522][ C1] RSP: 002b:00007ffde652f550 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 210.895938][ C1] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007f142358e221 [ 210.903923][ C1] RDX: 0000000000090800 RSI: 00007f1423610e59 RDI: 00000000ffffff9c [ 210.911911][ C1] RBP: 00007ffde652f5fc R08: 0000000000000000 R09: 0000000000000000 [ 210.919903][ C1] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000003 [ 210.927862][ C1] R13: 0000000000000000 R14: 0000000000012df7 R15: 00007ffde652f650 [ 210.935850][ C1] [ 210.938861][ C1] task:kworker/1:4 state:R running task stack:22824 pid:5889 tgid:5889 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 210.952406][ C1] Workqueue: usb_hub_wq hub_event [ 210.957441][ C1] Call Trace: [ 210.960709][ C1] [ 210.963633][ C1] __schedule+0x116a/0x5de0 [ 210.968159][ C1] ? __pfx___schedule+0x10/0x10 [ 210.973013][ C1] ? really_probe+0x241/0xa90 [ 210.977693][ C1] ? __kernel_text_address+0xd/0x40 [ 210.982894][ C1] ? unwind_get_return_address+0x59/0xa0 [ 210.988529][ C1] ? arch_stack_walk+0x88/0x100 [ 210.993383][ C1] ? mark_held_locks+0x49/0x80 [ 210.998159][ C1] preempt_schedule_irq+0x51/0x90 [ 211.003175][ C1] irqentry_exit+0x36/0x90 [ 211.007600][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 211.013583][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 211.018859][ C1] Code: 0f c1 05 08 8d 38 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 1d 4b 38 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 211.038453][ C1] RSP: 0018:ffffc90003a9e968 EFLAGS: 00000206 [ 211.044522][ C1] RAX: 55d7338ebb855400 RBX: ffffffff8e5c4e00 RCX: ffffc90003a9e974 [ 211.052506][ C1] RDX: 0000000000000007 RSI: ffffffff8de0d97d RDI: ffffffff8c158f60 [ 211.060479][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 211.068444][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff822e936c [ 211.076442][ C1] R13: 0000000000000206 R14: ffff888033b6c880 R15: 0000000000000008 [ 211.084424][ C1] ? __page_table_check_zero+0x33c/0x5d0 [ 211.090088][ C1] __page_table_check_zero+0x341/0x5d0 [ 211.095559][ C1] ? __pfx___page_table_check_zero+0x10/0x10 [ 211.101551][ C1] ? __reset_page_owner+0x137/0x1a0 [ 211.106758][ C1] __free_frozen_pages+0x7df/0x1180 [ 211.111977][ C1] __put_partials+0x16d/0x1c0 [ 211.116662][ C1] qlist_free_all+0x4d/0x120 [ 211.121262][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 211.126732][ C1] __kasan_kmalloc+0x8a/0xb0 [ 211.131333][ C1] usb_control_msg+0xbc/0x4a0 [ 211.136011][ C1] ? __pfx_usb_control_msg+0x10/0x10 [ 211.141302][ C1] __usbnet_write_cmd+0xd4/0x240 [ 211.146261][ C1] ? dev_pm_qos_expose_latency_limit+0x10/0x330 [ 211.152524][ C1] usbnet_write_cmd+0x96/0x100 [ 211.157307][ C1] ? __pfx_usbnet_write_cmd+0x10/0x10 [ 211.162690][ C1] asix_write_cmd+0x85/0x100 [ 211.167293][ C1] asix_check_host_enable+0x154/0x240 [ 211.172673][ C1] ? __pfx_asix_check_host_enable+0x10/0x10 [ 211.178564][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 211.184356][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 211.189568][ C1] __asix_mdio_write+0xa5/0x220 [ 211.194427][ C1] ? __pfx___asix_mdio_write+0x10/0x10 [ 211.199882][ C1] ? asix_read_phy_addr+0xad/0x280 [ 211.204992][ C1] ? asix_read_phy_addr+0x106/0x280 [ 211.210514][ C1] asix_phy_reset+0x88/0x1f0 [ 211.215144][ C1] ax88172_bind+0x41f/0x5d0 [ 211.219649][ C1] ? __pfx_ax88172_bind+0x10/0x10 [ 211.224669][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 211.230054][ C1] usbnet_probe+0xabb/0x27a0 [ 211.234659][ C1] ? __pfx_ax88172_bind+0x10/0x10 [ 211.239703][ C1] ? __pfx_usbnet_probe+0x10/0x10 [ 211.244723][ C1] ? usb_disable_lpm+0x49a/0x610 [ 211.249667][ C1] usb_probe_interface+0x300/0x9c0 [ 211.254789][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 211.260427][ C1] really_probe+0x241/0xa90 [ 211.264940][ C1] __driver_probe_device+0x1de/0x440 [ 211.270239][ C1] driver_probe_device+0x4c/0x1b0 [ 211.275255][ C1] __device_attach_driver+0x1df/0x310 [ 211.280636][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 211.286534][ C1] bus_for_each_drv+0x159/0x1e0 [ 211.291395][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 211.296770][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 211.301975][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 211.307801][ C1] __device_attach+0x1e4/0x4b0 [ 211.312556][ C1] ? __pfx___device_attach+0x10/0x10 [ 211.317845][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 211.323048][ C1] bus_probe_device+0x17f/0x1c0 [ 211.327895][ C1] device_add+0x1148/0x1a70 [ 211.332386][ C1] ? __pfx_device_add+0x10/0x10 [ 211.337233][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 211.342617][ C1] usb_set_configuration+0x1187/0x1e20 [ 211.348075][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 211.354125][ C1] usb_generic_driver_probe+0xb1/0x110 [ 211.359582][ C1] usb_probe_device+0xec/0x3e0 [ 211.364346][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 211.369713][ C1] really_probe+0x241/0xa90 [ 211.374207][ C1] __driver_probe_device+0x1de/0x440 [ 211.379499][ C1] ? usb_driver_applicable+0x1c7/0x220 [ 211.384963][ C1] driver_probe_device+0x4c/0x1b0 [ 211.389990][ C1] __device_attach_driver+0x1df/0x310 [ 211.395360][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 211.401260][ C1] bus_for_each_drv+0x159/0x1e0 [ 211.406118][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 211.411497][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 211.416702][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 211.422514][ C1] __device_attach+0x1e4/0x4b0 [ 211.427284][ C1] ? __pfx___device_attach+0x10/0x10 [ 211.432575][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 211.437781][ C1] bus_probe_device+0x17f/0x1c0 [ 211.442636][ C1] device_add+0x1148/0x1a70 [ 211.447138][ C1] ? __pfx_device_add+0x10/0x10 [ 211.451989][ C1] ? add_device_randomness+0xb7/0xf0 [ 211.457288][ C1] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 211.463190][ C1] usb_new_device+0xd07/0x1a20 [ 211.467949][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 211.472962][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 211.478164][ C1] ? mark_held_locks+0x49/0x80 [ 211.482929][ C1] hub_event+0x2eb7/0x4fa0 [ 211.487368][ C1] ? __pfx_hub_event+0x10/0x10 [ 211.492132][ C1] ? sm3_block_generic+0x2e90/0x35e0 [ 211.497429][ C1] ? rcu_is_watching+0x12/0xc0 [ 211.502200][ C1] process_one_work+0x9cf/0x1b70 [ 211.507148][ C1] ? __pfx_hcd_resume_work+0x10/0x10 [ 211.512437][ C1] ? __pfx_process_one_work+0x10/0x10 [ 211.517815][ C1] ? assign_work+0x1a0/0x250 [ 211.522407][ C1] worker_thread+0x6c8/0xf10 [ 211.527016][ C1] ? __kthread_parkme+0x19e/0x250 [ 211.532053][ C1] ? __pfx_worker_thread+0x10/0x10 [ 211.537166][ C1] kthread+0x3c5/0x780 [ 211.541234][ C1] ? __pfx_kthread+0x10/0x10 [ 211.545828][ C1] ? rcu_is_watching+0x12/0xc0 [ 211.550604][ C1] ? __pfx_kthread+0x10/0x10 [ 211.555182][ C1] ret_from_fork+0x5d7/0x6f0 [ 211.559777][ C1] ? __pfx_kthread+0x10/0x10 [ 211.564369][ C1] ret_from_fork_asm+0x1a/0x30 [ 211.569143][ C1] [ 211.572147][ C1] task:klogd state:R running task stack:25512 pid:5191 tgid:5191 ppid:1 task_flags:0x400100 flags:0x00004002 [ 211.585640][ C1] Call Trace: [ 211.588910][ C1] [ 211.591860][ C1] __schedule+0x116a/0x5de0 [ 211.596378][ C1] ? sched_clock+0x21/0x60 [ 211.600809][ C1] ? __pfx___schedule+0x10/0x10 [ 211.605674][ C1] ? mark_held_locks+0x49/0x80 [ 211.610430][ C1] preempt_schedule_irq+0x51/0x90 [ 211.615443][ C1] irqentry_exit+0x36/0x90 [ 211.619862][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 211.625841][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 211.631040][ C1] Code: 45 38 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 f2 fc 10 0f 0f 82 74 02 00 00 8b 35 da 2e 11 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 45 38 12 0f 85 c7 02 00 00 48 83 c4 [ 211.650645][ C1] RSP: 0018:ffffc90004c0f3a8 EFLAGS: 00000206 [ 211.656705][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c4e00 RCX: 0000000044e03ca5 [ 211.664679][ C1] RDX: 0000000000000000 RSI: ffffffff8de0d97d RDI: ffffffff8c158f60 [ 211.672654][ C1] RBP: 0000000000000002 R08: bb39787382043d4c R09: 0000000000000000 [ 211.680617][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 211.688580][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.696571][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 211.701782][ C1] unwind_next_frame+0xd1/0x20a0 [ 211.706720][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 211.711834][ C1] ? arch_stack_walk+0x73/0x100 [ 211.716693][ C1] __unwind_start+0x45f/0x7f0 [ 211.721373][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 211.727535][ C1] arch_stack_walk+0x73/0x100 [ 211.732220][ C1] ? arch_stack_walk+0x73/0x100 [ 211.737075][ C1] stack_trace_save+0x8e/0xc0 [ 211.741759][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 211.747139][ C1] ? __lock_acquire+0x622/0x1c90 [ 211.752080][ C1] save_stack+0x160/0x1f0 [ 211.756414][ C1] ? __pfx_save_stack+0x10/0x10 [ 211.761364][ C1] ? page_ext_put+0x3e/0xd0 [ 211.765878][ C1] __reset_page_owner+0x84/0x1a0 [ 211.771002][ C1] __free_frozen_pages+0x7fe/0x1180 [ 211.776211][ C1] __put_partials+0x16d/0x1c0 [ 211.780886][ C1] qlist_free_all+0x4d/0x120 [ 211.785474][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 211.790936][ C1] __kasan_slab_alloc+0x69/0x90 [ 211.795793][ C1] __kmalloc_node_track_caller_noprof+0x1d3/0x510 [ 211.802216][ C1] ? __alloc_skb+0x166/0x380 [ 211.806812][ C1] ? trace_kmem_cache_alloc+0x28/0xc0 [ 211.812194][ C1] kmalloc_reserve+0xef/0x2c0 [ 211.816877][ C1] __alloc_skb+0x166/0x380 [ 211.821296][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 211.826233][ C1] ? __lock_acquire+0x622/0x1c90 [ 211.831173][ C1] ? avc_has_perm+0x11a/0x1c0 [ 211.835852][ C1] alloc_skb_with_frags+0xe0/0x860 [ 211.840976][ C1] ? find_held_lock+0x2b/0x80 [ 211.845664][ C1] sock_alloc_send_pskb+0x7fb/0x990 [ 211.850877][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 211.856596][ C1] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 211.862943][ C1] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 211.869640][ C1] ? sock_def_readable+0x1d9/0x600 [ 211.874775][ C1] unix_dgram_sendmsg+0x41a/0x1840 [ 211.879894][ C1] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 211.886652][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 211.892222][ C1] __sys_sendto+0x4a3/0x520 [ 211.896747][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 211.901862][ C1] ? find_held_lock+0x2b/0x80 [ 211.906558][ C1] ? rcu_is_watching+0x12/0xc0 [ 211.911340][ C1] ? xfd_validate_state+0x61/0x180 [ 211.916463][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 211.921243][ C1] ? do_syscall_64+0x91/0x4c0 [ 211.925930][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 211.931134][ C1] do_syscall_64+0xcd/0x4c0 [ 211.935646][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.941539][ C1] RIP: 0033:0x7ff2d7552407 [ 211.945954][ C1] RSP: 002b:00007ffce2127fb0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 211.954368][ C1] RAX: ffffffffffffffda RBX: 00007ff2d7402c80 RCX: 00007ff2d7552407 [ 211.962359][ C1] RDX: 0000000000000063 RSI: 00007ffce21280f0 RDI: 0000000000000003 [ 211.970329][ C1] RBP: 00007ffce2128520 R08: 0000000000000000 R09: 0000000000000000 [ 211.978292][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffce2128538 [ 211.986286][ C1] R13: 00007ffce21280f0 R14: 0000000000000048 R15: 00007ffce21280f0 [ 211.994284][ C1] [ 211.997306][ C1] task:kworker/1:0 state:R running task stack:25944 pid:24 tgid:24 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 212.010900][ C1] Workqueue: events request_firmware_work_func [ 212.017063][ C1] Call Trace: [ 212.020336][ C1] [ 212.023261][ C1] __schedule+0x116a/0x5de0 [ 212.027787][ C1] ? __pfx___schedule+0x10/0x10 [ 212.032639][ C1] ? unwind_next_frame+0x3fe/0x20a0 [ 212.037828][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 212.042756][ C1] ? mark_held_locks+0x49/0x80 [ 212.047522][ C1] preempt_schedule_irq+0x51/0x90 [ 212.052563][ C1] irqentry_exit+0x36/0x90 [ 212.057004][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 212.062999][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 212.068207][ C1] Code: 45 38 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 f2 fc 10 0f 0f 82 74 02 00 00 8b 35 da 2e 11 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 45 38 12 0f 85 c7 02 00 00 48 83 c4 [ 212.087832][ C1] RSP: 0018:ffffc900001e7338 EFLAGS: 00000206 [ 212.093890][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c4e00 RCX: 000000004a32d251 [ 212.101884][ C1] RDX: 0000000000000000 RSI: ffffffff8de0d97d RDI: ffffffff8c158f60 [ 212.109863][ C1] RBP: 0000000000000002 R08: 834c87a31503aab3 R09: 0000000000000000 [ 212.117827][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 212.125783][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.133770][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 212.138963][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 212.145107][ C1] unwind_next_frame+0xd1/0x20a0 [ 212.150043][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 212.155151][ C1] ? firmware_fallback_sysfs+0xa32/0xbe0 [ 212.160779][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 212.166926][ C1] arch_stack_walk+0x94/0x100 [ 212.171623][ C1] ? firmware_fallback_sysfs+0xa32/0xbe0 [ 212.177262][ C1] stack_trace_save+0x8e/0xc0 [ 212.181945][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 212.187326][ C1] ? __lock_acquire+0x622/0x1c90 [ 212.192265][ C1] save_stack+0x160/0x1f0 [ 212.196601][ C1] ? __pfx_save_stack+0x10/0x10 [ 212.201454][ C1] ? __free_frozen_pages+0x7fe/0x1180 [ 212.206826][ C1] ? __put_partials+0x16d/0x1c0 [ 212.211672][ C1] ? qlist_free_all+0x4d/0x120 [ 212.216434][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 212.222069][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 212.227121][ C1] ? __kmalloc_noprof+0x1d4/0x510 [ 212.232147][ C1] ? kobject_get_path+0xd2/0x2a0 [ 212.237088][ C1] ? kobject_uevent_env+0x289/0x1870 [ 212.242371][ C1] ? device_del+0x623/0x9f0 [ 212.246876][ C1] ? firmware_fallback_sysfs+0xa32/0xbe0 [ 212.252513][ C1] ? page_ext_put+0x3e/0xd0 [ 212.257023][ C1] __reset_page_owner+0x84/0x1a0 [ 212.261970][ C1] __free_frozen_pages+0x7fe/0x1180 [ 212.267180][ C1] __put_partials+0x16d/0x1c0 [ 212.271877][ C1] qlist_free_all+0x4d/0x120 [ 212.276472][ C1] ? kobject_get_path+0xd2/0x2a0 [ 212.281412][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 212.286886][ C1] __kasan_slab_alloc+0x69/0x90 [ 212.291748][ C1] __kmalloc_noprof+0x1d4/0x510 [ 212.296618][ C1] kobject_get_path+0xd2/0x2a0 [ 212.301394][ C1] kobject_uevent_env+0x289/0x1870 [ 212.306505][ C1] ? __pfx_dev_uevent_name+0x10/0x10 [ 212.312406][ C1] ? bus_to_subsys+0x131/0x160 [ 212.317176][ C1] device_del+0x623/0x9f0 [ 212.321509][ C1] ? __pfx_device_del+0x10/0x10 [ 212.326361][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 212.331563][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 212.337376][ C1] firmware_fallback_sysfs+0xa32/0xbe0 [ 212.342843][ C1] _request_firmware+0xfe9/0x1470 [ 212.347863][ C1] ? __pfx__request_firmware+0x10/0x10 [ 212.353310][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 212.358970][ C1] request_firmware_work_func+0xea/0x250 [ 212.364612][ C1] ? __pfx_request_firmware_work_func+0x10/0x10 [ 212.370846][ C1] ? rcu_is_watching+0x12/0xc0 [ 212.375602][ C1] process_one_work+0x9cf/0x1b70 [ 212.380548][ C1] ? __pfx_reg_todo+0x10/0x10 [ 212.385224][ C1] ? __pfx_process_one_work+0x10/0x10 [ 212.390588][ C1] ? assign_work+0x1a0/0x250 [ 212.395165][ C1] worker_thread+0x6c8/0xf10 [ 212.399770][ C1] ? __pfx_worker_thread+0x10/0x10 [ 212.404879][ C1] kthread+0x3c5/0x780 [ 212.408954][ C1] ? __pfx_kthread+0x10/0x10 [ 212.413528][ C1] ? rcu_is_watching+0x12/0xc0 [ 212.418294][ C1] ? __pfx_kthread+0x10/0x10 [ 212.422883][ C1] ret_from_fork+0x5d7/0x6f0 [ 212.427475][ C1] ? __pfx_kthread+0x10/0x10 [ 212.432065][ C1] ret_from_fork_asm+0x1a/0x30 [ 212.436839][ C1] [ 212.439855][ C1] rcu: rcu_preempt kthread starved for 8801 jiffies! g7917 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 212.450865][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 212.460817][ C1] rcu: RCU grace-period kthread stack dump: [ 212.466698][ C1] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 212.480195][ C1] Call Trace: [ 212.483470][ C1] [ 212.486402][ C1] __schedule+0x116a/0x5de0 [ 212.490932][ C1] ? __pfx___schedule+0x10/0x10 [ 212.495786][ C1] ? find_held_lock+0x2b/0x80 [ 212.500467][ C1] ? schedule+0x2d7/0x3a0 [ 212.504803][ C1] schedule+0xe7/0x3a0 [ 212.508867][ C1] schedule_timeout+0x123/0x290 [ 212.514222][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 212.519593][ C1] ? __pfx_process_timeout+0x10/0x10 [ 212.524893][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 212.530696][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 212.536156][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 212.540918][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 212.546198][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 212.551405][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 212.556341][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 212.561199][ C1] rcu_gp_kthread+0x270/0x380 [ 212.565871][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 212.571066][ C1] ? rcu_is_watching+0x12/0xc0 [ 212.575832][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 212.581037][ C1] ? __kthread_parkme+0x19e/0x250 [ 212.586065][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 212.591261][ C1] kthread+0x3c5/0x780 [ 212.595334][ C1] ? __pfx_kthread+0x10/0x10 [ 212.599914][ C1] ? rcu_is_watching+0x12/0xc0 [ 212.604664][ C1] ? __pfx_kthread+0x10/0x10 [ 212.609252][ C1] ret_from_fork+0x5d7/0x6f0 [ 212.613849][ C1] ? __pfx_kthread+0x10/0x10 [ 212.618429][ C1] ret_from_fork_asm+0x1a/0x30 [ 212.623190][ C1] [ 212.626214][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 212.632542][ C1] Sending NMI from CPU 1 to CPUs 0: [ 212.637752][ C0] NMI backtrace for cpu 0 [ 212.637764][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 212.637780][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.637788][ C0] RIP: 0010:debug_check_no_obj_freed+0x2dd/0x600 [ 212.637807][ C0] Code: 00 00 ad de 49 89 56 08 48 89 c7 48 89 30 48 83 c6 22 48 89 70 08 e8 d2 c9 ff ff 4c 89 f0 48 89 c2 48 c1 ea 03 42 80 3c 22 00 <0f> 84 23 ff ff ff 48 89 c7 48 89 44 24 10 e8 60 ae 40 fd 48 8b 44 [ 212.637819][ C0] RSP: 0018:ffffc900000073e0 EFLAGS: 00000046 [ 212.637830][ C0] RAX: ffff88809d5fb888 RBX: 0000000000000023 RCX: ffffffff8198d42c [ 212.637839][ C0] RDX: 1ffff11013abf711 RSI: 0000000000000000 RDI: ffff88809aad7718 [ 212.637848][ C0] RBP: ffffc90000007510 R08: 0000000000000001 R09: fffff52000000e6a [ 212.637857][ C0] R10: 0000000000000003 R11: 0000000000000001 R12: dffffc0000000000 [ 212.637865][ C0] R13: ffff88819318b000 R14: ffff88809d5fb888 R15: ffff88819318b0f0 [ 212.637874][ C0] FS: 0000000000000000(0000) GS:ffff888124713000(0000) knlGS:0000000000000000 [ 212.637887][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.637896][ C0] CR2: 00007f2e969fd000 CR3: 000000007f46f000 CR4: 00000000003526f0 [ 212.637905][ C0] Call Trace: [ 212.637909][ C0] [ 212.637918][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 212.637934][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 212.637950][ C0] ? synproxy_send_tcp.isra.0+0x439/0x630 [ 212.637971][ C0] ? skb_free_head+0x1b7/0x210 [ 212.637989][ C0] kmem_cache_free+0x2ac/0x4d0 [ 212.638005][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 212.638020][ C0] kfree_skbmem+0x1a4/0x1f0 [ 212.638033][ C0] consume_skb+0xcc/0x100 [ 212.638051][ C0] nft_synproxy_do_eval+0xa6b/0xd80 [ 212.638068][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 212.638084][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 212.638099][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 212.638114][ C0] nft_do_chain+0x2e6/0x1920 [ 212.638130][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 212.638142][ C0] ? ipt_do_table+0xd48/0x1ae0 [ 212.638159][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 212.638179][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 212.638195][ C0] ? ipt_do_table+0xd48/0x1ae0 [ 212.638221][ C0] nft_do_chain_inet+0x18a/0x340 [ 212.638235][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 212.638248][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 212.638264][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 212.638279][ C0] ? nf_nat_ipv4_local_in+0x181/0x720 [ 212.638297][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 212.638309][ C0] nf_hook_slow+0xbb/0x200 [ 212.638327][ C0] nf_hook.constprop.0+0x422/0x750 [ 212.638345][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 212.638365][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 212.638382][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 212.638401][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 212.638423][ C0] ip_local_deliver+0x169/0x1f0 [ 212.638441][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 212.638459][ C0] ip_rcv+0x2c3/0x5d0 [ 212.638477][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 212.638493][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 212.638509][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 212.638526][ C0] ? lock_acquire+0x179/0x350 [ 212.638541][ C0] ? process_backlog+0x3f0/0x15e0 [ 212.638555][ C0] __netif_receive_skb+0x1d/0x160 [ 212.638571][ C0] process_backlog+0x442/0x15e0 [ 212.638589][ C0] __napi_poll.constprop.0+0xba/0x550 [ 212.638604][ C0] ? rcu_is_watching+0x12/0xc0 [ 212.638622][ C0] net_rx_action+0xa9f/0xfe0 [ 212.638641][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 212.638657][ C0] ? sched_balance_domains+0x283/0xee0 [ 212.638683][ C0] handle_softirqs+0x219/0x8e0 [ 212.638702][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 212.638719][ C0] __irq_exit_rcu+0x109/0x170 [ 212.638733][ C0] irq_exit_rcu+0x9/0x30 [ 212.638748][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 212.638765][ C0] [ 212.638769][ C0] [ 212.638774][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 212.638789][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 212.638805][ C0] Code: cb 6b 02 e9 83 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 b9 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 212.638817][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 212.638827][ C0] RAX: 00000000014043fb RBX: 0000000000000000 RCX: ffffffff8b885c99 [ 212.638835][ C0] RDX: 0000000000000000 RSI: ffffffff8de32e47 RDI: ffffffff8c158f60 [ 212.638843][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 212.638851][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 212.638859][ C0] R13: ffffffff8e297780 R14: ffffffff90a98750 R15: 0000000000000000 [ 212.638870][ C0] ? ct_kernel_exit+0x139/0x190 [ 212.638891][ C0] default_idle+0x13/0x20 [ 212.638908][ C0] default_idle_call+0x6d/0xb0 [ 212.638919][ C0] do_idle+0x391/0x510 [ 212.638936][ C0] ? __pfx_do_idle+0x10/0x10 [ 212.638952][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 212.638973][ C0] cpu_startup_entry+0x4f/0x60 [ 212.638990][ C0] rest_init+0x16b/0x2b0 [ 212.639002][ C0] ? acpi_subsystem_init+0x133/0x180 [ 212.639019][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 212.639039][ C0] start_kernel+0x3ee/0x4d0 [ 212.639057][ C0] x86_64_start_reservations+0x18/0x30 [ 212.639075][ C0] x86_64_start_kernel+0x130/0x190 [ 212.639092][ C0] common_startup_64+0x13e/0x148 [ 212.639111][ C0] [ 213.415706][ T24] cfg80211: failed to load regulatory.db [ 213.941203][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 213.980315][ T5889] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.125860][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.057621][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.088294][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.102995][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 218.606934][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 219.895824][ T51] Bluetooth: hci4: command tx timeout