last executing test programs: 3.134201611s ago: executing program 1 (id=2): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x3, 0x9}, {0x10000002, 0xfffffffd, 0x0, 0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f00000000c0)="ea", 0x1}], 0x1}, 0x80d1) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20) 3.023675906s ago: executing program 1 (id=6): r0 = syz_usb_connect(0x5, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x20, 0x7, 0x3, "0efc9c"}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004057a213200100000000010902200001010080fa0904000002ff00000007058102000200070502020002"], 0x0) syz_usb_ep_write(r2, 0x81, 0x0, 0x0) 2.71183687s ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000ac0)="040003076804268c989e14f0a2a8", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.507836231s ago: executing program 2 (id=7): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f0000000240)={0x20, 0x2, 0xd, {0xd, 0x21, "74a731ad3e9f2e802b47f6"}}, 0x0, 0x0, 0x0}, 0x0) 2.354033106s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x0, 0x49, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000040cc1769190001000000010902370001010080fa0904000000ffffff000904000104ffffff0007058102000200070501020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f00000004c0)="010000000001010101010101010100") r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x20, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0xc5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000540)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f00000005c0)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x3, 0x5c, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, &(0x7f0000000640)={0x14, &(0x7f0000000680)={0x20, 0xa, 0xbd, {0xbd, 0x6, "c18d19492de34d6f788dfdfcd329e1c1cd749a3aa5150a774a9b602997cdbe10964919bf49a1caaa0252a77653bf8d1fa00130aebcea9df763eb10fe1dc3f7e2ceb9facbd563c31d2879aa158d8156fe7a4be3f8b9383f97f11f855699e33f75b6a0c5f1a64bfb821da3935850b4347d82db1d7430de294163807b9555bad758c8fb68809c827e6bccae7e9fc0c896d95c7d49549ca6ea0556ae9d75054f837380698b222ea813c9d9e81836e346f5ad5e91bd717bf508d9180194"}}, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000800)={0x1c, &(0x7f0000000840)={0x0, 0x13, 0x7e, "fe073377d1b25f8da138b11927e8bc7c15efb997fc943e625024f97ee8e222c863654bd44dc54c98e122401eb30d5f1b5aa94146ae0a9d06b400879986dc9a307f6b57cede5284f95c90e78b10e37d9d1f58ebcbfa92f2cc2e158c99b842bf47d1b161148114103cb4c4373d811b37753f1129b5979b75872eda0f1c241b"}, &(0x7f0000000900)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000d40)={0x21, 0x0, 0x2, "3bf6"}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000d80)={0x24, 0x0, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, 0x0, 0x0}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x7ff) write$char_usb(r3, 0x0, 0x0) 2.319283506s ago: executing program 4 (id=5): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000200), 0x3, 0x143080) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000001140)={0x14, &(0x7f0000001180)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.308494695s ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x38}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) 2.203732138s ago: executing program 3 (id=8): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) 1.986402474s ago: executing program 2 (id=9): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="400f9b"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000002c0)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 714.73861ms ago: executing program 1 (id=10): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f00000002c0)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000340)={0x40, 0x17, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x30, 0x0, 0x1, 0x3, 0x1, 0x2, 0x4}}}, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x1}, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x19, 0x2, "441e"}, 0x0, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x3}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xc2}}) 566.374076ms ago: executing program 0 (id=11): r0 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006750d920e70451668aba0102030309021b00010000000009040000010202ff"], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000840)={0x2c, &(0x7f0000000880)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000008c0), 0x0, 0x0) r4 = syz_usb_connect(0x3, 0x1cb, &(0x7f0000001280)=ANY=[@ANYBLOB="12010000122f0c4071040c03dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x68, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001080)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000001340)={0x14, &(0x7f00000012c0)=ANY=[@ANYBLOB="200f34fcc32be6000000340c72493e0ec30eaaeafa0c29f7e22930d495d3b0f905c010d8b6d243e57fd2a6bcf2eb258362d3fb1e3a082c59af51"], &(0x7f0000001300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001600)={0x44, &(0x7f0000000280)={0x40, 0xc, 0x97, "d585e33c81171c374ebdef3597233cbec4e76c86fe5a25523a9396299bae3322170baae09ec2a56ffaa055f9c39f3a316240e1d532499509eca479f4bb625a8f25944c9ce377d4ba8aa63eadb581b93cb4aca005a7ac53e2347226bf86e351fc7a5231c5a0082c402fbb32a53a3aaeab4d114ed8cb18e20d2872125bbcb16f98c3904bf00c346a633a7550a1fc1661fadd5a5330bfc286"}, &(0x7f0000001440)={0x0, 0xa, 0x1, 0xae}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000014c0)={0x20, 0x80, 0x1c, {0xe7, 0x7fff, 0x3, 0x4, 0xe97, 0xdccd, 0x7, 0x100009, 0x7, 0x4, 0x0, 0x806}}, &(0x7f0000001500)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000001540)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001580)={0x20, 0x87, 0x2}, &(0x7f00000015c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000010c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x48, 0x80, 0x5, {0x8, 0xb, 0x1, 0x1, 0x1, 0x24, 0x30, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0xab}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xf, 0x40, 0x40, {0xa, 0x25, 0x25, 0x6, 0x81, 0xd6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x9, 0x4, {0xa, 0x25, 0x25, 0x0, 0x3, 0x10}}}}}}}}]}}, &(0x7f0000001140)={0x0, 0x0, 0x5, &(0x7f0000001180)={0x5, 0xf, 0x5}}) syz_usb_ep_write(r5, 0x81, 0xffffffffffffff6d, &(0x7f00000011c0)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") syz_usb_control_io$sierra_net(r1, &(0x7f0000001780)={0x14, &(0x7f0000001680)={0x20, 0x11, 0x7e, {0x7e, 0x1, "a01c54aa8414fa8231c4920250425205470237cf349b336e89e1fb10fa93d81144bb63ffe2df1fbaa34beb7ca2754d6ad40a6c23871f129fa7222c67db9087190f6061083ca833cd6d347e22a3b78b9dcd2b83b97c5de2c9d18bcc41edfdceb9260df8a213a2fe7de23d60e0ddcf88c9604c20bfd7a6d6db36a97f1c"}}, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, &(0x7f0000001c80)={0x1c, &(0x7f00000017c0)={0x0, 0x11, 0x12, "6c8c3b9095d22da32a2e9c8982bad08e4ce5"}, &(0x7f0000001800)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000240)={0x21, 0x0, 0x4, "855c4e01"}}) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f0000000980)={0x2, 0xffffffff, 0x100000, 0x400000, 0x0, 0x2}) ioctl$EVIOCGSND(r0, 0x5451, 0x0) 258.080735ms ago: executing program 4 (id=12): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000010000006000000000000850000006c0000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790701757df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, 0x48) 214.460745ms ago: executing program 3 (id=13): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x3, 0x9}, {0x10000002, 0xfffffffd, 0x0, 0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f00000000c0)="ea", 0x1}], 0x1}, 0x80d1) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20) 139.848327ms ago: executing program 4 (id=14): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/3581], &(0x7f0000001040)='GPL\x00', 0x2, 0x1000, &(0x7f0000001080)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002080), 0x8, 0x10, &(0x7f00000020c0), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e40)={r0, 0x3a, 0xcc0, 0xcc0, &(0x7f0000002ec0)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90021e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f0000002f40)="59235bd7a9324ff307d87177332368fbdeefaa1544600ea1870645446c357de433206896637019b84d57c3de1ea07638e494dd701db1af6fc15db78cf79f5ab4bc7aee8553677ffe377a35b4afdb989fb7da1ff63956ffb796d51daf1c268b9f1a4a06583f8c03ec1671b151a8a495c1b006fa5f2f3a54a46aeee8005b178b9516d2b928984ccb942fa2278a2e33a0b619f2dd814fc91942e03c48fd9b7d19d9a6612b46805b267ef3132a724cbfcd1c715be67930e2ae2b9a2479c5a4b2fecd301a745a6fd67598a5e5ecc1e56e58159c47def7f9285acfedc980596377e6f9ee076fa094e5d8f838b718ed63ff8265a1dbc1549bed03e6b27b6fc2b8a07373506a1a41d5a71cbf0eaa24ec737b02a8a2d5114c3c4e5810a2c3eae3373fd341800cfb0fb35cefe04ca4da2b02a83c40126e23cdf3c817b530bbe7b431bc0b7d864e3e6dd1ab90259a8bd7ad7dd4c6366ea6da661fd016b394adcce5988fff85fbc832a927c97b89337e195f562cd284911eef1ee52e4ff033b33beedea7cf43c4d0cc0471fa91011e1e7e8733bf82c01346d6ecb49f1a84e92d063c81a7227d89be33f7273b87e29ae53a5f38dc94cf391fcb82c9432821ef1a0f6bbfe8f7d6574479a8f621e1d8f7d9bb20f3d8d469e6d232d7d7837ff12a224a65c604907e787baaf7c863ad48a5edecbe1470c20507a6ee5dee75e9ef84c71af5af800a9ce9787ebdee9e1c8189fbf66048d5c3757fb2b697ce68cfd316a7b25a385111e0cd2fddb81602e36e74c4f99b403cb304a4774e648054c0456c7869f9d97873ff80e2664c1265292941a9b767c7f40767cfccdbcaa156453d6a910fd5440f7a2bf8f4bb6d6d9fd443f2304617a684b6afa99c157dcf70e51fdb55fd0dbf5c6733841024599f8d1791a07c5dc3a4ccaf4d7c0ca3d101b2beba3a49d2378c9fe4fdb10babd95083a0c4db5a30c4490828d97efe807a13e587fbac1089843964facfd27d287262759384fe9b610f81048be430c1e8fe6327c0f2fd003021d20563ec0c7e39aec6718649c958da2e02cb3848c76924492678889c18bea02ed5ee080106e9838cbca9ad5f66c0434182225b13a236b342cf80562c10d4a3459aea17589b84904d3d2c2b", &(0x7f0000003280)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) 106.437661ms ago: executing program 4 (id=15): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001540)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e7400"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x16, 0x10, &(0x7f0000001700)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000001780)='GPL\x00', 0x7, 0x1000, &(0x7f00000019c0)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000029c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000002a40)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000ac0)="040003076804268c989e14f0a2a8", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): [ 50.891186][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 50.891203][ T31] audit: type=1400 audit(1792037020.244:123): avc: denied { write } for pid=5536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.951142][ T31] audit: type=1400 audit(1792037020.304:124): avc: denied { write } for pid=5547 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.120421][ T31] audit: type=1400 audit(1792037020.474:125): avc: denied { write } for pid=5550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.175945][ T31] audit: type=1400 audit(1792037020.524:126): avc: denied { write } for pid=5561 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.354485][ T31] audit: type=1400 audit(1792037020.704:127): avc: denied { write } for pid=5564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.400285][ T31] audit: type=1400 audit(1792037020.754:128): avc: denied { write } for pid=5575 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. [ 58.139475][ T31] audit: type=1400 audit(1792037027.494:129): avc: denied { mounton } for pid=5587 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.140498][ T31] audit: type=1400 audit(1792037027.494:130): avc: denied { mount } for pid=5587 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.142125][ T5587] cgroup: Unknown subsys name 'net' [ 58.143144][ T31] audit: type=1400 audit(1792037027.494:131): avc: denied { unmount } for pid=5587 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.329592][ T5587] cgroup: Unknown subsys name 'cpuset' [ 58.331668][ T5587] cgroup: Unknown subsys name 'rlimit' [ 58.425769][ T31] audit: type=1400 audit(1792037027.774:132): avc: denied { setattr } for pid=5587 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.426143][ T31] audit: type=1400 audit(1792037027.774:133): avc: denied { create } for pid=5587 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.426333][ T31] audit: type=1400 audit(1792037027.774:134): avc: denied { write } for pid=5587 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.426551][ T31] audit: type=1400 audit(1792037027.774:135): avc: denied { read } for pid=5587 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.444424][ T31] audit: type=1400 audit(1792037027.784:136): avc: denied { mounton } for pid=5587 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.444462][ T31] audit: type=1400 audit(1792037027.784:137): avc: denied { mount } for pid=5587 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.545268][ T5589] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.546159][ T31] audit: type=1400 audit(1792037027.894:138): avc: denied { relabelto } for pid=5589 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 59.521569][ T5587] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.398371][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 63.398391][ T31] audit: type=1400 audit(1792037032.754:144): avc: denied { create } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.398969][ T31] audit: type=1400 audit(1792037032.754:145): avc: denied { read write } for pid=5599 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.411107][ T31] audit: type=1400 audit(1792037032.764:146): avc: denied { open } for pid=5599 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.416258][ T31] audit: type=1400 audit(1792037032.764:147): avc: denied { ioctl } for pid=5599 comm="syz-executor" path="socket:[1766]" dev="sockfs" ino=1766 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.441317][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.442679][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.443172][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.443755][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.444164][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.457374][ T31] audit: type=1400 audit(1792037032.784:148): avc: denied { read } for pid=5599 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.457415][ T31] audit: type=1400 audit(1792037032.784:149): avc: denied { open } for pid=5599 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.460466][ T4919] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.462223][ T31] audit: type=1400 audit(1792037032.814:150): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.464832][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.472375][ T31] audit: type=1400 audit(1792037032.814:151): avc: denied { module_request } for pid=5599 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.486240][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.486663][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.487548][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.487860][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.490164][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.490805][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.515100][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.520489][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.595413][ T5603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.599882][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.600219][ T5603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.600770][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.601310][ T5603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.623074][ T31] audit: type=1400 audit(1792037032.954:152): avc: denied { sys_module } for pid=5600 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.770233][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.771212][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.771603][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.772240][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.772662][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.171233][ T31] audit: type=1400 audit(1792037033.524:153): avc: denied { create } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 64.249663][ T5600] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.250350][ T5600] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.263300][ T5608] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 64.276878][ T5600] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.304981][ T5599] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 64.388911][ T5607] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 64.517624][ T5622] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 64.553838][ T5600] infiniband rxe0: set active [ 64.555512][ T5600] infiniband rxe0: added rxe_eth0 [ 64.580901][ T5600] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 64.580930][ T5600] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 64.580960][ T5600] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 64.599187][ T5600] RDS/IB: rxe0: added [ 64.599349][ T5600] smc: adding ib device rxe0 with port count 1 [ 64.599397][ T5600] smc: ib device rxe0 port 1 has no pnetid [ 64.602538][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.645455][ T5622] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.648329][ T30] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.857090][ T5600] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.071818][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.071902][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.071996][ T5608] bridge_slave_0: entered allmulticast mode [ 65.075587][ T5608] bridge_slave_0: entered promiscuous mode [ 65.118188][ T5600] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.124605][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.124681][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.124991][ T5608] bridge_slave_1: entered allmulticast mode [ 65.126622][ T5608] bridge_slave_1: entered promiscuous mode [ 65.212460][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.246248][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.268831][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.268956][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.269047][ T5599] bridge_slave_0: entered allmulticast mode [ 65.270488][ T5599] bridge_slave_0: entered promiscuous mode [ 65.296134][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.296201][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.296647][ T5599] bridge_slave_1: entered allmulticast mode [ 65.299480][ T5599] bridge_slave_1: entered promiscuous mode [ 65.302514][ T5608] team0: Port device team_slave_0 added [ 65.309966][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.310059][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.310136][ T5607] bridge_slave_0: entered allmulticast mode [ 65.311263][ T5607] bridge_slave_0: entered promiscuous mode [ 65.323343][ T5608] team0: Port device team_slave_1 added [ 65.344230][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.344298][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.344382][ T5607] bridge_slave_1: entered allmulticast mode [ 65.347989][ T5607] bridge_slave_1: entered promiscuous mode [ 65.408331][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.408382][ T5600] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.409031][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.409042][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.409062][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.418123][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.420513][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.422243][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.422809][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.422818][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.422835][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.511614][ T5608] hsr_slave_0: entered promiscuous mode [ 65.515281][ T5608] hsr_slave_1: entered promiscuous mode [ 65.517584][ T5603] Bluetooth: hci0: command tx timeout [ 65.517711][ T5606] Bluetooth: hci1: command tx timeout [ 65.594477][ T5606] Bluetooth: hci2: command tx timeout [ 65.596368][ T5607] team0: Port device team_slave_0 added [ 65.598526][ T5607] team0: Port device team_slave_1 added [ 65.618836][ T5599] team0: Port device team_slave_0 added [ 65.646648][ T5599] team0: Port device team_slave_1 added [ 65.667725][ T5606] Bluetooth: hci3: command tx timeout [ 65.685745][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.685759][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.685779][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.731906][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.731919][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.731940][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.812658][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.812671][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.812688][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.822458][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.822566][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.822831][ T5622] bridge_slave_0: entered allmulticast mode [ 65.824458][ T5622] bridge_slave_0: entered promiscuous mode [ 65.826423][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.826433][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.826450][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.841497][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.842053][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.842161][ T5622] bridge_slave_1: entered allmulticast mode [ 65.843657][ T5622] bridge_slave_1: entered promiscuous mode [ 65.852036][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.852082][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.857218][ T5606] Bluetooth: hci4: command tx timeout [ 65.888775][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.890958][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.938200][ T5607] hsr_slave_0: entered promiscuous mode [ 65.939918][ T5607] hsr_slave_1: entered promiscuous mode [ 65.940494][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 65.940543][ T5607] Cannot create hsr debugfs directory [ 65.940627][ T5600] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.981132][ T5599] hsr_slave_0: entered promiscuous mode [ 65.983258][ T5599] hsr_slave_1: entered promiscuous mode [ 65.983820][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 65.983834][ T5599] Cannot create hsr debugfs directory [ 66.028892][ T5622] team0: Port device team_slave_0 added [ 66.032906][ T5622] team0: Port device team_slave_1 added [ 66.166700][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.166716][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.166735][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.222214][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.222225][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.222237][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.312520][ T5622] hsr_slave_0: entered promiscuous mode [ 66.312931][ T5622] hsr_slave_1: entered promiscuous mode [ 66.313264][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 66.313280][ T5622] Cannot create hsr debugfs directory [ 66.357014][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.367013][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.367790][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.378268][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.379623][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.385097][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.405749][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.411941][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.543318][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.548124][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.548672][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.567284][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.581124][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.584020][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.595814][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.603296][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.727165][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.727257][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.727394][ T5600] bridge_slave_0: entered allmulticast mode [ 66.728247][ T5600] bridge_slave_0: entered promiscuous mode [ 66.731267][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.734270][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.734948][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.739595][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.740962][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.741034][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.741114][ T5600] bridge_slave_1: entered allmulticast mode [ 66.742247][ T5600] bridge_slave_1: entered promiscuous mode [ 66.763860][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.774735][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.788159][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.795755][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.800722][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.815762][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.874596][ T5600] team0: Port device team_slave_0 added [ 66.882809][ T5600] team0: Port device team_slave_1 added [ 66.930991][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.931007][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.931025][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.942835][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.943454][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.943463][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.943481][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.956183][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.972631][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.975132][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.983742][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.030194][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.034402][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.064041][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.070751][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.076273][ T5600] hsr_slave_0: entered promiscuous mode [ 67.076921][ T5600] hsr_slave_1: entered promiscuous mode [ 67.081511][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 67.081526][ T5600] Cannot create hsr debugfs directory [ 67.123899][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.140531][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.182989][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.185232][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.185378][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.246077][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.246146][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.266429][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.266473][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.285067][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.285113][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.316670][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.361726][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.379280][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.379323][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.406500][ T5600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.415807][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.416899][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.416942][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.435473][ T5600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.442531][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.459211][ T5600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.461032][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.461918][ T5600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.463926][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.479503][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.489771][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.543429][ T1503] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.543510][ T1503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.574139][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.574203][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.592356][ T5606] Bluetooth: hci1: command tx timeout [ 67.592381][ T5606] Bluetooth: hci0: command tx timeout [ 67.667545][ T5603] Bluetooth: hci2: command tx timeout [ 67.748021][ T5603] Bluetooth: hci3: command tx timeout [ 67.888553][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.907398][ T5603] Bluetooth: hci4: command tx timeout [ 67.929482][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.941807][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.941878][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.958945][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.959020][ T3320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.234165][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.300334][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.381455][ T5608] veth0_vlan: entered promiscuous mode [ 68.410429][ T5608] veth1_vlan: entered promiscuous mode [ 68.445271][ T5608] veth0_macvtap: entered promiscuous mode [ 68.471966][ T5608] veth1_macvtap: entered promiscuous mode [ 68.520911][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.558995][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.629141][ T1503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.629889][ T1503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.640864][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.679199][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.697484][ T1503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.727871][ T1503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.839582][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.839604][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.866984][ T5622] veth0_vlan: entered promiscuous mode [ 68.896661][ T5599] veth0_vlan: entered promiscuous mode [ 68.924141][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.924161][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.934044][ T5622] veth1_vlan: entered promiscuous mode [ 68.944936][ T5599] veth1_vlan: entered promiscuous mode [ 68.978056][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 68.978070][ T31] audit: type=1400 audit(1792037038.324:156): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.dDHGgS/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.978619][ T31] audit: type=1400 audit(1792037038.334:157): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.980373][ T31] audit: type=1400 audit(1792037038.334:158): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.dDHGgS/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.984314][ T31] audit: type=1400 audit(1792037038.334:159): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.025437][ T5607] veth0_vlan: entered promiscuous mode [ 69.065270][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.070137][ T5607] veth1_vlan: entered promiscuous mode [ 69.080193][ T5622] veth0_macvtap: entered promiscuous mode [ 69.096038][ T31] audit: type=1400 audit(1792037038.444:160): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.dDHGgS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.102425][ T31] audit: type=1400 audit(1792037038.454:161): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.dDHGgS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.116486][ T5599] veth0_macvtap: entered promiscuous mode [ 69.122632][ T31] audit: type=1400 audit(1792037038.474:162): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.125294][ T5622] veth1_macvtap: entered promiscuous mode [ 69.132437][ T5599] veth1_macvtap: entered promiscuous mode [ 69.141074][ T31] audit: type=1400 audit(1792037038.494:163): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.153410][ T31] audit: type=1400 audit(1792037038.504:164): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="gadgetfs" ino=8392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.163512][ T31] audit: type=1400 audit(1792037038.514:165): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.203053][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.227037][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.228933][ T5607] veth0_macvtap: entered promiscuous mode [ 69.236852][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.262283][ T5607] veth1_macvtap: entered promiscuous mode [ 69.271827][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.321363][ T5600] veth0_vlan: entered promiscuous mode [ 69.326268][ T5608] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.352202][ T1503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.352450][ T1503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.352684][ T1503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.353251][ T1503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.354202][ T1503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.354404][ T1503] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.355339][ T1503] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.355820][ T1503] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.392599][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.395529][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.493199][ T5600] veth1_vlan: entered promiscuous mode [ 69.568294][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.568312][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.615900][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.615916][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.658287][ T5600] veth0_macvtap: entered promiscuous mode [ 69.663426][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.663448][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.666235][ T5600] veth1_macvtap: entered promiscuous mode [ 69.667793][ T5603] Bluetooth: hci0: command tx timeout [ 69.667817][ T5603] Bluetooth: hci1: command tx timeout [ 69.698546][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.702027][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.748184][ T5606] Bluetooth: hci2: command tx timeout [ 69.784637][ T1503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.784655][ T1503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.805424][ T189] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.827779][ T5606] Bluetooth: hci3: command tx timeout [ 69.833302][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.833318][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.847787][ T1503] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.847821][ T1503] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.847847][ T1503] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.847872][ T1503] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.847899][ T1503] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.847925][ T1503] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.847951][ T1503] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.847976][ T1503] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.949737][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.949755][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.982009][ T1503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.982027][ T1503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.987556][ T5606] Bluetooth: hci4: command tx timeout [ 70.017846][ T189] usb 2-1: Using ep0 maxpacket: 32 [ 70.020926][ T189] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 70.025319][ T189] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 70.025338][ T189] usb 2-1: config 0 has no interface number 0 [ 70.025371][ T189] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 70.025387][ T189] usb 2-1: config 0 interface 1 has no altsetting 0 [ 70.041694][ T1503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.041710][ T1503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.059628][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.059651][ T189] usb 2-1: Product: syz [ 70.059664][ T189] usb 2-1: Manufacturer: syz [ 70.059677][ T189] usb 2-1: SerialNumber: syz [ 70.125480][ T189] usb 2-1: config 0 descriptor?? [ 70.345614][ T189] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 70.346240][ T189] cx231xx 2-1:0.1: Failed to read PCB config [ 70.346309][ T189] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 70.372198][ T189] usb 2-1: USB disconnect, device number 2 [ 70.427847][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.467597][ T1587] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.517513][ T5728] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.577729][ T9] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 70.578451][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.578474][ T9] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 70.578493][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.640772][ T1587] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 70.642837][ T1587] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 70.642861][ T1587] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 70.642893][ T1587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.668256][ T5728] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 70.672292][ T5728] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.675354][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.675371][ T5728] usb 4-1: Product: syz [ 70.675382][ T5728] usb 4-1: Manufacturer: syz [ 70.675394][ T5728] usb 4-1: SerialNumber: syz [ 70.710922][ T5728] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 70.735480][ T1587] usb 5-1: probing VID:PID(0424:012C) [ 70.736893][ T1587] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 70.736913][ T1587] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 70.736929][ T1587] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 70.736945][ T1587] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 70.736962][ T1587] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 70.758704][ T5719] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.837340][ T189] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 70.887526][ T5719] usb 3-1: device descriptor read/64, error -71 [ 70.987210][ T189] usb 2-1: Using ep0 maxpacket: 32 [ 70.987750][ T189] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 70.988576][ T189] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 70.988593][ T189] usb 2-1: config 0 has no interface number 0 [ 70.988645][ T189] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 70.988664][ T189] usb 2-1: config 0 interface 1 has no altsetting 0 [ 70.990442][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.990454][ T189] usb 2-1: Product: syz [ 70.990461][ T189] usb 2-1: Manufacturer: syz [ 70.990469][ T189] usb 2-1: SerialNumber: syz [ 70.993045][ T189] usb 2-1: config 0 descriptor?? [ 71.072464][ T1587] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 71.127246][ T5719] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 71.193844][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.195092][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.196705][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.198113][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.206807][ T9] snd-usb-caiaq 1-1:1.0: bogus number of streams: 0 [ 71.206830][ T9] snd-usb-caiaq 1-1:1.0: Unable to set up audio system (ret=-22) [ 71.206888][ C0] usb 1-1: received EP1 urb->status = -2 [ 71.207009][ T9] usb 1-1: unable to init card! (ret=-22) [ 71.208224][ T9] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 71.223540][ T189] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 71.224965][ T5803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.225621][ T5803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.234197][ T189] cx231xx 2-1:0.1: Failed to read PCB config [ 71.234239][ T189] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 71.251812][ T189] usb 2-1: USB disconnect, device number 3 [ 71.270517][ T5719] usb 3-1: device descriptor read/64, error -71 [ 71.302608][ T1587] usb 5-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 71.377756][ T5719] usb usb3-port1: attempt power cycle [ 71.404665][ T5791] usb 1-1: USB disconnect, device number 2 [ 71.718624][ T5719] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 71.721657][ T5728] gspca_mr97310a: reg write [19] error -71 [ 71.721724][ T5728] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -71 [ 71.726121][ T5728] usb 4-1: USB disconnect, device number 2 [ 71.749094][ T5603] Bluetooth: hci0: command tx timeout [ 71.749135][ T5606] Bluetooth: hci1: command tx timeout [ 71.768095][ T5719] usb 3-1: device descriptor read/8, error -71 [ 71.837592][ T5606] Bluetooth: hci2: command tx timeout [ 71.908313][ T5606] Bluetooth: hci3: command tx timeout [ 72.007198][ T5719] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 72.027273][ T5791] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 72.027862][ T5719] usb 3-1: device descriptor read/8, error -71 [ 72.077205][ T5606] Bluetooth: hci4: command tx timeout [ 72.110887][ T1587] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 72.130715][ T1587] usb 5-1: USB disconnect, device number 2 [ 72.131570][ T5692] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 72.135615][ T5692] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 72.143251][ T5719] usb usb3-port1: unable to enumerate USB device [ 72.167628][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.177219][ T5791] usb 2-1: Using ep0 maxpacket: 32 [ 72.177825][ T5791] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 72.178651][ T5791] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 72.178670][ T5791] usb 2-1: config 0 has no interface number 0 [ 72.178700][ T5791] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 72.180436][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.180452][ T5791] usb 2-1: Product: syz [ 72.180462][ T5791] usb 2-1: Manufacturer: syz [ 72.180473][ T5791] usb 2-1: SerialNumber: syz [ 72.183070][ T5791] usb 2-1: config 0 descriptor?? [ 72.185545][ T5821] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 72.264662][ T1587] USB vub300 remote SDIO host controller[0] now disconnected [ 72.307491][ C1] [ 72.317209][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 72.317761][ T9] usb 1-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 72.318618][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.318648][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.319611][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.319639][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.321126][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.321154][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.324829][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.324848][ T9] usb 1-1: Product: syz [ 72.324860][ T9] usb 1-1: Manufacturer: syz [ 72.324872][ T9] usb 1-1: SerialNumber: syz [ 72.332218][ T9] usb 1-1: config 0 descriptor?? [ 72.334658][ T9] rndis_host 1-1:0.0: rndis: master #0/ffff88802c48f000 slave #1/0000000000000000 [ 72.339663][ T9] cdc_acm 1-1:0.0: Zero length descriptor references [ 72.339683][ T9] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 72.403223][ T5821] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 72.457484][ C1] ============================= [ 72.462328][ C1] WARNING: suspicious RCU usage [ 72.467195][ C1] syzkaller #0 Not tainted [ 72.471597][ C1] ----------------------------- [ 72.476428][ C1] kernel/sched/core.c:9226 Illegal context switch in RCU-sched read-side critical section! [ 72.486415][ C1] [ 72.486415][ C1] other info that might help us debug this: [ 72.486415][ C1] [ 72.496663][ C1] [ 72.496663][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 72.504745][ C1] locks held by syz.3.13/5826: 5, last CPU#1: [ 72.510830][ C1] #0: ffff888035fba800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 72.519943][ C1] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 72.529475][ C1] #2: ffff88807d4f9c18 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320 [ 72.539959][ C1] #3: ffffffff8fdec520 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xbc/0x4b0 [ 72.549396][ C1] #4: ffffc90000a18c98 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11d/0x5f0 [ 72.558879][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.559229][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.564201][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.565715][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.568752][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.569080][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.572158][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.574720][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.624021][ C1] [ 72.624021][ C1] stack backtrace: [ 72.629922][ C1] CPU: 1 UID: 0 PID: 5826 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT(full) [ 72.639022][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 72.649063][ C1] Call Trace: [ 72.652318][ C1] [ 72.655147][ C1] dump_stack_lvl+0x100/0x190 [ 72.659818][ C1] lockdep_rcu_suspicious.cold+0x4f/0xb2 [ 72.665448][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 72.672111][ C1] __might_resched+0x2d9/0x330 [ 72.676857][ C1] ? __pfx___might_resched+0x10/0x10 [ 72.682123][ C1] ? kfree_const+0x5f/0x70 [ 72.686522][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 72.693183][ C1] cancel_delayed_work_sync+0xb8/0xf0 [ 72.698806][ C1] mmc_free_host+0x19/0x40 [ 72.703219][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 72.709377][ C1] call_timer_fn+0x198/0x5f0 [ 72.713966][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 72.719061][ C1] ? lock_acquire+0x1d1/0x380 [ 72.723730][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 72.730395][ C1] ? mark_held_locks+0x40/0x70 [ 72.735146][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 72.741809][ C1] __run_timers+0x757/0xb00 [ 72.746318][ C1] ? __pfx___run_timers+0x10/0x10 [ 72.751325][ C1] ? clockevents_program_event+0x23e/0x820 [ 72.757127][ C1] ? lock_acquire+0x1d1/0x380 [ 72.761800][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 72.766817][ C1] run_timer_base+0x114/0x190 [ 72.771485][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 72.776689][ C1] run_timer_softirq+0x1a/0x50 [ 72.779889][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.780256][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.797428][ C1] handle_softirqs+0x1e6/0x9d0 [ 72.802183][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 72.807456][ C1] ? _raw_spin_unlock+0x28/0x50 [ 72.812309][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 72.817929][ C1] __irq_exit_rcu+0x16a/0x210 [ 72.822589][ C1] irq_exit_rcu+0x9/0x30 [ 72.826812][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.832434][ C1] [ 72.835345][ C1] [ 72.838256][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.844229][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 72.849412][ C1] Code: 05 8f 1e a6 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 9e e6 5d 10 0f 82 c9 02 00 00 8b 35 3e 18 5e 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 2d 1e a6 13 0f 85 09 03 00 00 48 83 c4 [ 72.869001][ C1] RSP: 0018:ffffc90005157618 EFLAGS: 00000206 [ 72.875053][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 72.883012][ C1] RDX: 0000000000000002 RSI: ffffffff8e3bd2c3 RDI: ffffffff8c625580 [ 72.890968][ C1] RBP: ffffffff8fdec520 R08: 00000000d92d2565 R09: 000000000000001e [ 72.898927][ C1] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 72.906885][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.914849][ C1] ? find_held_lock+0x2b/0x80 [ 72.919523][ C1] pfn_valid+0xd8/0x4b0 [ 72.923671][ C1] ? pfn_valid+0xbc/0x4b0 [ 72.927991][ C1] page_table_check_clear+0x21/0x540 [ 72.933270][ C1] ? vm_normal_page+0x1d1/0x380 [ 72.938115][ C1] __page_table_check_pte_clear+0x10f/0x120 [ 72.943998][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 72.950403][ C1] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 72.955936][ C1] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 72.962691][ C1] __zap_vma_range+0x2c43/0x48e0 [ 72.967636][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 72.972911][ C1] ? mas_next_slot+0xc05/0x13a0 [ 72.977774][ C1] unmap_vmas+0x299/0x5f0 [ 72.982105][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 72.986950][ C1] ? mas_next_slot+0xc05/0x13a0 [ 72.991804][ C1] exit_mmap+0x1ef/0xa00 [ 72.996042][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 73.000790][ C1] ? rcu_is_watching+0x13/0xc0 [ 73.005548][ C1] ? uprobe_clear_state+0x49/0x250 [ 73.010648][ C1] ? find_held_lock+0x2b/0x80 [ 73.015318][ C1] ? uprobe_clear_state+0x5f/0x250 [ 73.020421][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 73.026056][ C1] __mmput+0x12a/0x410 [ 73.030114][ C1] mmput+0x67/0x80 [ 73.033821][ C1] do_exit+0x83b/0x2a50 [ 73.037965][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 73.043325][ C1] ? __pfx_do_exit+0x10/0x10 [ 73.047908][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 73.053285][ C1] do_group_exit+0xd5/0x2a0 [ 73.057788][ C1] __x64_sys_exit_group+0x3e/0x50 [ 73.062808][ C1] x64_sys_call+0x1567/0x1570 [ 73.067469][ C1] do_syscall_64+0x123/0x790 [ 73.072048][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.077923][ C1] RIP: 0033:0x7f8746d9e559 [ 73.082320][ C1] Code: Unable to access opcode bytes at 0x7f8746d9e52f. [ 73.089314][ C1] RSP: 002b:00007ffdd5789418 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 73.097713][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8746d9e559 [ 73.105674][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.113627][ C1] RBP: 00007ffdd578947c R08: 0000000000000000 R09: 00000000000927c0 [ 73.121582][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 73.129534][ C1] R13: 00000000000927c0 R14: 0000000000011935 R15: 00007ffdd57894d0 [ 73.137501][ C1] [ 73.141153][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 73.141166][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5826, name: syz.3.13 [ 73.141182][ C1] preempt_count: 102, expected: 0 [ 73.141190][ C1] RCU nest depth: 1, expected: 0 [ 73.141199][ C1] locks held by syz.3.13/5826: 5, last CPU#1: [ 73.141211][ C1] #0: ffff888035fba800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 73.141268][ C1] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 73.141321][ C1] #2: ffff88807d4f9c18 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320 [ 73.141374][ C1] #3: ffffffff8fdec520 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xbc/0x4b0 [ 73.141429][ C1] #4: ffffc90000a18c98 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11d/0x5f0 [ 73.141478][ C1] Preemption disabled at: [ 73.141483][ C1] [<0000000000000000>] 0x0 [ 73.141505][ C1] CPU: 1 UID: 0 PID: 5826 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT(full) [ 73.141527][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.141538][ C1] Call Trace: [ 73.141545][ C1] [ 73.141553][ C1] dump_stack_lvl+0x100/0x190 [ 73.141583][ C1] __might_resched.cold+0x1dc/0x222 [ 73.141610][ C1] ? __pfx___might_resched+0x10/0x10 [ 73.141631][ C1] ? kfree_const+0x5f/0x70 [ 73.141655][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 73.141684][ C1] cancel_delayed_work_sync+0xb8/0xf0 [ 73.141710][ C1] mmc_free_host+0x19/0x40 [ 73.141739][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 73.141768][ C1] call_timer_fn+0x198/0x5f0 [ 73.141793][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 73.141814][ C1] ? lock_acquire+0x1d1/0x380 [ 73.141843][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 73.141872][ C1] ? mark_held_locks+0x40/0x70 [ 73.141898][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 73.141926][ C1] __run_timers+0x757/0xb00 [ 73.141958][ C1] ? __pfx___run_timers+0x10/0x10 [ 73.141980][ C1] ? clockevents_program_event+0x23e/0x820 [ 73.142014][ C1] ? lock_acquire+0x1d1/0x380 [ 73.142040][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 73.142070][ C1] run_timer_base+0x114/0x190 [ 73.142094][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 73.142121][ C1] run_timer_softirq+0x1a/0x50 [ 73.142140][ C1] handle_softirqs+0x1e6/0x9d0 [ 73.142163][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 73.142182][ C1] ? _raw_spin_unlock+0x28/0x50 [ 73.142202][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 73.142223][ C1] __irq_exit_rcu+0x16a/0x210 [ 73.142243][ C1] irq_exit_rcu+0x9/0x30 [ 73.142261][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 73.142284][ C1] [ 73.142290][ C1] [ 73.142301][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 73.142323][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 73.142345][ C1] Code: 05 8f 1e a6 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 9e e6 5d 10 0f 82 c9 02 00 00 8b 35 3e 18 5e 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 2d 1e a6 13 0f 85 09 03 00 00 48 83 c4 [ 73.142362][ C1] RSP: 0018:ffffc90005157618 EFLAGS: 00000206 [ 73.142378][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 73.142390][ C1] RDX: 0000000000000002 RSI: ffffffff8e3bd2c3 RDI: ffffffff8c625580 [ 73.142401][ C1] RBP: ffffffff8fdec520 R08: 00000000d92d2565 R09: 000000000000001e [ 73.142414][ C1] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 73.142425][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.142451][ C1] ? find_held_lock+0x2b/0x80 [ 73.142482][ C1] pfn_valid+0xd8/0x4b0 [ 73.142507][ C1] ? pfn_valid+0xbc/0x4b0 [ 73.142531][ C1] page_table_check_clear+0x21/0x540 [ 73.142557][ C1] ? vm_normal_page+0x1d1/0x380 [ 73.142583][ C1] __page_table_check_pte_clear+0x10f/0x120 [ 73.142610][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 73.142633][ C1] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 73.142650][ C1] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 73.142683][ C1] __zap_vma_range+0x2c43/0x48e0 [ 73.142727][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 73.142751][ C1] ? mas_next_slot+0xc05/0x13a0 [ 73.142787][ C1] unmap_vmas+0x299/0x5f0 [ 73.142812][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 73.142838][ C1] ? mas_next_slot+0xc05/0x13a0 [ 73.142877][ C1] exit_mmap+0x1ef/0xa00 [ 73.142905][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 73.142929][ C1] ? rcu_is_watching+0x13/0xc0 [ 73.142960][ C1] ? uprobe_clear_state+0x49/0x250 [ 73.142986][ C1] ? find_held_lock+0x2b/0x80 [ 73.143012][ C1] ? uprobe_clear_state+0x5f/0x250 [ 73.143044][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 73.143085][ C1] __mmput+0x12a/0x410 [ 73.143107][ C1] mmput+0x67/0x80 [ 73.143126][ C1] do_exit+0x83b/0x2a50 [ 73.143150][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 73.143175][ C1] ? __pfx_do_exit+0x10/0x10 [ 73.143198][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 73.143227][ C1] do_group_exit+0xd5/0x2a0 [ 73.143252][ C1] __x64_sys_exit_group+0x3e/0x50 [ 73.143276][ C1] x64_sys_call+0x1567/0x1570 [ 73.143300][ C1] do_syscall_64+0x123/0x790 [ 73.143327][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.143346][ C1] RIP: 0033:0x7f8746d9e559 [ 73.143361][ C1] Code: Unable to access opcode bytes at 0x7f8746d9e52f. [ 73.143369][ C1] RSP: 002b:00007ffdd5789418 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 73.143386][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8746d9e559 [ 73.143398][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.143409][ C1] RBP: 00007ffdd578947c R08: 0000000000000000 R09: 00000000000927c0 [ 73.143421][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 73.143430][ C1] R13: 00000000000927c0 R14: 0000000000011935 R15: 00007ffdd57894d0 [ 73.143454][ C1] [ 73.143818][ C1] [ 73.718937][ C1] ============================= [ 73.723766][ C1] WARNING: suspicious RCU usage [ 73.728619][ C1] syzkaller #0 Tainted: G W [ 73.734583][ C1] ----------------------------- [ 73.739430][ C1] kernel/rcu/srcutree.c:1464 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 73.751398][ C1] [ 73.751398][ C1] other info that might help us debug this: [ 73.751398][ C1] [ 73.761635][ C1] [ 73.761635][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 73.769720][ C1] locks held by syz.3.13/5826: 5, last CPU#1: [ 73.775779][ C1] #0: ffff888035fba800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 73.784865][ C1] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 73.794382][ C1] #2: ffff88807d4f9c18 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320 [ 73.804842][ C1] #3: ffffffff8fdec520 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xbc/0x4b0 [ 73.814269][ C1] #4: ffffc90000a18c98 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11d/0x5f0 [ 73.824827][ C1] [ 73.824827][ C1] stack backtrace: [ 73.830770][ C1] CPU: 1 UID: 0 PID: 5826 Comm: syz.3.13 Tainted: G W syzkaller #0 PREEMPT(full) [ 73.841432][ C1] Tainted: [W]=WARN [ 73.845214][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.855248][ C1] Call Trace: [ 73.858516][ C1] [ 73.861347][ C1] dump_stack_lvl+0x100/0x190 [ 73.866021][ C1] lockdep_rcu_suspicious.cold+0x4f/0xb2 [ 73.871654][ C1] __synchronize_srcu+0x29d/0x300 [ 73.876682][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 73.882221][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 73.887756][ C1] ? synchronize_srcu+0xa8/0x380 [ 73.892677][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 73.898824][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 73.904968][ C1] wakeup_source_unregister+0x1f/0x30 [ 73.910331][ C1] mmc_host_classdev_release+0x42/0x120 [ 73.915874][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 73.922021][ C1] device_release+0xd2/0x270 [ 73.926598][ C1] kobject_put+0x1f7/0x640 [ 73.931001][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 73.937668][ C1] put_device+0x1f/0x30 [ 73.941821][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 73.947971][ C1] call_timer_fn+0x198/0x5f0 [ 73.952564][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 73.957673][ C1] ? lock_acquire+0x1d1/0x380 [ 73.962345][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 73.969017][ C1] ? mark_held_locks+0x40/0x70 [ 73.973769][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 73.980437][ C1] __run_timers+0x757/0xb00 [ 73.984938][ C1] ? __pfx___run_timers+0x10/0x10 [ 73.989947][ C1] ? clockevents_program_event+0x23e/0x820 [ 73.995767][ C1] ? lock_acquire+0x1d1/0x380 [ 74.000434][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 74.005451][ C1] run_timer_base+0x114/0x190 [ 74.010114][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 74.015304][ C1] run_timer_softirq+0x1a/0x50 [ 74.020060][ C1] handle_softirqs+0x1e6/0x9d0 [ 74.024812][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 74.030101][ C1] ? _raw_spin_unlock+0x28/0x50 [ 74.034941][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 74.040557][ C1] __irq_exit_rcu+0x16a/0x210 [ 74.045217][ C1] irq_exit_rcu+0x9/0x30 [ 74.049444][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 74.055076][ C1] [ 74.057990][ C1] [ 74.060900][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 74.066863][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 74.072051][ C1] Code: 05 8f 1e a6 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 9e e6 5d 10 0f 82 c9 02 00 00 8b 35 3e 18 5e 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 2d 1e a6 13 0f 85 09 03 00 00 48 83 c4 [ 74.091646][ C1] RSP: 0018:ffffc90005157618 EFLAGS: 00000206 [ 74.097704][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 74.105661][ C1] RDX: 0000000000000002 RSI: ffffffff8e3bd2c3 RDI: ffffffff8c625580 [ 74.113613][ C1] RBP: ffffffff8fdec520 R08: 00000000d92d2565 R09: 000000000000001e [ 74.121565][ C1] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 74.129515][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.137484][ C1] ? find_held_lock+0x2b/0x80 [ 74.142154][ C1] pfn_valid+0xd8/0x4b0 [ 74.146297][ C1] ? pfn_valid+0xbc/0x4b0 [ 74.150616][ C1] page_table_check_clear+0x21/0x540 [ 74.155899][ C1] ? vm_normal_page+0x1d1/0x380 [ 74.160752][ C1] __page_table_check_pte_clear+0x10f/0x120 [ 74.166638][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 74.173043][ C1] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 74.178577][ C1] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 74.185342][ C1] __zap_vma_range+0x2c43/0x48e0 [ 74.190291][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 74.195564][ C1] ? mas_next_slot+0xc05/0x13a0 [ 74.200420][ C1] unmap_vmas+0x299/0x5f0 [ 74.204743][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 74.209583][ C1] ? mas_next_slot+0xc05/0x13a0 [ 74.214446][ C1] exit_mmap+0x1ef/0xa00 [ 74.218682][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 74.223437][ C1] ? rcu_is_watching+0x13/0xc0 [ 74.228201][ C1] ? uprobe_clear_state+0x49/0x250 [ 74.233316][ C1] ? find_held_lock+0x2b/0x80 [ 74.237988][ C1] ? uprobe_clear_state+0x5f/0x250 [ 74.243105][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 74.248743][ C1] __mmput+0x12a/0x410 [ 74.252802][ C1] mmput+0x67/0x80 [ 74.256506][ C1] do_exit+0x83b/0x2a50 [ 74.260647][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 74.266006][ C1] ? __pfx_do_exit+0x10/0x10 [ 74.270590][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 74.275955][ C1] do_group_exit+0xd5/0x2a0 [ 74.280453][ C1] __x64_sys_exit_group+0x3e/0x50 [ 74.285466][ C1] x64_sys_call+0x1567/0x1570 [ 74.290126][ C1] do_syscall_64+0x123/0x790 [ 74.294705][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.300578][ C1] RIP: 0033:0x7f8746d9e559 [ 74.304971][ C1] Code: Unable to access opcode bytes at 0x7f8746d9e52f. [ 74.311965][ C1] RSP: 002b:00007ffdd5789418 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 74.320381][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8746d9e559 [ 74.328346][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.336302][ C1] RBP: 00007ffdd578947c R08: 0000000000000000 R09: 00000000000927c0 [ 74.344267][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 74.352247][ C1] R13: 00000000000927c0 R14: 0000000000011935 R15: 00007ffdd57894d0 [ 74.360227][ C1] [ 74.363313][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 74.363335][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5826, name: syz.3.13 [ 74.363352][ C1] preempt_count: 102, expected: 0 [ 74.363361][ C1] RCU nest depth: 1, expected: 0 [ 74.363371][ C1] locks held by syz.3.13/5826: 5, last CPU#1: [ 74.363385][ C1] #0: ffff888035fba800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 74.363434][ C1] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 74.363478][ C1] #2: ffff88807d4f9c18 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320 [ 74.363524][ C1] #3: ffffffff8fdec520 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xbc/0x4b0 [ 74.363571][ C1] #4: ffffc90000a18c98 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11d/0x5f0 [ 74.363618][ C1] Preemption disabled at: [ 74.363622][ C1] [<0000000000000000>] 0x0 [ 74.363644][ C1] CPU: 1 UID: 0 PID: 5826 Comm: syz.3.13 Tainted: G W syzkaller #0 PREEMPT(full) [ 74.363667][ C1] Tainted: [W]=WARN [ 74.363673][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.363684][ C1] Call Trace: [ 74.363691][ C1] [ 74.363699][ C1] dump_stack_lvl+0x100/0x190 [ 74.363728][ C1] __might_resched.cold+0x1dc/0x222 [ 74.363753][ C1] ? __pfx___might_resched+0x10/0x10 [ 74.363774][ C1] ? lockdep_rcu_suspicious.cold+0x54/0xb2 [ 74.363799][ C1] __synchronize_srcu+0x13c/0x300 [ 74.363821][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 74.363845][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 74.363866][ C1] ? synchronize_srcu+0xa8/0x380 [ 74.363890][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 74.363920][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 74.363948][ C1] wakeup_source_unregister+0x1f/0x30 [ 74.363974][ C1] mmc_host_classdev_release+0x42/0x120 [ 74.364001][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 74.364026][ C1] device_release+0xd2/0x270 [ 74.364051][ C1] kobject_put+0x1f7/0x640 [ 74.364075][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 74.364104][ C1] put_device+0x1f/0x30 [ 74.364126][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 74.364154][ C1] call_timer_fn+0x198/0x5f0 [ 74.364177][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 74.364197][ C1] ? lock_acquire+0x1d1/0x380 [ 74.364224][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 74.364251][ C1] ? mark_held_locks+0x40/0x70 [ 74.364277][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 74.364304][ C1] __run_timers+0x757/0xb00 [ 74.364330][ C1] ? __pfx___run_timers+0x10/0x10 [ 74.364354][ C1] ? clockevents_program_event+0x23e/0x820 [ 74.364386][ C1] ? lock_acquire+0x1d1/0x380 [ 74.364410][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 74.364435][ C1] run_timer_base+0x114/0x190 [ 74.364456][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 74.364478][ C1] run_timer_softirq+0x1a/0x50 [ 74.364497][ C1] handle_softirqs+0x1e6/0x9d0 [ 74.364522][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 74.364539][ C1] ? _raw_spin_unlock+0x28/0x50 [ 74.364560][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 74.364584][ C1] __irq_exit_rcu+0x16a/0x210 [ 74.364602][ C1] irq_exit_rcu+0x9/0x30 [ 74.364625][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 74.364648][ C1] [ 74.364653][ C1] [ 74.364659][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 74.364677][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 74.364696][ C1] Code: 05 8f 1e a6 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 9e e6 5d 10 0f 82 c9 02 00 00 8b 35 3e 18 5e 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 2d 1e a6 13 0f 85 09 03 00 00 48 83 c4 [ 74.364712][ C1] RSP: 0018:ffffc90005157618 EFLAGS: 00000206 [ 74.364724][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 74.364734][ C1] RDX: 0000000000000002 RSI: ffffffff8e3bd2c3 RDI: ffffffff8c625580 [ 74.364743][ C1] RBP: ffffffff8fdec520 R08: 00000000d92d2565 R09: 000000000000001e [ 74.364753][ C1] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 74.364762][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.364784][ C1] ? find_held_lock+0x2b/0x80 [ 74.364810][ C1] pfn_valid+0xd8/0x4b0 [ 74.364833][ C1] ? pfn_valid+0xbc/0x4b0 [ 74.364856][ C1] page_table_check_clear+0x21/0x540 [ 74.364879][ C1] ? vm_normal_page+0x1d1/0x380 [ 74.364901][ C1] __page_table_check_pte_clear+0x10f/0x120 [ 74.364926][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 74.364949][ C1] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 74.364965][ C1] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 74.364993][ C1] __zap_vma_range+0x2c43/0x48e0 [ 74.365032][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 74.365053][ C1] ? mas_next_slot+0xc05/0x13a0 [ 74.365086][ C1] unmap_vmas+0x299/0x5f0 [ 74.365111][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 74.365134][ C1] ? mas_next_slot+0xc05/0x13a0 [ 74.365167][ C1] exit_mmap+0x1ef/0xa00 [ 74.365191][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 74.365214][ C1] ? rcu_is_watching+0x13/0xc0 [ 74.365242][ C1] ? uprobe_clear_state+0x49/0x250 [ 74.365264][ C1] ? find_held_lock+0x2b/0x80 [ 74.365286][ C1] ? uprobe_clear_state+0x5f/0x250 [ 74.365314][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 74.365357][ C1] __mmput+0x12a/0x410 [ 74.365374][ C1] mmput+0x67/0x80 [ 74.365390][ C1] do_exit+0x83b/0x2a50 [ 74.365412][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 74.365434][ C1] ? __pfx_do_exit+0x10/0x10 [ 74.365454][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 74.365479][ C1] do_group_exit+0xd5/0x2a0 [ 74.365501][ C1] __x64_sys_exit_group+0x3e/0x50 [ 74.365521][ C1] x64_sys_call+0x1567/0x1570 [ 74.365537][ C1] do_syscall_64+0x123/0x790 [ 74.365562][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.365577][ C1] RIP: 0033:0x7f8746d9e559 [ 74.365588][ C1] Code: Unable to access opcode bytes at 0x7f8746d9e52f. [ 74.365595][ C1] RSP: 002b:00007ffdd5789418 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 74.365609][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8746d9e559 [ 74.365619][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.365628][ C1] RBP: 00007ffdd578947c R08: 0000000000000000 R09: 00000000000927c0 [ 74.365637][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 74.365646][ C1] R13: 00000000000927c0 R14: 0000000000011935 R15: 00007ffdd57894d0 [ 74.365666][ C1] [ 74.365677][ C1] ODEBUG: object ffffc90000a18a60 is NOT on stack ffffc90005150000, but annotated. [ 74.366148][ C1] ------------[ cut here ]------------ [ 74.366156][ C1] 1 [ 74.366161][ C1] WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc.part.0.cold+0x19/0x40, CPU#1: syz.3.13/5826 [ 75.026376][ C1] Modules linked in: [ 75.030261][ C1] CPU: 1 UID: 0 PID: 5826 Comm: syz.3.13 Tainted: G W syzkaller #0 PREEMPT(full) [ 75.040923][ C1] Tainted: [W]=WARN [ 75.044704][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.054738][ C1] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 75.061754][ C1] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 c5 01 89 2d 30 25 7e 1b 4c 89 e6 48 c7 c7 c0 60 62 8c e8 31 aa eb ff 90 <0f> 0b 90 e9 52 14 00 04 83 c5 01 89 2d 0f 25 7e 1b 49 39 c4 73 da [ 75.081341][ C1] RSP: 0018:ffffc90000a188f0 EFLAGS: 00010082 [ 75.087387][ C1] RAX: 0000000000000050 RBX: ffff88807341d700 RCX: 0000000000000000 [ 75.095338][ C1] RDX: 0000000000000050 RSI: ffffffff81ea44f9 RDI: fffff5200014310f [ 75.103285][ C1] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 75.111235][ C1] R10: 0000000000000103 R11: 0000000000000001 R12: ffffc90000a18a60 [ 75.119183][ C1] R13: ffff88807d350000 R14: 0000000000000001 R15: 0000000000000000 [ 75.127136][ C1] FS: 0000000000000000(0000) GS:ffff888122a46000(0000) knlGS:0000000000000000 [ 75.136049][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.142614][ C1] CR2: 000000110c3622d7 CR3: 0000000059587000 CR4: 00000000003526f0 [ 75.150567][ C1] Call Trace: [ 75.153822][ C1] [ 75.156648][ C1] __debug_object_init+0x2a9/0x3d0 [ 75.161756][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 75.167377][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 75.172739][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 75.178093][ C1] ? __init_swait_queue_head+0xca/0x150 [ 75.183630][ C1] __synchronize_srcu+0x1c3/0x300 [ 75.188646][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 75.194200][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 75.199734][ C1] ? synchronize_srcu+0xa8/0x380 [ 75.204657][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 75.210805][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 75.216951][ C1] wakeup_source_unregister+0x1f/0x30 [ 75.222313][ C1] mmc_host_classdev_release+0x42/0x120 [ 75.227849][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 75.234037][ C1] device_release+0xd2/0x270 [ 75.238621][ C1] kobject_put+0x1f7/0x640 [ 75.243028][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 75.249697][ C1] put_device+0x1f/0x30 [ 75.253845][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 75.259989][ C1] call_timer_fn+0x198/0x5f0 [ 75.264565][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 75.269660][ C1] ? lock_acquire+0x1d1/0x380 [ 75.274331][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 75.280995][ C1] ? mark_held_locks+0x40/0x70 [ 75.285747][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 75.292412][ C1] __run_timers+0x757/0xb00 [ 75.296906][ C1] ? __pfx___run_timers+0x10/0x10 [ 75.301911][ C1] ? clockevents_program_event+0x23e/0x820 [ 75.307713][ C1] ? lock_acquire+0x1d1/0x380 [ 75.312384][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 75.317396][ C1] run_timer_base+0x114/0x190 [ 75.322057][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 75.327240][ C1] run_timer_softirq+0x1a/0x50 [ 75.331985][ C1] handle_softirqs+0x1e6/0x9d0 [ 75.336734][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 75.342002][ C1] ? _raw_spin_unlock+0x28/0x50 [ 75.346837][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 75.352450][ C1] __irq_exit_rcu+0x16a/0x210 [ 75.357109][ C1] irq_exit_rcu+0x9/0x30 [ 75.361338][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 75.366958][ C1] [ 75.369870][ C1] [ 75.372784][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 75.378752][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 75.383938][ C1] Code: 05 8f 1e a6 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 9e e6 5d 10 0f 82 c9 02 00 00 8b 35 3e 18 5e 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 2d 1e a6 13 0f 85 09 03 00 00 48 83 c4 [ 75.403525][ C1] RSP: 0018:ffffc90005157618 EFLAGS: 00000206 [ 75.409579][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 75.417546][ C1] RDX: 0000000000000002 RSI: ffffffff8e3bd2c3 RDI: ffffffff8c625580 [ 75.425496][ C1] RBP: ffffffff8fdec520 R08: 00000000d92d2565 R09: 000000000000001e [ 75.433449][ C1] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 75.441405][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.449369][ C1] ? find_held_lock+0x2b/0x80 [ 75.454040][ C1] pfn_valid+0xd8/0x4b0 [ 75.458183][ C1] ? pfn_valid+0xbc/0x4b0 [ 75.462500][ C1] page_table_check_clear+0x21/0x540 [ 75.467774][ C1] ? vm_normal_page+0x1d1/0x380 [ 75.472614][ C1] __page_table_check_pte_clear+0x10f/0x120 [ 75.478495][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 75.484896][ C1] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 75.490419][ C1] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 75.497172][ C1] __zap_vma_range+0x2c43/0x48e0 [ 75.502113][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 75.507383][ C1] ? mas_next_slot+0xc05/0x13a0 [ 75.512244][ C1] unmap_vmas+0x299/0x5f0 [ 75.516565][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 75.521407][ C1] ? mas_next_slot+0xc05/0x13a0 [ 75.526260][ C1] exit_mmap+0x1ef/0xa00 [ 75.530494][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 75.535244][ C1] ? rcu_is_watching+0x13/0xc0 [ 75.539999][ C1] ? uprobe_clear_state+0x49/0x250 [ 75.545097][ C1] ? find_held_lock+0x2b/0x80 [ 75.549758][ C1] ? uprobe_clear_state+0x5f/0x250 [ 75.554864][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 75.560497][ C1] __mmput+0x12a/0x410 [ 75.564547][ C1] mmput+0x67/0x80 [ 75.568248][ C1] do_exit+0x83b/0x2a50 [ 75.572391][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 75.577756][ C1] ? __pfx_do_exit+0x10/0x10 [ 75.582327][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 75.587687][ C1] do_group_exit+0xd5/0x2a0 [ 75.592177][ C1] __x64_sys_exit_group+0x3e/0x50 [ 75.597185][ C1] x64_sys_call+0x1567/0x1570 [ 75.601847][ C1] do_syscall_64+0x123/0x790 [ 75.606428][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.612301][ C1] RIP: 0033:0x7f8746d9e559 [ 75.616696][ C1] Code: Unable to access opcode bytes at 0x7f8746d9e52f. [ 75.623689][ C1] RSP: 002b:00007ffdd5789418 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 75.632079][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8746d9e559 [ 75.640027][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.647974][ C1] RBP: 00007ffdd578947c R08: 0000000000000000 R09: 00000000000927c0 [ 75.655925][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 75.663874][ C1] R13: 00000000000927c0 R14: 0000000000011935 R15: 00007ffdd57894d0 [ 75.671836][ C1] [ 75.674836][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.682096][ C1] CPU: 1 UID: 0 PID: 5826 Comm: syz.3.13 Tainted: G W syzkaller #0 PREEMPT(full) [ 75.692749][ C1] Tainted: [W]=WARN [ 75.696528][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.706560][ C1] Call Trace: [ 75.709819][ C1] [ 75.712645][ C1] dump_stack_lvl+0x100/0x190 [ 75.717321][ C1] vpanic+0x553/0x970 [ 75.721282][ C1] ? __pfx_vpanic+0x10/0x10 [ 75.725768][ C1] panic+0xd1/0xe0 [ 75.729469][ C1] ? __pfx_panic+0x10/0x10 [ 75.733874][ C1] check_panic_on_warn.cold+0x19/0x34 [ 75.739226][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 75.745624][ C1] __warn.cold+0x191/0x318 [ 75.750025][ C1] __report_bug+0x30f/0x440 [ 75.754514][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 75.760919][ C1] ? __pfx___report_bug+0x10/0x10 [ 75.765932][ C1] ? console_srcu_read_unlock+0x46/0x60 [ 75.771461][ C1] ? __wake_up_klogd+0xe5/0x140 [ 75.776297][ C1] ? vprintk_emit+0x1c9/0x6b0 [ 75.780963][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 75.785974][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 75.792372][ C1] report_bug+0xb3/0x220 [ 75.796603][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 75.803005][ C1] handle_bug+0x16a/0x2a0 [ 75.807312][ C1] exc_invalid_op+0x17/0x50 [ 75.811793][ C1] asm_exc_invalid_op+0x1a/0x20 [ 75.816623][ C1] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 75.823635][ C1] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 c5 01 89 2d 30 25 7e 1b 4c 89 e6 48 c7 c7 c0 60 62 8c e8 31 aa eb ff 90 <0f> 0b 90 e9 52 14 00 04 83 c5 01 89 2d 0f 25 7e 1b 49 39 c4 73 da [ 75.843222][ C1] RSP: 0018:ffffc90000a188f0 EFLAGS: 00010082 [ 75.849269][ C1] RAX: 0000000000000050 RBX: ffff88807341d700 RCX: 0000000000000000 [ 75.857223][ C1] RDX: 0000000000000050 RSI: ffffffff81ea44f9 RDI: fffff5200014310f [ 75.865172][ C1] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 75.873119][ C1] R10: 0000000000000103 R11: 0000000000000001 R12: ffffc90000a18a60 [ 75.881071][ C1] R13: ffff88807d350000 R14: 0000000000000001 R15: 0000000000000000 [ 75.889024][ C1] ? vprintk_emit+0x1c9/0x6b0 [ 75.893700][ C1] __debug_object_init+0x2a9/0x3d0 [ 75.898803][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 75.904428][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 75.909783][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 75.915137][ C1] ? __init_swait_queue_head+0xca/0x150 [ 75.920674][ C1] __synchronize_srcu+0x1c3/0x300 [ 75.925682][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 75.931217][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 75.936748][ C1] ? synchronize_srcu+0xa8/0x380 [ 75.941671][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 75.947814][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 75.953956][ C1] wakeup_source_unregister+0x1f/0x30 [ 75.959317][ C1] mmc_host_classdev_release+0x42/0x120 [ 75.964853][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 75.970995][ C1] device_release+0xd2/0x270 [ 75.975581][ C1] kobject_put+0x1f7/0x640 [ 75.979980][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 75.986642][ C1] put_device+0x1f/0x30 [ 75.990787][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 75.996929][ C1] call_timer_fn+0x198/0x5f0 [ 76.001500][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 76.006591][ C1] ? lock_acquire+0x1d1/0x380 [ 76.011256][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 76.017917][ C1] ? mark_held_locks+0x40/0x70 [ 76.022676][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 76.029337][ C1] __run_timers+0x757/0xb00 [ 76.033830][ C1] ? __pfx___run_timers+0x10/0x10 [ 76.038837][ C1] ? clockevents_program_event+0x23e/0x820 [ 76.044633][ C1] ? lock_acquire+0x1d1/0x380 [ 76.049300][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 76.054316][ C1] run_timer_base+0x114/0x190 [ 76.058976][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 76.064162][ C1] run_timer_softirq+0x1a/0x50 [ 76.068909][ C1] handle_softirqs+0x1e6/0x9d0 [ 76.073666][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 76.078933][ C1] ? _raw_spin_unlock+0x28/0x50 [ 76.083770][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 76.089388][ C1] __irq_exit_rcu+0x16a/0x210 [ 76.094046][ C1] irq_exit_rcu+0x9/0x30 [ 76.098280][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 76.103897][ C1] [ 76.106855][ C1] [ 76.109766][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 76.115727][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 76.120921][ C1] Code: 05 8f 1e a6 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 9e e6 5d 10 0f 82 c9 02 00 00 8b 35 3e 18 5e 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 2d 1e a6 13 0f 85 09 03 00 00 48 83 c4 [ 76.140517][ C1] RSP: 0018:ffffc90005157618 EFLAGS: 00000206 [ 76.146566][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 76.154515][ C1] RDX: 0000000000000002 RSI: ffffffff8e3bd2c3 RDI: ffffffff8c625580 [ 76.162465][ C1] RBP: ffffffff8fdec520 R08: 00000000d92d2565 R09: 000000000000001e [ 76.170416][ C1] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 76.178369][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.186350][ C1] ? find_held_lock+0x2b/0x80 [ 76.191045][ C1] pfn_valid+0xd8/0x4b0 [ 76.195213][ C1] ? pfn_valid+0xbc/0x4b0 [ 76.199532][ C1] page_table_check_clear+0x21/0x540 [ 76.204818][ C1] ? vm_normal_page+0x1d1/0x380 [ 76.209661][ C1] __page_table_check_pte_clear+0x10f/0x120 [ 76.215547][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 76.221959][ C1] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 76.227489][ C1] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 76.234248][ C1] __zap_vma_range+0x2c43/0x48e0 [ 76.239191][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 76.244465][ C1] ? mas_next_slot+0xc05/0x13a0 [ 76.249317][ C1] unmap_vmas+0x299/0x5f0 [ 76.253639][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 76.258477][ C1] ? mas_next_slot+0xc05/0x13a0 [ 76.263335][ C1] exit_mmap+0x1ef/0xa00 [ 76.267581][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 76.272330][ C1] ? rcu_is_watching+0x13/0xc0 [ 76.277085][ C1] ? uprobe_clear_state+0x49/0x250 [ 76.282183][ C1] ? find_held_lock+0x2b/0x80 [ 76.286848][ C1] ? uprobe_clear_state+0x5f/0x250 [ 76.291958][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 76.297590][ C1] __mmput+0x12a/0x410 [ 76.301644][ C1] mmput+0x67/0x80 [ 76.305344][ C1] do_exit+0x83b/0x2a50 [ 76.309497][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 76.314859][ C1] ? __pfx_do_exit+0x10/0x10 [ 76.319438][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 76.324810][ C1] do_group_exit+0xd5/0x2a0 [ 76.329302][ C1] __x64_sys_exit_group+0x3e/0x50 [ 76.334314][ C1] x64_sys_call+0x1567/0x1570 [ 76.338989][ C1] do_syscall_64+0x123/0x790 [ 76.343569][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.349443][ C1] RIP: 0033:0x7f8746d9e559 [ 76.353841][ C1] Code: Unable to access opcode bytes at 0x7f8746d9e52f. [ 76.360834][ C1] RSP: 002b:00007ffdd5789418 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 76.369231][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8746d9e559 [ 76.377184][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.385136][ C1] RBP: 00007ffdd578947c R08: 0000000000000000 R09: 00000000000927c0 [ 76.393088][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 76.401037][ C1] R13: 00000000000927c0 R14: 0000000000011935 R15: 00007ffdd57894d0 [ 76.408998][ C1] [ 76.412094][ C1] Kernel Offset: disabled [ 76.416402][ C1] Rebooting in 86400 seconds..