last executing test programs: 1.740165309s ago: executing program 2 (id=3): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000400), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 1.670519779s ago: executing program 3 (id=4): syz_usb_ep_read(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r2, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xb, 0x6, {0xffffffffffffffff}, {0xee01}, 0x0, 0x7fffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x2, r6, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000380)={0x48}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x4010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, 0x0, 0xfffffffffffffffe) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc00, 0xc9) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 694.138857ms ago: executing program 2 (id=6): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000007030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000001010000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) 510.763152ms ago: executing program 2 (id=7): r0 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x30925) add_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000019200)="916159469e1c5cb0977bd3cb88f01b4caece0fcbe473ba3a1ad6b6895081f68e2cd302defa944fbbe783c1e5a779326709ea7d411b1e38f2a73cdadca99afa48f01ddf4a209b0eb88db582bcde4e3c74690fd8c5448a1580e6e50ad8e7f6abdb0cfbedd3d828901d6dea45041afa96b57e08f88f48ce6e40aa95b5fbfa657913c15d85e5bf22021c60f55df50d04b66797eb88fcf3f145826406b5ebc5d73234cc2950aab8a1c73e6e15df387a4bc38b94adccab5bc72b3a5db850d7ca9468aa1e8e670fcbcd3369747e35de776c568a", 0xd0, r0) add_key(&(0x7f0000000000)='logon\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="07ac149f8b95cd7515f07e08fe945874505283451330d363726873c6429c84cbdac798ac57f4a477b489e97034d0dc5bf4ed9be2145bcccbdec48ee83cebcb169db859a025ee6c06f7", 0x49, r0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) syz_usb_connect(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x4b, 0x3, 0x9, 0x10, 0x1199, 0x9015, 0x992d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x7f, 0x7, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0x45, 0x83, 0xd6, 0x3}}, {{0x9, 0x4, 0x1, 0xe, 0x0, 0xff, 0xff, 0xff, 0x8}}, {{0x9, 0x4, 0x66, 0xc, 0x0, 0xff, 0xff, 0xff, 0x8}}]}}]}}, 0x0) 510.589304ms ago: executing program 0 (id=1): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400a00, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm], 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xe, 0x1}, {0x10, 0x2}, {0x10, 0x4}, {0xf, 0x1}, {0x6, 0x5}, {0xc, 0x5}]}, @typedef={0x3, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x81}, 0x28) 393.751145ms ago: executing program 0 (id=8): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4, 0x0, 0x3}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x406c) 302.40474ms ago: executing program 4 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="380100005f0202002c001280110001006272696467655f736c61766500000000140005800500090000000000050008000000000007000a"], 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x40040c4) 278.662374ms ago: executing program 1 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x6a9f0eede9332711}, {0xfff3, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x4d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad60f027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 110.802369ms ago: executing program 4 (id=9): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000000000000f0000000100f20000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc00"/29, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) 108.778818ms ago: executing program 0 (id=10): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r4}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x200) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000a80)="19d158b3f63be90bc3064255fc96f65d8ab064f35821a9d744fea6ad55fd3d0918545a4a301bcf07eff94d5fefac366e4455a904a52922ea7befe2c4a385296e2fc49dd2c093b6ffdff7f7c739f855cd615f236260168fc312e832a1116f103e06290b7a6a572fade2703fefde0347ed4c310c651d59b356bad46293871e09b1dbda13338762fb1ef414f89f341b87ca7786712489e47db0a4898d90ab460bb84c514b6828ed4d15bceebbd147aced093ce38a07c703a59aef0f8b95d2810a78ac4eadfdcb2f11391aa0df7f3a5cb4de22e87202b07ec0c47b2d50f30bcb0391a539e396bd7fdf3d442c7bdc27667282cf85251ce35368acbf4aaecdbcc513e5cfea4be45508d2a4872152a00f5242aca086f7d11b1e9616236beb44833c7099f18957730eb518b24cdb9810723d531bf728ac9591b9255e734bd79e7bf8b5fe6d5a47de8700d56e987761c203e15a989a113981e451d655cb9fd804dde68764c0536e4708cbc318578b86cf14fe342e64a6013e4540f06c6c5a6bddae61c04c1315ece6cf62b97ee48e30eafba7607c0a8f48afd1a90677b879c7234a90e051caf59b87237a9aa35635dfbc8ef7b64059aa6e36989e6e4fed297cbea790397e12e4720b74bdf64902404177be98e615a7c555402c337f7b2b3578d0c50a192d4680bab42e6b2eaaf74198de7d752cccf660ea8bed34757e2b7ce236edb14bdeee0a13f83050ac5551691b387351f8dc935d2495d5dfb72cd2d67241f61f4cedc571b309d50674c8be92522164db6a334b83efe8e8036c23f7b3d343f1466a989a42321889379e2a556ff20f671554c8956b53ed0448ab540539a987e8f1837469f2c530bdce5c995c0ef5d49bd44311142546c768b1a20717fe38dbcc51084c82bff132591547e066b9ba5a8ae5d004a1bd199210f14d346ec653d46f24159040a762084288a9e66eaf41001ba05d41b0ed57fb9eb23eac8c88d7f12c9e35bd696525d98ec74c51c02c195ac1ee7e86b01e4a90642714b01d65d3c996c84ac1efbaf9dca32752749023d5aceb4dd590b3b7a44399ac1bd33484d24425882d781d42c813793a49316de64d2ae3daba88c17811dafcd6eb9b64ddffeeba7ecaa42a415af0c5e719d1ccb256ac9dabfd6ed53873638895caeff60f865dec676c0f6d2e1aad68c740b150738ffba964c83a1dc05e156cf1e45d74033cafd47bfa24b3e050a8f5d6ed337558d9b8da2b9d23fa60c4e04e53e48004485278110b6d349b6c99557c8064eee3af0faa191f6c00752e5483eb7f74bb2c3d58365240e43d5fe99ba193e660e6accf8956b6cabdb0a17a29465919de748547b31ee6a3041e951f345fc661ca96371257ebf060cd9a636aa36b197e34b8ac2b0ac7bc813b929b9c051af21da6f83e4e50ce70f7455551386aca86a99e0aed5747203dcc9e9f854f3fc7be334f71091341603bdbc887238c7860b2e78a375be9a4f4ba1d59cc6d34848598f21feedba655bd87a09471697f8186234463440745821cb7b6d843ee90eca2cfb740c2308fee03d21834627058ba08e1dd466c2d33aa7cacf542b74430b88f66184736c7903bb000cc578e81d8752688ad02bf0ae799d0d826196394ad6a99e7c21ca2125769b6537b3fb9b88b548158e8a45ca2b6f301f084b80743a747ddba89a9c92a1f4cbf4ba70979a9b2d6a0e93f3a661f55577247393e26a367aae615b6b23a827a1b4ef22ab41944dce69c116869e19470ee243cf8ad4f59559dfc80615f9b71668695ad8c85dd4fb52f160c405214bf9122bff3858785fdb340ac532f900db92e5863c09a0e4f8ddd4add7afde0dcfae0056eff719832ec48650728ff394b63744465e339a309ebb7c4e8adada33d54ae6feb86d261842c625c25ad75b8f368ddf16e698d478cfb93d4854eea8a744603d3148c009152a4386c33432b0fb3527a5d8d57667d0430560bb56552b3ab13c67ef52fca7181cfdbc83a0da17fcf716194367bd694ee9b0711f32fb1b213b298b4551ec08bade8d238bd49999af4d031b19c65b9bed5c7a2bdb3cf9fe71ecd67ce213a46cbbc5af95bcc76d672b0bef90e319ee55c38876747f93af937b782d5f32d5a605f5086dd32621d76574c91a31a0844a9f9227eadd8887cf51c8bd8c99dd8d691cae4c7eb56c2fc6d26fee349e8d889b035290026fa9ac531a415546d4d3e06c5b9a46ec23c113f449318ef51ccf5cecd0bfc9d90b37e855db7e5766e3c00e71fcb3ea6f1d2b70653a6e28ba47ddfe3cb27b3bd962de2cf4c7fa64baffd2f3a072cccdb3a5b92b99e5c948888640ef05588b4df1d991e1bcd626a9df76f18aab133eb38b4dca4a885408f5268840595c33bdb005162ec7f70e68714f37d4bed5319837f88a9e0aa6f73e3a2a09b876d5322fb05a2db199a8f05c7287aae5e92a8710306803124cb16d5afae0817ceee91d54d95d01fe37a79957d9857cae657b748f0e6f2002fbc569c490eeb8c46a89a1a18dbda5f8b4bc1d2f90384a40b8cfcb13ccac58b921226be47aa2589e880df0b74979d8b400137d346543abc3012c7d7d990aa0d0f51786c278f70bc4069bbdffd81545f4e7aa8262788de7609ee7c1c64513a8c34dfe5f8294cfd03e98d6dfc1af4d507def759686673ae6370656b512567fe4281125f5939d5a313beca4956baa92618d58f9a7b56748df6647f888774fd4425c21d5419c6dfe15d52514dbb1fa2fd9d89514bc2943ec1540ad7f748673e5d77106138644f640661e6d834df1516530ef8cb35e3bae675b52788fea6c73471d61e45aa435842850706c410aca159123697767fc2e8752dfe46985f12a4295d0a2c85f94807de2c8e45bceca6e4f8f8e52fe16e6a4ee2c341aa06344702eb1397a924e6b6a22bb5210ac54bd279de87795a31f9448bae7846c32f4c9c656df26a021674e7913f636b5a166e005e40d8a44708882feffc829d17a1c80b65dbb3b77cc4d1f5b8cba3e6bab3e79f9b122ac20929fc70d1f3e9d6da7b5852c3064a98044b1e574bb05c87ed219b94514c619908b2b674aea622e2198483edc47ce637571a23b26aa84182c5318b852504b1c3aa20d53a8f351be244721c8c611075b4a4ddf82d4e39bba138d6ffab05fe6c3f465ce1deafff62359cee0501bb5071e6c79727c96b424a84a57c10b385e5ce90f1eba815e04fb19eb2b7f8fbe55536b6df1db60e1451fa32940ad43b13f68b498a9d6b805cfa5c787c99d66f256ca2d98f9e54510cef7e4baefe292f4da5c62d32392aadde1dd913b3b2364fd9fa10ab457107a8f394c5473555049a31358dd5e47bacf180e90949c3125f5ee7514007609ea5d23edb88c945b1bbe1e6403b3e033d97cbf93c70ae73b7642369609ebdd52fe8431bf67cd256b986cce961918a993b1f64ac856c8d99b5f87425fc5971ea801fdd041e63634bd464816e18db35b100414a3b481e4a71414ef0d76091e6a39018fe878d390570b16e3780371853acfd455ea1fc9d2c06a32724120341ed52a5b61bb3521221ffe544c0abe168477662127d3ef839ae042e0485b0ca0a91ae46056ff4c1ac04f00072179ee3f3bf082adf4b4cd5a6040a8c523c79706d9babc201bbe5625b4351b079ec86787a9aa4c5820f3882a4a6d3ada4f164bf7ce473dc7c82ef6424dfd8c35fd7a9eb30a721c433ef1e20930ce09568a9c38e40ba5adec3b3d0ad784f06afb84357e03670e8cf08f3b5011c33d07af9beccfad8e462e9f43af6ae5d7a73be89dd02f0daf9efce7374f1943d4001a355eb3adbcb93a10d23b1a30ff1c7a307b657b4fea0a07a73b00eda86bc7a0414dfc95c22d058fa83f5f916de2ed9fd58e0e90301239a0f9f00eaf270631380c803323ecbcf1d9fca55900efe838a4da1387971749c49a0081a65c1d6352ba582d3093d9218c06199147c267f7bfedf8fb32a8a628db5b1838195a410a4f1760d8cd4281397979c01582d850876dfdb0937583ae5b0b4f88ca1b1ba4798f83157b2343cf85e4231cc8eed5282074a23e3602ad7324f6ed01bf15cd2a102d797d1bf452ddfa20fc4d8d2484118522816b4d07b9f4ed8ca58c65e20ae2d25f4e8", &(0x7f0000000140)=""/44}, 0x20) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x24, r7, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x24}}, 0x4000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) 52.211973ms ago: executing program 1 (id=11): r0 = socket$key(0xf, 0x3, 0x2) close(0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r1}, 0x18) syz_emit_vhci(&(0x7f00000008c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r2, @ANYRES8=r1], 0x58}, 0x1, 0x400000000000000}, 0x1) unlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') r3 = shmget$private(0x0, 0x3000, 0x242, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000000)=""/62) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0xfffffffe}) 0s ago: executing program 4 (id=12): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1) semop(r2, &(0x7f00000002c0)=[{0x2, 0x5, 0x1800}, {0x3, 0xed0, 0x1800}, {0x1, 0x4f, 0x1000}], 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', 0xffffffffffffffff, 0x0, 0xf69}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r4, 0x0, 0xf69}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100fd0006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) semtimedop(r2, &(0x7f00000001c0)=[{0x3, 0x5903, 0x1000}, {0x3, 0x0, 0x1000}], 0x2, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) socket(0x8, 0x6, 0x9) socket$rds(0x15, 0x5, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000041e0101000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x6, 0x73, 0x0}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000004) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4f27, 0x5, 0x3, 0x10000005, 0x400, 0xcc7, 0xfff, 0x0, 0x5, 0xfe, 0xb, 0x1, 0x7fff, 0x1, 0x6, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x20000089, 0xfff7fffe, 0x2, 0x20001e56, 0xb, 0xe69, 0x3c, 0xffffffff, 0x102, 0x10, 0x1]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 65.676096][ T30] audit: type=1400 audit(1756765908.386:62): avc: denied { mounton } for pid=5836 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.679804][ T5836] cgroup: Unknown subsys name 'net' [ 65.698879][ T30] audit: type=1400 audit(1756765908.386:63): avc: denied { mount } for pid=5836 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.726487][ T30] audit: type=1400 audit(1756765908.426:64): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.872052][ T5836] cgroup: Unknown subsys name 'cpuset' [ 65.879732][ T5836] cgroup: Unknown subsys name 'rlimit' [ 66.066916][ T30] audit: type=1400 audit(1756765908.776:65): avc: denied { setattr } for pid=5836 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.100320][ T30] audit: type=1400 audit(1756765908.776:66): avc: denied { create } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.123846][ T30] audit: type=1400 audit(1756765908.776:67): avc: denied { write } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.144963][ T30] audit: type=1400 audit(1756765908.776:68): avc: denied { read } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.167789][ T30] audit: type=1400 audit(1756765908.786:69): avc: denied { mounton } for pid=5836 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.168575][ T5838] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 66.192967][ T30] audit: type=1400 audit(1756765908.786:70): avc: denied { mount } for pid=5836 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.224429][ T30] audit: type=1400 audit(1756765908.826:71): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 67.185224][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.404463][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.412498][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.420797][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.429115][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.430707][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.444911][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.453119][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.460924][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.470372][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.478189][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.485241][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.493129][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.495065][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.507815][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.516117][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.520814][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.524938][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.537045][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.545048][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.553294][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.572452][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.580496][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.588437][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.599726][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.608407][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.922782][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 70.135649][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.143458][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.151721][ T5849] bridge_slave_0: entered allmulticast mode [ 70.158394][ T5849] bridge_slave_0: entered promiscuous mode [ 70.176411][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.183669][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.191305][ T5849] bridge_slave_1: entered allmulticast mode [ 70.198625][ T5849] bridge_slave_1: entered promiscuous mode [ 70.227661][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 70.245358][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 70.261338][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.293773][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.351710][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 70.397652][ T5849] team0: Port device team_slave_0 added [ 70.445856][ T5849] team0: Port device team_slave_1 added [ 70.477160][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.484664][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.492234][ T5847] bridge_slave_0: entered allmulticast mode [ 70.498901][ T5847] bridge_slave_0: entered promiscuous mode [ 70.517319][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.524450][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.532007][ T5855] bridge_slave_0: entered allmulticast mode [ 70.538914][ T5855] bridge_slave_0: entered promiscuous mode [ 70.546215][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 70.556557][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.563774][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.570963][ T5847] bridge_slave_1: entered allmulticast mode [ 70.577593][ T5847] bridge_slave_1: entered promiscuous mode [ 70.595947][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.603202][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.610418][ T5855] bridge_slave_1: entered allmulticast mode [ 70.617039][ T5855] bridge_slave_1: entered promiscuous mode [ 70.635909][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.643029][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.669053][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.711620][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.718575][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.746045][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.782037][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.793604][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.804662][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.817395][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.832104][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.839415][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.846572][ T5848] bridge_slave_0: entered allmulticast mode [ 70.853366][ T5848] bridge_slave_0: entered promiscuous mode [ 70.897820][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.905041][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.912224][ T5848] bridge_slave_1: entered allmulticast mode [ 70.920271][ T5848] bridge_slave_1: entered promiscuous mode [ 70.952949][ T5849] hsr_slave_0: entered promiscuous mode [ 70.959719][ T5849] hsr_slave_1: entered promiscuous mode [ 70.977668][ T5855] team0: Port device team_slave_0 added [ 70.984579][ T5847] team0: Port device team_slave_0 added [ 70.991963][ T5847] team0: Port device team_slave_1 added [ 71.014220][ T5855] team0: Port device team_slave_1 added [ 71.047096][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.063955][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.070532][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.078617][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.085838][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.093271][ T5846] bridge_slave_0: entered allmulticast mode [ 71.100601][ T5846] bridge_slave_0: entered promiscuous mode [ 71.123303][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.130573][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.156806][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.170453][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.180091][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.187217][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.194585][ T5846] bridge_slave_1: entered allmulticast mode [ 71.201527][ T5846] bridge_slave_1: entered promiscuous mode [ 71.215932][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.223034][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.248973][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.264825][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.272013][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.298806][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.338104][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.345170][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.371109][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.391662][ T5848] team0: Port device team_slave_0 added [ 71.400020][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.423568][ T5848] team0: Port device team_slave_1 added [ 71.441015][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.499465][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.506440][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.533236][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.554402][ T5846] team0: Port device team_slave_0 added [ 71.565242][ T5847] hsr_slave_0: entered promiscuous mode [ 71.571662][ T5847] hsr_slave_1: entered promiscuous mode [ 71.577485][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 71.583419][ T5847] Cannot create hsr debugfs directory [ 71.593491][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.600709][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.627200][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.627246][ T50] Bluetooth: hci1: command tx timeout [ 71.643795][ T5859] Bluetooth: hci0: command tx timeout [ 71.656302][ T5855] hsr_slave_0: entered promiscuous mode [ 71.662427][ T5855] hsr_slave_1: entered promiscuous mode [ 71.668269][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 71.674306][ T5855] Cannot create hsr debugfs directory [ 71.681003][ T5846] team0: Port device team_slave_1 added [ 71.689872][ T5859] Bluetooth: hci4: command tx timeout [ 71.695738][ T5857] Bluetooth: hci3: command tx timeout [ 71.701749][ T50] Bluetooth: hci2: command tx timeout [ 71.766991][ T5848] hsr_slave_0: entered promiscuous mode [ 71.775392][ T5848] hsr_slave_1: entered promiscuous mode [ 71.781425][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 71.787133][ T5848] Cannot create hsr debugfs directory [ 71.835890][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.843124][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.869326][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.882179][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.889123][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.915585][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.025565][ T5846] hsr_slave_0: entered promiscuous mode [ 72.032025][ T5846] hsr_slave_1: entered promiscuous mode [ 72.037941][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 72.043929][ T5846] Cannot create hsr debugfs directory [ 72.180751][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.221451][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.235204][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.266066][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.361239][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.374172][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.384885][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.396182][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.472961][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.503094][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.512832][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.523589][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.605996][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.623615][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.634325][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.643713][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.679798][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.720119][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.737666][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.747951][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.757136][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.770800][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.787822][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.795064][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.806020][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.813142][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.821746][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.903130][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.933830][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.940959][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.960366][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.982085][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.989184][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.024799][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.060871][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.068054][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.077464][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 73.077478][ T30] audit: type=1400 audit(1756765915.796:89): avc: denied { sys_module } for pid=5849 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.095448][ T5855] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.116054][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.168343][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.193067][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.200262][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.284905][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.305817][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.341951][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.391840][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.405545][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.412710][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.434597][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.441769][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.487998][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.495152][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.548645][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.555790][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.602390][ T5849] veth0_vlan: entered promiscuous mode [ 73.618212][ T5849] veth1_vlan: entered promiscuous mode [ 73.656175][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.666691][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.691423][ T50] Bluetooth: hci1: command tx timeout [ 73.693050][ T5857] Bluetooth: hci0: command tx timeout [ 73.772275][ T5857] Bluetooth: hci3: command tx timeout [ 73.773409][ T50] Bluetooth: hci2: command tx timeout [ 73.777692][ T5857] Bluetooth: hci4: command tx timeout [ 73.820468][ T5849] veth0_macvtap: entered promiscuous mode [ 73.868657][ T5849] veth1_macvtap: entered promiscuous mode [ 73.938371][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.965635][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.980002][ T5855] veth0_vlan: entered promiscuous mode [ 73.997377][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.030163][ T5855] veth1_vlan: entered promiscuous mode [ 74.053584][ T1314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.095842][ T1314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.120708][ T1314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.140690][ T1314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.153009][ T5855] veth0_macvtap: entered promiscuous mode [ 74.192708][ T5855] veth1_macvtap: entered promiscuous mode [ 74.201282][ T5847] veth0_vlan: entered promiscuous mode [ 74.236241][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.247288][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.276041][ T5847] veth1_vlan: entered promiscuous mode [ 74.302751][ T1314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.311574][ T1314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.335624][ T1314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.344871][ T1314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.360698][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.383124][ T5848] veth0_vlan: entered promiscuous mode [ 74.388874][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.397410][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.425677][ T5848] veth1_vlan: entered promiscuous mode [ 74.501635][ T3515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.503049][ T5847] veth0_macvtap: entered promiscuous mode [ 74.517878][ T3515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.538519][ T30] audit: type=1400 audit(1756765917.246:90): avc: denied { mounton } for pid=5849 comm="syz-executor" path="/root/syzkaller.OmAO76/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.579547][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.587386][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.596328][ T5847] veth1_macvtap: entered promiscuous mode [ 74.600061][ T30] audit: type=1400 audit(1756765917.276:91): avc: denied { mount } for pid=5849 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.618871][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.632044][ T30] audit: type=1400 audit(1756765917.276:92): avc: denied { mounton } for pid=5849 comm="syz-executor" path="/root/syzkaller.OmAO76/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.658802][ T30] audit: type=1400 audit(1756765917.276:93): avc: denied { mount } for pid=5849 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.671575][ T5846] veth0_vlan: entered promiscuous mode [ 74.687326][ T30] audit: type=1400 audit(1756765917.296:94): avc: denied { mounton } for pid=5849 comm="syz-executor" path="/root/syzkaller.OmAO76/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.717419][ T30] audit: type=1400 audit(1756765917.296:95): avc: denied { mounton } for pid=5849 comm="syz-executor" path="/root/syzkaller.OmAO76/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.753819][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.754015][ T5848] veth0_macvtap: entered promiscuous mode [ 74.778710][ T30] audit: type=1400 audit(1756765917.296:96): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.781083][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.803028][ T30] audit: type=1400 audit(1756765917.366:97): avc: denied { mounton } for pid=5849 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.827893][ T5846] veth1_vlan: entered promiscuous mode [ 74.834374][ T30] audit: type=1400 audit(1756765917.366:98): avc: denied { mount } for pid=5849 comm="syz-executor" name="/" dev="gadgetfs" ino=7384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.842817][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.859036][ T5848] veth1_macvtap: entered promiscuous mode [ 74.871611][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.957847][ T3515] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.994853][ T3515] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.020252][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.033684][ T3515] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.042814][ T3515] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.057673][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.127092][ T3515] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.185646][ T3515] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.207672][ T3515] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.232175][ T3515] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.313865][ T5846] veth0_macvtap: entered promiscuous mode [ 75.392877][ T5846] veth1_macvtap: entered promiscuous mode [ 75.441073][ T54] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.539088][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.593404][ T54] usb 4-1: device descriptor read/64, error -71 [ 75.628009][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.721294][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.729147][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.734388][ T1314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.769611][ T5857] Bluetooth: hci0: command tx timeout [ 75.769644][ T1314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.783853][ T5857] Bluetooth: hci1: command tx timeout [ 75.834598][ T1314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.846422][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.849665][ T5857] Bluetooth: hci4: command tx timeout [ 75.855319][ T50] Bluetooth: hci2: command tx timeout [ 75.860219][ T5857] Bluetooth: hci3: command tx timeout [ 75.865032][ T54] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.873534][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.886154][ T1314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.964746][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.987344][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.007386][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.019961][ T54] usb 4-1: device descriptor read/64, error -71 [ 76.033457][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.117732][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.134756][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.143750][ T54] usb usb4-port1: attempt power cycle [ 76.197440][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.224855][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.312213][ T5987] netlink: 'syz.0.8': attribute type 1 has an invalid length. [ 76.401638][ T5989] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 76.424049][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.433020][ T5925] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.445943][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.482809][ T5991] netlink: 'syz.1.2': attribute type 15 has an invalid length. [ 76.496163][ T5991] netlink: 'syz.1.2': attribute type 18 has an invalid length. [ 76.522119][ T54] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 76.560633][ T54] usb 4-1: device descriptor read/8, error -71 [ 76.590035][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 76.602815][ T5925] usb 3-1: config 127 has an invalid interface number: 102 but max is 2 [ 76.619584][ T5925] usb 3-1: config 127 has no interface number 2 [ 76.629098][ T5925] usb 3-1: config 127 interface 0 has no altsetting 0 [ 76.637017][ T5925] usb 3-1: config 127 interface 1 has no altsetting 0 [ 76.644085][ T5925] usb 3-1: config 127 interface 102 has no altsetting 0 [ 76.655282][ T5925] usb 3-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 76.671955][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.686625][ T5925] usb 3-1: Product: syz [ 76.692245][ T5925] usb 3-1: Manufacturer: syz [ 76.696960][ T5925] usb 3-1: SerialNumber: syz [ 76.809516][ T54] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 76.829953][ T54] usb 4-1: device descriptor read/8, error -71 [ 76.859777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 76.899953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.936141][ T5925] usb 3-1: selecting invalid altsetting 0 [ 76.952701][ T5925] usb 3-1: Could not set interface, error -22 [ 76.953031][ T54] usb usb4-port1: unable to enumerate USB device [ 76.959626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.084254][ T5925] usb 3-1: selecting invalid altsetting 0 [ 77.084287][ T5925] usb 3-1: Could not set interface, error -22 [ 77.104746][ T5925] usb 3-1: USB disconnect, device number 2 [ 77.191905][ T6003] page: refcount:515 mapcount:0 mapping:ffff88805375c220 index:0x0 pfn:0x5e000 [ 77.192017][ T6003] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 77.192035][ T6003] aops:hugetlbfs_aops ino:1ee8 dentry name(?):"anon_hugepage" [ 77.192057][ T6003] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 77.192074][ T6003] page_type: f4(hugetlb) [ 77.192090][ T6003] raw: 00fff00000000041 ffffc900054a7d68 ffffc900054a7d68 ffff88805375c220 [ 77.192106][ T6003] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 77.192121][ T6003] head: 00fff00000000041 ffffc900054a7d68 ffffc900054a7d68 ffff88805375c220 [ 77.192135][ T6003] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 77.192149][ T6003] head: 00fff00000000009 ffffea0001780001 0000000000000000 0000000000000000 [ 77.192163][ T6003] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 77.192172][ T6003] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 77.192181][ T6003] page_owner tracks the page as allocated [ 77.192215][ T6003] page last allocated via order 9, migratetype Movable, gfp_mask 0x346cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_THISNODE), pid 1, tgid 1 (swapper/0), ts 19996364407, free_ts 18616862490 [ 77.192252][ T6003] post_alloc_hook+0x1c0/0x230 [ 77.192279][ T6003] get_page_from_freelist+0x132b/0x38e0 [ 77.192297][ T6003] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 77.192313][ T6003] alloc_pool_huge_folio+0x285/0x440 [ 77.192328][ T6003] set_max_huge_pages+0x457/0xdc0 [ 77.192344][ T6003] hugetlb_sysctl_handler_common+0x27d/0x340 [ 77.192361][ T6003] proc_sys_call_handler+0x43d/0x570 [ 77.192383][ T6003] __kernel_write_iter+0x317/0xb10 [ 77.192412][ T6003] kernel_write+0x1f4/0x6c0 [ 77.192429][ T6003] process_sysctl_arg+0x22b/0x5f0 [ 77.192453][ T6003] parse_args+0x5a3/0x8e0 [ 77.192473][ T6003] do_sysctl_args+0xc7/0x150 [ 77.192494][ T6003] kernel_init+0x84/0x2b0 [ 77.192516][ T6003] ret_from_fork+0x5d4/0x6f0 [ 77.192532][ T6003] ret_from_fork_asm+0x1a/0x30 [ 77.192551][ T6003] page last free pid 1 tgid 1 stack trace: [ 77.192560][ T6003] __free_frozen_pages+0x7d5/0x10f0 [ 77.192583][ T6003] free_contig_range+0x183/0x4b0 [ 77.192608][ T6003] destroy_args+0x794/0xc10 [ 77.192632][ T6003] debug_vm_pgtable+0x1a32/0x3640 [ 77.192656][ T6003] do_one_initcall+0x120/0x6e0 [ 77.192673][ T6003] kernel_init_freeable+0x5c2/0x910 [ 77.192690][ T6003] kernel_init+0x1c/0x2b0 [ 77.192709][ T6003] ret_from_fork+0x5d4/0x6f0 [ 77.192721][ T6003] ret_from_fork_asm+0x1a/0x30 [ 77.192811][ T6003] ------------[ cut here ]------------ [ 77.192815][ T6003] kernel BUG at mm/filemap.c:154! [ 77.192828][ T6003] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 77.192840][ T6003] CPU: 1 UID: 0 PID: 6003 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT(full) [ 77.192855][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.192863][ T6003] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 77.192883][ T6003] Code: 17 1f c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 4a 1a c9 ff 85 ed 7e 17 e8 01 1f c9 ff 48 c7 c6 40 1d b9 8b 48 89 df e8 72 cf 11 00 90 <0f> 0b e8 ea 1e c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 77.192895][ T6003] RSP: 0018:ffffc90005457310 EFLAGS: 00010083 [ 77.192906][ T6003] RAX: 0000000000012258 RBX: ffffea0001780000 RCX: ffffc900104a2000 [ 77.192915][ T6003] RDX: 0000000000080000 RSI: ffffffff81f26f3e RDI: ffff888078e7a884 [ 77.192923][ T6003] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 77.192931][ T6003] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805375c220 [ 77.192938][ T6003] R13: ffffea0001780030 R14: 0000000000000000 R15: ffffea0001780000 [ 77.192946][ T6003] FS: 00007f21a4c1e6c0(0000) GS:ffff8881247b8000(0000) knlGS:0000000000000000 [ 77.192959][ T6003] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.192967][ T6003] CR2: 0000200000112778 CR3: 000000007d3e9000 CR4: 00000000003526f0 [ 77.192974][ T6003] Call Trace: [ 77.192978][ T6003] [ 77.192984][ T6003] filemap_remove_folio+0xf1/0x250 [ 77.192997][ T6003] remove_inode_hugepages+0x74a/0xed0 [ 77.193010][ T6003] ? __schedule+0x11a3/0x5de0 [ 77.193023][ T6003] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 77.193035][ T6003] ? __pfx___schedule+0x10/0x10 [ 77.193044][ T6003] ? __pfx_try_to_wake_up+0x10/0x10 [ 77.193062][ T6003] ? up_write+0x209/0x520 [ 77.193073][ T6003] hugetlbfs_fallocate+0xf3f/0x12e0 [ 77.193089][ T6003] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 77.193107][ T6003] ? lock_acquire+0x62/0x350 [ 77.193123][ T6003] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 77.193135][ T6003] ? vfs_fallocate+0x5b1/0x10e0 [ 77.193147][ T6003] vfs_fallocate+0x5b1/0x10e0 [ 77.193159][ T6003] ? __pfx_vfs_fallocate+0x10/0x10 [ 77.193193][ T6003] ? madvise_vma_behavior+0x2b20/0x2d60 [ 77.193209][ T6003] madvise_vma_behavior+0x2ad7/0x2d60 [ 77.193225][ T6003] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 77.193239][ T6003] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 77.193266][ T6003] ? __pfx_mas_prev+0x10/0x10 [ 77.193281][ T6003] ? find_vma_prev+0xda/0x160 [ 77.193296][ T6003] ? __pfx_find_vma_prev+0x10/0x10 [ 77.193312][ T6003] ? trace_sched_exit_tp+0xd1/0x120 [ 77.193329][ T6003] madvise_walk_vmas+0x31f/0x9c0 [ 77.193344][ T6003] ? __pfx___schedule+0x10/0x10 [ 77.193355][ T6003] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 77.193372][ T6003] madvise_do_behavior+0x1e2/0x530 [ 77.193388][ T6003] ? __pfx_madvise_do_behavior+0x10/0x10 [ 77.193411][ T6003] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.193428][ T6003] do_madvise+0x176/0x240 [ 77.193443][ T6003] ? __pfx_do_madvise+0x10/0x10 [ 77.193465][ T6003] __x64_sys_madvise+0xa9/0x110 [ 77.193479][ T6003] do_syscall_64+0xcd/0x4c0 [ 77.193494][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.193506][ T6003] RIP: 0033:0x7f21a3d8ebe9 [ 77.193516][ T6003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.193526][ T6003] RSP: 002b:00007f21a4c1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 77.193538][ T6003] RAX: ffffffffffffffda RBX: 00007f21a3fc6270 RCX: 00007f21a3d8ebe9 [ 77.193544][ T6003] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 77.193551][ T6003] RBP: 00007f21a3e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 77.193557][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.193564][ T6003] R13: 00007f21a3fc6308 R14: 00007f21a3fc6270 R15: 00007fff9d5485d8 [ 77.193574][ T6003] [ 77.193577][ T6003] Modules linked in: [ 77.193585][ T6003] ---[ end trace 0000000000000000 ]--- [ 77.193591][ T6003] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 77.193610][ T6003] Code: 17 1f c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 4a 1a c9 ff 85 ed 7e 17 e8 01 1f c9 ff 48 c7 c6 40 1d b9 8b 48 89 df e8 72 cf 11 00 90 <0f> 0b e8 ea 1e c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 77.193622][ T6003] RSP: 0018:ffffc90005457310 EFLAGS: 00010083 [ 77.193631][ T6003] RAX: 0000000000012258 RBX: ffffea0001780000 RCX: ffffc900104a2000 [ 77.193638][ T6003] RDX: 0000000000080000 RSI: ffffffff81f26f3e RDI: ffff888078e7a884 [ 77.193644][ T6003] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 77.193651][ T6003] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805375c220 [ 77.193657][ T6003] R13: ffffea0001780030 R14: 0000000000000000 R15: ffffea0001780000 [ 77.193664][ T6003] FS: 00007f21a4c1e6c0(0000) GS:ffff8881247b8000(0000) knlGS:0000000000000000 [ 77.193675][ T6003] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.193682][ T6003] CR2: 0000200000112778 CR3: 000000007d3e9000 CR4: 00000000003526f0 [ 77.193690][ T6003] Kernel panic - not syncing: Fatal exception [ 77.193919][ T6003] Kernel Offset: disabled