Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. 2026/03/24 20:05:33 parsed 1 programs [ 105.216968][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 105.216984][ T30] audit: type=1400 audit(1774382735.380:105): avc: denied { unlink } for pid=6214 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 106.555604][ T6214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.272082][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.285500][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.523051][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.530887][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.768412][ T6249] chnl_net:caif_netlink_parms(): no params data found [ 110.188080][ T30] audit: type=1400 audit(1774382740.350:106): avc: denied { read write } for pid=6277 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 110.213951][ T30] audit: type=1400 audit(1774382740.370:107): avc: denied { open } for pid=6277 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 110.247281][ T5895] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.260768][ T5895] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.269190][ T5895] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.287664][ T5895] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.295982][ T5895] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.398032][ T30] audit: type=1400 audit(1774382740.560:108): avc: denied { unmount } for pid=6272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 110.506415][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.515058][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.522253][ T6249] bridge_slave_0: entered allmulticast mode [ 110.541775][ T6249] bridge_slave_0: entered promiscuous mode [ 110.590091][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.609117][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.616808][ T6249] bridge_slave_1: entered allmulticast mode [ 110.628003][ T6249] bridge_slave_1: entered promiscuous mode [ 110.704241][ T30] audit: type=1401 audit(1774382740.850:109): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 110.875873][ T6249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.892685][ T6249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.932498][ T6249] team0: Port device team_slave_0 added [ 110.946039][ T6249] team0: Port device team_slave_1 added [ 111.208587][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.215578][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.242006][ T6249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.297060][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.304716][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.336878][ T6249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.534266][ T6249] hsr_slave_0: entered promiscuous mode [ 111.540965][ T6249] hsr_slave_1: entered promiscuous mode [ 112.362375][ T6249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.378285][ T6249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.395944][ T6249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.406567][ T6249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.512732][ T6249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.533705][ T6249] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.548170][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.555287][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.573774][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.580898][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.816850][ T6249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.860953][ T6249] veth0_vlan: entered promiscuous mode [ 112.879799][ T6249] veth1_vlan: entered promiscuous mode [ 112.918866][ T6249] veth0_macvtap: entered promiscuous mode [ 112.932585][ T6249] veth1_macvtap: entered promiscuous mode [ 112.954577][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.971604][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.991543][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.007079][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.028892][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.052648][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/03/24 20:05:43 executed programs: 0 [ 113.233003][ T5895] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.248579][ T6363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.256866][ T6363] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.272497][ T6363] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.280818][ T5895] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.289240][ T6363] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.298745][ T6363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.299351][ T5895] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.306955][ T6363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.320248][ T5895] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.327572][ T5895] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.343467][ T5895] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.348874][ T6363] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.353997][ T5895] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.357953][ T6363] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.438646][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.506641][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.523246][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.532577][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.546997][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.555002][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.624678][ T6363] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.633427][ T6363] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.641182][ T6363] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.649514][ T6363] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.656998][ T6363] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.770820][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.941526][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.072490][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.540732][ T6365] chnl_net:caif_netlink_parms(): no params data found [ 114.739064][ T6359] chnl_net:caif_netlink_parms(): no params data found [ 114.789575][ T6373] chnl_net:caif_netlink_parms(): no params data found [ 114.858916][ T6361] chnl_net:caif_netlink_parms(): no params data found [ 114.964686][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.971795][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.982551][ T6365] bridge_slave_0: entered allmulticast mode [ 114.991028][ T6365] bridge_slave_0: entered promiscuous mode [ 115.055826][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.063332][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.070522][ T6365] bridge_slave_1: entered allmulticast mode [ 115.078716][ T6365] bridge_slave_1: entered promiscuous mode [ 115.187430][ T6377] chnl_net:caif_netlink_parms(): no params data found [ 115.236239][ T6365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.315770][ T6365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.343602][ T6363] Bluetooth: hci0: command tx timeout [ 115.378824][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.387345][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.394925][ T6373] bridge_slave_0: entered allmulticast mode [ 115.402783][ T6373] bridge_slave_0: entered promiscuous mode [ 115.411780][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.420556][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.428389][ T51] Bluetooth: hci2: command tx timeout [ 115.434965][ T6363] Bluetooth: hci1: command tx timeout [ 115.440964][ T6373] bridge_slave_1: entered allmulticast mode [ 115.449401][ T6373] bridge_slave_1: entered promiscuous mode [ 115.506333][ T6365] team0: Port device team_slave_0 added [ 115.519826][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.528641][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.537399][ T6359] bridge_slave_0: entered allmulticast mode [ 115.545388][ T6359] bridge_slave_0: entered promiscuous mode [ 115.554876][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.561997][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.574353][ T6359] bridge_slave_1: entered allmulticast mode [ 115.581821][ T6359] bridge_slave_1: entered promiscuous mode [ 115.650940][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.658586][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.665730][ T6363] Bluetooth: hci3: command tx timeout [ 115.671695][ T6361] bridge_slave_0: entered allmulticast mode [ 115.679506][ T6361] bridge_slave_0: entered promiscuous mode [ 115.708195][ T6365] team0: Port device team_slave_1 added [ 115.737356][ T6373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.747066][ T6363] Bluetooth: hci4: command tx timeout [ 115.756784][ T6373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.766055][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.773369][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.780515][ T6361] bridge_slave_1: entered allmulticast mode [ 115.787597][ T6361] bridge_slave_1: entered promiscuous mode [ 115.839094][ T68] bridge_slave_1: left allmulticast mode [ 115.844935][ T68] bridge_slave_1: left promiscuous mode [ 115.850594][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.859557][ T68] bridge_slave_0: left allmulticast mode [ 115.865557][ T68] bridge_slave_0: left promiscuous mode [ 115.871324][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.968794][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.978747][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.988409][ T68] bond0 (unregistering): Released all slaves [ 116.006737][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.016082][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.046357][ T6365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.073664][ T6359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.106749][ T6373] team0: Port device team_slave_0 added [ 116.115464][ T6361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.130110][ T68] hsr_slave_0: left promiscuous mode [ 116.137097][ T68] hsr_slave_1: left promiscuous mode [ 116.144324][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.151760][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.160894][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.169145][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.181818][ T68] veth1_macvtap: left promiscuous mode [ 116.188278][ T68] veth0_macvtap: left promiscuous mode [ 116.194007][ T68] veth1_vlan: left promiscuous mode [ 116.199306][ T68] veth0_vlan: left promiscuous mode [ 116.421071][ T68] team0 (unregistering): Port device team_slave_1 removed [ 116.436763][ T68] team0 (unregistering): Port device team_slave_0 removed [ 116.564490][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.571471][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.600360][ T6365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.641733][ T6359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.702396][ T6373] team0: Port device team_slave_1 added [ 116.727868][ T6361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.807571][ T6359] team0: Port device team_slave_0 added [ 116.842713][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.851392][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.877805][ T6373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.891199][ T6361] team0: Port device team_slave_0 added [ 116.901330][ T6361] team0: Port device team_slave_1 added [ 116.932425][ T6365] hsr_slave_0: entered promiscuous mode [ 116.944066][ T6365] hsr_slave_1: entered promiscuous mode [ 116.952556][ T6359] team0: Port device team_slave_1 added [ 116.972278][ T6377] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.979899][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.988023][ T6377] bridge_slave_0: entered allmulticast mode [ 116.995771][ T6377] bridge_slave_0: entered promiscuous mode [ 117.003969][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.010907][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.038934][ T6373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.098243][ T6377] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.108016][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.121436][ T6377] bridge_slave_1: entered allmulticast mode [ 117.130264][ T6377] bridge_slave_1: entered promiscuous mode [ 117.190087][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.197933][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.225018][ T6359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.282787][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.292896][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.320039][ T6361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.331875][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.339996][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.367056][ T6359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.383743][ T6373] hsr_slave_0: entered promiscuous mode [ 117.390234][ T6373] hsr_slave_1: entered promiscuous mode [ 117.396491][ T6373] debugfs: 'hsr0' already exists in 'hsr' [ 117.402193][ T6373] Cannot create hsr debugfs directory [ 117.420465][ T6377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.430723][ T6363] Bluetooth: hci0: command tx timeout [ 117.440631][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.448212][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.474101][ T6361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.503751][ T6363] Bluetooth: hci1: command tx timeout [ 117.503756][ T51] Bluetooth: hci2: command tx timeout [ 117.527417][ T6377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.567868][ T6359] hsr_slave_0: entered promiscuous mode [ 117.575405][ T6359] hsr_slave_1: entered promiscuous mode [ 117.581365][ T6359] debugfs: 'hsr0' already exists in 'hsr' [ 117.596135][ T6359] Cannot create hsr debugfs directory [ 117.730130][ T6361] hsr_slave_0: entered promiscuous mode [ 117.737045][ T6361] hsr_slave_1: entered promiscuous mode [ 117.743086][ T6363] Bluetooth: hci3: command tx timeout [ 117.743950][ T6361] debugfs: 'hsr0' already exists in 'hsr' [ 117.755693][ T6361] Cannot create hsr debugfs directory [ 117.775702][ T6377] team0: Port device team_slave_0 added [ 117.784833][ T6377] team0: Port device team_slave_1 added [ 117.827148][ T6363] Bluetooth: hci4: command tx timeout [ 118.106579][ T6377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.115577][ T6377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.142611][ T6377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.165057][ T6377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.172017][ T6377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.203368][ T6377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.489221][ T6377] hsr_slave_0: entered promiscuous mode [ 118.500559][ T6377] hsr_slave_1: entered promiscuous mode [ 118.507247][ T6377] debugfs: 'hsr0' already exists in 'hsr' [ 118.513258][ T6377] Cannot create hsr debugfs directory [ 118.916953][ T6365] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.931545][ T6365] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.947209][ T6365] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.957756][ T6365] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.080272][ T6365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.120316][ T6365] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.141644][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.148843][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.186432][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.193597][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.368165][ T6359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.396170][ T6359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.419875][ T6359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.443975][ T6359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.462335][ T6361] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.503818][ T6363] Bluetooth: hci0: command tx timeout [ 119.545221][ T6361] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.555530][ T6361] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.565452][ T6361] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.586680][ T6363] Bluetooth: hci2: command tx timeout [ 119.586684][ T51] Bluetooth: hci1: command tx timeout [ 119.627219][ T6365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.676370][ T6377] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.687285][ T6377] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.700841][ T6377] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.710872][ T6377] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.823463][ T51] Bluetooth: hci3: command tx timeout [ 119.871581][ T6373] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.887104][ T6373] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.903996][ T51] Bluetooth: hci4: command tx timeout [ 119.921349][ T6365] veth0_vlan: entered promiscuous mode [ 119.929777][ T6373] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.961768][ T6361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.977311][ T6373] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.049994][ T6361] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.078360][ T6365] veth1_vlan: entered promiscuous mode [ 120.107791][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.114953][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.127448][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.134698][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.176156][ T6359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.286567][ T6359] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.322404][ T6365] veth0_macvtap: entered promiscuous mode [ 120.369362][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.376532][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.388721][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.395889][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.425307][ T6377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.447696][ T6365] veth1_macvtap: entered promiscuous mode [ 120.527778][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.548839][ T6377] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.580419][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.600187][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.607369][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.655643][ T1309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.686968][ T6373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.702025][ T1309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.724274][ T1309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.767449][ T1309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.782601][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.789761][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.849503][ T6373] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.904784][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.911893][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.966310][ T6361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.001503][ T6359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.020398][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.027568][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.070885][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.093631][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.243818][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.251675][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.297730][ T6361] veth0_vlan: entered promiscuous mode [ 121.311475][ T6373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.329227][ T6359] veth0_vlan: entered promiscuous mode [ 121.351960][ T6361] veth1_vlan: entered promiscuous mode 2026/03/24 20:05:51 executed programs: 10 [ 121.440913][ T6377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.450519][ T6359] veth1_vlan: entered promiscuous mode [ 121.496393][ T6361] veth0_macvtap: entered promiscuous mode [ 121.563170][ T30] audit: type=1400 audit(1774382751.720:110): avc: denied { read write } for pid=6639 comm="syz.2.19" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.584799][ T51] Bluetooth: hci0: command tx timeout [ 121.590748][ T6361] veth1_macvtap: entered promiscuous mode [ 121.599067][ T30] audit: type=1400 audit(1774382751.720:111): avc: denied { open } for pid=6639 comm="syz.2.19" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.626359][ T30] audit: type=1400 audit(1774382751.720:112): avc: denied { map } for pid=6639 comm="syz.2.19" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.659855][ T6359] veth0_macvtap: entered promiscuous mode [ 121.668768][ T30] audit: type=1400 audit(1774382751.830:113): avc: denied { map_create } for pid=6639 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 121.669564][ T51] Bluetooth: hci2: command tx timeout [ 121.703100][ T6363] Bluetooth: hci1: command tx timeout [ 121.703218][ T30] audit: type=1400 audit(1774382751.830:114): avc: denied { ioctl } for pid=6639 comm="syz.2.19" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.768981][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.811244][ T6359] veth1_macvtap: entered promiscuous mode [ 121.842653][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.897826][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.914153][ T51] Bluetooth: hci3: command tx timeout [ 121.933968][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.979675][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.003879][ T51] Bluetooth: hci4: command tx timeout [ 122.023041][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.141769][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.232261][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.308568][ T6373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.352179][ T4253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.362076][ T4253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.411944][ T4253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.422896][ T4253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.465148][ T4253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.489332][ T4253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.676063][ T4253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.685313][ T4253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.726603][ T736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.747100][ T736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.782083][ T6377] veth0_vlan: entered promiscuous mode [ 122.864187][ T6373] veth0_vlan: entered promiscuous mode [ 122.877761][ T6377] veth1_vlan: entered promiscuous mode [ 122.898383][ T4253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.924385][ T4253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.925591][ T6373] veth1_vlan: entered promiscuous mode [ 122.987546][ T6377] veth0_macvtap: entered promiscuous mode [ 123.022235][ T6377] veth1_macvtap: entered promiscuous mode [ 123.074709][ T6377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.092186][ T6373] veth0_macvtap: entered promiscuous mode [ 123.127084][ T6377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.167802][ T6373] veth1_macvtap: entered promiscuous mode [ 123.238009][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.254379][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.269727][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.285771][ T4253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.302328][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.311685][ T4253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.330106][ T6671] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888050bbdbd0 pfn:0x50bbd [ 123.331277][ T6680] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807b6d4980 pfn:0x55a59 [ 123.341338][ T6671] memcg:ffff88801c690000 [ 123.373442][ T6671] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 123.381048][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.381616][ T6671] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 123.401564][ T736] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.410794][ T6671] raw: ffff888050bbdbd0 0000000000000000 00000001ffffffff ffff88801c690000 [ 123.421339][ T6671] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 123.432756][ T6671] page_owner tracks the page as allocated [ 123.443043][ T6671] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6671, tgid 6670 (syz.1.18), ts 123330076181, free_ts 123322312729 [ 123.445737][ T736] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.464563][ T6671] post_alloc_hook+0x153/0x170 [ 123.477196][ T6671] get_page_from_freelist+0x111d/0x3140 [ 123.483624][ T30] audit: type=1400 audit(1774382753.640:115): avc: denied { read } for pid=5158 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 123.507008][ T6671] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 123.512931][ T6671] alloc_pages_mpol+0x1fb/0x550 [ 123.513343][ T30] audit: type=1400 audit(1774382753.640:116): avc: denied { search } for pid=5158 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.541124][ T30] audit: type=1400 audit(1774382753.640:117): avc: denied { search } for pid=5158 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.553064][ T6679] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88804ff6e640 pfn:0x4ff6e [ 123.564749][ T30] audit: type=1400 audit(1774382753.640:118): avc: denied { add_name } for pid=5158 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.595712][ T30] audit: type=1400 audit(1774382753.650:119): avc: denied { create } for pid=5158 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.627201][ T6680] memcg:ffff88801c690d40 [ 123.630774][ T6671] folio_alloc_noprof+0x22/0x330 [ 123.631459][ T6680] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 123.644475][ T736] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.654112][ T6680] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 123.654554][ T6679] memcg:ffff88801c690d40 [ 123.662812][ T6680] raw: ffff88807b6d4980 0000000000000000 00000001ffffffff ffff88801c690d40 [ 123.677401][ T6680] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 123.678087][ T6671] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 123.688690][ T6680] page_owner tracks the page as allocated [ 123.706704][ T6671] filemap_alloc_folio_noprof+0x5e/0x80 [ 123.713139][ T6671] page_cache_ra_order+0x54b/0xf30 [ 123.713806][ T6680] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6680, tgid 6679 (syz.0.17), ts 123331257322, free_ts 123322511487 [ 123.718759][ T6671] filemap_fault+0x191a/0x2eb0 [ 123.749261][ T6679] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 123.757319][ T6671] __do_fault+0x10d/0x550 [ 123.761952][ T6679] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 123.771028][ T6671] do_fault+0x2db/0x1990 [ 123.775600][ T6671] __handle_mm_fault+0x180f/0x2b60 [ 123.780731][ T6671] handle_mm_fault+0x36d/0xa20 [ 123.786129][ T6671] __get_user_pages+0xf9c/0x34d0 [ 123.787746][ T6679] raw: ffff88804ff6e640 0000000000000000 00000001ffffffff ffff88801c690d40 [ 123.791350][ T6671] faultin_page_range+0x1f1/0x9e0 [ 123.805454][ T6671] madvise_do_behavior+0x354/0x510 [ 123.810726][ T6671] page last free pid 5165 tgid 5165 stack trace: [ 123.817182][ T6671] __free_frozen_pages+0x7e1/0x10d0 [ 123.822390][ T6671] qlist_free_all+0x47/0xe0 [ 123.827710][ T6680] post_alloc_hook+0x153/0x170 [ 123.827738][ T6680] get_page_from_freelist+0x111d/0x3140 [ 123.827762][ T6680] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 123.839982][ T6671] kasan_quarantine_reduce+0x1a0/0x1f0 [ 123.849867][ T6671] __kasan_slab_alloc+0x69/0x90 [ 123.854859][ T6671] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 123.860768][ T6671] __alloc_skb+0x140/0x710 [ 123.865336][ T6671] alloc_skb_with_frags+0xe0/0x810 [ 123.870443][ T6671] sock_alloc_send_pskb+0x801/0x980 [ 123.875783][ T6671] unix_dgram_sendmsg+0x3c7/0x1820 [ 123.880904][ T6671] __sys_sendto+0x468/0x4b0 [ 123.885476][ T6671] __x64_sys_sendto+0xe0/0x1c0 [ 123.890257][ T6671] do_syscall_64+0x106/0xf80 [ 123.895233][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.901315][ T6671] ------------[ cut here ]------------ [ 123.907455][ T6671] kernel BUG at mm/filemap.c:858! [ 123.913121][ T6671] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 123.919447][ T6679] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 123.919550][ T6671] CPU: 1 UID: 0 PID: 6671 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 123.938820][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.948867][ T6671] RIP: 0010:__filemap_add_folio+0xfcf/0x1280 [ 123.953012][ T6680] alloc_pages_mpol+0x1fb/0x550 [ 123.954853][ T6671] Code: 33 c5 ff 48 c7 c6 e0 16 ba 8b 4c 89 ef e8 e9 3f 12 00 90 0f 0b e8 e1 33 c5 ff 48 c7 c6 40 17 ba 8b 4c 89 ef e8 d2 3f 12 00 90 <0f> 0b e8 ca 33 c5 ff 90 0f 0b 90 e9 4b fe ff ff e8 bc 33 c5 ff 90 [ 123.959683][ T6680] folio_alloc_noprof+0x22/0x330 [ 123.979283][ T6671] RSP: 0018:ffffc900037c7428 EFLAGS: 00010293 [ 123.979319][ T6671] RAX: 0000000000000000 RBX: 0000000000112cc0 RCX: 0000000000000000 [ 123.979331][ T6671] RDX: ffff888031ce24c0 RSI: ffffffff82558dc8 RDI: ffff888031ce2984 [ 123.979343][ T6671] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 123.979354][ T6671] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 123.979364][ T6671] R13: ffffea000142ef40 R14: 0000000000000000 R15: 1ffff920006f8eaf [ 123.979377][ T6671] FS: 00007efde0ba96c0(0000) GS:ffff888124728000(0000) knlGS:0000000000000000 [ 124.038935][ T6671] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.045508][ T6671] CR2: 00007f155571a286 CR3: 000000006b1d7000 CR4: 00000000003526f0 [ 124.053465][ T6671] Call Trace: [ 124.056726][ T6671] [ 124.059641][ T6671] ? __pfx___filemap_add_folio+0x10/0x10 [ 124.065283][ T6671] filemap_add_folio+0x1d8/0x690 [ 124.070219][ T6671] ? __lock_acquire+0x4a5/0x2630 [ 124.075165][ T6671] ? __pfx_filemap_add_folio+0x10/0x10 [ 124.080617][ T6671] ? css_rstat_updated+0x1ce/0x5a0 [ 124.085752][ T6671] page_cache_ra_order+0x614/0xf30 [ 124.090875][ T6671] filemap_fault+0x191a/0x2eb0 [ 124.095637][ T6671] ? block_dirty_folio+0x14c/0x200 [ 124.100749][ T6671] ? __pfx_filemap_fault+0x10/0x10 [ 124.105864][ T6671] ? __pfx_filemap_map_pages+0x10/0x10 [ 124.111313][ T6671] __do_fault+0x10d/0x550 [ 124.115634][ T6671] ? __pfx_filemap_map_pages+0x10/0x10 [ 124.121081][ T6671] do_fault+0x2db/0x1990 [ 124.125330][ T6671] __handle_mm_fault+0x180f/0x2b60 [ 124.130441][ T6671] ? __pfx___handle_mm_fault+0x10/0x10 [ 124.135895][ T6671] ? pte_offset_map_lock+0x174/0x320 [ 124.141180][ T6671] ? find_held_lock+0x2b/0x80 [ 124.145854][ T6671] ? follow_page_pte+0x5b3/0x1400 [ 124.150890][ T6671] handle_mm_fault+0x36d/0xa20 [ 124.155749][ T6671] __get_user_pages+0xf9c/0x34d0 [ 124.160710][ T6671] ? down_read_killable+0x30e/0x4c0 [ 124.166008][ T6671] ? __pfx___get_user_pages+0x10/0x10 [ 124.171390][ T6671] faultin_page_range+0x1f1/0x9e0 [ 124.176425][ T6671] madvise_do_behavior+0x354/0x510 [ 124.181545][ T6671] ? __pfx_madvise_do_behavior+0x10/0x10 [ 124.187195][ T6671] do_madvise+0x195/0x240 [ 124.191526][ T6671] ? __pfx_do_madvise+0x10/0x10 [ 124.196369][ T6671] ? do_futex+0x192/0x350 [ 124.200696][ T6671] ? fput+0x79/0x100 [ 124.204579][ T6671] __x64_sys_madvise+0xa9/0x110 [ 124.209425][ T6671] ? lockdep_hardirqs_on+0x78/0x100 [ 124.214607][ T6671] do_syscall_64+0x106/0xf80 [ 124.219190][ T6671] ? clear_bhb_loop+0x40/0x90 [ 124.223855][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.229752][ T6671] RIP: 0033:0x7efddfd9aef9 [ 124.234161][ T6671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.253754][ T6671] RSP: 002b:00007efde0ba9028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 124.262156][ T6671] RAX: ffffffffffffffda RBX: 00007efde0005fa0 RCX: 00007efddfd9aef9 [ 124.270108][ T6671] RDX: 0000000000000017 RSI: 0000000000c00000 RDI: 0000200000000000 [ 124.278062][ T6671] RBP: 00007efddfe2fee0 R08: 0000000000000000 R09: 0000000000000000 [ 124.286014][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.293972][ T6671] R13: 00007efde0006038 R14: 00007efde0005fa0 R15: 00007ffccbb43488 [ 124.301931][ T6671] [ 124.304934][ T6671] Modules linked in: [ 124.312202][ T6671] ---[ end trace 0000000000000000 ]--- [ 124.328213][ T6671] RIP: 0010:__filemap_add_folio+0xfcf/0x1280 [ 124.334361][ T6680] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 124.341229][ T6680] filemap_alloc_folio_noprof+0x5e/0x80 [ 124.344289][ T6679] page_owner tracks the page as allocated [ 124.357313][ T6679] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6679, tgid 6679 (syz.0.17), ts 123553024403, free_ts 123549501779 [ 124.370814][ T6680] page_cache_ra_order+0x54b/0xf30 [ 124.391663][ T6680] filemap_fault+0x191a/0x2eb0 [ 124.396592][ T6671] Code: 33 c5 ff 48 c7 c6 e0 16 ba 8b 4c 89 ef e8 e9 3f 12 00 90 0f 0b e8 e1 33 c5 ff 48 c7 c6 40 17 ba 8b 4c 89 ef e8 d2 3f 12 00 90 <0f> 0b e8 ca 33 c5 ff 90 0f 0b 90 e9 4b fe ff ff e8 bc 33 c5 ff 90 [ 124.423037][ T6679] post_alloc_hook+0x153/0x170 [ 124.427833][ T6679] get_page_from_freelist+0x111d/0x3140 [ 124.443797][ T6680] __do_fault+0x10d/0x550 [ 124.448159][ T6680] do_fault+0x2db/0x1990 [ 124.454777][ T6680] __handle_mm_fault+0x180f/0x2b60 [ 124.459915][ T6680] handle_mm_fault+0x36d/0xa20 [ 124.465119][ T6671] RSP: 0018:ffffc900037c7428 EFLAGS: 00010293 [ 124.473113][ T6671] RAX: 0000000000000000 RBX: 0000000000112cc0 RCX: 0000000000000000 [ 124.493040][ T6679] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 124.498710][ T6671] RDX: ffff888031ce24c0 RSI: ffffffff82558dc8 RDI: ffff888031ce2984 [ 124.503206][ T6679] alloc_pages_mpol+0x1fb/0x550 [ 124.513023][ T6680] __get_user_pages+0xf9c/0x34d0 [ 124.517988][ T6680] faultin_page_range+0x1f1/0x9e0 [ 124.530712][ T6671] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 124.533015][ T6679] folio_alloc_noprof+0x22/0x330 [ 124.538835][ T6671] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 124.571484][ T6680] madvise_do_behavior+0x354/0x510 [ 124.576771][ T6671] R13: ffffea000142ef40 R14: 0000000000000000 R15: 1ffff920006f8eaf [ 124.584601][ T6679] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 124.584826][ T6680] page last free pid 6665 tgid 6665 stack trace: [ 124.591040][ T6679] filemap_alloc_folio_noprof+0x5e/0x80 [ 124.597415][ T6671] FS: 00007efde0ba96c0(0000) GS:ffff888124628000(0000) knlGS:0000000000000000 [ 124.597438][ T6671] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.619573][ T6671] CR2: 00007f577493d9e8 CR3: 000000006b1d7000 CR4: 00000000003526f0 [ 124.628491][ T6680] __free_frozen_pages+0x7e1/0x10d0 [ 124.633809][ T6671] Kernel panic - not syncing: Fatal exception [ 124.640164][ T6671] Kernel Offset: disabled [ 124.644464][ T6671] Rebooting in 86400 seconds..