last executing test programs: 7.575118452s ago: executing program 2 (id=3): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040004}, 0x20001) close(r1) 7.309022812s ago: executing program 2 (id=9): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg$unix(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}}], 0x1, 0x40000222, 0x0) 7.057502035s ago: executing program 2 (id=12): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, &(0x7f00000003c0)={0x0, 0x12, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x3, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 7.022521283s ago: executing program 1 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 6.080189016s ago: executing program 1 (id=17): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) sendmmsg(r2, 0x0, 0x0, 0x40044) 5.623287478s ago: executing program 4 (id=21): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x240480c3) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000100)="d5", 0x1}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.587977573s ago: executing program 3 (id=22): openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x0, 0x0, 0x0) 5.486926593s ago: executing program 0 (id=23): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x60, 0x1403, 0x800, 0x70bd27, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) 5.426969802s ago: executing program 3 (id=24): openat$rfkill(0xffffffffffffff9c, 0x0, 0x22883, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 5.383148701s ago: executing program 4 (id=25): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_ENABLE={{0xc}, 0x4}}}, 0x7) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 5.311032474s ago: executing program 0 (id=26): syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/222, 0xde}], 0x1}) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, 0x0) 5.136699797s ago: executing program 4 (id=27): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0)=0xa00, &(0x7f0000000300)}, 0x20) 4.574885608s ago: executing program 4 (id=28): socket$tipc(0x1e, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') writev(r0, &(0x7f0000000080)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000440)="2d36d5", 0x3}], 0x2) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8001, 0x5, 0x1, 0x18, "5c8d8e94923ad65c61920fcd8b01f6a3f9c0d07d0bcd82bd1f1a2e959cad11db0175435551912e9c5d170093fdb5bb597839ade1eef5213d2b0ae30e50238ae7", "8553bbc9018ac2f4e4858f8ed81c4155ea889ab9eb9ff94ff46dd356a5d5dfaa", [0x0, 0x7]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ptrace(0x10, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4.531076054s ago: executing program 3 (id=29): accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_PDEATHSIG(0x1, 0x1a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9fa52dbd7000770000001400000008000300", @ANYRES32=r3, @ANYBLOB="050029000c000000060036"], 0x2c}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) 4.219051314s ago: executing program 0 (id=30): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4020aeb2, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1}) 3.799337259s ago: executing program 1 (id=31): r0 = fanotify_init(0x4, 0x2) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x71, 0x1038, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000f000/0x3000)=nil) r7 = shmat(r6, &(0x7f0000001000/0x3000)=nil, 0x1000) shmctl$IPC_RMID(r6, 0x0) shmdt(r7) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000f000/0x3000)=nil) shmat(r8, &(0x7f0000001000/0x3000)=nil, 0x4000) 3.52502591s ago: executing program 0 (id=32): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, 0x0, 0x0) write(r2, 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000480), 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r7) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x4, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 3.499636488s ago: executing program 3 (id=33): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 3.471358433s ago: executing program 4 (id=34): openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0xdb5e, 0x10100, 0x2, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 3.405692333s ago: executing program 0 (id=35): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 3.207707266s ago: executing program 4 (id=36): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000300)=[{0x1ff, 0xe000, 0x0, 0x0}, {0x109, 0x1801, 0x0, 0x0}], 0x2}) 2.073575527s ago: executing program 1 (id=37): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_ENABLE={{0xc}, 0x4}}}, 0x7) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 1.87126385s ago: executing program 3 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$inet(0x2, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000500)=""/49, 0x31) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$kcm(0x25, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x41000, 0x56, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003a00)={0x1, 0x0, [{0x0, 0x1000, &(0x7f0000002900)=""/4096}]}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) 1.700216469s ago: executing program 1 (id=39): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x10000) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000140)) syz_open_procfs$namespace(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004c40)=""/102376, 0x18fe8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b34, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @loopback={0xffffffffffffff9d}}, r1}}, 0x48) 1.327390071s ago: executing program 0 (id=40): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e7", 0x38}], 0x1}, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.326314417s ago: executing program 3 (id=41): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "3dee3d", 0x1}}}, 0xd) 0s ago: executing program 1 (id=42): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x64, 0x0, &(0x7f0000000600)=[@register_looper, @increfs_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. [ 332.514301][ T29] audit: type=1400 audit(1771131303.368:62): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 332.538258][ T29] audit: type=1400 audit(1771131303.398:63): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 332.540956][ T5830] cgroup: Unknown subsys name 'net' [ 332.569434][ T29] audit: type=1400 audit(1771131303.428:64): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 332.710322][ T5830] cgroup: Unknown subsys name 'cpuset' [ 332.718620][ T5830] cgroup: Unknown subsys name 'rlimit' [ 332.790095][ T29] audit: type=1400 audit(1771131303.648:65): avc: denied { setattr } for pid=5830 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 332.823610][ T29] audit: type=1400 audit(1771131303.648:66): avc: denied { create } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 332.844733][ T29] audit: type=1400 audit(1771131303.648:67): avc: denied { write } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 332.869966][ T29] audit: type=1400 audit(1771131303.648:68): avc: denied { read } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 332.894793][ T29] audit: type=1400 audit(1771131303.648:69): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 332.911588][ T5832] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 332.920083][ T29] audit: type=1400 audit(1771131303.648:70): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 332.952100][ T29] audit: type=1400 audit(1771131303.788:71): avc: denied { relabelto } for pid=5832 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 333.937615][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 335.795411][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.810294][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.818555][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.826080][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.834216][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.839991][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.842046][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.853447][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.858160][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.863369][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.870060][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.877136][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.885830][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.892022][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.908151][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.964644][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.972675][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.980719][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.988758][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.996468][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.025532][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.035251][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.050914][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.067411][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.075304][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.446591][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 336.471401][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 336.483609][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 336.554633][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 336.655775][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.665590][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.672805][ T5846] bridge_slave_0: entered allmulticast mode [ 336.679586][ T5846] bridge_slave_0: entered promiscuous mode [ 336.700409][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 336.710946][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.718111][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.725319][ T5846] bridge_slave_1: entered allmulticast mode [ 336.732367][ T5846] bridge_slave_1: entered promiscuous mode [ 336.792265][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.799768][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.806968][ T5850] bridge_slave_0: entered allmulticast mode [ 336.813824][ T5850] bridge_slave_0: entered promiscuous mode [ 336.831843][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.839090][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.846218][ T5842] bridge_slave_0: entered allmulticast mode [ 336.853154][ T5842] bridge_slave_0: entered promiscuous mode [ 336.866656][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.873907][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.881070][ T5850] bridge_slave_1: entered allmulticast mode [ 336.887941][ T5850] bridge_slave_1: entered promiscuous mode [ 336.896889][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.908464][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.921954][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.929170][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.936287][ T5842] bridge_slave_1: entered allmulticast mode [ 336.943112][ T5842] bridge_slave_1: entered promiscuous mode [ 336.979813][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.986946][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.994162][ T5854] bridge_slave_0: entered allmulticast mode [ 337.001604][ T5854] bridge_slave_0: entered promiscuous mode [ 337.036770][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.043986][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.051305][ T5854] bridge_slave_1: entered allmulticast mode [ 337.058263][ T5854] bridge_slave_1: entered promiscuous mode [ 337.066449][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.077303][ T5846] team0: Port device team_slave_0 added [ 337.091814][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.103184][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.120384][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.130872][ T5846] team0: Port device team_slave_1 added [ 337.136609][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.144126][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.151324][ T5856] bridge_slave_0: entered allmulticast mode [ 337.158098][ T5856] bridge_slave_0: entered promiscuous mode [ 337.191195][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.198339][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.206148][ T5856] bridge_slave_1: entered allmulticast mode [ 337.213281][ T5856] bridge_slave_1: entered promiscuous mode [ 337.228202][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.254711][ T5850] team0: Port device team_slave_0 added [ 337.268869][ T5842] team0: Port device team_slave_0 added [ 337.275556][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.282750][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.308970][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.322476][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.339648][ T5850] team0: Port device team_slave_1 added [ 337.362487][ T5842] team0: Port device team_slave_1 added [ 337.369046][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.375982][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.402066][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.414763][ T5854] team0: Port device team_slave_0 added [ 337.428833][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.454346][ T5854] team0: Port device team_slave_1 added [ 337.468635][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.485304][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.492514][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.519106][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.531098][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.538904][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.565034][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.583485][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.590528][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.616683][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.657146][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.664221][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.690360][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.720465][ T5846] hsr_slave_0: entered promiscuous mode [ 337.726725][ T5846] hsr_slave_1: entered promiscuous mode [ 337.733563][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.740682][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.766723][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.784195][ T5856] team0: Port device team_slave_0 added [ 337.804474][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.811748][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.837834][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.863100][ T5856] team0: Port device team_slave_1 added [ 337.881923][ T5842] hsr_slave_0: entered promiscuous mode [ 337.888479][ T5842] hsr_slave_1: entered promiscuous mode [ 337.894362][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 337.900450][ T5842] Cannot create hsr debugfs directory [ 337.938316][ T5853] Bluetooth: hci0: command tx timeout [ 337.944080][ T5853] Bluetooth: hci1: command tx timeout [ 337.949354][ T5850] hsr_slave_0: entered promiscuous mode [ 337.955841][ T5850] hsr_slave_1: entered promiscuous mode [ 337.962089][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 337.967932][ T5850] Cannot create hsr debugfs directory [ 337.990133][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.997107][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.023099][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.034284][ T5853] Bluetooth: hci2: command tx timeout [ 338.035830][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.046868][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.073302][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.097752][ T5853] Bluetooth: hci4: command tx timeout [ 338.097755][ T5849] Bluetooth: hci3: command tx timeout [ 338.116742][ T5854] hsr_slave_0: entered promiscuous mode [ 338.123133][ T5854] hsr_slave_1: entered promiscuous mode [ 338.129143][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 338.134867][ T5854] Cannot create hsr debugfs directory [ 338.247365][ T5856] hsr_slave_0: entered promiscuous mode [ 338.253655][ T5856] hsr_slave_1: entered promiscuous mode [ 338.259882][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 338.265591][ T5856] Cannot create hsr debugfs directory [ 338.529213][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 338.541419][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 338.551711][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 338.569502][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 338.614483][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 338.631110][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 338.654108][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 338.665719][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 338.730855][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 338.742076][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 338.754060][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 338.765018][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 338.836243][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 338.854412][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 338.864482][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 338.874337][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 338.924471][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.958692][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 338.969464][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 338.981451][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 338.991720][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 339.009087][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.034902][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.063730][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.070938][ T5889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.091369][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.100772][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.128135][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.135210][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.144361][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.151479][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.173234][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.180326][ T5868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.207401][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.245204][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.252310][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.282271][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.289370][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.338847][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 339.338863][ T29] audit: type=1400 audit(1771131310.198:84): avc: denied { sys_module } for pid=5842 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 339.361415][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.447430][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.462439][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.501274][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.508444][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.543038][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.570659][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.577871][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.598769][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.605926][ T5868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.646187][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.653324][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.674860][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.718638][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.819262][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.902847][ T5842] veth0_vlan: entered promiscuous mode [ 339.970897][ T5842] veth1_vlan: entered promiscuous mode [ 340.009887][ T5850] veth0_vlan: entered promiscuous mode [ 340.019648][ T5853] Bluetooth: hci1: command tx timeout [ 340.021252][ T5849] Bluetooth: hci0: command tx timeout [ 340.063254][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.086148][ T5850] veth1_vlan: entered promiscuous mode [ 340.097850][ T5849] Bluetooth: hci2: command tx timeout [ 340.104148][ T5842] veth0_macvtap: entered promiscuous mode [ 340.129652][ T5842] veth1_macvtap: entered promiscuous mode [ 340.169934][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.178592][ T5849] Bluetooth: hci4: command tx timeout [ 340.179843][ T5853] Bluetooth: hci3: command tx timeout [ 340.197099][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.219031][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.229562][ T5854] veth0_vlan: entered promiscuous mode [ 340.265275][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.276634][ T5850] veth0_macvtap: entered promiscuous mode [ 340.290590][ T5854] veth1_vlan: entered promiscuous mode [ 340.300578][ T5846] veth0_vlan: entered promiscuous mode [ 340.310599][ T5856] veth0_vlan: entered promiscuous mode [ 340.321031][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.330043][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.343874][ T5850] veth1_macvtap: entered promiscuous mode [ 340.360529][ T5856] veth1_vlan: entered promiscuous mode [ 340.372487][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.383812][ T5846] veth1_vlan: entered promiscuous mode [ 340.405405][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.440934][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.454722][ T5854] veth0_macvtap: entered promiscuous mode [ 340.472915][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.506614][ T5854] veth1_macvtap: entered promiscuous mode [ 340.515291][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.524362][ T5943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.544094][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.553366][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.561243][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.571054][ T5856] veth0_macvtap: entered promiscuous mode [ 340.581897][ T5856] veth1_macvtap: entered promiscuous mode [ 340.597327][ T5846] veth0_macvtap: entered promiscuous mode [ 340.626445][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.642811][ T5846] veth1_macvtap: entered promiscuous mode [ 340.657402][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.679358][ T5943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.690966][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.700703][ T5943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.719935][ T5868] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.729941][ T5868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.747087][ T29] audit: type=1400 audit(1771131311.598:85): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.NH6hXa/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 340.768153][ T5868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.773166][ T29] audit: type=1400 audit(1771131311.598:86): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 340.802715][ T5868] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.812820][ T29] audit: type=1400 audit(1771131311.598:87): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.NH6hXa/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 340.818903][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.863717][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 340.880081][ T29] audit: type=1400 audit(1771131311.598:88): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 340.925151][ T29] audit: type=1400 audit(1771131311.598:89): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.NH6hXa/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 340.926381][ T5943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.962899][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.970877][ T29] audit: type=1400 audit(1771131311.598:90): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.NH6hXa/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 340.999717][ T5868] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.013445][ T5943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.037877][ T29] audit: type=1400 audit(1771131311.658:91): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 341.060634][ T29] audit: type=1400 audit(1771131311.668:92): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 341.085246][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 341.088170][ T29] audit: type=1400 audit(1771131311.668:93): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="gadgetfs" ino=6961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 341.116871][ T5868] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.125772][ T5868] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.146000][ T5957] veth0_macvtap: left promiscuous mode [ 341.151167][ T5958] overlayfs: overlapping lowerdir path [ 341.172183][ T5868] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.187637][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.198001][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.201232][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.232832][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.249021][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.285394][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.301075][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.335213][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.352313][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.517837][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.525769][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.557744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 341.998454][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.006981][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.022958][ T5868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.046945][ T5868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.097629][ T5853] Bluetooth: hci0: command tx timeout [ 342.103663][ T5853] Bluetooth: hci1: command tx timeout [ 342.177754][ T5849] Bluetooth: hci2: command tx timeout [ 342.229144][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.236991][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.258275][ T5849] Bluetooth: hci3: command tx timeout [ 342.261195][ T5853] Bluetooth: hci4: command tx timeout [ 342.282691][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.291875][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.668367][ T5984] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 342.683861][ T5981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11'. [ 343.008539][ T5952] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 343.118252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 343.173423][ T5952] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 343.185249][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.194929][ T5952] usb 3-1: Product: syz [ 343.200320][ T5952] usb 3-1: Manufacturer: syz [ 343.205758][ T5952] usb 3-1: SerialNumber: syz [ 343.223101][ T5952] usb 3-1: config 0 descriptor?? [ 343.235926][ T5952] hub 3-1:0.0: bad descriptor, ignoring hub [ 343.242593][ T5952] hub 3-1:0.0: probe with driver hub failed with error -5 [ 343.443188][ T5952] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 343.455415][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 343.473791][ T5952] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 343.484302][ T5952] usb 3-1: media controller created [ 343.503002][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.648625][ T5952] DVB: Unable to find symbol dib7000p_attach() [ 343.659158][ T5952] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 343.679786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 343.688461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 343.718441][ T5952] rc_core: IR keymap rc-dib0700-rc5 not found [ 343.736561][ T5952] Registered IR keymap rc-empty [ 343.744801][ T5952] dvb-usb: could not initialize remote control. [ 343.761369][ T5952] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 343.797661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 343.811410][ T6000] 0: reclassify loop, rule prio 0, protocol 800 [ 343.878754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 343.935733][ T6007] fuse: Unknown parameter 'use00000000000000000000' [ 344.097504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 344.107492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 344.131615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 344.152698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 344.180187][ T5853] Bluetooth: hci1: command tx timeout [ 344.180223][ T5849] Bluetooth: hci0: command tx timeout [ 344.258340][ T5849] Bluetooth: hci2: command tx timeout [ 344.338598][ T5849] Bluetooth: hci3: command tx timeout [ 344.338603][ T5853] Bluetooth: hci4: command tx timeout [ 344.524678][ T6019] [U]  [ 344.859335][ T6029] NILFS (loop0): device size too small [ 344.870352][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 344.870404][ T29] audit: type=1400 audit(1771131315.708:165): avc: denied { mounton } for pid=6022 comm="syz.0.26" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 345.187680][ T29] audit: type=1400 audit(1771131315.998:166): avc: denied { map_read map_write } for pid=6030 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 345.286093][ T29] audit: type=1400 audit(1771131316.138:167): avc: denied { read } for pid=6032 comm="syz.4.28" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 345.330032][ T29] audit: type=1400 audit(1771131316.138:168): avc: denied { open } for pid=6032 comm="syz.4.28" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 345.614255][ T29] audit: type=1400 audit(1771131316.278:169): avc: denied { create } for pid=6032 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 346.142328][ T29] audit: type=1400 audit(1771131316.278:170): avc: denied { write } for pid=6032 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 346.162900][ T29] audit: type=1400 audit(1771131316.388:171): avc: denied { create } for pid=6034 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 346.188829][ T29] audit: type=1400 audit(1771131316.618:172): avc: denied { ioctl } for pid=6034 comm="syz.3.29" path="socket:[9478]" dev="sockfs" ino=9478 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 346.311713][ T29] audit: type=1400 audit(1771131317.148:173): avc: denied { node_bind } for pid=6045 comm="syz.0.32" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 346.510043][ T29] audit: type=1400 audit(1771131317.368:174): avc: denied { create } for pid=6049 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 347.985854][ T6060] [U]  [ 349.747867][ T6061] ------------[ cut here ]------------ [ 349.753560][ T6061] usb 3-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 349.762138][ T6061] WARNING: drivers/usb/core/urb.c:412 at usb_submit_urb+0x1573/0x1910, CPU#0: syz.4.36/6061 [ 349.772652][ T6061] Modules linked in: [ 349.776647][ T6061] CPU: 0 UID: 0 PID: 6061 Comm: syz.4.36 Not tainted syzkaller #0 PREEMPT(full) [ 349.786395][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.796879][ T6061] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 349.803934][ T6061] Code: d2 74 5d 48 89 54 24 40 e8 0f 96 b9 fa 4c 89 ef e8 d7 be de fe 48 89 c6 48 8d 3d 9d de 96 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 e3 95 b9 fa 89 ee bf ff 00 00 00 [ 349.823922][ T6061] RSP: 0018:ffffc900049ef968 EFLAGS: 00010283 [ 349.830671][ T6061] RAX: ffffffff8c8094a0 RBX: ffff88807ddeac00 RCX: 0000000080000280 [ 349.839199][ T6061] RDX: ffff88802d1c9460 RSI: ffffffff8c8094a0 RDI: ffffffff90e5e160 [ 349.847191][ T6061] RBP: ffff888079075058 R08: 00000000000000c0 R09: 0000000000000000 [ 349.856181][ T6061] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888033564540 [ 349.864266][ T6061] R13: ffff8880790750b0 R14: 0000000080000280 R15: 00000000000000c0 [ 349.873115][ T6061] FS: 00007f47d4ff66c0(0000) GS:ffff888124352000(0000) knlGS:0000000000000000 [ 349.882709][ T6061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.888707][ T42] usb 3-1: USB disconnect, device number 2 [ 349.889375][ T6061] CR2: 00007effb67e4e30 CR3: 000000007dfab000 CR4: 00000000003526f0 [ 349.897724][ T5853] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 349.903277][ T6061] Call Trace: [ 349.913804][ T6061] [ 349.916745][ T6061] ? __init_swait_queue_head+0xca/0x150 [ 349.922647][ T6061] usb_start_wait_urb+0x106/0x4c0 [ 349.927747][ T6061] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 349.933339][ T6061] ? __asan_memset+0x23/0x50 [ 349.937998][ T6061] usb_control_msg+0x326/0x4a0 [ 349.942791][ T6061] ? __pfx_usb_control_msg+0x10/0x10 [ 349.948168][ T6061] dib0700_ctrl_rd+0x1b5/0x320 [ 349.952927][ T6061] dib0700_i2c_xfer+0x460/0xd90 [ 349.957791][ T6061] __i2c_transfer+0x5d9/0x17f0 [ 349.962551][ T6061] ? __pfx___i2c_transfer+0x10/0x10 [ 349.967803][ T6061] i2c_transfer+0x15f/0x380 [ 349.973280][ T6061] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 349.978968][ T6061] i2cdev_ioctl+0x19d/0x830 [ 349.983532][ T6061] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 349.988626][ T6061] ? selinux_file_ioctl+0x139/0x290 [ 349.993854][ T6061] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 349.998964][ T6061] __x64_sys_ioctl+0x18e/0x210 [ 350.003741][ T6061] do_syscall_64+0x106/0xf80 [ 350.008477][ T6061] ? clear_bhb_loop+0x40/0x90 [ 350.013179][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.019129][ T6061] RIP: 0033:0x7f47d6d9bf79 [ 350.023582][ T6061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.043242][ T6061] RSP: 002b:00007f47d4ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.051674][ T6061] RAX: ffffffffffffffda RBX: 00007f47d7015fa0 RCX: 00007f47d6d9bf79 [ 350.060115][ T6061] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000003 [ 350.068149][ T6061] RBP: 00007f47d6e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 350.076952][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.085599][ T6061] R13: 00007f47d7016038 R14: 00007f47d7015fa0 R15: 00007ffdb39a8778 [ 350.093717][ T6061] [ 350.096757][ T6061] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 350.104058][ T6061] CPU: 0 UID: 0 PID: 6061 Comm: syz.4.36 Not tainted syzkaller #0 PREEMPT(full) [ 350.113191][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 350.123266][ T6061] Call Trace: [ 350.126553][ T6061] [ 350.129486][ T6061] dump_stack_lvl+0x100/0x190 [ 350.134190][ T6061] vpanic+0x552/0x970 [ 350.138189][ T6061] ? __pfx_vpanic+0x10/0x10 [ 350.142715][ T6061] panic+0xd1/0xe0 [ 350.146460][ T6061] ? __pfx_panic+0x10/0x10 [ 350.150902][ T6061] check_panic_on_warn.cold+0x19/0x34 [ 350.156379][ T6061] ? usb_submit_urb+0x1573/0x1910 [ 350.161458][ T6061] __warn.cold+0x191/0x348 [ 350.165891][ T6061] __report_bug+0x296/0x3d0 [ 350.170403][ T6061] ? usb_submit_urb+0x1573/0x1910 [ 350.175436][ T6061] ? __pfx___report_bug+0x10/0x10 [ 350.180452][ T6061] ? mark_held_locks+0x40/0x70 [ 350.185219][ T6061] ? stack_depot_save_flags+0x479/0x9d0 [ 350.190756][ T6061] report_bug_entry+0xe1/0x290 [ 350.195512][ T6061] ? usb_submit_urb+0x157e/0x1910 [ 350.200522][ T6061] handle_bug+0x1c9/0x2a0 [ 350.204926][ T6061] exc_invalid_op+0x17/0x50 [ 350.209417][ T6061] asm_exc_invalid_op+0x1a/0x20 [ 350.214252][ T6061] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 350.219869][ T6061] Code: d2 74 5d 48 89 54 24 40 e8 0f 96 b9 fa 4c 89 ef e8 d7 be de fe 48 89 c6 48 8d 3d 9d de 96 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 e3 95 b9 fa 89 ee bf ff 00 00 00 [ 350.239462][ T6061] RSP: 0018:ffffc900049ef968 EFLAGS: 00010283 [ 350.245544][ T6061] RAX: ffffffff8c8094a0 RBX: ffff88807ddeac00 RCX: 0000000080000280 [ 350.253499][ T6061] RDX: ffff88802d1c9460 RSI: ffffffff8c8094a0 RDI: ffffffff90e5e160 [ 350.261455][ T6061] RBP: ffff888079075058 R08: 00000000000000c0 R09: 0000000000000000 [ 350.269426][ T6061] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888033564540 [ 350.277379][ T6061] R13: ffff8880790750b0 R14: 0000000080000280 R15: 00000000000000c0 [ 350.285346][ T6061] ? usb_submit_urb+0x1569/0x1910 [ 350.290363][ T6061] ? __init_swait_queue_head+0xca/0x150 [ 350.295900][ T6061] usb_start_wait_urb+0x106/0x4c0 [ 350.300922][ T6061] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 350.306461][ T6061] ? __asan_memset+0x23/0x50 [ 350.311056][ T6061] usb_control_msg+0x326/0x4a0 [ 350.315807][ T6061] ? __pfx_usb_control_msg+0x10/0x10 [ 350.321083][ T6061] dib0700_ctrl_rd+0x1b5/0x320 [ 350.325840][ T6061] dib0700_i2c_xfer+0x460/0xd90 [ 350.330683][ T6061] __i2c_transfer+0x5d9/0x17f0 [ 350.335443][ T6061] ? __pfx___i2c_transfer+0x10/0x10 [ 350.340633][ T6061] i2c_transfer+0x15f/0x380 [ 350.345126][ T6061] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 350.350054][ T6061] i2cdev_ioctl+0x19d/0x830 [ 350.354546][ T6061] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 350.359560][ T6061] ? selinux_file_ioctl+0x139/0x290 [ 350.364750][ T6061] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 350.369766][ T6061] __x64_sys_ioctl+0x18e/0x210 [ 350.374528][ T6061] do_syscall_64+0x106/0xf80 [ 350.379103][ T6061] ? clear_bhb_loop+0x40/0x90 [ 350.383764][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.389646][ T6061] RIP: 0033:0x7f47d6d9bf79 [ 350.394040][ T6061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.413627][ T6061] RSP: 002b:00007f47d4ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.422033][ T6061] RAX: ffffffffffffffda RBX: 00007f47d7015fa0 RCX: 00007f47d6d9bf79 [ 350.429985][ T6061] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000003 [ 350.437941][ T6061] RBP: 00007f47d6e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 350.445891][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.453944][ T6061] R13: 00007f47d7016038 R14: 00007f47d7015fa0 R15: 00007ffdb39a8778 [ 350.462014][ T6061] [ 350.465381][ T6061] Kernel Offset: disabled [ 350.469718][ T6061] Rebooting in 86400 seconds..