last executing test programs: 12.992972182s ago: executing program 0 (id=91): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda0c, 0x20, 0x9, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x1c9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 12.931675463s ago: executing program 4 (id=92): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 12.639925646s ago: executing program 3 (id=93): socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{0x4}, 0xb1}}}, 0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 11.923944588s ago: executing program 0 (id=94): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 11.845541098s ago: executing program 4 (id=95): r0 = semget$private(0x0, 0x7, 0x191) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000009f40)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000009f00)=0x1}}) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) 11.762438563s ago: executing program 3 (id=96): syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') fanotify_init(0x40, 0x101000) io_setup(0x9, &(0x7f0000000180)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) 10.519745301s ago: executing program 1 (id=97): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 9.000182522s ago: executing program 1 (id=99): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt(r0, 0x80, 0x80, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0x1}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000200)={0x6, 'netdevsim0\x00', {}, 0x8005}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000003c0)={0x0, 'batadv0\x00', {}, 0x10}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) r7 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) syz_io_uring_submit(r8, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) 8.186165111s ago: executing program 3 (id=100): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 7.364308849s ago: executing program 4 (id=102): r0 = socket$kcm(0x29, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r0, r3, 0x0, 0x8000fb00) 7.306758478s ago: executing program 0 (id=103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvfrom$inet6(r0, &(0x7f0000000080)=""/26, 0x1a, 0x0, 0x0, 0x0) 7.123962352s ago: executing program 1 (id=104): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 6.797403168s ago: executing program 1 (id=106): socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{0x4}, 0xb1}}}, 0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 6.012037026s ago: executing program 2 (id=107): mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x4001, 0x0) pipe(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_procfs(0x0, &(0x7f0000000100)='net/kcm\x00') ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x4a0}, {0xffffffffffffffff, 0x480}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x505}], 0x4, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000011) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r2, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0x4000000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) 5.989620651s ago: executing program 0 (id=108): socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x8000000004) io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0x2063, 0x0, 0x2, 0x94}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700de0000000c00018008000140e00040000c00168008000140ac14160b0c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5.957676087s ago: executing program 1 (id=109): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x49084}, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 4.840135557s ago: executing program 2 (id=110): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x8000000004) io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0x2063, 0x0, 0x2, 0x94}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getgroups(0x400000000000005c, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000025"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$tipc(0x1e, 0x2, 0x0) r1 = dup(0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.969907676s ago: executing program 1 (id=111): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x400000000002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) 3.888718675s ago: executing program 3 (id=112): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x106, 0x5}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) close(0x3) 3.293926031s ago: executing program 2 (id=113): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000001c0)={0x1, 0x5453, 0xe, 0xffff, 0x0, 0x100, "e77a52b50e78f1e2cf9c2a2315bef545", 0x1, 0xa, 0x2, 0xe, 0x52, 0x6, 0x6b}) 2.695941113s ago: executing program 0 (id=114): timer_create(0x5, &(0x7f0000000200)={0x0, 0x41, 0x2}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000100)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x3, 0x0, 0x8000008, 0xfffffffa}, 0x2a) syz_open_dev$swradio(0x0, 0x0, 0x2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) syz_io_uring_setup(0x6af9, &(0x7f0000000080)={0x0, 0xe04f, 0xa40, 0x1, 0x272}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettaction={0x24, 0x5a, 0xc6b747b6bf1c6b95, 0x70bd2a, 0x2, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) 2.69355359s ago: executing program 4 (id=115): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') epoll_create1(0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) 2.640310617s ago: executing program 2 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 1.365454923s ago: executing program 3 (id=117): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) pipe(&(0x7f0000000240)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}}, 0x0) 1.093904198s ago: executing program 4 (id=118): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvfrom$inet6(r0, &(0x7f0000000080)=""/26, 0x1a, 0x0, 0x0, 0x0) 980.063506ms ago: executing program 2 (id=119): socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{0x4}, 0xb1}}}, 0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 936.470898ms ago: executing program 0 (id=120): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000040)={0x3, 0x0, [0x6, 0x9, 0xc, 0xb, 0xd34e, 0x5, 0x57f4, 0x6]}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014}}) r1 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x280, 0x1e0, 0x42474752}}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000500)=0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) userfaultfd(0x80001) close_range(r2, 0xffffffffffffffff, 0x0) 582.225888ms ago: executing program 2 (id=121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0xfffffffe, @private2, 0x5}}, 0x4000, 0x2}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 283.09067ms ago: executing program 4 (id=122): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) socket$inet6(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x8) listen(0xffffffffffffffff, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) shutdown(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 0s ago: executing program 3 (id=123): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x8000000004) io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0x2063, 0x0, 0x2, 0x94}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getgroups(0x400000000000005c, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000025"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r2 = dup(r1) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. [ 72.287640][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 72.287657][ T29] audit: type=1400 audit(1785987625.776:129): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 72.319115][ T29] audit: type=1400 audit(1785987625.816:130): avc: denied { mount } for pid=5595 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.323271][ T5595] cgroup: Unknown subsys name 'net' [ 72.348755][ T29] audit: type=1400 audit(1785987625.846:131): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.468392][ T5595] cgroup: Unknown subsys name 'cpuset' [ 72.477165][ T5595] cgroup: Unknown subsys name 'rlimit' [ 72.609518][ T29] audit: type=1400 audit(1785987626.096:132): avc: denied { setattr } for pid=5595 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.644981][ T29] audit: type=1400 audit(1785987626.096:133): avc: denied { create } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.675972][ T29] audit: type=1400 audit(1785987626.096:134): avc: denied { write } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.718065][ T29] audit: type=1400 audit(1785987626.096:135): avc: denied { read } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.736240][ T5597] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 72.739676][ T29] audit: type=1400 audit(1785987626.096:136): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 72.774697][ T29] audit: type=1400 audit(1785987626.096:137): avc: denied { mount } for pid=5595 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 72.799642][ T29] audit: type=1400 audit(1785987626.246:138): avc: denied { relabelto } for pid=5597 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 73.785148][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.023840][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.034131][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.045589][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.051875][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.054973][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.065184][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.077579][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.077726][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.089326][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.094951][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.101201][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.109498][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.116541][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.123902][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.131258][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.145230][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.145568][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.161824][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.165258][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.179384][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.187347][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.188044][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.202664][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.214704][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.228080][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.816374][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.824385][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.831698][ T5608] bridge_slave_0: entered allmulticast mode [ 77.839310][ T5608] bridge_slave_0: entered promiscuous mode [ 77.866223][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.873908][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.881489][ T5609] bridge_slave_0: entered allmulticast mode [ 77.888622][ T5609] bridge_slave_0: entered promiscuous mode [ 77.896487][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.903939][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.911144][ T5608] bridge_slave_1: entered allmulticast mode [ 77.918914][ T5608] bridge_slave_1: entered promiscuous mode [ 77.936985][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.944399][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.951635][ T5610] bridge_slave_0: entered allmulticast mode [ 77.959506][ T5610] bridge_slave_0: entered promiscuous mode [ 77.978960][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.986331][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.993500][ T5609] bridge_slave_1: entered allmulticast mode [ 78.000591][ T5609] bridge_slave_1: entered promiscuous mode [ 78.023982][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.031164][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.038391][ T5610] bridge_slave_1: entered allmulticast mode [ 78.045281][ T5610] bridge_slave_1: entered promiscuous mode [ 78.079532][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.098712][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.106080][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.113776][ T5607] bridge_slave_0: entered allmulticast mode [ 78.120687][ T5607] bridge_slave_0: entered promiscuous mode [ 78.137774][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.149951][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.169007][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.177202][ T5627] Bluetooth: hci2: command tx timeout [ 78.177473][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.190189][ T5607] bridge_slave_1: entered allmulticast mode [ 78.197204][ T5607] bridge_slave_1: entered promiscuous mode [ 78.204086][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.211183][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.218374][ T5611] bridge_slave_0: entered allmulticast mode [ 78.225787][ T5611] bridge_slave_0: entered promiscuous mode [ 78.234929][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.253773][ T5627] Bluetooth: hci3: command tx timeout [ 78.263966][ T50] Bluetooth: hci0: command tx timeout [ 78.265216][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.271136][ T5627] Bluetooth: hci4: command tx timeout [ 78.289779][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.297038][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.304358][ T5611] bridge_slave_1: entered allmulticast mode [ 78.311402][ T5611] bridge_slave_1: entered promiscuous mode [ 78.333982][ T5627] Bluetooth: hci1: command tx timeout [ 78.338175][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.366763][ T5609] team0: Port device team_slave_0 added [ 78.374596][ T5608] team0: Port device team_slave_0 added [ 78.390590][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.410672][ T5609] team0: Port device team_slave_1 added [ 78.418192][ T5608] team0: Port device team_slave_1 added [ 78.441919][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.461030][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.491884][ T5610] team0: Port device team_slave_0 added [ 78.507470][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.526418][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.533407][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.559912][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.574647][ T5610] team0: Port device team_slave_1 added [ 78.581910][ T5607] team0: Port device team_slave_0 added [ 78.595371][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.602605][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.629483][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.642014][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.649343][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.677014][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.708182][ T5607] team0: Port device team_slave_1 added [ 78.723054][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.730956][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.760371][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.798459][ T5611] team0: Port device team_slave_0 added [ 78.816034][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.824287][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.851875][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.872554][ T5611] team0: Port device team_slave_1 added [ 78.898689][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.908611][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.935517][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.947189][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.954857][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.981584][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.016797][ T5609] hsr_slave_0: entered promiscuous mode [ 79.024619][ T5609] hsr_slave_1: entered promiscuous mode [ 79.037531][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.044655][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.071230][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.096042][ T5608] hsr_slave_0: entered promiscuous mode [ 79.102379][ T5608] hsr_slave_1: entered promiscuous mode [ 79.108664][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 79.114724][ T5608] Cannot create hsr debugfs directory [ 79.138479][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.145725][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.172439][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.211710][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.218911][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.245691][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.328574][ T5610] hsr_slave_0: entered promiscuous mode [ 79.335165][ T5610] hsr_slave_1: entered promiscuous mode [ 79.341203][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 79.347070][ T5610] Cannot create hsr debugfs directory [ 79.386227][ T5607] hsr_slave_0: entered promiscuous mode [ 79.392455][ T5607] hsr_slave_1: entered promiscuous mode [ 79.398892][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 79.404677][ T5607] Cannot create hsr debugfs directory [ 79.487494][ T5611] hsr_slave_0: entered promiscuous mode [ 79.494409][ T5611] hsr_slave_1: entered promiscuous mode [ 79.500989][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 79.506860][ T5611] Cannot create hsr debugfs directory [ 79.820638][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.833449][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.866319][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.877797][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.886248][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.897440][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.918646][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.928707][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.994967][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.008919][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.016859][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.028116][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.036205][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.046684][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.057341][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.069576][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.174979][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.184259][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.193487][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.202615][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.210666][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.220051][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.233497][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.244928][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.254536][ T5627] Bluetooth: hci2: command tx timeout [ 80.315346][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.334495][ T50] Bluetooth: hci0: command tx timeout [ 80.334500][ T5620] Bluetooth: hci3: command tx timeout [ 80.334573][ T5627] Bluetooth: hci4: command tx timeout [ 80.383509][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.399455][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.414552][ T5627] Bluetooth: hci1: command tx timeout [ 80.424716][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.434437][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.448687][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.459146][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.470803][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.479570][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.489753][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.523255][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.530938][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.564684][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.571875][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.630706][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.658980][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.669217][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.689297][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.699448][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.708099][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.717828][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.726832][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.737272][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.775756][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.788026][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.821378][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.828555][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.849948][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.857094][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.897703][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.932142][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.939384][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.980233][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.987481][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.017728][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.107471][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.156062][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.163303][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.209065][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.216280][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.319392][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.409419][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.446937][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.454126][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.500283][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.507478][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.543104][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.815921][ T5608] veth0_vlan: entered promiscuous mode [ 81.892845][ T5608] veth1_vlan: entered promiscuous mode [ 81.991320][ T5608] veth0_macvtap: entered promiscuous mode [ 82.052865][ T5608] veth1_macvtap: entered promiscuous mode [ 82.160922][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.201402][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.237822][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.334592][ T5627] Bluetooth: hci2: command tx timeout [ 82.362293][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.376302][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.414519][ T5627] Bluetooth: hci4: command tx timeout [ 82.414550][ T5620] Bluetooth: hci0: command tx timeout [ 82.426124][ T5627] Bluetooth: hci3: command tx timeout [ 82.494540][ T5627] Bluetooth: hci1: command tx timeout [ 82.548485][ T5609] veth0_vlan: entered promiscuous mode [ 82.585539][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.609284][ T1346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.623206][ T5610] veth0_vlan: entered promiscuous mode [ 82.625314][ T1346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.649319][ T5609] veth1_vlan: entered promiscuous mode [ 82.705221][ T767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.722093][ T5610] veth1_vlan: entered promiscuous mode [ 82.750651][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.759172][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.760683][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.784587][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.794956][ T767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.817247][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 82.817263][ T29] audit: type=1400 audit(1785987636.306:152): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.WZD25R/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 82.853463][ T29] audit: type=1400 audit(1785987636.306:153): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.892092][ T29] audit: type=1400 audit(1785987636.306:154): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.WZD25R/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.920120][ T5610] veth0_macvtap: entered promiscuous mode [ 82.931337][ T29] audit: type=1400 audit(1785987636.306:155): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 82.953028][ T5610] veth1_macvtap: entered promiscuous mode [ 82.958332][ T29] audit: type=1400 audit(1785987636.316:156): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.WZD25R/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 82.997394][ T5608] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.004616][ T5609] veth0_macvtap: entered promiscuous mode [ 83.018614][ T29] audit: type=1400 audit(1785987636.316:157): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.WZD25R/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 83.039255][ T5609] veth1_macvtap: entered promiscuous mode [ 83.048349][ T29] audit: type=1400 audit(1785987636.316:158): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.083279][ T29] audit: type=1400 audit(1785987636.336:159): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.094554][ T5611] veth0_vlan: entered promiscuous mode [ 83.106895][ T29] audit: type=1400 audit(1785987636.346:160): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="gadgetfs" ino=7220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.163030][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.191651][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.209018][ T29] audit: type=1400 audit(1785987636.356:161): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.253105][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.273186][ T5611] veth1_vlan: entered promiscuous mode [ 83.287336][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.341443][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.527337][ T5611] veth0_macvtap: entered promiscuous mode [ 84.384136][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.392845][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.415552][ T5627] Bluetooth: hci2: command tx timeout [ 84.421196][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.445484][ T5611] veth1_macvtap: entered promiscuous mode [ 84.494491][ T5627] Bluetooth: hci3: command tx timeout [ 84.494923][ T5620] Bluetooth: hci0: command tx timeout [ 84.499965][ T50] Bluetooth: hci4: command tx timeout [ 84.565563][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.573779][ T50] Bluetooth: hci1: command tx timeout [ 84.603928][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.623901][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.721657][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.749335][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.841020][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.078742][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.124237][ T5607] veth0_vlan: entered promiscuous mode [ 85.151119][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.191578][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.220239][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.259560][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.270711][ T5607] veth1_vlan: entered promiscuous mode [ 85.331297][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.673905][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.715100][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.866402][ T767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.949533][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.030410][ T5607] veth0_macvtap: entered promiscuous mode [ 86.072271][ T5607] veth1_macvtap: entered promiscuous mode [ 86.102635][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.110898][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.133278][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.146958][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.371942][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.398576][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.550098][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.842306][ T805] cfg80211: failed to load regulatory.db [ 86.848312][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.900450][ T5849] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 86.924603][ T5732] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.933984][ T767] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.945128][ T5849] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 87.101384][ T5732] usb 2-1: Using ep0 maxpacket: 8 [ 87.115108][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.202807][ T5732] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.216572][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.252603][ T5732] usb 2-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 87.276898][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.278003][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.303220][ T5859] jffs2: notice: (5859) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.320826][ T5732] usb 2-1: Product: syz [ 87.328659][ T5732] usb 2-1: Manufacturer: syz [ 87.364734][ T5732] usb 2-1: SerialNumber: syz [ 87.395016][ T5732] usb 2-1: config 0 descriptor?? [ 87.468938][ T5732] gspca_main: t613-2.14.0 probing 17a1:0128 [ 87.543047][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.593503][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.846105][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 87.846155][ T29] audit: type=1400 audit(1785987641.326:212): avc: denied { ioctl } for pid=5865 comm="syz.2.19" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 88.049946][ T5732] gspca_t613: unknown sensor 0000 [ 88.110343][ T5732] t613 2-1:0.0: probe with driver t613 failed with error -22 [ 88.124671][ T5874] input: syz0 as /devices/virtual/input/input5 [ 88.161095][ T29] audit: type=1400 audit(1785987641.436:213): avc: denied { read write } for pid=5872 comm="syz.0.20" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 88.163093][ T5732] usb 2-1: USB disconnect, device number 2 [ 88.252770][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.301779][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.320945][ T29] audit: type=1400 audit(1785987641.456:214): avc: denied { open } for pid=5872 comm="syz.0.20" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 88.360821][ T29] audit: type=1400 audit(1785987641.516:215): avc: denied { ioctl } for pid=5872 comm="syz.0.20" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 88.389306][ T29] audit: type=1400 audit(1785987641.626:216): avc: denied { read } for pid=5871 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1810 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.435941][ T29] audit: type=1400 audit(1785987641.626:217): avc: denied { open } for pid=5871 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1810 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.463162][ T29] audit: type=1400 audit(1785987641.626:218): avc: denied { getattr } for pid=5871 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1810 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.540999][ T29] audit: type=1400 audit(1785987641.986:219): avc: denied { create } for pid=5865 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.570549][ T29] audit: type=1400 audit(1785987642.006:220): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.qqNbDr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.664009][ T29] audit: type=1400 audit(1785987642.016:221): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.222938][ T5890] random: crng reseeded on system resumption [ 89.924015][ T5732] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.635921][ T5732] usb 1-1: Using ep0 maxpacket: 16 [ 90.643403][ T5732] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.656627][ T5732] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.676218][ T5732] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.693831][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.710332][ T5732] usb 1-1: Product: syz [ 90.728366][ T5732] usb 1-1: Manufacturer: syz [ 91.574435][ T5732] usb 1-1: SerialNumber: syz [ 91.710147][ T5732] usb 1-1: 0:2 : does not exist [ 91.819852][ T5732] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 92.055835][ T5732] usb 1-1: USB disconnect, device number 2 [ 92.086762][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'. [ 92.245596][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.538541][ T5947] Illegal XDP return value 4294967294 on prog (id 4) dev N/A, expect packet loss! [ 92.918098][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 92.918115][ T29] audit: type=1400 audit(1785987646.406:297): avc: denied { write } for pid=5946 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.045314][ T29] audit: type=1400 audit(1785987646.526:298): avc: denied { read write } for pid=5952 comm="syz.0.37" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.116275][ T29] audit: type=1400 audit(1785987646.536:299): avc: denied { open } for pid=5952 comm="syz.0.37" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.317663][ T29] audit: type=1400 audit(1785987646.566:300): avc: denied { mmap_zero } for pid=5952 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 93.337706][ T29] audit: type=1400 audit(1785987646.606:301): avc: denied { map } for pid=5952 comm="syz.0.37" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.376326][ T29] audit: type=1400 audit(1785987646.606:302): avc: denied { read write } for pid=5952 comm="syz.0.37" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.909407][ T29] audit: type=1400 audit(1785987646.706:303): avc: denied { map } for pid=5952 comm="syz.0.37" path="socket:[8080]" dev="sockfs" ino=8080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 93.937584][ T29] audit: type=1400 audit(1785987646.796:304): avc: denied { mount } for pid=5924 comm="syz.1.31" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 95.101917][ T29] audit: type=1400 audit(1785987647.886:305): avc: denied { read } for pid=5976 comm="syz.0.43" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.200621][ T29] audit: type=1400 audit(1785987648.576:306): avc: denied { open } for pid=5976 comm="syz.0.43" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.207336][ T5985] null_blk: nullb1: using native zone append [ 95.574379][ T5985] null_blk: disk nullb1 created [ 95.634012][ T5343] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.943859][ T5343] usb 2-1: Using ep0 maxpacket: 32 [ 96.554746][ T5343] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 96.717039][ T5343] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 96.734671][ T5343] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 96.744146][ T6014] nvmet: adding nsid 1 to subsystem testnqn [ 96.752663][ T5343] usb 2-1: Product: syz [ 96.787252][ T5343] usb 2-1: Manufacturer: syz [ 96.811153][ T6014] nvmet: failed to open block device (null): (-22) [ 96.813740][ T5343] usb 2-1: SerialNumber: syz [ 96.860992][ T5343] usb 2-1: config 0 descriptor?? [ 96.876622][ T5994] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.891412][ T5343] hub 2-1:0.0: bad descriptor, ignoring hub [ 96.909622][ T5343] hub 2-1:0.0: probe with driver hub failed with error -5 [ 97.151002][ T6023] netlink: 76 bytes leftover after parsing attributes in process `syz.0.53'. [ 97.345594][ T6014] nvmet_tcp: address family 255 not supported [ 97.677517][ T805] usb 2-1: USB disconnect, device number 3 [ 98.618765][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 98.618781][ T29] audit: type=1400 audit(1785987652.106:332): avc: denied { write } for pid=5999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.886307][ T29] audit: type=1400 audit(1785987652.366:333): avc: denied { write } for pid=6039 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.645967][ T29] audit: type=1400 audit(1785987653.136:334): avc: denied { create } for pid=6052 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.668472][ T29] audit: type=1400 audit(1785987653.146:335): avc: denied { search } for pid=6054 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.714622][ T29] audit: type=1400 audit(1785987653.156:336): avc: denied { search } for pid=6054 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.737775][ T29] audit: type=1400 audit(1785987653.156:337): avc: denied { search } for pid=6054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.763038][ T29] audit: type=1400 audit(1785987653.156:338): avc: denied { read } for pid=6054 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.827704][ T29] audit: type=1400 audit(1785987653.156:339): avc: denied { read open } for pid=6054 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.909244][ T29] audit: type=1400 audit(1785987653.156:340): avc: denied { getattr } for pid=6054 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.032706][ T29] audit: type=1400 audit(1785987653.176:341): avc: denied { bind } for pid=6052 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.654720][ T6086] Zero length message leads to an empty skb [ 103.799152][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 103.799168][ T29] audit: type=1400 audit(1785987657.286:351): avc: denied { ioctl } for pid=6093 comm="syz.4.70" path="socket:[9314]" dev="sockfs" ino=9314 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.020387][ T29] audit: type=1400 audit(1785987657.366:352): avc: denied { create } for pid=6077 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.089811][ T29] audit: type=1400 audit(1785987657.576:353): avc: denied { write } for pid=6098 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.159418][ T29] audit: type=1400 audit(1785987657.576:354): avc: denied { remove_name } for pid=6098 comm="rm" name="resolv.conf.ifb1.dhcp" dev="tmpfs" ino=2110 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.365809][ T29] audit: type=1400 audit(1785987657.856:355): avc: denied { mount } for pid=6104 comm="syz.3.73" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 104.491504][ T29] audit: type=1400 audit(1785987657.886:356): avc: denied { write } for pid=6104 comm="syz.3.73" name="ss" dev="configfs" ino=8010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.599297][ T29] audit: type=1400 audit(1785987657.896:357): avc: denied { write } for pid=6104 comm="syz.3.73" name="ss" dev="configfs" ino=8010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.654733][ T29] audit: type=1400 audit(1785987657.896:358): avc: denied { write } for pid=6104 comm="syz.3.73" name="uncompressed" dev="configfs" ino=8967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.800318][ T29] audit: type=1400 audit(1785987657.906:359): avc: denied { write } for pid=6104 comm="syz.3.73" name="u" dev="configfs" ino=9189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.822640][ T29] audit: type=1400 audit(1785987658.016:360): avc: denied { write } for pid=6104 comm="syz.3.73" name="h" dev="configfs" ino=8019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.164707][ T5740] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.424305][ T5740] usb 3-1: Using ep0 maxpacket: 32 [ 106.445932][ T5740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.473705][ T5740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.487227][ T6127] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 106.487227][ T6127] The task syz.3.82 (6127) triggered the difference, watch for misbehavior. [ 106.516224][ T5740] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 106.536093][ T5740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.561782][ T5740] usb 3-1: config 0 descriptor?? [ 106.577677][ T5740] hub 3-1:0.0: USB hub found [ 106.783897][ T5740] hub 3-1:0.0: 1 port detected [ 106.923751][ T5749] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.086579][ T5749] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 107.115403][ T5749] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 107.140105][ T5343] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 107.156036][ T5749] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 107.166259][ T5749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.183111][ T5749] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 107.203319][ T5749] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 107.316479][ T5343] usb 2-1: not running at top speed; connect to a high speed hub [ 107.326750][ T5343] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.341466][ T5343] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 107.351390][ T5343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.359498][ T5343] usb 2-1: Product: syz [ 107.363825][ T5343] usb 2-1: Manufacturer: syz [ 107.368462][ T5343] usb 2-1: SerialNumber: syz [ 107.384241][ T5732] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.393065][ T5343] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 107.404674][ T5740] hub 3-1:0.0: activate --> -90 [ 107.417965][ T5343] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 107.434427][ T5343] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 107.453537][ T5343] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 107.471456][ T5343] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 107.492065][ T5343] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 107.509778][ T5343] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 107.531376][ T5343] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 4 [ 107.547218][ T5732] usb 4-1: Using ep0 maxpacket: 16 [ 107.552675][ T5343] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 107.567980][ T5732] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 107.581729][ T5613] usb 1-1: USB disconnect, device number 3 [ 107.600738][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.622247][ T5343] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 107.637112][ T5613] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 107.653325][ T5343] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 107.667569][ T5613] spcp8x5 1-1:1.0: device disconnected [ 107.681387][ T5732] usb 4-1: Product: syz [ 107.703150][ T5732] usb 4-1: Manufacturer: syz [ 107.716020][ T5343] usb 2-1: USB disconnect, device number 4 [ 107.718156][ T5732] usb 4-1: SerialNumber: syz [ 107.762077][ T5343] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 107.789364][ T5343] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 107.818208][ T5343] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 107.846145][ T5343] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 107.862440][ T5343] keyspan 2-1:1.0: device disconnected [ 108.212702][ T5740] usb 3-1-port1: over-current condition [ 108.303674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.333661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 108.418930][ T5343] usb 3-1: USB disconnect, device number 2 [ 108.430661][ T5732] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 108.438601][ T6154] bridge_slave_0: left allmulticast mode [ 108.745903][ T5732] usb 4-1: USB disconnect, device number 2 [ 108.752569][ T6154] bridge_slave_0: left promiscuous mode [ 108.863721][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.901743][ T6154] bridge_slave_1: left allmulticast mode [ 108.913610][ T6154] bridge_slave_1: left promiscuous mode [ 108.934735][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.008998][ T6154] bond0: (slave bond_slave_0): Releasing backup interface [ 109.059770][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 109.059785][ T29] audit: type=1400 audit(1785987662.546:368): avc: denied { create } for pid=6152 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.323215][ T6154] bond0: (slave bond_slave_1): Releasing backup interface [ 109.433207][ T6162] jffs2: notice: (6162) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 109.476583][ T6154] team0: Port device team_slave_0 removed [ 109.501695][ T6154] team0: Port device team_slave_1 removed [ 109.529835][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.548937][ T29] audit: type=1400 audit(1785987663.036:369): avc: denied { mount } for pid=6161 comm="syz.3.90" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 109.577587][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.712505][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.733765][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.743970][ T5343] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.069809][ T6154] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.175751][ T29] audit: type=1400 audit(1785987663.666:370): avc: denied { read } for pid=6176 comm="syz.3.93" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 110.209984][ T6156] team0: Port device xfrm0 added [ 110.228867][ T6177] binder: BINDER_SET_CONTEXT_MGR already set [ 110.237759][ T6157] tipc: Started in network mode [ 110.243822][ T6157] tipc: Node identity e2652ff48043, cluster identity 4711 [ 110.244156][ T5343] usb 3-1: Using ep0 maxpacket: 16 [ 110.258604][ T29] audit: type=1400 audit(1785987663.696:371): avc: denied { open } for pid=6176 comm="syz.3.93" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 110.259495][ T6177] binder: 6176:6177 ioctl 4018620d 200000000040 returned -16 [ 110.287091][ T29] audit: type=1400 audit(1785987663.696:372): avc: denied { ioctl } for pid=6176 comm="syz.3.93" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 110.317692][ T5343] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 110.330542][ T6157] tipc: Enabled bearer , priority 0 [ 110.348353][ T5343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 110.361763][ T29] audit: type=1400 audit(1785987663.706:373): avc: denied { set_context_mgr } for pid=6176 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 110.390037][ T5343] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.401238][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.410521][ T5343] usb 3-1: Product: syz [ 110.416094][ T5343] usb 3-1: Manufacturer: syz [ 110.420828][ T5343] usb 3-1: SerialNumber: syz [ 110.493167][ T5343] usb 3-1: config 0 descriptor?? [ 110.536164][ T5343] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 110.567928][ T5343] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 110.623707][ T29] audit: type=1400 audit(1785987664.106:374): avc: denied { create } for pid=6180 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.693324][ T29] audit: type=1400 audit(1785987664.136:375): avc: denied { setopt } for pid=6180 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.163671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 111.193677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.293674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 111.333717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.548086][ T5613] tipc: Node number set to 1646669812 [ 111.559855][ T29] audit: type=1400 audit(1785987664.876:376): avc: denied { audit_write } for pid=6184 comm="syz.3.96" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 111.707171][ T29] audit: type=1400 audit(1785987665.166:377): avc: denied { setopt } for pid=6182 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.785334][ T5343] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 111.803121][ T5343] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 111.813910][ T5343] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 111.821289][ T5343] em28xx 3-1:0.0: No AC97 audio processor [ 111.863331][ T5343] usb 3-1: USB disconnect, device number 3 [ 111.889900][ T5343] em28xx 3-1:0.0: Disconnecting em28xx [ 111.903099][ T5343] em28xx 3-1:0.0: Freeing device [ 114.374191][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 114.374224][ T29] audit: type=1400 audit(1785987667.856:380): avc: denied { create } for pid=6202 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.431190][ T6204] tipc: Started in network mode [ 114.548003][ T6204] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 114.572870][ T29] audit: type=1400 audit(1785987667.866:381): avc: denied { setopt } for pid=6202 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.616988][ T6204] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 114.660245][ T6204] tipc: Enabled bearer , priority 10 [ 115.082812][ T6213] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 115.128907][ T6213] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 115.775692][ T5343] tipc: Node number set to 1 [ 116.244376][ T6233] binder_alloc: 6232: binder_alloc_buf, no vma [ 116.252096][ T29] audit: type=1400 audit(1785987669.736:382): avc: denied { call } for pid=6232 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 116.398072][ T29] audit: type=1400 audit(1785987669.876:383): avc: denied { write } for pid=6208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.518385][ T29] audit: type=1400 audit(1785987670.006:384): avc: denied { create } for pid=6236 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.739013][ T6242] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.350645][ T29] audit: type=1400 audit(1785987670.076:385): avc: denied { connect } for pid=6238 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.680751][ T29] audit: type=1400 audit(1785987670.496:386): avc: denied { write } for pid=6240 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.757262][ T29] audit: type=1400 audit(1785987670.666:387): avc: denied { create } for pid=6238 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 118.470794][ T29] audit: type=1400 audit(1785987671.956:388): avc: denied { connect } for pid=6246 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.541225][ T29] audit: type=1400 audit(1785987672.006:389): avc: denied { bind } for pid=6246 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.769514][ T6262] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 118.782102][ T6262] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 120.999495][ T29] audit: type=1400 audit(1785987674.296:390): avc: denied { unlink } for pid=6267 comm="syz.0.114" name="#1" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 121.207835][ T29] audit: type=1326 audit(1785987674.656:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6267 comm="syz.0.114" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9702b9e0d9 code=0x0 [ 121.234477][ T6277] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 121.603063][ T6284] binder_alloc: 6283: binder_alloc_buf, no vma [ 122.403212][ T6293] ------------[ cut here ]------------ [ 122.408991][ T6293] origin->pipe && origin->pipe != pipe [ 122.409015][ T6293] WARNING: drivers/media/mc/mc-entity.c:785 at __media_pipeline_start+0x1add/0x22b0, CPU#1: syz.0.120/6293 [ 122.426389][ T6293] Modules linked in: [ 122.431775][ T6293] CPU: 1 UID: 0 PID: 6293 Comm: syz.0.120 Not tainted syzkaller #0 PREEMPT(full) [ 122.441107][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 122.451365][ T6293] RIP: 0010:__media_pipeline_start+0x1add/0x22b0 [ 122.457789][ T6293] Code: 3b f6 f9 66 90 41 bc f0 ff ff ff e9 5d f9 ff ff e8 d8 3b f6 f9 48 8b 7c 24 10 e8 ce a9 5a fa e9 75 f2 ff ff e8 c4 3b f6 f9 90 <0f> 0b 90 41 bc ea ff ff ff e9 a7 e6 ff ff e8 d0 c5 66 fa e9 a5 f4 [ 122.477597][ T6293] RSP: 0018:ffffc9000cdf79b0 EFLAGS: 00010287 [ 122.485051][ T6293] RAX: 000000000000071b RBX: ffff88802d6baa10 RCX: ffffc900048ca000 [ 122.493081][ T6293] RDX: 0000000000080000 RSI: ffffffff8814291c RDI: ffff88802d60cb00 [ 122.501681][ T6293] RBP: ffff88802d4a2168 R08: 0000000000000005 R09: 0000000000000000 [ 122.510152][ T6293] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802d60ca10 [ 122.518214][ T6293] R13: ffff88802d60c020 R14: ffff88802d60c750 R15: ffff88802d60cac8 [ 122.526210][ T6293] FS: 00007f9703a786c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 122.535191][ T6293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.541805][ T6293] CR2: 000000110c312ab7 CR3: 000000005a330000 CR4: 00000000003526f0 [ 122.549805][ T6293] Call Trace: [ 122.553074][ T6293] [ 122.556028][ T6293] ? __pfx___mutex_lock+0x10/0x10 [ 122.561094][ T6293] ? lock_acquire+0x1b9/0x370 [ 122.565980][ T6293] ? __pfx___media_pipeline_start+0x10/0x10 [ 122.571895][ T6293] ? rcu_is_watching+0x12/0xc0 [ 122.576739][ T6293] ? trace_contention_end+0x126/0x160 [ 122.582141][ T6293] media_pipeline_start+0x49/0x70 [ 122.587210][ T6293] video_device_pipeline_start+0x79/0xa0 [ 122.592836][ T6293] vimc_capture_start_streaming+0x7d/0x130 [ 122.599204][ T6293] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 122.606016][ T6293] vb2_start_streaming+0x162/0x570 [ 122.611115][ T6293] ? __bitmap_weight+0xd7/0x110 [ 122.615986][ T6293] vb2_core_streamon+0x26a/0x3c0 [ 122.620907][ T6293] vb2_ioctl_streamon+0xd9/0x150 [ 122.625852][ T6293] ? v4l_streamon+0x1a/0xa0 [ 122.630340][ T6293] __video_do_ioctl+0xb2a/0xdf0 [ 122.635212][ T6293] ? __might_fault+0xc5/0x140 [ 122.639893][ T6293] ? __pfx___video_do_ioctl+0x10/0x10 [ 122.645280][ T6293] video_usercopy+0x47a/0x1730 [ 122.650029][ T6293] ? __pfx___video_do_ioctl+0x10/0x10 [ 122.655418][ T6293] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 122.662257][ T6293] ? __pfx_video_usercopy+0x10/0x10 [ 122.667493][ T6293] v4l2_ioctl+0x1bd/0x250 [ 122.671811][ T6293] ? __pfx_v4l2_ioctl+0x10/0x10 [ 122.676673][ T6293] __x64_sys_ioctl+0x18e/0x210 [ 122.681425][ T6293] do_syscall_64+0x115/0x870 [ 122.686031][ T6293] ? clear_bhb_loop+0x40/0x90 [ 122.690696][ T6293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.696655][ T6293] RIP: 0033:0x7f9702b9e0d9 [ 122.701643][ T6293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.721684][ T6293] RSP: 002b:00007f9703a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.730134][ T6293] RAX: ffffffffffffffda RBX: 00007f9702e25fa0 RCX: 00007f9702b9e0d9 [ 122.738154][ T6293] RDX: 0000200000000500 RSI: 0000000040045612 RDI: 0000000000000004 [ 122.746146][ T6293] RBP: 00007f9702c35024 R08: 0000000000000000 R09: 0000000000000000 [ 122.754140][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.762110][ T6293] R13: 00007f9702e26038 R14: 00007f9702e25fa0 R15: 00007fff6b57dba8 [ 122.770110][ T6293] [ 122.773141][ T6293] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 122.780413][ T6293] CPU: 1 UID: 0 PID: 6293 Comm: syz.0.120 Not tainted syzkaller #0 PREEMPT(full) [ 122.789606][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 122.799648][ T6293] Call Trace: [ 122.803552][ T6293] [ 122.806472][ T6293] dump_stack_lvl+0x100/0x190 [ 122.811138][ T6293] vpanic+0x552/0x970 [ 122.815122][ T6293] ? __pfx_vpanic+0x10/0x10 [ 122.819623][ T6293] panic+0xd1/0xe0 [ 122.823334][ T6293] ? __pfx_panic+0x10/0x10 [ 122.827755][ T6293] check_panic_on_warn.cold+0x19/0x34 [ 122.833128][ T6293] ? __media_pipeline_start+0x1add/0x22b0 [ 122.838859][ T6293] __warn.cold+0x191/0x318 [ 122.843274][ T6293] __report_bug+0x30f/0x440 [ 122.847783][ T6293] ? __media_pipeline_start+0x1add/0x22b0 [ 122.853485][ T6293] ? __pfx___report_bug+0x10/0x10 [ 122.858490][ T6293] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 122.864652][ T6293] ? __lock_acquire+0x49f/0x1a40 [ 122.869587][ T6293] ? __kernel_text_address+0xd/0x30 [ 122.874766][ T6293] ? unwind_get_return_address+0x59/0xa0 [ 122.880378][ T6293] ? arch_stack_walk+0xa6/0xf0 [ 122.885173][ T6293] ? __media_pipeline_start+0x1add/0x22b0 [ 122.890892][ T6293] report_bug+0xb2/0x220 [ 122.895121][ T6293] ? __media_pipeline_start+0x1add/0x22b0 [ 122.900825][ T6293] handle_bug+0x16a/0x2a0 [ 122.905154][ T6293] exc_invalid_op+0x17/0x50 [ 122.909661][ T6293] asm_exc_invalid_op+0x1a/0x20 [ 122.914496][ T6293] RIP: 0010:__media_pipeline_start+0x1add/0x22b0 [ 122.920893][ T6293] Code: 3b f6 f9 66 90 41 bc f0 ff ff ff e9 5d f9 ff ff e8 d8 3b f6 f9 48 8b 7c 24 10 e8 ce a9 5a fa e9 75 f2 ff ff e8 c4 3b f6 f9 90 <0f> 0b 90 41 bc ea ff ff ff e9 a7 e6 ff ff e8 d0 c5 66 fa e9 a5 f4 [ 122.940499][ T6293] RSP: 0018:ffffc9000cdf79b0 EFLAGS: 00010287 [ 122.946545][ T6293] RAX: 000000000000071b RBX: ffff88802d6baa10 RCX: ffffc900048ca000 [ 122.954494][ T6293] RDX: 0000000000080000 RSI: ffffffff8814291c RDI: ffff88802d60cb00 [ 122.962467][ T6293] RBP: ffff88802d4a2168 R08: 0000000000000005 R09: 0000000000000000 [ 122.970420][ T6293] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802d60ca10 [ 122.978391][ T6293] R13: ffff88802d60c020 R14: ffff88802d60c750 R15: ffff88802d60cac8 [ 122.986374][ T6293] ? __media_pipeline_start+0x1adc/0x22b0 [ 122.992100][ T6293] ? __pfx___mutex_lock+0x10/0x10 [ 122.997128][ T6293] ? lock_acquire+0x1b9/0x370 [ 123.001796][ T6293] ? __pfx___media_pipeline_start+0x10/0x10 [ 123.007688][ T6293] ? rcu_is_watching+0x12/0xc0 [ 123.012470][ T6293] ? trace_contention_end+0x126/0x160 [ 123.017848][ T6293] media_pipeline_start+0x49/0x70 [ 123.022891][ T6293] video_device_pipeline_start+0x79/0xa0 [ 123.028511][ T6293] vimc_capture_start_streaming+0x7d/0x130 [ 123.034303][ T6293] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 123.040737][ T6293] vb2_start_streaming+0x162/0x570 [ 123.045839][ T6293] ? __bitmap_weight+0xd7/0x110 [ 123.050704][ T6293] vb2_core_streamon+0x26a/0x3c0 [ 123.055642][ T6293] vb2_ioctl_streamon+0xd9/0x150 [ 123.060585][ T6293] ? v4l_streamon+0x1a/0xa0 [ 123.065090][ T6293] __video_do_ioctl+0xb2a/0xdf0 [ 123.069927][ T6293] ? __might_fault+0xc5/0x140 [ 123.074587][ T6293] ? __pfx___video_do_ioctl+0x10/0x10 [ 123.079953][ T6293] video_usercopy+0x47a/0x1730 [ 123.084710][ T6293] ? __pfx___video_do_ioctl+0x10/0x10 [ 123.090084][ T6293] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 123.096938][ T6293] ? __pfx_video_usercopy+0x10/0x10 [ 123.102128][ T6293] v4l2_ioctl+0x1bd/0x250 [ 123.106460][ T6293] ? __pfx_v4l2_ioctl+0x10/0x10 [ 123.111329][ T6293] __x64_sys_ioctl+0x18e/0x210 [ 123.116096][ T6293] do_syscall_64+0x115/0x870 [ 123.120693][ T6293] ? clear_bhb_loop+0x40/0x90 [ 123.125374][ T6293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.131254][ T6293] RIP: 0033:0x7f9702b9e0d9 [ 123.135657][ T6293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.155291][ T6293] RSP: 002b:00007f9703a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.163703][ T6293] RAX: ffffffffffffffda RBX: 00007f9702e25fa0 RCX: 00007f9702b9e0d9 [ 123.171660][ T6293] RDX: 0000200000000500 RSI: 0000000040045612 RDI: 0000000000000004 [ 123.179609][ T6293] RBP: 00007f9702c35024 R08: 0000000000000000 R09: 0000000000000000 [ 123.187577][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.195532][ T6293] R13: 00007f9702e26038 R14: 00007f9702e25fa0 R15: 00007fff6b57dba8 [ 123.203499][ T6293] [ 123.206772][ T6293] Kernel Offset: disabled [ 123.211088][ T6293] Rebooting in 86400 seconds..