last executing test programs: 3.141680264s ago: executing program 1 (id=2): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xa, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f0000000000), 0x6b) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000300000204000a"], 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[], 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000640)="948392ea7bf144c306df1d867a7f37d066d9e44cd01300336a58834a5e0dbdfb4f0f3208a87ae05b85b10ce5d7585d7b00004efa0efa025d2b9d406f79b176fe4d90b0bd0308e85254d99746f2ba00457cba88700f319211b197f237449cf9db768bfc590e0689c1a5d3aef4ba651f926425529eb500b25f213b2c7dd7539b83119b87c675cd8cfe19d89cf15b157b3ee4627713f2c9635a053682331098ba287b099d0c404bf741713b979ea00cde753acd2aec681421db3237a2c072f170cfc6b2a1fc2aa1f8156ecb4323775d682dfdda93a17a7f4fa6665f93d8d7ec4e", &(0x7f0000000440)=""/106, &(0x7f0000000380)="d923484c97ae8381bb1cca354e39814285b822dd0900000000000000ddaea05a7634ce9655834bdd2fb15b61d92551b225b8a6fc3ba21f12d0d01219e54a1cb7e2def0dee8c00783db38203697f66996f3f69bfe8a56912dc94ef8260e2e9064a7e4fbfadfdc5c3538fd26f6b1d93f08b667774c62821c5d9036397e81f5c55afe101c48fa56b11d6626e0e43e91bc3b6b24efd0ad8deb3cd4463653becd5ca43f168de742415668f2b43122ba884ac77e294854d8a95475", &(0x7f0000002f00)="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", 0x1}, 0x38) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xc, 0x0, &(0x7f00000003c0)="e0b9547ed387dbe9abc89b6f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r5 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$int_in(r5, 0x5452, &(0x7f0000000380)=0x8000000000000) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.618547393s ago: executing program 3 (id=4): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r2, 0x80045438, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900)={[], 0xf500000000000000}, &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0xfb, 0x8, 0x0, "062383a78614d321eb086bebba55db0dfca05613826fffd4ee640ffed6cd68cb", 0x32314d54}) 2.524446367s ago: executing program 2 (id=3): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x62, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x22, 0xffffffffffffffff, [{0x0, 0x8, "e256b28c5988"}, {0x0, 0x8, "020007651442"}, {0x0, 0x2}, {0x0, 0xa, "6580a5e97612fe86"}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4000010) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) 1.775417013s ago: executing program 0 (id=1): socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18070000000001"], &(0x7f0000000040)='GPL\x00', 0x9, 0x92, &(0x7f0000000240)=""/146, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="30200000000804001c001a8018000a8014000700fe8800000000000000000000000001011400350062617461647630000000000000000000d01109228f02557757311f82b0552f"], 0x50}}, 0x20004400) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10200, 0x5, 0x1, 0x1000, &(0x7f0000d70000/0x1000)=nil}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) getsockname$packet(r2, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000cc0)=0x14) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x35dcae15e713ede6, 0xfffff195, 0x2}, 0xa}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000c00)=[{{&(0x7f00000003c0)=@nl=@unspec, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)="d3652eb0d0117f8e3b1819f7b5e1d6e412aafe6b1a9eac1977b7a343decdd329b30e603ed6c94bb544626706f4855ed95f7697017d59be8145418bc8ddfa396b33cb2a8a4c7e8562ecaf05369f1d8051baf6b87f525ce849a4c6ecda5d79047c8653c5d5d3cf179ee86e938ae070c921262708aa87c704", 0x77}, {&(0x7f0000000100)="c262bbc74bea6de2ee4c6a8f4b0eb6", 0xf}, {&(0x7f0000000180)="e6e6ff7aedcb29373807400391a1ef7bc1bf8d49f9d549c29e482d53a328d0c7ae345a14636f17e9484f82f978498c72ccee8496ae5d77590b", 0x39}], 0x3, &(0x7f0000000540)=[{0x60, 0x1, 0x1, "270f9d50e0b776d758c6ae8006024abeba15cb97902d31784ce5ba89bf7b2f5c683884a0a051211f4c64cf02183b6b376cdb470b7b338c2904d2f9f1f98f2493b97dd8eaac7856bed2f413"}, {0x50, 0x118, 0x9, "80c0c093ebcdf26fee060ecbf86e92b64a001fa9f15440c4d639055aa1ffebdf60a35cfbdb40b8e0886d5edde1406f7a412cf1c85f9a5c23a62942"}], 0xb0}}, {{&(0x7f00000006c0)=@ax25={{0x3, @bcast}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000024c0)="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", 0x1000}, {&(0x7f0000000740)="b9fb44b902f2a7f07c205b641fadd8cd36b18957c6f3276cb2834f98ed11ac1c4316e02d3b7ed4f1b3089cc0c05f18", 0x2f}, {&(0x7f0000000780)="81d9c0f35ea378e10f80130ceabe52c66a6fb260cee894407b4d2393ec2c04800017391c3970cc9ebb97e63a96c96be198cc8a3fa9a07d34f93b6da6f428069c4c49036cbc2c4cd6", 0x48}, {&(0x7f0000000800)="57ceb70fc901fc0d0f110bf164f328935848148c38bfeb1a97ff01d937a257953c6aee1cc64cb74d6b31bca3ba0e9f3745d88bccb513f91341434f29d82d9e7c7d2b4c803b5db24d538a10613c0d5dca4dea999715c08c05d13cb87acdddb4d6c61885de226573262fdd55aae8b129a681ef388ce6b52d28062f", 0x7a}, {&(0x7f0000000880)="fb1ca39c775c8c4c86f9a42e4f794c303015e97c7fe140d3cc79440bd8b855d5716da94010b321ca1ce2835547812db0cea7c5643686841da225398c61e022c625840abbae8417be0df7251605614fdbc8680b0e516d342026bb437e7edc0de4bd362f75d38dfa9c484c99e61330424600219d99491a0fb6c98f263d21e6b84529d361597cd483168c8d08272487f3c41c069a0dd202a9d8939062c0ef76def6d4b6fac820e7ba87279ddbdfcf810e754f8674cd5af4f33482d69cfe48d69dd4c51148fc51546a58a8605e2ad16ce85b546e0a2eac9240d6dcc810177f3aa14d23d4", 0xe2}, {&(0x7f0000000980)="f7ade6dd4557c0f6425e79fdb1a1764298c6b7bd98", 0x15}], 0x6, &(0x7f0000000a40)=[{0x20, 0x108, 0x4, "1378fb51e1946e1ed1ae5a"}, {0xc8, 0x109, 0x7, "d394342dede226513d98272bd41fc27833b2bb487edc2055e524545488a181b38754d996595cfbb3fad5a8acd5699367a6228cfa41e2524df0ec7824cc5501c004bd6a5b4815e32e3d0b6879da29adea6efbfc6848dce307420a3e84f30f40c052c5b492dfed3349b58c31f0e4040dfb2ed5ef5405ea3379748e1c04ef4c8167ca9d690245301384cb24c8144745f130a884b65944f749e7f42468bb9e61b9154f9c1fca0c36c00a97c6d68b010c16469ec50b97"}, {0xd8, 0x11a, 0x6, "d9e6bc5c41d2e9d82122709f9485b72d2ad0a12f6dd2f8dcd705d07a00d093ed0c655e5f126e0a04d13eabaece9ed2c459335f661e0d8c3c9530be474b702bd83a41d577e2ed68808cc435d1428bb82f10ead5aee7b7daf1ff31ad8098fd55a338dbc446b9c8afd15f08313c8bbf00deeaeb87bc5dd9fd6fc2b313058717e47fc9a97c39ff1d7084503a51ed9b713291620f7ede35f21e3486a3c4d06ed6f11df3bb64d55b667665874280758239a45269cf3aa9d3151e906fdb509c14d90fa5e1fe8c4c29"}], 0x1c0}}], 0x2, 0x0) 1.235868162s ago: executing program 2 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000400)={0x1, 0xa, 0xfffdfff7, 0x8, 0x3}) socket$inet(0x10, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) socket$kcm(0x2, 0x200000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capget(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0)={0x56a, 0x20, 0x8, 0x0, 0x2, 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.stat\x00', 0x26e1, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000002f00000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001004e210000060002004e24000008000200e0000002340003ec060002004e230000060002004e240000060001004e200000060002004e200000060002004e230000060001004e200000340004000000000000000000000000000000000008000200ac1414aa140005000000000000000000000000000000000008000100e000000284000e801400018008000100ac141409080002000a0101010600034000000000060003400001000006000340000300000c000280050001009f0000000c00028005000100000000002c00018014000300fe80000000000000000000000000002d14000400fc02000000000000000000000000000106000340000300000600034000040000080008"], 0x1e8}}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x36) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x409, 0x302113, 0x401}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.203204611s ago: executing program 0 (id=7): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2a100, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000600180000000000000000000850000007b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000af120000fffe07001100020000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r6, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x4000042) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000000c0)=0x2) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000340), &(0x7f0000000140)=0x80) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r7, 0x5008, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10000}, 0x28) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000300)=ANY=[@ANYBLOB="a0808e0008e1debb2cd4867b4fac7d502d9e02110000eb0702110000006f12dbf22fb2950002000ac122008c18de0edee62e0c79cd2b897b"], 0x38) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) flistxattr(r5, &(0x7f0000001540)=""/4096, 0x1000) r8 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r8, 0x40084149, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010000c000500174008"], 0x15) 1.11143893s ago: executing program 4 (id=5): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5ef, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121602, 0x0) r3 = dup(r2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r4, 0x80045438, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = openat$comedi(0xffffff9c, &(0x7f0000001180)='/dev/comedi2\x00', 0x4a281, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x41, 0x4, 0x0, 0x7, 0xf54, 0x6]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) bind$ax25(r2, &(0x7f00000010c0)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}, 0x48) 447.640476ms ago: executing program 2 (id=8): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5ef, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121602, 0x0) dup(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r3, 0x80045438, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$comedi(0xffffff9c, &(0x7f0000001180)='/dev/comedi2\x00', 0x4a281, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x41, 0x4, 0x0, 0x7, 0xf54, 0x6]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) bind$ax25(r2, &(0x7f00000010c0)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}, 0x48) 334.467836ms ago: executing program 3 (id=9): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000800000f3066baf80cb8b58eb48aef66bafc0cec0fe72d16da0000c4c37d054e0000b93c090000b80000c0feba000000000f30df180f20583e650f01c9660fdcd42e0f78dc", 0x4e}], 0x1, 0x90, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="340000001100011427bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c0000000001400001400350077673200"/28], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000001c0)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) 0s ago: executing program 1 (id=10): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xa}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ap_ssid, 0x6, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211"], 0x36) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x2, 0x0, "b86b2d", 0x74, 0x6}) bind$bt_hci(r2, &(0x7f0000000280), 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0xe8}}, 0x8040) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000001c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0xfdf0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. [ 56.683503][ T30] audit: type=1400 audit(1754766239.187:62): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.686600][ T5829] cgroup: Unknown subsys name 'net' [ 56.706290][ T30] audit: type=1400 audit(1754766239.187:63): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.735988][ T30] audit: type=1400 audit(1754766239.237:64): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.890906][ T5829] cgroup: Unknown subsys name 'cpuset' [ 56.898518][ T5829] cgroup: Unknown subsys name 'rlimit' [ 57.083861][ T30] audit: type=1400 audit(1754766239.587:65): avc: denied { setattr } for pid=5829 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.115975][ T30] audit: type=1400 audit(1754766239.587:66): avc: denied { create } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.138107][ T30] audit: type=1400 audit(1754766239.587:67): avc: denied { write } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.161260][ T30] audit: type=1400 audit(1754766239.587:68): avc: denied { read } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.181578][ T30] audit: type=1400 audit(1754766239.597:69): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.206667][ T30] audit: type=1400 audit(1754766239.597:70): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.212593][ T5833] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 57.230095][ T30] audit: type=1400 audit(1754766239.637:71): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.123063][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.384907][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.392849][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.400675][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.408839][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.416221][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.423941][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.433165][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.448868][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.450218][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.456058][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.463688][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.478682][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.480795][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.486421][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.500482][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.500715][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.507620][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.516341][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.522338][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.529858][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.536121][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.542974][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.557429][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.561500][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.574288][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.918299][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 61.089626][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 61.155765][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 61.165731][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.172902][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.180642][ T5841] bridge_slave_0: entered allmulticast mode [ 61.187306][ T5841] bridge_slave_0: entered promiscuous mode [ 61.211098][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 61.224617][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.231845][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.239116][ T5841] bridge_slave_1: entered allmulticast mode [ 61.245899][ T5841] bridge_slave_1: entered promiscuous mode [ 61.352181][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.379343][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.386444][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.393962][ T5849] bridge_slave_0: entered allmulticast mode [ 61.401283][ T5849] bridge_slave_0: entered promiscuous mode [ 61.408019][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 61.419505][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.443736][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.451420][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.458664][ T5849] bridge_slave_1: entered allmulticast mode [ 61.465389][ T5849] bridge_slave_1: entered promiscuous mode [ 61.524406][ T5841] team0: Port device team_slave_0 added [ 61.537776][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.545123][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.552299][ T5856] bridge_slave_0: entered allmulticast mode [ 61.559472][ T5856] bridge_slave_0: entered promiscuous mode [ 61.575067][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.587233][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.597237][ T5841] team0: Port device team_slave_1 added [ 61.611494][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.618677][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.625781][ T5856] bridge_slave_1: entered allmulticast mode [ 61.633151][ T5856] bridge_slave_1: entered promiscuous mode [ 61.657906][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.665068][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.672505][ T5848] bridge_slave_0: entered allmulticast mode [ 61.679676][ T5848] bridge_slave_0: entered promiscuous mode [ 61.712270][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.719617][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.726691][ T5848] bridge_slave_1: entered allmulticast mode [ 61.734255][ T5848] bridge_slave_1: entered promiscuous mode [ 61.766115][ T5849] team0: Port device team_slave_0 added [ 61.772720][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.779870][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.806172][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.826084][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.837635][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.855618][ T5849] team0: Port device team_slave_1 added [ 61.862403][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.870003][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.895872][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.909488][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.920844][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.937016][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.944969][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.952279][ T5842] bridge_slave_0: entered allmulticast mode [ 61.959309][ T5842] bridge_slave_0: entered promiscuous mode [ 61.998899][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.005998][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.013341][ T5842] bridge_slave_1: entered allmulticast mode [ 62.021260][ T5842] bridge_slave_1: entered promiscuous mode [ 62.035413][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.042399][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.068340][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.087806][ T5856] team0: Port device team_slave_0 added [ 62.094637][ T5856] team0: Port device team_slave_1 added [ 62.125539][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.132585][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.159009][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.171301][ T5848] team0: Port device team_slave_0 added [ 62.206841][ T5848] team0: Port device team_slave_1 added [ 62.223155][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.230337][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.256473][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.269380][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.282727][ T5841] hsr_slave_0: entered promiscuous mode [ 62.288978][ T5841] hsr_slave_1: entered promiscuous mode [ 62.312000][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.319035][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.345210][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.357327][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.374849][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.382801][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.409316][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.436291][ T5849] hsr_slave_0: entered promiscuous mode [ 62.442571][ T5849] hsr_slave_1: entered promiscuous mode [ 62.448662][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 62.454426][ T5849] Cannot create hsr debugfs directory [ 62.467805][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.475030][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.501015][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.525362][ T5842] team0: Port device team_slave_0 added [ 62.561917][ T5842] team0: Port device team_slave_1 added [ 62.578842][ T51] Bluetooth: hci3: command tx timeout [ 62.578845][ T5857] Bluetooth: hci0: command tx timeout [ 62.599124][ T5856] hsr_slave_0: entered promiscuous mode [ 62.605203][ T5856] hsr_slave_1: entered promiscuous mode [ 62.611798][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 62.617508][ T5856] Cannot create hsr debugfs directory [ 62.668425][ T51] Bluetooth: hci2: command tx timeout [ 62.670736][ T5857] Bluetooth: hci4: command tx timeout [ 62.673997][ T51] Bluetooth: hci1: command tx timeout [ 62.691908][ T5848] hsr_slave_0: entered promiscuous mode [ 62.697958][ T5848] hsr_slave_1: entered promiscuous mode [ 62.704258][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 62.710735][ T5848] Cannot create hsr debugfs directory [ 62.720214][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.727147][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.753260][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.766108][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.773146][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.799257][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.956951][ T5842] hsr_slave_0: entered promiscuous mode [ 62.963007][ T5842] hsr_slave_1: entered promiscuous mode [ 62.969272][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 62.974996][ T5842] Cannot create hsr debugfs directory [ 63.135054][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.151632][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.173548][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.185413][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.246383][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.272795][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.282688][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.301690][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.340625][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.353354][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.363737][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.373126][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.482071][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.491735][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.514487][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.523432][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.590736][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.602135][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.614387][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.624563][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.644299][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.670260][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.688005][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.711737][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.732349][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.739554][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.764108][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.773700][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.780807][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.816512][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.826869][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.834000][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.855973][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.863112][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.879438][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.886588][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.933806][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.940880][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.964459][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.993903][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.022591][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.029736][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.038270][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 64.038282][ T30] audit: type=1400 audit(1754766246.527:86): avc: denied { sys_module } for pid=5841 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.065070][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.116011][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.123350][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.193316][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.223242][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.230397][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.288173][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.295289][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.345503][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.385400][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.459890][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.510988][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.574808][ T5841] veth0_vlan: entered promiscuous mode [ 64.603875][ T5856] veth0_vlan: entered promiscuous mode [ 64.616284][ T5849] veth0_vlan: entered promiscuous mode [ 64.627083][ T5841] veth1_vlan: entered promiscuous mode [ 64.654260][ T5856] veth1_vlan: entered promiscuous mode [ 64.659886][ T51] Bluetooth: hci0: command tx timeout [ 64.664432][ T5849] veth1_vlan: entered promiscuous mode [ 64.670846][ T51] Bluetooth: hci3: command tx timeout [ 64.738711][ T51] Bluetooth: hci4: command tx timeout [ 64.739058][ T5846] Bluetooth: hci1: command tx timeout [ 64.750646][ T5857] Bluetooth: hci2: command tx timeout [ 64.770902][ T5841] veth0_macvtap: entered promiscuous mode [ 64.783256][ T5856] veth0_macvtap: entered promiscuous mode [ 64.794408][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.803336][ T5841] veth1_macvtap: entered promiscuous mode [ 64.827681][ T5849] veth0_macvtap: entered promiscuous mode [ 64.838223][ T5856] veth1_macvtap: entered promiscuous mode [ 64.854184][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.867606][ T5849] veth1_macvtap: entered promiscuous mode [ 64.897327][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.931263][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.942240][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.964337][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.990918][ T77] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.006363][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.016691][ T5848] veth0_vlan: entered promiscuous mode [ 65.025861][ T77] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.036384][ T1164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.068595][ T1164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.091592][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.105516][ T5848] veth1_vlan: entered promiscuous mode [ 65.116326][ T1164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.145310][ T1164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.157737][ T1164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.176277][ T1164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.185072][ T1164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.214725][ T77] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.230094][ T77] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.252152][ T77] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.274334][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.285348][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.331943][ T5848] veth0_macvtap: entered promiscuous mode [ 65.344858][ T5842] veth0_vlan: entered promiscuous mode [ 65.359351][ T4918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.367819][ T4918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.367845][ T5848] veth1_macvtap: entered promiscuous mode [ 65.412201][ T30] audit: type=1400 audit(1754766247.917:87): avc: denied { mounton } for pid=5856 comm="syz-executor" path="/root/syzkaller.7AFciP/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.431917][ T5842] veth1_vlan: entered promiscuous mode [ 65.445163][ T30] audit: type=1400 audit(1754766247.917:88): avc: denied { mount } for pid=5856 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.473949][ T30] audit: type=1400 audit(1754766247.917:89): avc: denied { mounton } for pid=5856 comm="syz-executor" path="/root/syzkaller.7AFciP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.499567][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.507367][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.524185][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.526158][ T30] audit: type=1400 audit(1754766247.917:90): avc: denied { mount } for pid=5856 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.562314][ T30] audit: type=1400 audit(1754766247.927:91): avc: denied { mounton } for pid=5856 comm="syz-executor" path="/root/syzkaller.7AFciP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.566694][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.594456][ T30] audit: type=1400 audit(1754766247.927:92): avc: denied { mounton } for pid=5856 comm="syz-executor" path="/root/syzkaller.7AFciP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.601534][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.630009][ T30] audit: type=1400 audit(1754766247.927:93): avc: denied { unmount } for pid=5856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.643690][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.671735][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.685563][ T30] audit: type=1400 audit(1754766247.947:94): avc: denied { mounton } for pid=5856 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.701508][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.729654][ T30] audit: type=1400 audit(1754766247.947:95): avc: denied { mount } for pid=5856 comm="syz-executor" name="/" dev="gadgetfs" ino=7253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.745520][ T5842] veth0_macvtap: entered promiscuous mode [ 66.026817][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.037991][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.062383][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.072817][ T5842] veth1_macvtap: entered promiscuous mode [ 66.078590][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.088305][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.096337][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.115653][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.125067][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.151579][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.193558][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.233264][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.244307][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.254493][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.259417][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.388179][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.398878][ T9] usb 2-1: device descriptor read/64, error -71 [ 66.412115][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.624524][ T4918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.814757][ T5857] Bluetooth: hci3: command tx timeout [ 66.818622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 66.820335][ T5857] Bluetooth: hci0: command tx timeout [ 66.828478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 66.838430][ T5857] Bluetooth: hci4: command tx timeout [ 66.847459][ T5857] Bluetooth: hci2: command tx timeout [ 66.852866][ T5857] Bluetooth: hci1: command tx timeout [ 66.869554][ T4918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.898509][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 67.038606][ T9] usb 2-1: device descriptor read/64, error -71 [ 67.060068][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.076018][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.149053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.368508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 67.368711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 67.420486][ T9] usb usb2-port1: attempt power cycle [ 67.534616][ T4918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.552927][ T4918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.718924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #241!!! [ 67.779041][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 67.809825][ T9] usb 2-1: device descriptor read/8, error -71 [ 67.918920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.927507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.058882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.079221][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 68.126599][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 68.135615][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 68.178686][ T5985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.255583][ T9] usb 2-1: device descriptor read/8, error -71 [ 68.268687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.337790][ T5987] comedi comedi2: c6xdigio: I/O port conflict (0x3c4,3) [ 68.375500][ T9] usb usb2-port1: unable to enumerate USB device [ 68.403209][ T5987] process 'syz.4.5' launched './file0' with NULL argv: empty string added [ 68.825113][ T5992] comedi comedi2: c6xdigio: I/O port conflict (0x3c4,3) [ 68.832311][ T5992] ================================================================== [ 68.840363][ T5992] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 68.848345][ T5992] Read of size 8 at addr ffff888032a77a30 by task syz.2.8/5992 [ 68.855880][ T5992] [ 68.858198][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.2.8 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 68.858223][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.858240][ T5992] Call Trace: [ 68.858246][ T5992] [ 68.858254][ T5992] dump_stack_lvl+0x116/0x1f0 [ 68.858276][ T5992] print_report+0xcd/0x630 [ 68.858298][ T5992] ? __virt_addr_valid+0x81/0x610 [ 68.858325][ T5992] ? __phys_addr+0xe8/0x180 [ 68.858350][ T5992] ? sysfs_remove_file_ns+0x63/0x70 [ 68.858369][ T5992] kasan_report+0xe0/0x110 [ 68.858388][ T5992] ? sysfs_remove_file_ns+0x63/0x70 [ 68.858409][ T5992] sysfs_remove_file_ns+0x63/0x70 [ 68.858430][ T5992] driver_remove_file+0x4a/0x60 [ 68.858453][ T5992] bus_remove_driver+0x224/0x2c0 [ 68.858481][ T5992] driver_unregister+0x76/0xb0 [ 68.858500][ T5992] comedi_device_detach_locked+0x12c/0xa50 [ 68.858522][ T5992] comedi_device_detach+0x67/0xb0 [ 68.858540][ T5992] comedi_device_attach+0x43d/0x900 [ 68.858561][ T5992] do_devconfig_ioctl+0x1b1/0x710 [ 68.858584][ T5992] ? __mutex_lock+0x343/0x10b0 [ 68.858605][ T5992] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 68.858634][ T5992] ? find_held_lock+0x2b/0x80 [ 68.858658][ T5992] comedi_unlocked_ioctl+0x165d/0x2f00 [ 68.858689][ T5992] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 68.858717][ T5992] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.858739][ T5992] ? do_vfs_ioctl+0x128/0x14f0 [ 68.858767][ T5992] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.858794][ T5992] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.858825][ T5992] ? hook_file_ioctl_common+0x145/0x410 [ 68.858847][ T5992] ? selinux_file_ioctl+0x180/0x270 [ 68.858871][ T5992] ? selinux_file_ioctl+0xb4/0x270 [ 68.858897][ T5992] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 68.858925][ T5992] __x64_sys_ioctl+0x18e/0x210 [ 68.858953][ T5992] do_syscall_64+0xcd/0x4c0 [ 68.858973][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.858993][ T5992] RIP: 0033:0x7eff1978ebe9 [ 68.859008][ T5992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.859026][ T5992] RSP: 002b:00007eff1a57d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.859045][ T5992] RAX: ffffffffffffffda RBX: 00007eff199b6090 RCX: 00007eff1978ebe9 [ 68.859057][ T5992] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000009 [ 68.859069][ T5992] RBP: 00007eff19811e19 R08: 0000000000000000 R09: 0000000000000000 [ 68.859080][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.859092][ T5992] R13: 00007eff199b6128 R14: 00007eff199b6090 R15: 00007ffd7e972dc8 [ 68.859109][ T5992] [ 68.859115][ T5992] [ 68.992227][ T5846] Bluetooth: hci1: command tx timeout [ 68.996963][ T5992] Allocated by task 5967: [ 68.996973][ T5992] kasan_save_stack+0x33/0x60 [ 68.996996][ T5992] kasan_save_track+0x14/0x30 [ 69.002045][ T5857] Bluetooth: hci2: command tx timeout [ 69.008806][ T5992] __kasan_kmalloc+0xaa/0xb0 [ 69.008826][ T5992] bus_add_driver+0x92/0x690 [ 69.008848][ T5992] driver_register+0x15c/0x4b0 [ 69.008865][ T5992] c6xdigio_attach+0xa3/0x4b0 [ 69.008883][ T5992] comedi_device_attach+0x3b0/0x900 [ 69.008899][ T5992] do_devconfig_ioctl+0x1b1/0x710 [ 69.008919][ T5992] comedi_unlocked_ioctl+0x165d/0x2f00 [ 69.008942][ T5992] __x64_sys_ioctl+0x18e/0x210 [ 69.008966][ T5992] do_syscall_64+0xcd/0x4c0 [ 69.008984][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.009001][ T5992] [ 69.009005][ T5992] Freed by task 5987: [ 69.009014][ T5992] kasan_save_stack+0x33/0x60 [ 69.009029][ T5992] kasan_save_track+0x14/0x30 [ 69.009044][ T5992] kasan_save_free_info+0x3b/0x60 [ 69.009068][ T5992] __kasan_slab_free+0x60/0x70 [ 69.009085][ T5992] kfree+0x2b4/0x4d0 [ 69.009114][ T5992] kobject_put+0x1e7/0x5a0 [ 69.009131][ T5992] bus_remove_driver+0x16e/0x2c0 [ 69.009156][ T5992] driver_unregister+0x76/0xb0 [ 69.009174][ T5992] comedi_device_detach_locked+0x12c/0xa50 [ 69.009188][ T5992] comedi_device_detach+0x67/0xb0 [ 69.009203][ T5992] comedi_device_attach+0x43d/0x900 [ 69.009218][ T5992] do_devconfig_ioctl+0x1b1/0x710 [ 69.009238][ T5992] comedi_unlocked_ioctl+0x165d/0x2f00 [ 69.009262][ T5992] __x64_sys_ioctl+0x18e/0x210 [ 69.009285][ T5992] do_syscall_64+0xcd/0x4c0 [ 69.009301][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.009317][ T5992] [ 69.009322][ T5992] The buggy address belongs to the object at ffff888032a77a00 [ 69.009322][ T5992] which belongs to the cache kmalloc-256 of size 256 [ 69.009335][ T5992] The buggy address is located 48 bytes inside of [ 69.009335][ T5992] freed 256-byte region [ffff888032a77a00, ffff888032a77b00) [ 69.009352][ T5992] [ 69.009357][ T5992] The buggy address belongs to the physical page: [ 69.009364][ T5992] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32a76 [ 69.009380][ T5992] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 69.009393][ T5992] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 69.009410][ T5992] page_type: f5(slab) [ 69.009427][ T5992] raw: 00fff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 69.009443][ T5992] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 69.009459][ T5992] head: 00fff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 69.009473][ T5992] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 69.009493][ T5992] head: 00fff00000000001 ffffea0000ca9d81 00000000ffffffff 00000000ffffffff [ 69.009508][ T5992] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 69.009518][ T5992] page dumped because: kasan: bad access detected [ 69.015857][ T51] Bluetooth: hci4: command tx timeout [ 69.020201][ T5992] page_owner tracks the page as allocated [ 69.020209][ T5992] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5218, tgid 5218 (udevd), ts 66285083314, free_ts 66135964819 [ 69.025348][ T5846] Bluetooth: hci0: command tx timeout [ 69.031080][ T5992] post_alloc_hook+0x1c0/0x230 [ 69.031108][ T5992] get_page_from_freelist+0x132b/0x38e0 [ 69.031124][ T5992] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 69.036316][ T5857] Bluetooth: hci3: command tx timeout [ 69.040318][ T5992] alloc_pages_mpol+0x1fb/0x550 [ 69.040338][ T5992] new_slab+0x247/0x330 [ 69.040357][ T5992] ___slab_alloc+0xcf2/0x1740 [ 69.040377][ T5992] __slab_alloc.constprop.0+0x56/0xb0 [ 69.040401][ T5992] __kmalloc_cache_noprof+0xfb/0x3e0 [ 69.040421][ T5992] inode_doinit_use_xattr+0x54/0x410 [ 69.494190][ T5992] inode_doinit_with_dentry+0x10c8/0x12e0 [ 69.499900][ T5992] selinux_d_instantiate+0x26/0x30 [ 69.504988][ T5992] security_d_instantiate+0x142/0x1a0 [ 69.510341][ T5992] d_splice_alias_ops+0x92/0x840 [ 69.515255][ T5992] kernfs_iop_lookup+0x23f/0x2d0 [ 69.520175][ T5992] __lookup_slow+0x24e/0x460 [ 69.524746][ T5992] walk_component+0x353/0x5b0 [ 69.529397][ T5992] page last free pid 5845 tgid 5845 stack trace: [ 69.535695][ T5992] __free_frozen_pages+0x7d5/0x10f0 [ 69.540878][ T5992] qlist_free_all+0x4d/0x120 [ 69.545447][ T5992] kasan_quarantine_reduce+0x195/0x1e0 [ 69.550880][ T5992] __kasan_slab_alloc+0x69/0x90 [ 69.555706][ T5992] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 69.561060][ T5992] wg_noise_handshake_begin_session+0xe5/0xe80 [ 69.567193][ T5992] wg_receive_handshake_packet+0x74c/0xbf0 [ 69.572979][ T5992] wg_packet_handshake_receive_worker+0x17f/0x3a0 [ 69.579374][ T5992] process_one_work+0x9cc/0x1b70 [ 69.584287][ T5992] worker_thread+0x6c8/0xf10 [ 69.588851][ T5992] kthread+0x3c5/0x780 [ 69.592893][ T5992] ret_from_fork+0x5d4/0x6f0 [ 69.597459][ T5992] ret_from_fork_asm+0x1a/0x30 [ 69.602203][ T5992] [ 69.604502][ T5992] Memory state around the buggy address: [ 69.610104][ T5992] ffff888032a77900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.618141][ T5992] ffff888032a77980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.626180][ T5992] >ffff888032a77a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.634217][ T5992] ^ [ 69.639819][ T5992] ffff888032a77a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.647855][ T5992] ffff888032a77b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.655885][ T5992] ================================================================== [ 69.670516][ T5992] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.677718][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.2.8 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 69.689074][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.699129][ T5992] Call Trace: [ 69.702387][ T5992] [ 69.705302][ T5992] dump_stack_lvl+0x3d/0x1f0 [ 69.709877][ T5992] vpanic+0x6e8/0x7a0 [ 69.713845][ T5992] ? __pfx_vpanic+0x10/0x10 [ 69.718336][ T5992] ? sysfs_remove_file_ns+0x63/0x70 [ 69.723514][ T5992] panic+0xca/0xd0 [ 69.727231][ T5992] ? __pfx_panic+0x10/0x10 [ 69.731720][ T5992] ? sysfs_remove_file_ns+0x63/0x70 [ 69.736897][ T5992] ? preempt_schedule_common+0x44/0xc0 [ 69.742340][ T5992] ? preempt_schedule_thunk+0x16/0x30 [ 69.747697][ T5992] check_panic_on_warn+0xab/0xb0 [ 69.752611][ T5992] end_report+0x107/0x170 [ 69.756920][ T5992] kasan_report+0xee/0x110 [ 69.761314][ T5992] ? sysfs_remove_file_ns+0x63/0x70 [ 69.766504][ T5992] sysfs_remove_file_ns+0x63/0x70 [ 69.771509][ T5992] driver_remove_file+0x4a/0x60 [ 69.776340][ T5992] bus_remove_driver+0x224/0x2c0 [ 69.781267][ T5992] driver_unregister+0x76/0xb0 [ 69.786010][ T5992] comedi_device_detach_locked+0x12c/0xa50 [ 69.791795][ T5992] comedi_device_detach+0x67/0xb0 [ 69.796794][ T5992] comedi_device_attach+0x43d/0x900 [ 69.801972][ T5992] do_devconfig_ioctl+0x1b1/0x710 [ 69.806974][ T5992] ? __mutex_lock+0x343/0x10b0 [ 69.811715][ T5992] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 69.817245][ T5992] ? find_held_lock+0x2b/0x80 [ 69.821903][ T5992] comedi_unlocked_ioctl+0x165d/0x2f00 [ 69.827348][ T5992] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 69.833138][ T5992] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.839014][ T5992] ? do_vfs_ioctl+0x128/0x14f0 [ 69.843765][ T5992] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 69.848774][ T5992] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 69.855607][ T5992] ? hook_file_ioctl_common+0x145/0x410 [ 69.861130][ T5992] ? selinux_file_ioctl+0x180/0x270 [ 69.866308][ T5992] ? selinux_file_ioctl+0xb4/0x270 [ 69.871406][ T5992] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 69.877195][ T5992] __x64_sys_ioctl+0x18e/0x210 [ 69.881944][ T5992] do_syscall_64+0xcd/0x4c0 [ 69.886423][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.892292][ T5992] RIP: 0033:0x7eff1978ebe9 [ 69.896685][ T5992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.916267][ T5992] RSP: 002b:00007eff1a57d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.924656][ T5992] RAX: ffffffffffffffda RBX: 00007eff199b6090 RCX: 00007eff1978ebe9 [ 69.932603][ T5992] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000009 [ 69.940550][ T5992] RBP: 00007eff19811e19 R08: 0000000000000000 R09: 0000000000000000 [ 69.948502][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.956463][ T5992] R13: 00007eff199b6128 R14: 00007eff199b6090 R15: 00007ffd7e972dc8 [ 69.964431][ T5992] [ 69.967617][ T5992] Kernel Offset: disabled [ 69.971921][ T5992] Rebooting in 86400 seconds..