Warning: Permanently added '[localhost]:45283' (ED25519) to the list of known hosts. [ 43.026692][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 43.026710][ T43] audit: type=1400 audit(1791991578.031:138): avc: denied { execute } for pid=5729 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 43.027324][ T43] audit: type=1400 audit(1791991578.031:139): avc: denied { execute_no_trans } for pid=5729 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/10/14 15:26:19 parsed 1 programs 2026/10/14 15:26:19 serving rpc on tcp://35307 [ 44.053417][ T43] audit: type=1400 audit(1791991579.061:140): avc: denied { node_bind } for pid=5729 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 46.740476][ T43] audit: type=1400 audit(1791991581.751:141): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.742387][ T43] audit: type=1400 audit(1791991581.751:142): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.744843][ T5739] cgroup: Unknown subsys name 'net' [ 46.746019][ T43] audit: type=1400 audit(1791991581.751:143): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.892540][ T5739] cgroup: Unknown subsys name 'cpuset' [ 46.895217][ T5739] cgroup: Unknown subsys name 'rlimit' [ 47.020291][ T43] audit: type=1400 audit(1791991582.031:144): avc: denied { setattr } for pid=5739 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.020623][ T43] audit: type=1400 audit(1791991582.031:145): avc: denied { create } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.020818][ T43] audit: type=1400 audit(1791991582.031:146): avc: denied { write } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.021485][ T43] audit: type=1400 audit(1791991582.031:147): avc: denied { read } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.092062][ T5741] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.207419][ T5739] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.239001][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 50.239021][ T43] audit: type=1400 audit(1791991585.251:154): avc: denied { execmem } for pid=5744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.245746][ T43] audit: type=1400 audit(1791991585.251:155): avc: denied { read } for pid=5745 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.246165][ T43] audit: type=1400 audit(1791991585.251:156): avc: denied { open } for pid=5745 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.247453][ T43] audit: type=1400 audit(1791991585.251:157): avc: denied { mounton } for pid=5745 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 50.318414][ T43] audit: type=1400 audit(1791991585.331:158): avc: denied { mount } for pid=5745 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.319693][ T43] audit: type=1400 audit(1791991585.331:159): avc: denied { mounton } for pid=5745 comm="syz-executor" path="/syzkaller.EboGfx/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.321012][ T43] audit: type=1400 audit(1791991585.331:160): avc: denied { mount } for pid=5745 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.323638][ T43] audit: type=1400 audit(1791991585.331:161): avc: denied { mounton } for pid=5745 comm="syz-executor" path="/syzkaller.EboGfx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 50.325083][ T43] audit: type=1400 audit(1791991585.331:162): avc: denied { mounton } for pid=5745 comm="syz-executor" path="/syzkaller.EboGfx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 50.328588][ T43] audit: type=1400 audit(1791991585.341:163): avc: denied { unmount } for pid=5745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.390794][ T5745] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.686367][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.687701][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.688801][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.690013][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.690836][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.600445][ T5809] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.601302][ T5809] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.603723][ T5809] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.755097][ T5809] infiniband rxe0: set active [ 52.755702][ T850] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.756211][ T5809] infiniband rxe0: added rxe_eth0 [ 52.769585][ T5809] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 52.769617][ T5809] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 52.769655][ T5809] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 52.785963][ T5809] RDS/IB: rxe0: added [ 52.786126][ T5809] smc: adding ib device rxe0 with port count 1 [ 52.786166][ T5809] smc: ib device rxe0 port 1 has no pnetid [ 52.788938][ T5483] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.802598][ T5809] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.025465][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.025516][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.025578][ T5809] bridge_slave_0: entered allmulticast mode [ 53.026831][ T5809] bridge_slave_0: entered promiscuous mode [ 53.032351][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.032420][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.032475][ T5809] bridge_slave_1: entered allmulticast mode [ 53.033180][ T5809] bridge_slave_1: entered promiscuous mode [ 53.049313][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.052470][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.065187][ T5809] team0: Port device team_slave_0 added [ 53.066545][ T5809] team0: Port device team_slave_1 added [ 53.078794][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.078804][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.078817][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.080171][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.080179][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.080190][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.100853][ T5809] hsr_slave_0: entered promiscuous mode [ 53.101337][ T5809] hsr_slave_1: entered promiscuous mode [ 53.199808][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.204603][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.205693][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.210437][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.211106][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.213632][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.214041][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.215752][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.237168][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.237262][ T5809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.237683][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.237783][ T5809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.283204][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.294850][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.295927][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.307360][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.314266][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.314351][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.321004][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.321088][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.637601][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.676144][ T5809] veth0_vlan: entered promiscuous mode [ 53.681236][ T5809] veth1_vlan: entered promiscuous mode [ 53.698618][ T5809] veth0_macvtap: entered promiscuous mode [ 53.702287][ T5809] veth1_macvtap: entered promiscuous mode [ 53.720108][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.725534][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.768765][ T5603] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.769010][ T5603] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.769029][ T5603] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.769046][ T5603] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.823429][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.827844][ T5854] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.899864][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.957817][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.990251][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.990269][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.017571][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.017590][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.047150][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.151467][ T5860] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.356402][ T5865] rxe_eth0 speed is unknown, defaulting to 1000 2026/10/14 15:26:29 executed programs: 0 [ 54.781646][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.782149][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.782646][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.783573][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.784177][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.997087][ T5870] rxe_eth0 speed is unknown, defaulting to 1000 [ 55.260574][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.260708][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.260799][ T5870] bridge_slave_0: entered allmulticast mode [ 55.261988][ T5870] bridge_slave_0: entered promiscuous mode [ 55.269408][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.269500][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.269587][ T5870] bridge_slave_1: entered allmulticast mode [ 55.270576][ T5870] bridge_slave_1: entered promiscuous mode [ 55.285687][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.287373][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.308752][ T5870] team0: Port device team_slave_0 added [ 55.310083][ T5870] team0: Port device team_slave_1 added [ 55.324513][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.324524][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.324536][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.325556][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.325566][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.325586][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.355869][ T5870] hsr_slave_0: entered promiscuous mode [ 55.356575][ T5870] hsr_slave_1: entered promiscuous mode [ 55.357048][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 55.357144][ T5870] Cannot create hsr debugfs directory [ 56.457615][ T12] bridge_slave_1: left allmulticast mode [ 56.457650][ T12] bridge_slave_1: left promiscuous mode [ 56.458717][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.464630][ T12] bridge_slave_0: left allmulticast mode [ 56.464646][ T12] bridge_slave_0: left promiscuous mode [ 56.464787][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.584123][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.586952][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.590519][ T12] bond0 (unregistering): Released all slaves [ 56.676003][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 56.676019][ T43] audit: type=1400 audit(1791991591.681:188): avc: denied { write } for pid=5890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.749332][ T43] audit: type=1400 audit(1791991591.761:189): avc: denied { write } for pid=5893 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.782154][ T12] hsr_slave_0: left promiscuous mode [ 56.785304][ T12] hsr_slave_1: left promiscuous mode [ 56.785719][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.785804][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.787101][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.787111][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.796169][ T12] veth1_macvtap: left promiscuous mode [ 56.796214][ T12] veth0_macvtap: left promiscuous mode [ 56.796297][ T12] veth1_vlan: left promiscuous mode [ 56.796364][ T12] veth0_vlan: left promiscuous mode [ 56.829009][ T5090] Bluetooth: hci0: command tx timeout [ 57.002321][ T12] team0 (unregistering): Port device team_slave_1 removed [ 57.014625][ T12] team0 (unregistering): Port device team_slave_0 removed [ 57.112774][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 57.232305][ T43] audit: type=1400 audit(1791991592.241:190): avc: denied { write } for pid=5896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.267121][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.270514][ T5870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.271737][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.276397][ T5870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.277076][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.283546][ T5870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.284383][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.287319][ T5870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.295756][ T43] audit: type=1400 audit(1791991592.301:191): avc: denied { write } for pid=5899 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.332028][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.337629][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.341048][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.341091][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.345547][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.345590][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.661076][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.682077][ T5870] veth0_vlan: entered promiscuous mode [ 57.686215][ T5870] veth1_vlan: entered promiscuous mode [ 57.702128][ T5870] veth0_macvtap: entered promiscuous mode [ 57.704320][ T5870] veth1_macvtap: entered promiscuous mode [ 57.712318][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.716946][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.792581][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.792602][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.862060][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.862084][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.878979][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.879228][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.879263][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.879293][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.907815][ T43] audit: type=1400 audit(1791991592.911:192): avc: denied { mount } for pid=5918 comm="syz.0.17" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 57.910967][ T43] audit: type=1400 audit(1791991592.921:193): avc: denied { ioctl } for pid=5918 comm="syz.0.17" path="socket:[7111]" dev="sockfs" ino=7111 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.933476][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.933494][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.938204][ T43] audit: type=1400 audit(1791991592.941:194): avc: denied { unmount } for pid=5870 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 57.965457][ C2] ------------[ cut here ]------------ [ 57.965471][ C2] !oldest [ 57.965477][ C2] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x19d8/0x2450, CPU#2: syz-execprog/5734 [ 57.974511][ C2] Modules linked in: [ 57.976229][ C2] CPU: 2 UID: 0 PID: 5734 Comm: syz-execprog Not tainted syzkaller #0 PREEMPT(full) [ 57.980266][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.984479][ C2] RIP: 0010:__cfg80211_bss_update+0x19d8/0x2450 [ 57.987177][ C2] Code: 00 31 ff 41 89 c5 89 c6 e8 85 4d ea f6 45 85 ed 0f 85 65 f9 ff ff e8 07 53 ea f6 90 0f 0b 90 e9 57 f9 ff ff e8 f9 52 ea f6 90 <0f> 0b 90 e9 fc fa ff ff e8 eb 52 ea f6 48 8b 44 24 08 48 8d 88 ac [ 57.995932][ C2] RSP: 0018:ffffc90000658348 EFLAGS: 00010246 [ 57.998613][ C2] RAX: 0000000000000000 RBX: ffffffff92459a04 RCX: 0000000000000302 [ 58.001928][ C2] RDX: ffff88802c090000 RSI: ffffffff8b220397 RDI: ffff88802c090000 [ 58.005272][ C2] RBP: ffff88803f82f088 R08: 0000000000000005 R09: 0000000000000000 [ 58.008618][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88803f82f000 [ 58.012299][ C2] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880516b0190 [ 58.015708][ C2] FS: 0000232cf7981890(0000) GS:ffff8880d4b46000(0000) knlGS:0000000000000000 [ 58.019555][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.022354][ C2] CR2: 0000232cff15a000 CR3: 000000002b565000 CR4: 0000000000352ef0 [ 58.025616][ C2] Call Trace: [ 58.027093][ C2] [ 58.028408][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 58.030640][ C2] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 58.033356][ C2] cfg80211_inform_single_bss_data+0x770/0x1dc0 [ 58.036017][ C2] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 58.038914][ C2] ? bpf_ksym_find+0x128/0x1c0 [ 58.040957][ C2] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 58.043574][ C2] ? is_bpf_text_address+0x94/0x1a0 [ 58.045759][ C2] ? cfg80211_inform_bss_data+0x230/0x3c20 [ 58.048349][ C2] cfg80211_inform_bss_data+0x230/0x3c20 [ 58.050709][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 58.052800][ C2] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 58.055333][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 58.057411][ C2] ? lock_acquire+0x1d1/0x380 [ 58.059488][ C2] ? unwind_next_frame+0xbd/0x2090 [ 58.061595][ C2] ? lock_acquire+0x1d1/0x380 [ 58.063563][ C2] ? is_bpf_text_address+0x25/0x1a0 [ 58.065705][ C2] ? find_held_lock+0x2b/0x80 [ 58.067758][ C2] ? is_bpf_text_address+0x8a/0x1a0 [ 58.070068][ C2] ? is_bpf_text_address+0x8a/0x1a0 [ 58.072296][ C2] ? bpf_ksym_find+0x128/0x1c0 [ 58.074343][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 58.076474][ C2] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 58.079112][ C2] ieee80211_bss_info_update+0x310/0xab0 [ 58.081423][ C2] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 58.083990][ C2] ? do_nanosleep+0x113/0x500 [ 58.086010][ C2] ? hrtimer_nanosleep+0x14f/0x350 [ 58.088306][ C2] ? __x64_sys_nanosleep+0x20c/0x2a0 [ 58.090522][ C2] ? do_syscall_64+0x123/0x790 [ 58.092535][ C2] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 58.094977][ C2] ieee80211_scan_rx+0x4e6/0xb60 [ 58.097058][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 58.099258][ C2] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 58.101772][ C2] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 58.104494][ C2] ? kcov_remote_start+0x3bf/0x6d0 [ 58.106622][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.108895][ C2] ? ieee80211_clean_skb+0x1a7/0x740 [ 58.111093][ C2] ieee80211_rx_list+0xf19/0x2160 [ 58.113184][ C2] ? lock_acquire+0x1d1/0x380 [ 58.115150][ C2] ? ieee80211_rx_napi+0x9a/0x400 [ 58.117227][ C2] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 58.119628][ C2] ieee80211_rx_napi+0xdc/0x400 [ 58.121644][ C2] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 58.123909][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.126016][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 58.128534][ C2] ieee80211_handle_queued_frames+0xc8/0x120 [ 58.131009][ C2] tasklet_action_common+0x2de/0x3d0 [ 58.133202][ C2] handle_softirqs+0x1e6/0x9d0 [ 58.135214][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 58.137470][ C2] ? _raw_spin_unlock+0x28/0x50 [ 58.139632][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 58.141951][ C2] __irq_exit_rcu+0x16a/0x210 [ 58.143935][ C2] irq_exit_rcu+0x9/0x30 [ 58.145713][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 58.148057][ C2] [ 58.149370][ C2] [ 58.150603][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 58.153112][ C2] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 58.155899][ C2] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 b3 fe ff 09 e8 1e 42 3d 00 fb 48 8d bb 18 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 58.163939][ C2] RSP: 0018:ffffc900034efad0 EFLAGS: 00000202 [ 58.166385][ C2] RAX: 0000000000046d23 RBX: ffff88802c090000 RCX: 0000000000000000 [ 58.169791][ C2] RDX: 0000000000000001 RSI: ffffffff8e3e347e RDI: ffff88802c091718 [ 58.172859][ C2] RBP: ffffc900034efb28 R08: 0000000000000001 R09: 0000000000000000 [ 58.176084][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888029b48000 [ 58.179404][ C2] R13: 0000000000000000 R14: ffffffff92459a04 R15: ffff88806a43bf00 [ 58.182659][ C2] __schedule+0x1261/0x6920 [ 58.184557][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 58.186619][ C2] ? __pfx___schedule+0x10/0x10 [ 58.188725][ C2] ? find_held_lock+0x2b/0x80 [ 58.190689][ C2] ? schedule+0x225/0x2c0 [ 58.192527][ C2] schedule+0xdd/0x2c0 [ 58.194217][ C2] do_nanosleep+0x113/0x500 [ 58.196107][ C2] ? __pfx_do_nanosleep+0x10/0x10 [ 58.198308][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.200861][ C2] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 58.203046][ C2] ? __hrtimer_setup+0x208/0x330 [ 58.205093][ C2] hrtimer_nanosleep+0x14f/0x350 [ 58.207860][ C2] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 58.210178][ C2] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 58.212343][ C2] ? __x64_sys_futex+0x34f/0x4d0 [ 58.214384][ C2] ? __x64_sys_futex+0x358/0x4d0 [ 58.216473][ C2] __x64_sys_nanosleep+0x20c/0x2a0 [ 58.218646][ C2] ? __pfx___x64_sys_nanosleep+0x10/0x10 [ 58.220948][ C2] do_syscall_64+0x123/0x790 [ 58.222897][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.225480][ C2] RIP: 0033:0x48ecf7 [ 58.227137][ C2] Code: 8b 44 24 20 b9 40 42 0f 00 f7 f1 48 89 04 24 b8 e8 03 00 00 f7 e2 48 89 44 24 08 48 89 e7 be 00 00 00 00 b8 23 00 00 00 0f 05 <48> 83 c4 10 5d c3 cc cc cc b8 ba 00 00 00 0f 05 89 44 24 08 c3 cc [ 58.235081][ C2] RSP: 002b:0000232cf7a13c70 EFLAGS: 00000206 ORIG_RAX: 0000000000000023 [ 58.238559][ C2] RAX: ffffffffffffffda RBX: 0000232cf79681a0 RCX: 000000000048ecf7 [ 58.241809][ C2] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000232cf7a13c70 [ 58.245169][ C2] RBP: 0000232cf7a13c80 R08: 0000000000000000 R09: 0000000000000000 [ 58.248525][ C2] R10: a0761d6478bd642f R11: 0000000000000206 R12: 0000232cf7968008 [ 58.251739][ C2] R13: 0000000000000001 R14: 0000232cf79352c0 R15: 0000000000000003 [ 58.255023][ C2] [ 58.256359][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.259338][ C2] CPU: 2 UID: 0 PID: 5734 Comm: syz-execprog Not tainted syzkaller #0 PREEMPT(full) [ 58.263207][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.267283][ C2] Call Trace: [ 58.268734][ C2] [ 58.269950][ C2] dump_stack_lvl+0x100/0x190 [ 58.271912][ C2] vpanic+0x553/0x970 [ 58.273665][ C2] ? __pfx_vpanic+0x10/0x10 [ 58.275655][ C2] panic+0xd1/0xe0 [ 58.277299][ C2] ? __pfx_panic+0x10/0x10 [ 58.279271][ C2] check_panic_on_warn.cold+0x19/0x34 [ 58.281587][ C2] ? __cfg80211_bss_update+0x19d8/0x2450 [ 58.284023][ C2] __warn.cold+0x191/0x318 [ 58.285946][ C2] __report_bug+0x30f/0x440 [ 58.287928][ C2] ? __cfg80211_bss_update+0x19d8/0x2450 [ 58.290263][ C2] ? __pfx___report_bug+0x10/0x10 [ 58.292426][ C2] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.294933][ C2] ? __cfg80211_bss_update+0x19d8/0x2450 [ 58.297389][ C2] report_bug+0xb3/0x220 [ 58.299240][ C2] ? __cfg80211_bss_update+0x19d8/0x2450 [ 58.301676][ C2] handle_bug+0x16a/0x2a0 [ 58.303556][ C2] exc_invalid_op+0x17/0x50 [ 58.305563][ C2] asm_exc_invalid_op+0x1a/0x20 [ 58.307655][ C2] RIP: 0010:__cfg80211_bss_update+0x19d8/0x2450 [ 58.310335][ C2] Code: 00 31 ff 41 89 c5 89 c6 e8 85 4d ea f6 45 85 ed 0f 85 65 f9 ff ff e8 07 53 ea f6 90 0f 0b 90 e9 57 f9 ff ff e8 f9 52 ea f6 90 <0f> 0b 90 e9 fc fa ff ff e8 eb 52 ea f6 48 8b 44 24 08 48 8d 88 ac [ 58.318482][ C2] RSP: 0018:ffffc90000658348 EFLAGS: 00010246 [ 58.321179][ C2] RAX: 0000000000000000 RBX: ffffffff92459a04 RCX: 0000000000000302 [ 58.324596][ C2] RDX: ffff88802c090000 RSI: ffffffff8b220397 RDI: ffff88802c090000 [ 58.327959][ C2] RBP: ffff88803f82f088 R08: 0000000000000005 R09: 0000000000000000 [ 58.331321][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88803f82f000 [ 58.334657][ C2] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880516b0190 [ 58.338034][ C2] ? __cfg80211_bss_update+0x19d7/0x2450 [ 58.340456][ C2] ? __cfg80211_bss_update+0x19d7/0x2450 [ 58.342897][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 58.345240][ C2] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 58.348020][ C2] cfg80211_inform_single_bss_data+0x770/0x1dc0 [ 58.350712][ C2] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 58.353569][ C2] ? bpf_ksym_find+0x128/0x1c0 [ 58.355626][ C2] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 58.358217][ C2] ? is_bpf_text_address+0x94/0x1a0 [ 58.360457][ C2] ? cfg80211_inform_bss_data+0x230/0x3c20 [ 58.363046][ C2] cfg80211_inform_bss_data+0x230/0x3c20 [ 58.365498][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 58.367684][ C2] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 58.370298][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 58.372473][ C2] ? lock_acquire+0x1d1/0x380 [ 58.374523][ C2] ? unwind_next_frame+0xbd/0x2090 [ 58.376729][ C2] ? lock_acquire+0x1d1/0x380 [ 58.378770][ C2] ? is_bpf_text_address+0x25/0x1a0 [ 58.380964][ C2] ? find_held_lock+0x2b/0x80 [ 58.382934][ C2] ? is_bpf_text_address+0x8a/0x1a0 [ 58.385100][ C2] ? is_bpf_text_address+0x8a/0x1a0 [ 58.387280][ C2] ? bpf_ksym_find+0x128/0x1c0 [ 58.389378][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 58.391461][ C2] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 58.393955][ C2] ieee80211_bss_info_update+0x310/0xab0 [ 58.396297][ C2] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 58.398950][ C2] ? do_nanosleep+0x113/0x500 [ 58.400993][ C2] ? hrtimer_nanosleep+0x14f/0x350 [ 58.403174][ C2] ? __x64_sys_nanosleep+0x20c/0x2a0 [ 58.405344][ C2] ? do_syscall_64+0x123/0x790 [ 58.407325][ C2] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 58.409722][ C2] ieee80211_scan_rx+0x4e6/0xb60 [ 58.411761][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 58.413791][ C2] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 58.416239][ C2] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 58.418955][ C2] ? kcov_remote_start+0x3bf/0x6d0 [ 58.421139][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.423313][ C2] ? ieee80211_clean_skb+0x1a7/0x740 [ 58.425472][ C2] ieee80211_rx_list+0xf19/0x2160 [ 58.427559][ C2] ? lock_acquire+0x1d1/0x380 [ 58.429605][ C2] ? ieee80211_rx_napi+0x9a/0x400 [ 58.431699][ C2] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 58.434081][ C2] ieee80211_rx_napi+0xdc/0x400 [ 58.436226][ C2] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 58.438537][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.440784][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 58.443332][ C2] ieee80211_handle_queued_frames+0xc8/0x120 [ 58.445929][ C2] tasklet_action_common+0x2de/0x3d0 [ 58.448225][ C2] handle_softirqs+0x1e6/0x9d0 [ 58.450318][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 58.452596][ C2] ? _raw_spin_unlock+0x28/0x50 [ 58.454717][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 58.457146][ C2] __irq_exit_rcu+0x16a/0x210 [ 58.459219][ C2] irq_exit_rcu+0x9/0x30 [ 58.461074][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 58.463510][ C2] [ 58.464793][ C2] [ 58.466091][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 58.468656][ C2] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 58.471468][ C2] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 b3 fe ff 09 e8 1e 42 3d 00 fb 48 8d bb 18 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 58.479596][ C2] RSP: 0018:ffffc900034efad0 EFLAGS: 00000202 [ 58.482222][ C2] RAX: 0000000000046d23 RBX: ffff88802c090000 RCX: 0000000000000000 [ 58.485636][ C2] RDX: 0000000000000001 RSI: ffffffff8e3e347e RDI: ffff88802c091718 [ 58.488932][ C2] RBP: ffffc900034efb28 R08: 0000000000000001 R09: 0000000000000000 [ 58.492209][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888029b48000 [ 58.495606][ C2] R13: 0000000000000000 R14: ffffffff92459a04 R15: ffff88806a43bf00 [ 58.499037][ C2] __schedule+0x1261/0x6920 [ 58.501032][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 58.503244][ C2] ? __pfx___schedule+0x10/0x10 [ 58.505371][ C2] ? find_held_lock+0x2b/0x80 [ 58.507457][ C2] ? schedule+0x225/0x2c0 [ 58.509357][ C2] schedule+0xdd/0x2c0 [ 58.511136][ C2] do_nanosleep+0x113/0x500 [ 58.513073][ C2] ? __pfx_do_nanosleep+0x10/0x10 [ 58.515284][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.517856][ C2] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 58.520137][ C2] ? __hrtimer_setup+0x208/0x330 [ 58.522306][ C2] hrtimer_nanosleep+0x14f/0x350 [ 58.524485][ C2] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 58.526851][ C2] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 58.529125][ C2] ? __x64_sys_futex+0x34f/0x4d0 [ 58.531307][ C2] ? __x64_sys_futex+0x358/0x4d0 [ 58.533482][ C2] __x64_sys_nanosleep+0x20c/0x2a0 [ 58.535716][ C2] ? __pfx___x64_sys_nanosleep+0x10/0x10 [ 58.538174][ C2] do_syscall_64+0x123/0x790 [ 58.540216][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.542794][ C2] RIP: 0033:0x48ecf7 [ 58.544520][ C2] Code: 8b 44 24 20 b9 40 42 0f 00 f7 f1 48 89 04 24 b8 e8 03 00 00 f7 e2 48 89 44 24 08 48 89 e7 be 00 00 00 00 b8 23 00 00 00 0f 05 <48> 83 c4 10 5d c3 cc cc cc b8 ba 00 00 00 0f 05 89 44 24 08 c3 cc [ 58.552730][ C2] RSP: 002b:0000232cf7a13c70 EFLAGS: 00000206 ORIG_RAX: 0000000000000023 [ 58.556311][ C2] RAX: ffffffffffffffda RBX: 0000232cf79681a0 RCX: 000000000048ecf7 [ 58.559829][ C2] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000232cf7a13c70 [ 58.563286][ C2] RBP: 0000232cf7a13c80 R08: 0000000000000000 R09: 0000000000000000 [ 58.566595][ C2] R10: a0761d6478bd642f R11: 0000000000000206 R12: 0000232cf7968008 [ 58.570004][ C2] R13: 0000000000000001 R14: 0000232cf79352c0 R15: 0000000000000003 [ 58.573338][ C2] [ 58.575414][ C2] Kernel Offset: disabled [ 58.577189][ C2] Rebooting in 86400 seconds..