last executing test programs: 2.158307163s ago: executing program 2 (id=3): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1000}]}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001040)=[{&(0x7f0000001080)='\x00', 0x1}], 0x1}}, {{&(0x7f00000010c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001100)=[{&(0x7f0000001140)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001280)=[{&(0x7f00000012c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001340)=[{&(0x7f0000001380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000013c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001580)=[{&(0x7f00000015c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001640)=[{&(0x7f0000001680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000016c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001880)=[{&(0x7f00000018c0)='\x00', 0x1}], 0x1}}], 0x14, 0x0) 2.05729067s ago: executing program 2 (id=6): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000102030109022e0001010000000904000004ffffff00090581020002000000090502020002000000090583020002000000090504020002000000"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 1.848600242s ago: executing program 3 (id=4): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f) read(r0, &(0x7f0000001000), 0x1000) (async) read(r0, &(0x7f0000001000), 0x1000) (async) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff0100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x7, "10ff001102005a"}}, 0xd) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, {0x14, "11ff00000200"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000600)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000700)={0xc, {0x14, "11ff0100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000800)={0xc, {0x14, "11ff00000300"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000900)={0xc, {0x14, "11ff0300"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000a00)={0xc, {0x14, "11ff03100800"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000b00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000c00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000d00)={0xc, {0x14, "11ff042000"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000e00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) 1.566292028s ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000740)='-2 -3 +4\n\x00', 0x9) r1 = socket(0x2, 0x1, 0x0) bind(r1, &(0x7f0000000600)=@in={0x2, 0x801, @empty}, 0x10) listen(r1, 0x10) dup2(r1, 0x64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000540)='100\n\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r4, &(0x7f00000002c0)='myclient 0 0 2147483647 ./export\n\x00', 0x21) 1.207070734s ago: executing program 4 (id=5): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40402000240001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5446, 0x0) 1.178873354s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x100, &(0x7f0000000100)="900100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000880100"/256) syz_usb_ep_read(r0, 0x1, 0x100, &(0x7f0000000300)=""/256) nanosleep(&(0x7f0000000500)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/atm/cxacru0/device/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000900)=""/256, 0x100) 1.014454832s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='pcspkr\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000000400)='usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f00000006c0)='usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000780)='pcspkr\x00', 0x6) nanosleep(&(0x7f00000007c0)={0x1}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) 56.161683ms ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cg\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cg/test\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cg/test/memory.max\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='4096', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cg/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0', 0x1) mmap(&(0x7f0000010000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000010000/0x10000)=nil, 0x10000) 0s ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='i915\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/i915/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:01.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:01.0/drm\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts. [ 59.497822][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 59.497837][ T30] audit: type=1400 audit(1785854632.014:129): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.527745][ T30] audit: type=1400 audit(1785854632.044:130): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.530388][ T5596] cgroup: Unknown subsys name 'net' [ 59.557424][ T30] audit: type=1400 audit(1785854632.074:131): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.678253][ T5596] cgroup: Unknown subsys name 'cpuset' [ 59.686278][ T5596] cgroup: Unknown subsys name 'rlimit' [ 59.844513][ T30] audit: type=1400 audit(1785854632.354:132): avc: denied { setattr } for pid=5596 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.868170][ T30] audit: type=1400 audit(1785854632.354:133): avc: denied { create } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.893976][ T30] audit: type=1400 audit(1785854632.354:134): avc: denied { write } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.915424][ T30] audit: type=1400 audit(1785854632.364:135): avc: denied { read } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.941863][ T30] audit: type=1400 audit(1785854632.374:136): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.967624][ T30] audit: type=1400 audit(1785854632.374:137): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.967889][ T5598] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.001625][ T30] audit: type=1400 audit(1785854632.514:138): avc: denied { relabelto } for pid=5598 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.935076][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.771941][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 64.771956][ T30] audit: type=1400 audit(1785854637.284:143): avc: denied { create } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.800589][ T30] audit: type=1400 audit(1785854637.294:144): avc: denied { read write } for pid=5609 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.826184][ T30] audit: type=1400 audit(1785854637.294:145): avc: denied { open } for pid=5609 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.849934][ T30] audit: type=1400 audit(1785854637.314:146): avc: denied { ioctl } for pid=5609 comm="syz-executor" path="socket:[4562]" dev="sockfs" ino=4562 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.900830][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.908532][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.910815][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.917342][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.923328][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.934395][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.938515][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.946099][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.952302][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.965168][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.966648][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.974151][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.980390][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.987620][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.994311][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.002029][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.016224][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.016318][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.025009][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.031903][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.038084][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.044931][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.052047][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.073082][ T30] audit: type=1400 audit(1785854637.584:147): avc: denied { read } for pid=5608 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.095676][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.096282][ T30] audit: type=1400 audit(1785854637.584:148): avc: denied { open } for pid=5608 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.136651][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.189767][ T30] audit: type=1400 audit(1785854637.614:149): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 65.214058][ T30] audit: type=1400 audit(1785854637.624:150): avc: denied { module_request } for pid=5608 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 65.236804][ T30] audit: type=1400 audit(1785854637.704:151): avc: denied { sys_module } for pid=5608 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.837819][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.845970][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.377364][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.385034][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.392226][ T5608] bridge_slave_0: entered allmulticast mode [ 66.399080][ T5608] bridge_slave_0: entered promiscuous mode [ 66.428473][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.435545][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.442797][ T5608] bridge_slave_1: entered allmulticast mode [ 66.449500][ T5608] bridge_slave_1: entered promiscuous mode [ 66.525864][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.562775][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.572073][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.579464][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.586624][ T5618] bridge_slave_0: entered allmulticast mode [ 66.593238][ T5618] bridge_slave_0: entered promiscuous mode [ 66.600392][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.608326][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.615426][ T5610] bridge_slave_0: entered allmulticast mode [ 66.622333][ T5610] bridge_slave_0: entered promiscuous mode [ 66.629548][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.636793][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.643891][ T5612] bridge_slave_0: entered allmulticast mode [ 66.650956][ T5612] bridge_slave_0: entered promiscuous mode [ 66.657642][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.664713][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.671937][ T5609] bridge_slave_0: entered allmulticast mode [ 66.678644][ T5609] bridge_slave_0: entered promiscuous mode [ 66.697151][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.704298][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.711702][ T5618] bridge_slave_1: entered allmulticast mode [ 66.718362][ T5618] bridge_slave_1: entered promiscuous mode [ 66.724982][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.732134][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.739276][ T5610] bridge_slave_1: entered allmulticast mode [ 66.746023][ T5610] bridge_slave_1: entered promiscuous mode [ 66.752748][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.759952][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.767288][ T5612] bridge_slave_1: entered allmulticast mode [ 66.773896][ T5612] bridge_slave_1: entered promiscuous mode [ 66.780498][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.787635][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.794718][ T5609] bridge_slave_1: entered allmulticast mode [ 66.801673][ T5609] bridge_slave_1: entered promiscuous mode [ 66.816156][ T5608] team0: Port device team_slave_0 added [ 66.848978][ T5608] team0: Port device team_slave_1 added [ 66.875196][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.893122][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.904069][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.915232][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.926257][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.943145][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.953549][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.964165][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.980093][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.987259][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.013230][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.050170][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.057226][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.083354][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.116469][ T5621] Bluetooth: hci2: command tx timeout [ 67.119737][ T5612] team0: Port device team_slave_0 added [ 67.122511][ T5625] Bluetooth: hci1: command tx timeout [ 67.129762][ T5612] team0: Port device team_slave_1 added [ 67.133725][ T5624] Bluetooth: hci0: command tx timeout [ 67.148882][ T5609] team0: Port device team_slave_0 added [ 67.160284][ T5618] team0: Port device team_slave_0 added [ 67.168282][ T5618] team0: Port device team_slave_1 added [ 67.174772][ T5610] team0: Port device team_slave_0 added [ 67.188120][ T5609] team0: Port device team_slave_1 added [ 67.196477][ T5625] Bluetooth: hci3: command tx timeout [ 67.202351][ T5624] Bluetooth: hci4: command tx timeout [ 67.212206][ T5610] team0: Port device team_slave_1 added [ 67.218369][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.225315][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.251284][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.288316][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.295317][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.321539][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.338989][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.345962][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.372972][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.384847][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.392121][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.418066][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.444378][ T5608] hsr_slave_0: entered promiscuous mode [ 67.450569][ T5608] hsr_slave_1: entered promiscuous mode [ 67.457727][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.464732][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.490684][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.502308][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.509331][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.535481][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.553830][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.560852][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.586866][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.598755][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.605755][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.631704][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.689390][ T5612] hsr_slave_0: entered promiscuous mode [ 67.695402][ T5612] hsr_slave_1: entered promiscuous mode [ 67.701640][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 67.707711][ T5612] Cannot create hsr debugfs directory [ 67.760506][ T5618] hsr_slave_0: entered promiscuous mode [ 67.766690][ T5618] hsr_slave_1: entered promiscuous mode [ 67.772586][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 67.778525][ T5618] Cannot create hsr debugfs directory [ 67.794155][ T5609] hsr_slave_0: entered promiscuous mode [ 67.800506][ T5609] hsr_slave_1: entered promiscuous mode [ 67.806588][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 67.812300][ T5609] Cannot create hsr debugfs directory [ 67.837190][ T5610] hsr_slave_0: entered promiscuous mode [ 67.843269][ T5610] hsr_slave_1: entered promiscuous mode [ 67.849722][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 67.855451][ T5610] Cannot create hsr debugfs directory [ 68.184138][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.195167][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.203158][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.213161][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.221053][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.230027][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.237862][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.246855][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.312188][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.322368][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.330132][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.339156][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.347067][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.356393][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.373500][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.382663][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.438319][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.447848][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.455328][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.464513][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.472866][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.482306][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.493070][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.501553][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.564627][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.595031][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.604659][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.612643][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.621988][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.635128][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.644262][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.652825][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.666359][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.675142][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.722732][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.730120][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.752022][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.759147][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.785377][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.794383][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.812987][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.822720][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.831427][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.840417][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.849125][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.857690][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.884133][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.931551][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.971449][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.978578][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.011018][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.018169][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.043642][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.092333][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.125434][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.132523][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.155218][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.162322][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.184796][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.197687][ T5624] Bluetooth: hci0: command tx timeout [ 69.203324][ T5625] Bluetooth: hci1: command tx timeout [ 69.209640][ T5621] Bluetooth: hci2: command tx timeout [ 69.227584][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.254647][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.273279][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.280454][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.296106][ T5625] Bluetooth: hci4: command tx timeout [ 69.301961][ T5625] Bluetooth: hci3: command tx timeout [ 69.340212][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.347375][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.424318][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.461203][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.491260][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.498419][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.507833][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.514907][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.542132][ T5610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.722599][ T5608] veth0_vlan: entered promiscuous mode [ 69.767772][ T5608] veth1_vlan: entered promiscuous mode [ 69.888488][ T5608] veth0_macvtap: entered promiscuous mode [ 69.912142][ T5608] veth1_macvtap: entered promiscuous mode [ 69.981751][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.008419][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.037873][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.108261][ T1123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.201832][ T5612] veth0_vlan: entered promiscuous mode [ 70.250064][ T5612] veth1_vlan: entered promiscuous mode [ 70.328706][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.362370][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.441309][ T5612] veth0_macvtap: entered promiscuous mode [ 70.455321][ T5612] veth1_macvtap: entered promiscuous mode [ 70.455363][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.472759][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.486777][ T1165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.504252][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.568009][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.578465][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.600704][ T30] audit: type=1400 audit(1785854643.114:152): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.Ux7xdI/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 70.606755][ T1123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.638700][ T30] audit: type=1400 audit(1785854643.144:153): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.662922][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.667601][ T30] audit: type=1400 audit(1785854643.144:154): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.Ux7xdI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.680729][ T5610] veth0_vlan: entered promiscuous mode [ 70.719194][ T30] audit: type=1400 audit(1785854643.144:155): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.737355][ T5609] veth0_vlan: entered promiscuous mode [ 70.743998][ T30] audit: type=1400 audit(1785854643.154:156): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.Ux7xdI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.774643][ T30] audit: type=1400 audit(1785854643.154:157): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.Ux7xdI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 70.804035][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.819313][ T5608] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.825096][ T30] audit: type=1400 audit(1785854643.174:158): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.854121][ T30] audit: type=1400 audit(1785854643.214:159): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 70.857587][ T5610] veth1_vlan: entered promiscuous mode [ 70.877798][ T30] audit: type=1400 audit(1785854643.214:160): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="gadgetfs" ino=7658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.903664][ T5610] veth0_macvtap: entered promiscuous mode [ 70.906847][ T30] audit: type=1400 audit(1785854643.214:161): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.968974][ T5610] veth1_macvtap: entered promiscuous mode [ 70.984181][ T5618] veth0_vlan: entered promiscuous mode [ 70.994866][ T5609] veth1_vlan: entered promiscuous mode [ 71.040277][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.053351][ T5618] veth1_vlan: entered promiscuous mode [ 71.061078][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.100008][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.127545][ T3315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.151712][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.161495][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.170418][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.173845][ T5609] veth0_macvtap: entered promiscuous mode [ 71.185867][ T1123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.197565][ T1123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.218156][ T5609] veth1_macvtap: entered promiscuous mode [ 71.226154][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.258475][ T5618] veth0_macvtap: entered promiscuous mode [ 71.272584][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.287223][ T5625] Bluetooth: hci1: command tx timeout [ 71.292029][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.293028][ T5621] Bluetooth: hci2: command tx timeout [ 71.306854][ T5625] Bluetooth: hci0: command tx timeout [ 71.312534][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.346539][ T5618] veth1_macvtap: entered promiscuous mode [ 71.356873][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.357052][ T5621] Bluetooth: hci3: command tx timeout [ 71.364948][ T5625] Bluetooth: hci4: command tx timeout [ 71.400044][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.413468][ T5717] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 71.446158][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.478006][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.507597][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.510266][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.531811][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.538147][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.549005][ T9] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 71.583866][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 71.599270][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.615025][ T1123] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.631622][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.636184][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 71.669906][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.682208][ T5818] fido_id[5818]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 71.705780][ T9] usb 3-1: Product: syz [ 71.710716][ T9] usb 3-1: Manufacturer: syz [ 71.723201][ T9] usb 3-1: SerialNumber: syz [ 71.774298][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.791081][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.798068][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.811296][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.846431][ T65] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.896196][ T1123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.909627][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.941796][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.027198][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.035130][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.046692][ T1123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.066963][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.076855][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.188115][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.198698][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.226759][ T3315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.244308][ T5831] Config c/1 of g1 needs at least one function. [ 72.251520][ T5831] udc pcspkr: failed to start g1: -22 [ 72.255931][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.265254][ T5831] configfs-gadget.g1 gadget.33: probe with driver configfs-gadget.g1 failed with error -22 [ 72.275921][ T5700] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 72.280869][ T5831] UDC core: g1: couldn't find an available UDC or it's busy [ 72.428819][ T5700] usb 2-1: not running at top speed; connect to a high speed hub [ 72.440335][ T5700] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 72.449716][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.459227][ T29] usb 5-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 1.00 [ 72.470358][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.487708][ T29] usb 5-1: Product: syz [ 72.491924][ T29] usb 5-1: Manufacturer: syz [ 72.497080][ T29] usb 5-1: SerialNumber: syz [ 72.515506][ T29] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 72.845952][ T5823] NFSD: Unable to initialize client recovery tracking! (-110) [ 72.853792][ T5823] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 72.863028][ T5823] NFSD: starting 90-second grace period (net f00003cb) [ 72.987274][ T9] usb 3-1: probing VID:PID(0424:012C) [ 72.998015][ T9] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 73.004399][ T9] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 73.011976][ T9] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 73.021938][ T9] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 73.039658][ T9] vub300 3-1:1.0: probe with driver vub300 failed with error -22 [ 73.070567][ T9] usb 3-1: USB disconnect, device number 2 [ 73.174991][ T5344] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI [ 73.187078][ T5344] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 73.195478][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 73.204829][ T5344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 73.214860][ T5344] Workqueue: sync_wq local_pci_probe_callback [ 73.220913][ T5344] RIP: 0010:i915_pci_probe+0x57/0x480 [ 73.226272][ T5344] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f6 03 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 6c 24 18 4c 8d 6d 1c 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 86 03 00 00 [ 73.245876][ T5344] RSP: 0018:ffffc90003687bc0 EFLAGS: 00010207 [ 73.251932][ T5344] RAX: dffffc0000000000 RBX: ffff8880236da000 RCX: 0000000000000000 [ 73.259885][ T5344] RDX: 0000000000000003 RSI: ffffffff85d8d20d RDI: ffffffff8c43a498 [ 73.267837][ T5344] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 73.275788][ T5344] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c43a480 [ 73.283744][ T5344] R13: 000000000000001c R14: ffffffff85d8d1f0 R15: 0000000000000000 [ 73.291692][ T5344] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 73.300600][ T5344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.307163][ T5344] CR2: 00007f3f91027dac CR3: 0000000037a95000 CR4: 00000000003526f0 [ 73.315126][ T5344] Call Trace: [ 73.318383][ T5344] [ 73.321292][ T5344] ? __pfx_i915_pci_probe+0x10/0x10 [ 73.326476][ T5344] local_pci_probe+0xdd/0x1b0 [ 73.331134][ T5344] local_pci_probe_callback+0x35/0x80 [ 73.336481][ T5344] process_one_work+0xa23/0x1940 [ 73.341409][ T5344] ? __pfx_process_one_work+0x10/0x10 [ 73.346761][ T5344] ? __pfx_local_pci_probe_callback+0x10/0x10 [ 73.352806][ T5344] worker_thread+0x5ef/0xe50 [ 73.357394][ T5344] ? __pfx_worker_thread+0x10/0x10 [ 73.362487][ T5344] ? kthread+0x13a/0x450 [ 73.366709][ T5344] ? __pfx_worker_thread+0x10/0x10 [ 73.371795][ T5344] kthread+0x370/0x450 [ 73.375845][ T5344] ? __pfx_kthread+0x10/0x10 [ 73.380416][ T5344] ret_from_fork+0x72b/0xd50 [ 73.384989][ T5344] ? __pfx_ret_from_fork+0x10/0x10 [ 73.390095][ T5344] ? __switch_to+0x800/0x10f0 [ 73.394761][ T5344] ? __pfx_kthread+0x10/0x10 [ 73.399333][ T5344] ret_from_fork_asm+0x1a/0x30 [ 73.404095][ T5344] [ 73.407102][ T5344] Modules linked in: [ 73.412173][ T5344] ---[ end trace 0000000000000000 ]--- [ 73.419262][ T5344] RIP: 0010:i915_pci_probe+0x57/0x480 [ 73.424694][ T5344] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f6 03 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 6c 24 18 4c 8d 6d 1c 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 86 03 00 00 [ 73.433362][ T5625] Bluetooth: hci2: command tx timeout [ 73.446113][ T5344] RSP: 0018:ffffc90003687bc0 EFLAGS: 00010207 [ 73.450331][ T5625] Bluetooth: hci0: command tx timeout [ 73.456290][ T5344] RAX: dffffc0000000000 RBX: ffff8880236da000 RCX: 0000000000000000 [ 73.463519][ T5625] Bluetooth: hci1: command tx timeout [ 73.475517][ T5625] Bluetooth: hci3: command tx timeout [ 73.481155][ T5625] Bluetooth: hci4: command tx timeout [ 73.487467][ T5344] RDX: 0000000000000003 RSI: ffffffff85d8d20d RDI: ffffffff8c43a498 [ 73.495547][ T5344] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 73.511848][ T5344] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c43a480 [ 73.523981][ T5344] R13: 000000000000001c R14: ffffffff85d8d1f0 R15: 0000000000000000 [ 73.539331][ T5344] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 73.548670][ T5344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.555288][ T5344] CR2: 00007f6e09670ff8 CR3: 00000000333c1000 CR4: 00000000003526f0 [ 73.564086][ T5344] Kernel panic - not syncing: Fatal exception [ 73.570250][ T5344] Kernel Offset: disabled [ 73.574551][ T5344] Rebooting in 86400 seconds..