[ 44.178239][ T40] audit: type=1400 audit(1780720717.584:116): avc: denied { write } for pid=5645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.233518][ T40] audit: type=1400 audit(1780720717.644:117): avc: denied { write } for pid=5650 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.292596][ T40] audit: type=1400 audit(1780720718.704:118): avc: denied { write } for pid=5653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.344685][ T40] audit: type=1400 audit(1780720718.754:119): avc: denied { write } for pid=5656 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.419560][ T40] audit: type=1400 audit(1780720718.824:120): avc: denied { write } for pid=5659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:61906' (ED25519) to the list of known hosts. [ 49.671835][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 49.671851][ T40] audit: type=1400 audit(1780720723.084:138): avc: denied { execute } for pid=5731 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 49.682826][ T40] audit: type=1400 audit(1780720723.084:139): avc: denied { execute_no_trans } for pid=5731 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/06/06 04:38:44 parsed 1 programs [ 50.973117][ T40] audit: type=1400 audit(1780720724.384:140): avc: denied { node_bind } for pid=5731 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 50.981904][ T40] audit: type=1400 audit(1780720724.384:141): avc: denied { node_bind } for pid=5731 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 53.599750][ T40] audit: type=1400 audit(1780720727.004:142): avc: denied { mounton } for pid=5743 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 53.609461][ T40] audit: type=1400 audit(1780720727.014:143): avc: denied { mount } for pid=5743 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.611572][ T5743] cgroup: Unknown subsys name 'net' [ 53.624614][ T40] audit: type=1400 audit(1780720727.034:144): avc: denied { unmount } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.774547][ T5743] cgroup: Unknown subsys name 'cpuset' [ 53.781821][ T5743] cgroup: Unknown subsys name 'rlimit' [ 54.012691][ T40] audit: type=1400 audit(1780720727.424:145): avc: denied { setattr } for pid=5743 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.020255][ T40] audit: type=1400 audit(1780720727.424:146): avc: denied { create } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.027034][ T40] audit: type=1400 audit(1780720727.424:147): avc: denied { write } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.094490][ T5748] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 54.930516][ T5743] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.924195][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 56.924208][ T40] audit: type=1400 audit(1780720730.334:159): avc: denied { execmem } for pid=5753 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.932245][ T40] audit: type=1400 audit(1780720730.334:160): avc: denied { mounton } for pid=5753 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 56.941764][ T40] audit: type=1400 audit(1780720730.334:161): avc: denied { mount } for pid=5753 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 56.949326][ T40] audit: type=1400 audit(1780720730.334:162): avc: denied { read } for pid=5753 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.956908][ T40] audit: type=1400 audit(1780720730.334:163): avc: denied { open } for pid=5753 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.964980][ T40] audit: type=1400 audit(1780720730.334:164): avc: denied { mounton } for pid=5753 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 57.002235][ T40] audit: type=1400 audit(1780720730.414:165): avc: denied { mounton } for pid=5753 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 57.009630][ T40] audit: type=1400 audit(1780720730.414:166): avc: denied { mount } for pid=5753 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 57.018191][ T40] audit: type=1401 audit(1780720730.414:167): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 57.143350][ T40] audit: type=1400 audit(1780720730.554:168): avc: denied { mount } for pid=5756 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.167340][ T5756] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.244495][ T5763] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.248176][ T5763] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.253804][ T5763] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.260642][ T5763] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.263640][ T5763] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.529721][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.537170][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.571417][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.574188][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.153886][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.156968][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.159890][ T5779] bridge_slave_0: entered allmulticast mode [ 58.163851][ T5779] bridge_slave_0: entered promiscuous mode [ 58.170466][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.173498][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.176488][ T5779] bridge_slave_1: entered allmulticast mode [ 58.180378][ T5779] bridge_slave_1: entered promiscuous mode [ 58.207705][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.214132][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.263124][ T5779] team0: Port device team_slave_0 added [ 58.267835][ T5779] team0: Port device team_slave_1 added [ 58.287733][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.289809][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.297486][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.302220][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.304361][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.313029][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.344473][ T5779] hsr_slave_0: entered promiscuous mode [ 58.346846][ T5779] hsr_slave_1: entered promiscuous mode [ 58.451957][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.460663][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.465195][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.471743][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.475441][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.482779][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.486318][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.491491][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.517355][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.520673][ T5779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.524143][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.527041][ T5779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.538182][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.543251][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.583411][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.596949][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.605341][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.608283][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.615671][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.618543][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.890787][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.929160][ T5779] veth0_vlan: entered promiscuous mode [ 58.938101][ T5779] veth1_vlan: entered promiscuous mode [ 58.966330][ T5779] veth0_macvtap: entered promiscuous mode [ 58.973082][ T5779] veth1_macvtap: entered promiscuous mode [ 58.989625][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.000155][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.009896][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.013888][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.019447][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.024077][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.143170][ T80] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.231201][ T80] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.294611][ T80] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.375965][ T80] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/06/06 04:38:54 executed programs: 0 [ 60.861798][ T5763] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.865309][ T5763] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.868070][ T5763] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.872261][ T5763] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.875690][ T5763] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.293473][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.296214][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.298741][ T5865] bridge_slave_0: entered allmulticast mode [ 61.301721][ T5865] bridge_slave_0: entered promiscuous mode [ 61.306192][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.308769][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.311769][ T5865] bridge_slave_1: entered allmulticast mode [ 61.315944][ T5865] bridge_slave_1: entered promiscuous mode [ 61.337597][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.343509][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.364759][ T5865] team0: Port device team_slave_0 added [ 61.367885][ T5865] team0: Port device team_slave_1 added [ 61.382020][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.384629][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.394379][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.399112][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.402145][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.410187][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.439561][ T5865] hsr_slave_0: entered promiscuous mode [ 61.443357][ T5865] hsr_slave_1: entered promiscuous mode [ 61.446999][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 61.449447][ T5865] Cannot create hsr debugfs directory [ 61.563136][ T80] bridge_slave_1: left allmulticast mode [ 61.565353][ T80] bridge_slave_1: left promiscuous mode [ 61.568039][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.573329][ T80] bridge_slave_0: left allmulticast mode [ 61.575163][ T80] bridge_slave_0: left promiscuous mode [ 61.576972][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.717157][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.723201][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.727814][ T80] bond0 (unregistering): Released all slaves [ 61.867745][ T80] hsr_slave_0: left promiscuous mode [ 61.870371][ T80] hsr_slave_1: left promiscuous mode [ 61.873176][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.876090][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.883626][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.888302][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.898594][ T80] veth1_macvtap: left promiscuous mode [ 61.901562][ T80] veth0_macvtap: left promiscuous mode [ 61.903864][ T80] veth1_vlan: left promiscuous mode [ 61.906079][ T80] veth0_vlan: left promiscuous mode [ 62.045095][ T80] team0 (unregistering): Port device team_slave_1 removed [ 62.056830][ T80] team0 (unregistering): Port device team_slave_0 removed [ 62.137186][ T5452] 8021q: adding VLAN 0 to HW filter on device eth2 [ 62.216984][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 62.217002][ T40] audit: type=1400 audit(1780720735.624:195): avc: denied { write } for pid=5891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.262305][ T40] audit: type=1400 audit(1780720735.674:196): avc: denied { write } for pid=5894 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.393247][ T40] audit: type=1400 audit(1780720735.804:197): avc: denied { write } for pid=5897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.445115][ T40] audit: type=1400 audit(1780720735.854:198): avc: denied { write } for pid=5900 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.523186][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.523257][ T40] audit: type=1400 audit(1780720735.934:199): avc: denied { write } for pid=5902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.542708][ T5865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.545885][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.549743][ T5865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.553622][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.557799][ T5865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.560948][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.564998][ T5865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.584377][ T40] audit: type=1400 audit(1780720735.994:200): avc: denied { write } for pid=5905 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.610701][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.620923][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.626572][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.629615][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.641763][ T203] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.644844][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.950827][ T63] Bluetooth: hci0: command tx timeout [ 63.233906][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.272250][ T5865] veth0_vlan: entered promiscuous mode [ 63.283038][ T5865] veth1_vlan: entered promiscuous mode [ 63.344414][ T5865] veth0_macvtap: entered promiscuous mode [ 63.349090][ T5865] veth1_macvtap: entered promiscuous mode [ 63.360106][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.367179][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.376528][ T203] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.379393][ T203] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.383549][ T203] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.386477][ T203] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.439633][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.443297][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.470120][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.473226][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.518313][ T40] audit: type=1400 audit(1780720736.924:201): avc: denied { read write } for pid=5925 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.527016][ T40] audit: type=1400 audit(1780720736.924:202): avc: denied { open } for pid=5925 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.534514][ T40] audit: type=1400 audit(1780720736.924:203): avc: denied { ioctl } for pid=5925 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.750257][ T5802] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.914167][ T5802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 63.919230][ T5802] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 63.923207][ T5802] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 239 [ 63.929236][ T5802] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 63.933355][ T5802] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 63.936242][ T5802] usb 5-1: Manufacturer: syz [ 63.946950][ T5802] usb 5-1: config 0 descriptor?? [ 63.952554][ T5925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.959226][ T5802] smsusb:smsusb_probe: board id=9, interface number 0 [ 63.965688][ T5802] smsusb:siano_media_device_register: media controller created [ 63.971354][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 63.974811][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 63.977064][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 63.979857][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 63.982623][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 63.984866][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 63.987109][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 63.989510][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 63.993579][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 63.996444][ T5802] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 63.999704][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 64.003260][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 64.007291][ T5802] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 64.011600][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 64.013859][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 64.016111][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 64.018336][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 64.020557][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 64.022811][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 64.025030][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 64.027397][ T5802] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 64.029665][ T5802] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 64.033461][ T5802] ------------[ cut here ]------------ [ 64.035493][ T5802] !PageLargeKmalloc(page) [ 64.035504][ T5802] WARNING: mm/slub.c:6476 at free_large_kmalloc+0xbf/0x100, CPU#0: kworker/0:4/5802 [ 64.040321][ T5802] Modules linked in: [ 64.041825][ T5802] CPU: 0 UID: 0 PID: 5802 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 64.045740][ T5802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.049767][ T5802] Workqueue: usb_hub_wq hub_event [ 64.052069][ T5802] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 64.054439][ T5802] Code: 28 90 0f 0b 90 80 3d 2a 33 55 0e 00 0f 84 37 ed b9 fe 48 8b 74 24 28 48 89 ef e8 5c 01 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 54 b8 ef 8d 5b 5d 41 5c 41 [ 64.062284][ T5802] RSP: 0018:ffffc90003c3ed68 EFLAGS: 00010202 [ 64.064419][ T5802] RAX: 00000000000000ff RBX: ffffea0001635880 RCX: 000000000000002e [ 64.067477][ T5802] RDX: 0000000000000000 RSI: ffff888058d62000 RDI: ffffea0001635880 [ 64.070854][ T5802] RBP: ffff888058d62000 R08: 0000000000000005 R09: 0000000000000000 [ 64.073710][ T5802] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff8880366f3000 [ 64.076907][ T5802] R13: ffff8880366f2000 R14: dffffc0000000000 R15: ffff8880366f30f0 [ 64.080930][ T5802] FS: 0000000000000000(0000) GS:ffff8880d6387000(0000) knlGS:0000000000000000 [ 64.083802][ T5802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.085918][ T5802] CR2: 00007ffe11ff47d0 CR3: 000000003552b000 CR4: 0000000000352ef0 [ 64.088352][ T5802] Call Trace: [ 64.089663][ T5802] [ 64.091014][ T5802] usb_free_urb.part.0+0xf8/0x110 [ 64.093061][ T5802] usb_free_urb+0x1f/0x30 [ 64.094401][ T5802] smsusb_term_device+0x108/0x200 [ 64.096530][ T5802] smsusb_init_device+0xb4e/0xbb0 [ 64.098415][ T5802] ? __pfx_smsusb_init_device+0x10/0x10 [ 64.100596][ T5802] ? kfree+0x1dd/0x6c0 [ 64.102482][ T5802] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 64.104731][ T5802] ? usb_clear_halt+0x61/0x160 [ 64.106666][ T5802] smsusb_probe+0xd7f/0xe1f [ 64.108297][ T5802] ? __pfx_smsusb_probe+0x10/0x10 [ 64.110388][ T5802] ? mark_held_locks+0x40/0x70 [ 64.112163][ T5802] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 64.114281][ T5802] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.116646][ T5802] ? __pm_runtime_set_status+0x13c/0x970 [ 64.118903][ T5802] usb_probe_interface+0x303/0x8f0 [ 64.121229][ T5802] ? __pfx_usb_probe_interface+0x10/0x10 [ 64.123612][ T5802] really_probe+0x241/0xa60 [ 64.125681][ T5802] __driver_probe_device+0x22e/0x480 [ 64.127820][ T5802] driver_probe_device+0x4c/0x1b0 [ 64.129885][ T5802] __device_attach_driver+0x1df/0x340 [ 64.132165][ T5802] ? __pfx___device_attach_driver+0x10/0x10 [ 64.134594][ T5802] bus_for_each_drv+0x159/0x1e0 [ 64.136605][ T5802] ? __pfx_bus_for_each_drv+0x10/0x10 [ 64.138971][ T5802] ? lockdep_hardirqs_on+0x78/0x100 [ 64.141587][ T5802] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.144141][ T5802] __device_attach+0x1e4/0x4d0 [ 64.146132][ T5802] ? __pfx___device_attach+0x10/0x10 [ 64.147813][ T5802] ? do_raw_spin_unlock+0x145/0x1e0 [ 64.149433][ T5802] device_initial_probe+0xaf/0xd0 [ 64.151249][ T5802] bus_probe_device+0x64/0x160 [ 64.152768][ T5802] device_add+0x1210/0x1950 [ 64.154269][ T5802] ? __pfx_device_add+0x10/0x10 [ 64.155846][ T5802] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 64.157922][ T5802] usb_set_configuration+0xd97/0x1c60 [ 64.159915][ T5802] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 64.162379][ T5802] usb_generic_driver_probe+0xa1/0xe0 [ 64.164054][ T5802] usb_probe_device+0xef/0x400 [ 64.165639][ T5802] ? __pfx_usb_probe_device+0x10/0x10 [ 64.167268][ T5802] really_probe+0x241/0xa60 [ 64.168666][ T5802] __driver_probe_device+0x22e/0x480 [ 64.170582][ T5802] ? usb_driver_applicable+0x1c7/0x220 [ 64.172471][ T5802] driver_probe_device+0x4c/0x1b0 [ 64.174047][ T5802] __device_attach_driver+0x1df/0x340 [ 64.175853][ T5802] ? __pfx___device_attach_driver+0x10/0x10 [ 64.177905][ T5802] bus_for_each_drv+0x159/0x1e0 [ 64.179658][ T5802] ? __pfx_bus_for_each_drv+0x10/0x10 [ 64.181822][ T5802] ? lockdep_hardirqs_on+0x78/0x100 [ 64.183701][ T5802] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.185690][ T5802] __device_attach+0x1e4/0x4d0 [ 64.187151][ T5802] ? __pfx___device_attach+0x10/0x10 [ 64.188757][ T5802] ? do_raw_spin_unlock+0x145/0x1e0 [ 64.190438][ T5802] device_initial_probe+0xaf/0xd0 [ 64.191990][ T5802] bus_probe_device+0x64/0x160 [ 64.193515][ T5802] device_add+0x1210/0x1950 [ 64.194950][ T5802] ? __pfx_device_add+0x10/0x10 [ 64.196546][ T5802] ? add_device_randomness+0xb7/0xf0 [ 64.198172][ T5802] usb_new_device.cold+0x685/0x115c [ 64.199776][ T5802] ? do_raw_spin_lock+0x128/0x260 [ 64.201414][ T5802] ? __pfx_usb_new_device+0x10/0x10 [ 64.203250][ T5802] ? mark_held_locks+0x40/0x70 [ 64.205078][ T5802] hub_event+0x314d/0x4af0 [ 64.206698][ T5802] ? __pfx_hub_event+0x10/0x10 [ 64.208241][ T5802] ? assoc_array_insert+0x1130/0x32c0 [ 64.209894][ T5802] ? rcu_is_watching+0x12/0xc0 [ 64.211453][ T5802] process_one_work+0xa0e/0x1980 [ 64.213107][ T5802] ? __pfx_process_one_work+0x10/0x10 [ 64.214835][ T5802] ? __pfx_hub_event+0x10/0x10 [ 64.216404][ T5802] worker_thread+0x5ef/0xe50 [ 64.217908][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 64.219558][ T5802] ? kthread+0x13a/0x450 [ 64.220993][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 64.222687][ T5802] kthread+0x370/0x450 [ 64.223933][ T5802] ? __pfx_kthread+0x10/0x10 [ 64.225399][ T5802] ret_from_fork+0x72b/0xd50 [ 64.226901][ T5802] ? __pfx_ret_from_fork+0x10/0x10 [ 64.228595][ T5802] ? __switch_to+0x800/0x1100 [ 64.230462][ T5802] ? __pfx_kthread+0x10/0x10 [ 64.231955][ T5802] ret_from_fork_asm+0x1a/0x30 [ 64.233765][ T5802] [ 64.234778][ T5802] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 64.237077][ T5802] CPU: 0 UID: 0 PID: 5802 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 64.239908][ T5802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.243348][ T5802] Workqueue: usb_hub_wq hub_event [ 64.245129][ T5802] Call Trace: [ 64.246403][ T5802] [ 64.247470][ T5802] dump_stack_lvl+0x100/0x190 [ 64.249062][ T5802] vpanic+0x552/0x970 [ 64.250340][ T5802] ? __pfx_vpanic+0x10/0x10 [ 64.251776][ T5802] panic+0xd1/0xe0 [ 64.252974][ T5802] ? __pfx_panic+0x10/0x10 [ 64.254383][ T5802] ? check_panic_on_warn+0x1f/0x90 [ 64.255983][ T5802] check_panic_on_warn.cold+0x19/0x34 [ 64.257837][ T5802] ? free_large_kmalloc+0xbf/0x100 [ 64.259684][ T5802] __warn.cold+0x191/0x328 [ 64.261370][ T5802] __report_bug+0x296/0x3d0 [ 64.263046][ T5802] ? free_large_kmalloc+0xbf/0x100 [ 64.264797][ T5802] ? __pfx___report_bug+0x10/0x10 [ 64.266363][ T5802] ? bus_for_each_drv+0x159/0x1e0 [ 64.268233][ T5802] ? __device_attach+0x1e4/0x4d0 [ 64.270317][ T5802] ? device_initial_probe+0xaf/0xd0 [ 64.272333][ T5802] ? bus_probe_device+0x64/0x160 [ 64.274422][ T5802] ? device_add+0x1210/0x1950 [ 64.276011][ T5802] ? usb_new_device.cold+0x685/0x115c [ 64.277789][ T5802] ? hub_event+0x314d/0x4af0 [ 64.279462][ T5802] ? process_one_work+0xa0e/0x1980 [ 64.281492][ T5802] ? worker_thread+0x5ef/0xe50 [ 64.283476][ T5802] ? kthread+0x370/0x450 [ 64.285348][ T5802] ? ret_from_fork+0x72b/0xd50 [ 64.287367][ T5802] ? find_held_lock+0x2b/0x80 [ 64.289230][ T5802] ? smscore_unregister_device+0x537/0x7f0 [ 64.291453][ T5802] ? smscore_unregister_device+0x537/0x7f0 [ 64.293285][ T5802] ? free_large_kmalloc+0xbf/0x100 [ 64.295355][ T5802] report_bug+0xb2/0x220 [ 64.297008][ T5802] ? free_large_kmalloc+0xbf/0x100 [ 64.299106][ T5802] handle_bug+0x16a/0x2a0 [ 64.300889][ T5802] exc_invalid_op+0x17/0x50 [ 64.302767][ T5802] asm_exc_invalid_op+0x1a/0x20 [ 64.304653][ T5802] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 64.306800][ T5802] Code: 28 90 0f 0b 90 80 3d 2a 33 55 0e 00 0f 84 37 ed b9 fe 48 8b 74 24 28 48 89 ef e8 5c 01 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 54 b8 ef 8d 5b 5d 41 5c 41 [ 64.313112][ T5802] RSP: 0018:ffffc90003c3ed68 EFLAGS: 00010202 [ 64.315227][ T5802] RAX: 00000000000000ff RBX: ffffea0001635880 RCX: 000000000000002e [ 64.317982][ T5802] RDX: 0000000000000000 RSI: ffff888058d62000 RDI: ffffea0001635880 [ 64.320933][ T5802] RBP: ffff888058d62000 R08: 0000000000000005 R09: 0000000000000000 [ 64.323893][ T5802] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff8880366f3000 [ 64.326883][ T5802] R13: ffff8880366f2000 R14: dffffc0000000000 R15: ffff8880366f30f0 [ 64.329940][ T5802] usb_free_urb.part.0+0xf8/0x110 [ 64.332130][ T5802] usb_free_urb+0x1f/0x30 [ 64.333789][ T5802] smsusb_term_device+0x108/0x200 [ 64.335496][ T5802] smsusb_init_device+0xb4e/0xbb0 [ 64.337088][ T5802] ? __pfx_smsusb_init_device+0x10/0x10 [ 64.338851][ T5802] ? kfree+0x1dd/0x6c0 [ 64.340126][ T5802] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 64.341726][ T5802] ? usb_clear_halt+0x61/0x160 [ 64.343621][ T5802] smsusb_probe+0xd7f/0xe1f [ 64.345390][ T5802] ? __pfx_smsusb_probe+0x10/0x10 [ 64.347189][ T5802] ? mark_held_locks+0x40/0x70 [ 64.349247][ T5802] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 64.351368][ T5802] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.353541][ T5802] ? __pm_runtime_set_status+0x13c/0x970 [ 64.355899][ T5802] usb_probe_interface+0x303/0x8f0 [ 64.358042][ T5802] ? __pfx_usb_probe_interface+0x10/0x10 [ 64.360496][ T5802] really_probe+0x241/0xa60 [ 64.362664][ T5802] __driver_probe_device+0x22e/0x480 [ 64.365199][ T5802] driver_probe_device+0x4c/0x1b0 [ 64.367491][ T5802] __device_attach_driver+0x1df/0x340 [ 64.369659][ T5802] ? __pfx___device_attach_driver+0x10/0x10 [ 64.371981][ T5802] bus_for_each_drv+0x159/0x1e0 [ 64.373987][ T5802] ? __pfx_bus_for_each_drv+0x10/0x10 [ 64.376284][ T5802] ? lockdep_hardirqs_on+0x78/0x100 [ 64.378459][ T5802] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.380922][ T5802] __device_attach+0x1e4/0x4d0 [ 64.382977][ T5802] ? __pfx___device_attach+0x10/0x10 [ 64.385373][ T5802] ? do_raw_spin_unlock+0x145/0x1e0 [ 64.387592][ T5802] device_initial_probe+0xaf/0xd0 [ 64.389664][ T5802] bus_probe_device+0x64/0x160 [ 64.391642][ T5802] device_add+0x1210/0x1950 [ 64.393560][ T5802] ? __pfx_device_add+0x10/0x10 [ 64.395628][ T5802] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 64.398253][ T5802] usb_set_configuration+0xd97/0x1c60 [ 64.400827][ T5802] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 64.403433][ T5802] usb_generic_driver_probe+0xa1/0xe0 [ 64.405737][ T5802] usb_probe_device+0xef/0x400 [ 64.407769][ T5802] ? __pfx_usb_probe_device+0x10/0x10 [ 64.410048][ T5802] really_probe+0x241/0xa60 [ 64.412060][ T5802] __driver_probe_device+0x22e/0x480 [ 64.414747][ T5802] ? usb_driver_applicable+0x1c7/0x220 [ 64.417325][ T5802] driver_probe_device+0x4c/0x1b0 [ 64.419381][ T5802] __device_attach_driver+0x1df/0x340 [ 64.421606][ T5802] ? __pfx___device_attach_driver+0x10/0x10 [ 64.424003][ T5802] bus_for_each_drv+0x159/0x1e0 [ 64.425946][ T5802] ? __pfx_bus_for_each_drv+0x10/0x10 [ 64.428236][ T5802] ? lockdep_hardirqs_on+0x78/0x100 [ 64.430536][ T5802] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.433160][ T5802] __device_attach+0x1e4/0x4d0 [ 64.435243][ T5802] ? __pfx___device_attach+0x10/0x10 [ 64.437455][ T5802] ? do_raw_spin_unlock+0x145/0x1e0 [ 64.439609][ T5802] device_initial_probe+0xaf/0xd0 [ 64.441756][ T5802] bus_probe_device+0x64/0x160 [ 64.444362][ T5802] device_add+0x1210/0x1950 [ 64.447267][ T5802] ? __pfx_device_add+0x10/0x10 [ 64.449349][ T5802] ? add_device_randomness+0xb7/0xf0 [ 64.451509][ T5802] usb_new_device.cold+0x685/0x115c [ 64.453652][ T5802] ? do_raw_spin_lock+0x128/0x260 [ 64.455801][ T5802] ? __pfx_usb_new_device+0x10/0x10 [ 64.458033][ T5802] ? mark_held_locks+0x40/0x70 [ 64.460271][ T5802] hub_event+0x314d/0x4af0 [ 64.462570][ T5802] ? __pfx_hub_event+0x10/0x10 [ 64.465014][ T5802] ? assoc_array_insert+0x1130/0x32c0 [ 64.467477][ T5802] ? rcu_is_watching+0x12/0xc0 [ 64.469572][ T5802] process_one_work+0xa0e/0x1980 [ 64.471605][ T5802] ? __pfx_process_one_work+0x10/0x10 [ 64.473894][ T5802] ? __pfx_hub_event+0x10/0x10 [ 64.475913][ T5802] worker_thread+0x5ef/0xe50 [ 64.477916][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 64.480048][ T5802] ? kthread+0x13a/0x450 [ 64.481781][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 64.483957][ T5802] kthread+0x370/0x450 [ 64.485979][ T5802] ? __pfx_kthread+0x10/0x10 [ 64.488070][ T5802] ret_from_fork+0x72b/0xd50 [ 64.489744][ T5802] ? __pfx_ret_from_fork+0x10/0x10 [ 64.491322][ T5802] ? __switch_to+0x800/0x1100 [ 64.492770][ T5802] ? __pfx_kthread+0x10/0x10 [ 64.494157][ T5802] ret_from_fork_asm+0x1a/0x30 [ 64.495604][ T5802] [ 64.497286][ T5802] Kernel Offset: disabled [ 64.498820][ T5802] Rebooting in 86400 seconds..