Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. 2026/04/05 10:08:57 parsed 1 programs [ 57.922298][ T30] audit: type=1400 audit(1775383737.584:62): avc: denied { node_bind } for pid=5798 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 59.882677][ T30] audit: type=1400 audit(1775383739.544:63): avc: denied { mounton } for pid=5806 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.906099][ T30] audit: type=1400 audit(1775383739.564:64): avc: denied { mount } for pid=5806 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.908379][ T5806] cgroup: Unknown subsys name 'net' [ 59.935109][ T30] audit: type=1400 audit(1775383739.594:65): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.033016][ T5806] cgroup: Unknown subsys name 'cpuset' [ 60.040347][ T5806] cgroup: Unknown subsys name 'rlimit' [ 60.190652][ T30] audit: type=1400 audit(1775383739.844:66): avc: denied { setattr } for pid=5806 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.213979][ T30] audit: type=1400 audit(1775383739.854:67): avc: denied { create } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.253543][ T30] audit: type=1400 audit(1775383739.854:68): avc: denied { write } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.278854][ T30] audit: type=1400 audit(1775383739.854:69): avc: denied { read } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.299199][ T30] audit: type=1400 audit(1775383739.864:70): avc: denied { mounton } for pid=5806 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 60.307059][ T5808] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 60.323968][ T30] audit: type=1400 audit(1775383739.864:71): avc: denied { mount } for pid=5806 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 61.210830][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.930643][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.954982][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 62.954994][ T30] audit: type=1400 audit(1775383742.614:92): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.985221][ T30] audit: type=1400 audit(1775383742.614:93): avc: denied { open } for pid=5815 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.009413][ T30] audit: type=1400 audit(1775383742.614:94): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.049413][ T30] audit: type=1400 audit(1775383742.704:95): avc: denied { create } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.069692][ T30] audit: type=1400 audit(1775383742.704:96): avc: denied { read write } for pid=5821 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.071697][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.093286][ T30] audit: type=1400 audit(1775383742.704:97): avc: denied { open } for pid=5821 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.123890][ T30] audit: type=1400 audit(1775383742.704:98): avc: denied { ioctl } for pid=5821 comm="syz-executor" path="socket:[5481]" dev="sockfs" ino=5481 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.124023][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.157210][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.167109][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.174915][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.454368][ T30] audit: type=1401 audit(1775383744.114:99): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 64.669247][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.681901][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.713563][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.721442][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.975069][ T30] audit: type=1400 audit(1775383744.634:100): avc: denied { create } for pid=5879 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 65.022189][ T30] audit: type=1400 audit(1775383744.634:101): avc: denied { sys_admin } for pid=5879 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 65.274284][ T5885] chnl_net:caif_netlink_parms(): no params data found [ 65.338748][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.346066][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.353614][ T5885] bridge_slave_0: entered allmulticast mode [ 65.360603][ T5885] bridge_slave_0: entered promiscuous mode [ 65.369920][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.377056][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.384355][ T5885] bridge_slave_1: entered allmulticast mode [ 65.391090][ T5885] bridge_slave_1: entered promiscuous mode [ 65.414214][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.424639][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.445105][ T5885] team0: Port device team_slave_0 added [ 65.452528][ T5885] team0: Port device team_slave_1 added [ 65.472817][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.479739][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.505609][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.517707][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.524683][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.550578][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.578885][ T5885] hsr_slave_0: entered promiscuous mode [ 65.585254][ T5885] hsr_slave_1: entered promiscuous mode [ 65.695949][ T5885] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.706162][ T5885] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.714838][ T5885] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.724995][ T5885] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.735130][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.742435][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.794631][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.812060][ T5885] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.822141][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.829225][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.840745][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.847803][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.953474][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.980034][ T5885] veth0_vlan: entered promiscuous mode [ 65.988505][ T5885] veth1_vlan: entered promiscuous mode [ 66.012416][ T5885] veth0_macvtap: entered promiscuous mode [ 66.020008][ T5885] veth1_macvtap: entered promiscuous mode [ 66.032567][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.044733][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.056218][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.065956][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.075054][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.084478][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.183561][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.228076][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.280772][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.346399][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/04/05 10:09:06 executed programs: 0 [ 66.541875][ T5128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.549177][ T5128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.557169][ T5128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.567326][ T5128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.574927][ T5128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.667681][ T5916] chnl_net:caif_netlink_parms(): no params data found [ 66.719958][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.727071][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.734249][ T5916] bridge_slave_0: entered allmulticast mode [ 66.741303][ T5916] bridge_slave_0: entered promiscuous mode [ 66.748397][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.755756][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.762960][ T5916] bridge_slave_1: entered allmulticast mode [ 66.769541][ T5916] bridge_slave_1: entered promiscuous mode [ 66.789982][ T5916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.800785][ T5916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.822791][ T5916] team0: Port device team_slave_0 added [ 66.829576][ T5916] team0: Port device team_slave_1 added [ 66.846792][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.853889][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.880128][ T5916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.892321][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.899240][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.925173][ T5916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.958841][ T5916] hsr_slave_0: entered promiscuous mode [ 66.964956][ T5916] hsr_slave_1: entered promiscuous mode [ 66.970753][ T5916] debugfs: 'hsr0' already exists in 'hsr' [ 66.976658][ T5916] Cannot create hsr debugfs directory [ 68.611718][ T5823] Bluetooth: hci0: command tx timeout [ 69.560635][ T12] bridge_slave_1: left allmulticast mode [ 69.567253][ T12] bridge_slave_1: left promiscuous mode [ 69.575738][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.585006][ T12] bridge_slave_0: left allmulticast mode [ 69.590619][ T12] bridge_slave_0: left promiscuous mode [ 69.596817][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.709087][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.718832][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.728143][ T12] bond0 (unregistering): Released all slaves [ 69.806536][ T12] hsr_slave_0: left promiscuous mode [ 69.813385][ T12] hsr_slave_1: left promiscuous mode [ 69.819250][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.829714][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.837888][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.848829][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.863950][ T12] veth1_macvtap: left promiscuous mode [ 69.869492][ T12] veth0_macvtap: left promiscuous mode [ 69.876741][ T12] veth1_vlan: left promiscuous mode [ 69.882048][ T12] veth0_vlan: left promiscuous mode [ 70.092621][ T12] team0 (unregistering): Port device team_slave_1 removed [ 70.105655][ T12] team0 (unregistering): Port device team_slave_0 removed [ 70.344003][ T5916] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.355893][ T5916] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.365528][ T5916] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.379870][ T5916] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.496822][ T5916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.509730][ T5916] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.520884][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.527957][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.576162][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.583273][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.690906][ T5823] Bluetooth: hci0: command tx timeout [ 70.707032][ T5916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.743659][ T5916] veth0_vlan: entered promiscuous mode [ 70.752839][ T5916] veth1_vlan: entered promiscuous mode [ 70.769715][ T5916] veth0_macvtap: entered promiscuous mode [ 70.779193][ T5916] veth1_macvtap: entered promiscuous mode [ 70.792350][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.803301][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.818580][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.827459][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.837589][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.846951][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.887121][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.895097][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.918824][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.926663][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.956753][ T5963] FAULT_INJECTION: forcing a failure. [ 70.956753][ T5963] name failslab, interval 1, probability 0, space 0, times 1 [ 70.969620][ T5963] CPU: 1 UID: 0 PID: 5963 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 70.969642][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 70.969652][ T5963] Call Trace: [ 70.969658][ T5963] [ 70.969664][ T5963] dump_stack_lvl+0x100/0x190 [ 70.969694][ T5963] should_fail_ex.cold+0x5/0xa [ 70.969710][ T5963] should_failslab+0xc2/0x120 [ 70.969722][ T5963] __kmalloc_cache_noprof+0x7a/0x6f0 [ 70.969735][ T5963] ? h4_open+0x4f/0x1b0 [ 70.969749][ T5963] ? __init_waitqueue_head+0xca/0x150 [ 70.969763][ T5963] ? lockdep_init_map_type+0x5c/0x250 [ 70.969775][ T5963] h4_open+0x4f/0x1b0 [ 70.969790][ T5963] hci_uart_tty_ioctl+0x681/0xc80 [ 70.969805][ T5963] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 70.969818][ T5963] tty_ioctl+0x1204/0x1690 [ 70.969833][ T5963] ? __pfx_tty_ioctl+0x10/0x10 [ 70.969848][ T5963] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 70.969870][ T5963] ? hook_file_ioctl_common+0x146/0x410 [ 70.969885][ T5963] ? selinux_file_ioctl+0x139/0x290 [ 70.969900][ T5963] ? selinux_file_ioctl+0xb4/0x290 [ 70.969917][ T5963] ? __pfx_tty_ioctl+0x10/0x10 [ 70.969932][ T5963] __x64_sys_ioctl+0x18e/0x210 [ 70.969949][ T5963] do_syscall_64+0x106/0xf80 [ 70.969966][ T5963] ? clear_bhb_loop+0x40/0x90 [ 70.969979][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.969990][ T5963] RIP: 0033:0x7fd7d419c819 [ 70.969999][ T5963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.970009][ T5963] RSP: 002b:00007ffeca659d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.970020][ T5963] RAX: ffffffffffffffda RBX: 00007fd7d4415fa0 RCX: 00007fd7d419c819 [ 70.970026][ T5963] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 70.970032][ T5963] RBP: 00007ffeca659d70 R08: 0000000000000000 R09: 0000000000000000 [ 70.970038][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.970044][ T5963] R13: 00007fd7d4415fac R14: 00007fd7d4415fa0 R15: 00007fd7d4415fa0 [ 70.970056][ T5963] [ 71.194793][ T5964] FAULT_INJECTION: forcing a failure. [ 71.194793][ T5964] name failslab, interval 1, probability 0, space 0, times 0 [ 71.208165][ T5964] CPU: 1 UID: 0 PID: 5964 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 71.208193][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 71.208202][ T5964] Call Trace: [ 71.208207][ T5964] [ 71.208213][ T5964] dump_stack_lvl+0x100/0x190 [ 71.208239][ T5964] should_fail_ex.cold+0x5/0xa [ 71.208253][ T5964] should_failslab+0xc2/0x120 [ 71.208265][ T5964] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 71.208282][ T5964] ? kvasprintf_const+0x66/0x1a0 [ 71.208297][ T5964] kvasprintf+0xbc/0x150 [ 71.208309][ T5964] ? __pfx_kvasprintf+0x10/0x10 [ 71.208321][ T5964] ? rcu_is_watching+0x12/0xc0 [ 71.208335][ T5964] ? ida_alloc_range+0x70d/0x830 [ 71.208351][ T5964] ? kfree+0x2ec/0x6b0 [ 71.208363][ T5964] ? mark_held_locks+0x40/0x70 [ 71.208375][ T5964] kvasprintf_const+0x66/0x1a0 [ 71.208387][ T5964] kobject_set_name_vargs+0x5a/0x140 [ 71.208400][ T5964] dev_set_name+0xc7/0x100 [ 71.208415][ T5964] ? __pfx_dev_set_name+0x10/0x10 [ 71.208433][ T5964] ? hci_register_dev+0xdc/0xc90 [ 71.208446][ T5964] hci_register_dev+0x101/0xc90 [ 71.208461][ T5964] hci_uart_tty_ioctl+0x8fd/0xc80 [ 71.208476][ T5964] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 71.208489][ T5964] tty_ioctl+0x1204/0x1690 [ 71.208505][ T5964] ? __pfx_tty_ioctl+0x10/0x10 [ 71.208520][ T5964] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 71.208541][ T5964] ? hook_file_ioctl_common+0x146/0x410 [ 71.208556][ T5964] ? selinux_file_ioctl+0x139/0x290 [ 71.208572][ T5964] ? selinux_file_ioctl+0xb4/0x290 [ 71.208588][ T5964] ? __pfx_tty_ioctl+0x10/0x10 [ 71.208603][ T5964] __x64_sys_ioctl+0x18e/0x210 [ 71.208621][ T5964] do_syscall_64+0x106/0xf80 [ 71.208636][ T5964] ? clear_bhb_loop+0x40/0x90 [ 71.208649][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.208660][ T5964] RIP: 0033:0x7fd7d419c819 [ 71.208669][ T5964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.208678][ T5964] RSP: 002b:00007ffeca659d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.208689][ T5964] RAX: ffffffffffffffda RBX: 00007fd7d4415fa0 RCX: 00007fd7d419c819 [ 71.208695][ T5964] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 71.208701][ T5964] RBP: 00007ffeca659d70 R08: 0000000000000000 R09: 0000000000000000 [ 71.208707][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.208712][ T5964] R13: 00007fd7d4415fac R14: 00007fd7d4415fa0 R15: 00007fd7d4415fa0 [ 71.208725][ T5964] [ 71.209019][ T5964] Bluetooth: Can't register HCI device [ 71.466708][ T5964] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 71.479352][ T5964] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 71.487731][ T5964] CPU: 0 UID: 0 PID: 5964 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 71.496807][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 71.506833][ T5964] RIP: 0010:h4_recv+0x52/0x1c0 [ 71.511573][ T5964] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 3c 01 00 00 4c 8b a3 b8 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 31 01 00 00 49 8b 34 24 48 89 ea 41 b9 04 00 00 [ 71.531154][ T5964] RSP: 0018:ffffc900037afca8 EFLAGS: 00010246 [ 71.537207][ T5964] RAX: dffffc0000000000 RBX: ffff888033b48400 RCX: ffffffff887767b0 [ 71.545146][ T5964] RDX: 0000000000000000 RSI: ffffffff8877b6a8 RDI: ffff888033b485b8 [ 71.553085][ T5964] RBP: ffffc900037afd68 R08: 0000000000000001 R09: 0000000000000000 [ 71.561034][ T5964] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 71.568981][ T5964] R13: 0000000000000001 R14: ffff888033b484c0 R15: ffffffff8cc1b1c0 [ 71.576927][ T5964] FS: 000055556677d500(0000) GS:ffff888124339000(0000) knlGS:0000000000000000 [ 71.585837][ T5964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.592400][ T5964] CR2: 00007fd7d4072140 CR3: 00000000747cb000 CR4: 00000000003526f0 [ 71.600350][ T5964] Call Trace: [ 71.603607][ T5964] [ 71.606518][ T5964] hci_uart_tty_receive+0x259/0x7e0 [ 71.611699][ T5964] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 71.617397][ T5964] tty_ioctl+0x909/0x1690 [ 71.621973][ T5964] ? __pfx_tty_ioctl+0x10/0x10 [ 71.626720][ T5964] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 71.633553][ T5964] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 71.639953][ T5964] ? hook_file_ioctl_common+0x146/0x410 [ 71.645476][ T5964] ? selinux_file_ioctl+0x139/0x290 [ 71.650654][ T5964] ? selinux_file_ioctl+0xb4/0x290 [ 71.655748][ T5964] ? __pfx_tty_ioctl+0x10/0x10 [ 71.660492][ T5964] __x64_sys_ioctl+0x18e/0x210 [ 71.665238][ T5964] do_syscall_64+0x106/0xf80 [ 71.669810][ T5964] ? clear_bhb_loop+0x40/0x90 [ 71.674554][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.680435][ T5964] RIP: 0033:0x7fd7d419c819 [ 71.684826][ T5964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.704412][ T5964] RSP: 002b:00007ffeca659d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.712808][ T5964] RAX: ffffffffffffffda RBX: 00007fd7d4415fa0 RCX: 00007fd7d419c819 [ 71.720758][ T5964] RDX: 0000200000000100 RSI: 0000000000005412 RDI: 0000000000000003 [ 71.728704][ T5964] RBP: 00007fd7d4232c91 R08: 0000000000000000 R09: 0000000000000000 [ 71.736653][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.744603][ T5964] R13: 00007fd7d4415fac R14: 00007fd7d4415fa0 R15: 00007fd7d4415fa0 [ 71.752568][ T5964] [ 71.755563][ T5964] Modules linked in: [ 71.759687][ T5964] ---[ end trace 0000000000000000 ]--- [ 71.767565][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 71.767576][ T30] audit: type=1400 audit(1775383751.424:105): avc: denied { read } for pid=5159 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 71.780909][ T5964] RIP: 0010:h4_recv+0x52/0x1c0 [ 71.795500][ T30] audit: type=1400 audit(1775383751.424:106): avc: denied { search } for pid=5159 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.800200][ T5964] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 3c 01 00 00 4c 8b a3 b8 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 31 01 00 00 49 8b 34 24 48 89 ea 41 b9 04 00 00 [ 71.823276][ T30] audit: type=1400 audit(1775383751.424:107): avc: denied { search } for pid=5159 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.841662][ T5964] RSP: 0018:ffffc900037afca8 EFLAGS: 00010246 [ 71.863480][ T30] audit: type=1400 audit(1775383751.424:108): avc: denied { add_name } for pid=5159 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.868911][ T5964] RAX: dffffc0000000000 RBX: ffff888033b48400 RCX: ffffffff887767b0 [ 71.897734][ T30] audit: type=1400 audit(1775383751.424:109): avc: denied { create } for pid=5159 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.897765][ T30] audit: type=1400 audit(1775383751.424:110): avc: denied { append open } for pid=5159 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.897793][ T30] audit: type=1400 audit(1775383751.424:111): avc: denied { getattr } for pid=5159 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.964751][ T5964] RDX: 0000000000000000 RSI: ffffffff8877b6a8 RDI: ffff888033b485b8 [ 71.974229][ T5964] RBP: ffffc900037afd68 R08: 0000000000000001 R09: 0000000000000000 [ 71.982217][ T5964] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 71.990171][ T5964] R13: 0000000000000001 R14: ffff888033b484c0 R15: ffffffff8cc1b1c0 [ 71.998155][ T5964] FS: 000055556677d500(0000) GS:ffff888124339000(0000) knlGS:0000000000000000 [ 72.007091][ T5964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.013771][ T5964] CR2: 00007fd7d4072140 CR3: 00000000747cb000 CR4: 00000000003526f0 [ 72.021815][ T5964] Kernel panic - not syncing: Fatal exception [ 72.028122][ T5964] Kernel Offset: disabled [ 72.032419][ T5964] Rebooting in 86400 seconds..