[ 44.118493][ T40] audit: type=1400 audit(1766511902.895:59): avc: denied { write } for pid=5826 comm="sh" path="pipe:[6422]" dev="pipefs" ino=6422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.128238][ T40] audit: type=1400 audit(1766511902.895:60): avc: denied { rlimitinh } for pid=5826 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.136191][ T40] audit: type=1400 audit(1766511902.895:61): avc: denied { siginh } for pid=5826 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:34843' (ED25519) to the list of known hosts. [ 50.825995][ T40] audit: type=1400 audit(1766511909.615:62): avc: denied { execute } for pid=5920 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 50.834951][ T40] audit: type=1400 audit(1766511909.615:63): avc: denied { execute_no_trans } for pid=5920 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2025/12/23 17:45:11 parsed 1 programs [ 52.280085][ T40] audit: type=1400 audit(1766511911.065:64): avc: denied { node_bind } for pid=5920 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 54.519501][ T40] audit: type=1400 audit(1766511913.305:65): avc: denied { mounton } for pid=5931 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.527550][ T40] audit: type=1400 audit(1766511913.315:66): avc: denied { mount } for pid=5931 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.529740][ T5931] cgroup: Unknown subsys name 'net' [ 54.538123][ T40] audit: type=1400 audit(1766511913.325:67): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.748521][ T5931] cgroup: Unknown subsys name 'cpuset' [ 54.754265][ T5931] cgroup: Unknown subsys name 'rlimit' [ 54.975342][ T40] audit: type=1400 audit(1766511913.765:68): avc: denied { setattr } for pid=5931 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.984669][ T40] audit: type=1400 audit(1766511913.765:69): avc: denied { create } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.993274][ T40] audit: type=1400 audit(1766511913.765:70): avc: denied { write } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.001326][ T40] audit: type=1400 audit(1766511913.765:71): avc: denied { read } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.036443][ T5938] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 55.792133][ T5931] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.347041][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 57.347053][ T40] audit: type=1400 audit(1766511916.135:82): avc: denied { execmem } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 57.355633][ T40] audit: type=1400 audit(1766511916.135:83): avc: denied { create } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.362309][ T40] audit: type=1400 audit(1766511916.135:84): avc: denied { read write } for pid=5944 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 57.369300][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.370258][ T40] audit: type=1400 audit(1766511916.135:85): avc: denied { open } for pid=5944 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 57.372902][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.382132][ T40] audit: type=1400 audit(1766511916.145:86): avc: denied { ioctl } for pid=5944 comm="syz-executor" path="socket:[5031]" dev="sockfs" ino=5031 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.385063][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.398088][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.400886][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.411167][ T40] audit: type=1400 audit(1766511916.195:87): avc: denied { read } for pid=5944 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 57.419329][ T40] audit: type=1400 audit(1766511916.195:88): avc: denied { open } for pid=5944 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 57.429033][ T40] audit: type=1400 audit(1766511916.195:89): avc: denied { mounton } for pid=5944 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 57.479116][ T40] audit: type=1400 audit(1766511916.265:90): avc: denied { mount } for pid=5944 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.486404][ T40] audit: type=1400 audit(1766511916.265:91): avc: denied { mounton } for pid=5944 comm="syz-executor" path="/syzkaller.Dp9aCu/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.507285][ T5944] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.923117][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.926947][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.942541][ T5141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.945895][ T5141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.177538][ T5999] chnl_net:caif_netlink_parms(): no params data found [ 59.273173][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.276094][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.278532][ T5999] bridge_slave_0: entered allmulticast mode [ 59.281357][ T5999] bridge_slave_0: entered promiscuous mode [ 59.285595][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.288017][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.290453][ T5999] bridge_slave_1: entered allmulticast mode [ 59.293194][ T5999] bridge_slave_1: entered promiscuous mode [ 59.311388][ T5999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.316535][ T5999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.331293][ T5999] team0: Port device team_slave_0 added [ 59.334519][ T5999] team0: Port device team_slave_1 added [ 59.347865][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.350187][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.359947][ T5999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.371026][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.373922][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.384965][ T5999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.416990][ T5999] hsr_slave_0: entered promiscuous mode [ 59.419412][ T5999] hsr_slave_1: entered promiscuous mode [ 59.537611][ T5999] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.544302][ T5999] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.549948][ T5999] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.554733][ T5999] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.571830][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.574562][ T5999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.577404][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.580350][ T5999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.616979][ T5999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.631318][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.634729][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.645528][ T5999] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.652373][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.655589][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.662142][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.665043][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.794322][ T5999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.817407][ T5999] veth0_vlan: entered promiscuous mode [ 59.822219][ T5999] veth1_vlan: entered promiscuous mode [ 59.838080][ T5999] veth0_macvtap: entered promiscuous mode [ 59.841916][ T5999] veth1_macvtap: entered promiscuous mode [ 59.850938][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.857328][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.863488][ T3604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.868521][ T3604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.872262][ T3604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.875307][ T3604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.947504][ T3604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.026392][ T3604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.165608][ T3604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.241067][ T3604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/23 17:45:19 executed programs: 0 [ 60.502693][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.508307][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.511943][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.516030][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.519662][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.615334][ T6041] chnl_net:caif_netlink_parms(): no params data found [ 60.692856][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.696054][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.698425][ T6041] bridge_slave_0: entered allmulticast mode [ 60.701489][ T6041] bridge_slave_0: entered promiscuous mode [ 60.704966][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.707346][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.710113][ T6041] bridge_slave_1: entered allmulticast mode [ 60.712843][ T6041] bridge_slave_1: entered promiscuous mode [ 60.728897][ T6041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.733381][ T6041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.750332][ T6041] team0: Port device team_slave_0 added [ 60.753691][ T6041] team0: Port device team_slave_1 added [ 60.768479][ T6041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.770798][ T6041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.779659][ T6041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.784043][ T6041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.786791][ T6041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.796733][ T6041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.830513][ T6041] hsr_slave_0: entered promiscuous mode [ 60.833478][ T6041] hsr_slave_1: entered promiscuous mode [ 60.837601][ T6041] debugfs: 'hsr0' already exists in 'hsr' [ 60.839970][ T6041] Cannot create hsr debugfs directory [ 62.565737][ T5946] Bluetooth: hci0: command tx timeout [ 63.017491][ T3604] bridge_slave_1: left allmulticast mode [ 63.019448][ T3604] bridge_slave_1: left promiscuous mode [ 63.021802][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.027198][ T3604] bridge_slave_0: left allmulticast mode [ 63.029038][ T3604] bridge_slave_0: left promiscuous mode [ 63.030981][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.175777][ T3604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.180201][ T3604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.184340][ T3604] bond0 (unregistering): Released all slaves [ 63.262348][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 63.262365][ T40] audit: type=1400 audit(1766511922.045:114): avc: denied { create } for pid=6050 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.274570][ T40] audit: type=1400 audit(1766511922.045:115): avc: denied { write } for pid=6050 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2106 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.285611][ T40] audit: type=1400 audit(1766511922.045:116): avc: denied { append } for pid=6050 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2106 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.301061][ T40] audit: type=1400 audit(1766511922.085:117): avc: denied { unlink } for pid=6053 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2106 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.314814][ T3604] hsr_slave_0: left promiscuous mode [ 63.317397][ T3604] hsr_slave_1: left promiscuous mode [ 63.319619][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.322254][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.329795][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.332256][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.341230][ T3604] veth1_macvtap: left promiscuous mode [ 63.343129][ T3604] veth0_macvtap: left promiscuous mode [ 63.345089][ T3604] veth1_vlan: left promiscuous mode [ 63.347073][ T3604] veth0_vlan: left promiscuous mode [ 63.543757][ T3604] team0 (unregistering): Port device team_slave_1 removed [ 63.557528][ T3604] team0 (unregistering): Port device team_slave_0 removed [ 64.142716][ T6041] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.147820][ T6041] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.153061][ T6041] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.159405][ T6041] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.218424][ T6041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.233106][ T6041] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.241975][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.244403][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.251738][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.254163][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.503428][ T6041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.547466][ T6041] veth0_vlan: entered promiscuous mode [ 64.556417][ T6041] veth1_vlan: entered promiscuous mode [ 64.584589][ T6041] veth0_macvtap: entered promiscuous mode [ 64.590789][ T6041] veth1_macvtap: entered promiscuous mode [ 64.600487][ T6041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.608073][ T6041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.616696][ T1247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.619522][ T1247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.623207][ T1247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.626262][ T1247] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.645384][ T5946] Bluetooth: hci0: command tx timeout [ 64.673650][ T3604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.684954][ T3604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.689126][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.691727][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.735506][ T40] audit: type=1400 audit(1766511923.525:118): avc: denied { read write } for pid=6084 comm="syz.0.17" name="system" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.739250][ T6084] ------------[ cut here ]------------ [ 64.744431][ T40] audit: type=1400 audit(1766511923.525:119): avc: denied { ioctl open } for pid=6084 comm="syz.0.17" path="/dev/dma_heap/system" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.746731][ T6084] WARNING: lib/idr.c:84 at idr_alloc+0x119/0x130, CPU#2: syz.0.17/6084 [ 64.746767][ T6084] Modules linked in: [ 64.746794][ T6084] CPU: 2 UID: 0 PID: 6084 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 64.746813][ T6084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.746824][ T6084] RIP: 0010:idr_alloc+0x119/0x130 [ 64.746845][ T6084] Code: 48 8b 44 24 58 65 48 2b 05 8c 27 45 08 75 25 48 83 c4 60 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 0d ab 0d 00 e8 d8 5d 51 f6 90 <0f> 0b 90 bb ea ff ff ff eb b5 e8 f8 77 0a 00 0f 1f 84 00 00 00 00 [ 64.746861][ T6084] RSP: 0018:ffffc900045afb38 EFLAGS: 00010293 [ 64.746876][ T6084] RAX: 0000000000000000 RBX: 000000009577be97 RCX: ffffffff8b6d87fb [ 64.746888][ T6084] RDX: ffff888028474980 RSI: ffffffff8b6d8898 RDI: 0000000000000005 [ 64.746900][ T6084] RBP: 000000009577be96 R08: 0000000000000005 R09: 0000000000000000 [ 64.746911][ T6084] R10: 000000009577be96 R11: ffff8880284754b0 R12: 1ffff920008b5f67 [ 64.746923][ T6084] R13: ffff88802b15d088 R14: ffff88803ad87000 R15: 0000000000002800 [ 64.746936][ T6084] FS: 0000555572e13500(0000) GS:ffff8880d6af5000(0000) knlGS:0000000000000000 [ 64.746974][ T6084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.746990][ T6084] CR2: 00007f7ebb773460 CR3: 0000000035fd9000 CR4: 0000000000352ef0 [ 64.747002][ T6084] Call Trace: [ 64.747009][ T6084] [ 64.747018][ T6084] ? __pfx_idr_alloc+0x10/0x10 [ 64.747040][ T6084] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 64.757646][ T40] audit: type=1400 audit(1766511923.525:120): avc: denied { read } for pid=6084 comm="syz.0.17" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 64.760222][ T6084] ? _raw_spin_unlock+0x28/0x50 [ 64.762020][ T40] audit: type=1400 audit(1766511923.525:121): avc: denied { open } for pid=6084 comm="syz.0.17" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 64.765118][ T6084] drm_gem_change_handle_ioctl+0x2c1/0x560 [ 64.769935][ T40] audit: type=1400 audit(1766511923.525:122): avc: denied { ioctl } for pid=6084 comm="syz.0.17" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 64.771544][ T6084] ? __pfx_drm_gem_change_handle_ioctl+0x10/0x10 [ 64.840712][ T6084] ? find_held_lock+0x2b/0x80 [ 64.842832][ T6084] ? drm_dev_exit+0x41/0x60 [ 64.844489][ T6084] drm_ioctl_kernel+0x1f4/0x3e0 [ 64.846357][ T6084] ? __pfx_drm_gem_change_handle_ioctl+0x10/0x10 [ 64.848575][ T6084] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 64.850430][ T6084] drm_ioctl+0x5c9/0xc30 [ 64.851876][ T6084] ? __pfx_drm_gem_change_handle_ioctl+0x10/0x10 [ 64.854034][ T6084] ? __pfx_drm_ioctl+0x10/0x10 [ 64.855867][ T6084] ? selinux_file_ioctl+0x180/0x270 [ 64.857891][ T6084] ? selinux_file_ioctl+0xb4/0x270 [ 64.859744][ T6084] ? __pfx_drm_ioctl+0x10/0x10 [ 64.861370][ T6084] __x64_sys_ioctl+0x18e/0x210 [ 64.863042][ T6084] do_syscall_64+0xcd/0xf80 [ 64.864580][ T6084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.866690][ T6084] RIP: 0033:0x7f7ebb78f7c9 [ 64.868268][ T6084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.874616][ T6084] RSP: 002b:00007ffcec870b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.877418][ T6084] RAX: ffffffffffffffda RBX: 00007f7ebb9e5fa0 RCX: 00007f7ebb78f7c9 [ 64.880050][ T6084] RDX: 0000200000000180 RSI: 00000000c00c64d2 RDI: 0000000000000005 [ 64.882674][ T6084] RBP: 00007f7ebb813f91 R08: 0000000000000000 R09: 0000000000000000 [ 64.885537][ T6084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.888375][ T6084] R13: 00007f7ebb9e5fa0 R14: 00007f7ebb9e5fa0 R15: 0000000000000003 [ 64.891101][ T6084] [ 64.892137][ T6084] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 64.894619][ T6084] CPU: 2 UID: 0 PID: 6084 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 64.897687][ T6084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.901339][ T6084] Call Trace: [ 64.902508][ T6084] [ 64.903533][ T6084] dump_stack_lvl+0x3d/0x1f0 [ 64.905130][ T6084] vpanic+0x640/0x6f0 [ 64.906535][ T6084] ? idr_alloc+0x119/0x130 [ 64.908062][ T6084] panic+0xca/0xd0 [ 64.909383][ T6084] ? __pfx_panic+0x10/0x10 [ 64.910969][ T6084] ? check_panic_on_warn+0x1f/0xb0 [ 64.912659][ T6084] check_panic_on_warn+0xab/0xb0 [ 64.914342][ T6084] __warn+0x108/0x3c0 [ 64.915706][ T6084] __report_bug+0x2a0/0x520 [ 64.917292][ T6084] ? idr_alloc+0x119/0x130 [ 64.918790][ T6084] ? __pfx___report_bug+0x10/0x10 [ 64.920538][ T6084] ? lock_acquire+0x179/0x330 [ 64.922184][ T6084] ? __pfx___might_resched+0x10/0x10 [ 64.923966][ T6084] ? idr_alloc+0x119/0x130 [ 64.925447][ T6084] report_bug+0xb2/0x220 [ 64.926899][ T6084] ? idr_alloc+0x119/0x130 [ 64.928376][ T6084] handle_bug+0x127/0x260 [ 64.929907][ T6084] exc_invalid_op+0x17/0x50 [ 64.931454][ T6084] asm_exc_invalid_op+0x1a/0x20 [ 64.933430][ T6084] RIP: 0010:idr_alloc+0x119/0x130 [ 64.935601][ T6084] Code: 48 8b 44 24 58 65 48 2b 05 8c 27 45 08 75 25 48 83 c4 60 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 0d ab 0d 00 e8 d8 5d 51 f6 90 <0f> 0b 90 bb ea ff ff ff eb b5 e8 f8 77 0a 00 0f 1f 84 00 00 00 00 [ 64.943952][ T6084] RSP: 0018:ffffc900045afb38 EFLAGS: 00010293 [ 64.946547][ T6084] RAX: 0000000000000000 RBX: 000000009577be97 RCX: ffffffff8b6d87fb [ 64.949966][ T6084] RDX: ffff888028474980 RSI: ffffffff8b6d8898 RDI: 0000000000000005 [ 64.953436][ T6084] RBP: 000000009577be96 R08: 0000000000000005 R09: 0000000000000000 [ 64.956916][ T6084] R10: 000000009577be96 R11: ffff8880284754b0 R12: 1ffff920008b5f67 [ 64.960379][ T6084] R13: ffff88802b15d088 R14: ffff88803ad87000 R15: 0000000000002800 [ 64.963875][ T6084] ? idr_alloc+0x7b/0x130 [ 64.965824][ T6084] ? idr_alloc+0x118/0x130 [ 64.967803][ T6084] ? idr_alloc+0x118/0x130 [ 64.969470][ T6084] ? __pfx_idr_alloc+0x10/0x10 [ 64.971229][ T6084] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 64.973290][ T6084] ? _raw_spin_unlock+0x28/0x50 [ 64.975477][ T6084] drm_gem_change_handle_ioctl+0x2c1/0x560 [ 64.978100][ T6084] ? __pfx_drm_gem_change_handle_ioctl+0x10/0x10 [ 64.980892][ T6084] ? find_held_lock+0x2b/0x80 [ 64.983027][ T6084] ? drm_dev_exit+0x41/0x60 [ 64.985083][ T6084] drm_ioctl_kernel+0x1f4/0x3e0 [ 64.987265][ T6084] ? __pfx_drm_gem_change_handle_ioctl+0x10/0x10 [ 64.990081][ T6084] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 64.992469][ T6084] drm_ioctl+0x5c9/0xc30 [ 64.994285][ T6084] ? __pfx_drm_gem_change_handle_ioctl+0x10/0x10 [ 64.996397][ T6084] ? __pfx_drm_ioctl+0x10/0x10 [ 64.998024][ T6084] ? selinux_file_ioctl+0x180/0x270 [ 64.999823][ T6084] ? selinux_file_ioctl+0xb4/0x270 [ 65.001567][ T6084] ? __pfx_drm_ioctl+0x10/0x10 [ 65.003183][ T6084] __x64_sys_ioctl+0x18e/0x210 [ 65.004764][ T6084] do_syscall_64+0xcd/0xf80 [ 65.006266][ T6084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.008193][ T6084] RIP: 0033:0x7f7ebb78f7c9 [ 65.009708][ T6084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.015895][ T6084] RSP: 002b:00007ffcec870b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.018631][ T6084] RAX: ffffffffffffffda RBX: 00007f7ebb9e5fa0 RCX: 00007f7ebb78f7c9 [ 65.021694][ T6084] RDX: 0000200000000180 RSI: 00000000c00c64d2 RDI: 0000000000000005 [ 65.025170][ T6084] RBP: 00007f7ebb813f91 R08: 0000000000000000 R09: 0000000000000000 [ 65.028664][ T6084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.032079][ T6084] R13: 00007f7ebb9e5fa0 R14: 00007f7ebb9e5fa0 R15: 0000000000000003 [ 65.035500][ T6084] [ 65.037530][ T6084] Kernel Offset: disabled [ 65.039446][ T6084] Rebooting in 86400 seconds..