last executing test programs: 3.730028115s ago: executing program 2 (id=251): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x201}) io_setup(0x18, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 3.588216668s ago: executing program 2 (id=255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000480)={{0x1000, 0x2, 0x3, 0x1, 0xa5, 0x11, 0x80, 0x4, 0x8, 0x3, 0xff, 0x5}, {0x5000, 0x2000, 0xe, 0x6, 0xfd, 0x60, 0x7f, 0x6, 0x5, 0xc, 0xff, 0x16}, {0x0, 0x3000, 0xa, 0x8, 0xb3, 0x50, 0xe, 0x5, 0x3, 0x7, 0x4, 0x80}, {0xf000, 0xf000, 0x0, 0x6, 0x8, 0x4, 0x9, 0xc7, 0x5, 0xb, 0x0, 0xef}, {0x10000, 0x7777b000, 0x10, 0x0, 0xbc, 0x3, 0x1, 0xed, 0x0, 0x0, 0x0, 0x1}, {0x8000000, 0x8080000, 0xc, 0x3, 0x0, 0x20, 0x3, 0x80, 0x1, 0xd, 0x8}, {0xd000, 0xf000, 0xf, 0x1, 0x8, 0xe, 0xcc, 0x5, 0x10, 0x1, 0x2, 0x7}, {0x0, 0xdddd0000, 0xf, 0xd, 0xf, 0x3, 0x7f, 0x3, 0xc, 0x0, 0x6, 0x3}, {0x1, 0x6}, {0x6000, 0x7}, 0x80000010, 0x0, 0xe6f7e004, 0x4281, 0xc, 0x100, 0xeeee8000, [0x10000, 0x8, 0x1, 0x80000000]}) 3.338199199s ago: executing program 3 (id=257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) 3.33742759s ago: executing program 2 (id=258): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 3.16591103s ago: executing program 1 (id=260): socket(0x40000000015, 0x5, 0x0) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 3.127194959s ago: executing program 3 (id=261): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f13608060001080006040002aaaaaaaaaaaaac1414bb"], 0x0) 3.056420127s ago: executing program 1 (id=262): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)='I', 0x1}], 0x1}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000040), 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)}, 0x0) 2.993552626s ago: executing program 1 (id=263): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) 2.932909254s ago: executing program 1 (id=264): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ppoll(&(0x7f0000000080)=[{r0, 0x2f3}], 0x1, 0x0, 0x0, 0x0) 2.249348879s ago: executing program 3 (id=266): r0 = syz_io_uring_setup(0x6042, &(0x7f00000000c0)={0x0, 0xa9ee, 0x1, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x4c, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x2, 0x0, 0x0, 0x0) 2.137810811s ago: executing program 3 (id=268): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6879ce3c39314ddc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) 2.093188265s ago: executing program 3 (id=269): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000280)="935a") 1.966427024s ago: executing program 1 (id=272): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 993.323961ms ago: executing program 4 (id=287): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000080), 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000500)=@can={{0x1, 0x1, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "e50dcee5d5f2b1d3"}, 0x10}}, 0x20000894) 874.562001ms ago: executing program 4 (id=288): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x1, 0xffffffff}, {0x6}]}) write$ppp(r0, &(0x7f0000000480)='3I', 0x2) 704.77533ms ago: executing program 4 (id=290): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000400)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x7, 0xa00, 0x3a0, 0x1d0, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@rand_addr, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'pimreg\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) 662.562503ms ago: executing program 0 (id=291): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000180)={{@hyper, 0x2}, @hyper, 0xe, 0x30000000000001, 0x5e, 0x0, 0xfffffffffffffffa, 0x2000}) 559.68091ms ago: executing program 0 (id=292): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setown(r0, 0x8, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 540.750799ms ago: executing program 4 (id=293): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08002600b4090000080027000115"], 0x34}}, 0x0) 399.999807ms ago: executing program 0 (id=294): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01) lchown(&(0x7f00000004c0)='./file1\x00', 0x0, 0xffffffffffffffff) 357.615726ms ago: executing program 4 (id=295): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 305.609212ms ago: executing program 4 (id=296): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x80, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2f4}) 262.6035ms ago: executing program 0 (id=297): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x6, 0x2, 0x7d4a}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4004890) 251.098065ms ago: executing program 2 (id=298): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x20, 0x40e28}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) 185.808533ms ago: executing program 2 (id=299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="48003300d0980700ffffffffffff080211000001505050505050"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x44050) 171.450913ms ago: executing program 0 (id=300): socket(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="01"]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 142.915157ms ago: executing program 3 (id=301): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 72.982549ms ago: executing program 1 (id=302): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 42.665977ms ago: executing program 0 (id=303): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xc0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x3}]]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 0s ago: executing program 2 (id=304): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 55.479924][ T30] audit: type=1400 audit(1749210905.112:62): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.483668][ T5803] cgroup: Unknown subsys name 'net' [ 55.508168][ T30] audit: type=1400 audit(1749210905.122:63): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.530399][ T30] audit: type=1400 audit(1749210905.142:64): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.652685][ T5803] cgroup: Unknown subsys name 'cpuset' [ 55.660238][ T5803] cgroup: Unknown subsys name 'rlimit' [ 55.784662][ T30] audit: type=1400 audit(1749210905.422:65): avc: denied { setattr } for pid=5803 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.817262][ T30] audit: type=1400 audit(1749210905.422:66): avc: denied { create } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.851304][ T30] audit: type=1400 audit(1749210905.422:67): avc: denied { write } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.868038][ T5805] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 55.871867][ T30] audit: type=1400 audit(1749210905.422:68): avc: denied { read } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.900788][ T30] audit: type=1400 audit(1749210905.422:69): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 55.926079][ T30] audit: type=1400 audit(1749210905.422:70): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 55.949649][ T30] audit: type=1400 audit(1749210905.482:71): avc: denied { read } for pid=5485 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 56.813159][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.091183][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.098967][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.106951][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.114845][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.115437][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.122316][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.129798][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.139664][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.143757][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.150289][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.157346][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.172801][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.173773][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.188797][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.206116][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.222771][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.223478][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.242788][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.251665][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.259220][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.272759][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.285207][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.292791][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.303970][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.311537][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.655472][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 59.745979][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 59.803039][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 59.812129][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 59.871188][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.878766][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.886089][ T5815] bridge_slave_0: entered allmulticast mode [ 59.893268][ T5815] bridge_slave_0: entered promiscuous mode [ 59.925925][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.933684][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.941340][ T5815] bridge_slave_1: entered allmulticast mode [ 59.947922][ T5815] bridge_slave_1: entered promiscuous mode [ 60.018670][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.025864][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.033336][ T5813] bridge_slave_0: entered allmulticast mode [ 60.040093][ T5813] bridge_slave_0: entered promiscuous mode [ 60.049091][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.073066][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.080387][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.087448][ T5813] bridge_slave_1: entered allmulticast mode [ 60.094236][ T5813] bridge_slave_1: entered promiscuous mode [ 60.109982][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.119143][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 60.178666][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.191019][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.213702][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.221111][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.228193][ T5817] bridge_slave_0: entered allmulticast mode [ 60.234964][ T5817] bridge_slave_0: entered promiscuous mode [ 60.242273][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.249344][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.256614][ T5826] bridge_slave_0: entered allmulticast mode [ 60.263709][ T5826] bridge_slave_0: entered promiscuous mode [ 60.279743][ T5815] team0: Port device team_slave_0 added [ 60.287755][ T5815] team0: Port device team_slave_1 added [ 60.304133][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.311263][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.318416][ T5817] bridge_slave_1: entered allmulticast mode [ 60.325757][ T5817] bridge_slave_1: entered promiscuous mode [ 60.332154][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.339219][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.346467][ T5826] bridge_slave_1: entered allmulticast mode [ 60.353276][ T5826] bridge_slave_1: entered promiscuous mode [ 60.369240][ T5813] team0: Port device team_slave_0 added [ 60.406686][ T5813] team0: Port device team_slave_1 added [ 60.451785][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.458736][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.484769][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.505053][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.516668][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.534402][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.542688][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.568858][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.580413][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.587461][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.595029][ T5825] bridge_slave_0: entered allmulticast mode [ 60.602872][ T5825] bridge_slave_0: entered promiscuous mode [ 60.611300][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.621930][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.631894][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.638840][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.664879][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.694147][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.701627][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.708701][ T5825] bridge_slave_1: entered allmulticast mode [ 60.715534][ T5825] bridge_slave_1: entered promiscuous mode [ 60.735326][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.743847][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.770320][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.814105][ T5826] team0: Port device team_slave_0 added [ 60.828286][ T5815] hsr_slave_0: entered promiscuous mode [ 60.834797][ T5815] hsr_slave_1: entered promiscuous mode [ 60.850437][ T5817] team0: Port device team_slave_0 added [ 60.857408][ T5826] team0: Port device team_slave_1 added [ 60.874161][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.884850][ T5817] team0: Port device team_slave_1 added [ 60.914739][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.953253][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.960342][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.986546][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.016586][ T5813] hsr_slave_0: entered promiscuous mode [ 61.022959][ T5813] hsr_slave_1: entered promiscuous mode [ 61.028767][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.036451][ T5813] Cannot create hsr debugfs directory [ 61.051597][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.058520][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.084758][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.097520][ T5825] team0: Port device team_slave_0 added [ 61.105949][ T5825] team0: Port device team_slave_1 added [ 61.112712][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.119627][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.145692][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.181036][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.187984][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.214144][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.230898][ T5141] Bluetooth: hci0: command tx timeout [ 61.236538][ T5823] Bluetooth: hci2: command tx timeout [ 61.277712][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.284727][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.310450][ T5823] Bluetooth: hci1: command tx timeout [ 61.310854][ T5141] Bluetooth: hci3: command tx timeout [ 61.316588][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.355992][ T5826] hsr_slave_0: entered promiscuous mode [ 61.362014][ T5826] hsr_slave_1: entered promiscuous mode [ 61.367820][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.375688][ T5826] Cannot create hsr debugfs directory [ 61.381745][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.388671][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.414854][ T5141] Bluetooth: hci4: command tx timeout [ 61.416743][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.500878][ T5817] hsr_slave_0: entered promiscuous mode [ 61.506855][ T5817] hsr_slave_1: entered promiscuous mode [ 61.514026][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.521978][ T5817] Cannot create hsr debugfs directory [ 61.559027][ T5825] hsr_slave_0: entered promiscuous mode [ 61.565306][ T5825] hsr_slave_1: entered promiscuous mode [ 61.571319][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.578855][ T5825] Cannot create hsr debugfs directory [ 61.740643][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.752015][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.786042][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.821562][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.898853][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.923281][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.933822][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.960472][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.019431][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.029207][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.042554][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.051275][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.063391][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.104334][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.128459][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.135649][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.154509][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.161608][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.187812][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.215901][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.225634][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.250717][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.302826][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.321361][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.331887][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.342183][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.436339][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.443356][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 62.443367][ T30] audit: type=1400 audit(1749210912.082:86): avc: denied { sys_module } for pid=5815 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.486355][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.506291][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.513408][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.531333][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.552265][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.559402][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.624096][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.647119][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.672335][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.679443][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.693621][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.700725][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.717358][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.737762][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.760904][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.775257][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.782395][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.811720][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.818779][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.857072][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.905896][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.913036][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.944428][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.951517][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.009395][ T5815] veth0_vlan: entered promiscuous mode [ 63.034143][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.087636][ T5815] veth1_vlan: entered promiscuous mode [ 63.146065][ T5813] veth0_vlan: entered promiscuous mode [ 63.177642][ T5813] veth1_vlan: entered promiscuous mode [ 63.192376][ T5815] veth0_macvtap: entered promiscuous mode [ 63.209860][ T5815] veth1_macvtap: entered promiscuous mode [ 63.269715][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.302821][ T5813] veth0_macvtap: entered promiscuous mode [ 63.314609][ T5141] Bluetooth: hci2: command tx timeout [ 63.314616][ T5823] Bluetooth: hci0: command tx timeout [ 63.325201][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.347719][ T5813] veth1_macvtap: entered promiscuous mode [ 63.375460][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.387412][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.390977][ T5823] Bluetooth: hci1: command tx timeout [ 63.399307][ T5141] Bluetooth: hci3: command tx timeout [ 63.408878][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.421675][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.441819][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.454933][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.470842][ T5141] Bluetooth: hci4: command tx timeout [ 63.471115][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.540140][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.551306][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.561230][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.570354][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.579043][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.594237][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.656284][ T5826] veth0_vlan: entered promiscuous mode [ 63.687426][ T5826] veth1_vlan: entered promiscuous mode [ 63.720445][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.728399][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.805506][ T5825] veth0_vlan: entered promiscuous mode [ 63.828943][ T5825] veth1_vlan: entered promiscuous mode [ 63.842475][ T5826] veth0_macvtap: entered promiscuous mode [ 63.859970][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.867800][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.877294][ T5826] veth1_macvtap: entered promiscuous mode [ 63.897433][ T5825] veth0_macvtap: entered promiscuous mode [ 63.909500][ T5825] veth1_macvtap: entered promiscuous mode [ 63.909830][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.915688][ T30] audit: type=1400 audit(1749210913.542:87): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.8mA6f8/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 63.932154][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.987638][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.000845][ T30] audit: type=1400 audit(1749210913.592:88): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.024635][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.043784][ T30] audit: type=1400 audit(1749210913.592:89): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.8mA6f8/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.057208][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.078724][ T30] audit: type=1400 audit(1749210913.592:90): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.086322][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.107957][ T30] audit: type=1400 audit(1749210913.602:91): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.8mA6f8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.135702][ T30] audit: type=1400 audit(1749210913.602:92): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.8mA6f8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.169788][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.171695][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.180177][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.203143][ T30] audit: type=1400 audit(1749210913.602:93): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.225783][ T30] audit: type=1400 audit(1749210913.612:94): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 64.226928][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.260588][ T30] audit: type=1400 audit(1749210913.612:95): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="gadgetfs" ino=6056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 64.264870][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.292893][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.301743][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.320222][ T5817] veth0_vlan: entered promiscuous mode [ 64.328470][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.337267][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.346152][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.355935][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.384992][ T5817] veth1_vlan: entered promiscuous mode [ 64.501171][ T4413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.513317][ T4413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.522994][ T5869] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.558670][ T5817] veth0_macvtap: entered promiscuous mode [ 64.608670][ T5817] veth1_macvtap: entered promiscuous mode [ 64.626853][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.650304][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.663587][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.699542][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.699742][ T5869] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 64.734169][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.736883][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.755303][ T5869] usb 3-1: Product: syz [ 64.776551][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.780169][ T5869] usb 3-1: Manufacturer: syz [ 64.788432][ T5869] usb 3-1: SerialNumber: syz [ 64.813484][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.814815][ T5869] usb 3-1: config 0 descriptor?? [ 64.859369][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.880528][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.889272][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.926117][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.939972][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.222935][ T944] usb 3-1: USB disconnect, device number 2 [ 65.245681][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.288860][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.392019][ T5141] Bluetooth: hci2: command tx timeout [ 65.392272][ T5823] Bluetooth: hci0: command tx timeout [ 65.455215][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.472224][ T5823] Bluetooth: hci3: command tx timeout [ 65.472233][ T5141] Bluetooth: hci1: command tx timeout [ 65.488461][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.551186][ T5823] Bluetooth: hci4: command tx timeout [ 65.839395][ T5956] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 65.840109][ T5955] IPVS: stopping backup sync thread 5956 ... [ 65.932527][ T5958] mmap: syz.3.15 (5958) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.109763][ T5966] Bluetooth: MGMT ver 1.23 [ 66.277574][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 66.848847][ T5998] process 'syz.2.32' launched './file1' with NULL argv: empty string added [ 66.899957][ T944] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.930210][ T5883] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.079938][ T944] usb 1-1: Using ep0 maxpacket: 16 [ 67.103734][ T944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.120391][ T5883] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 67.135746][ T5883] usb 4-1: config 0 has no interface number 0 [ 67.151197][ T944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.162142][ T5883] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 67.184612][ T944] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 67.198663][ T5883] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 67.208825][ T944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.224062][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.237661][ T944] usb 1-1: config 0 descriptor?? [ 67.254448][ T5883] usb 4-1: config 0 descriptor?? [ 67.278518][ T5883] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input5 [ 67.290387][ T6010] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 67.290387][ T6010] The task syz.1.36 (6010) triggered the difference, watch for misbehavior. [ 67.471100][ T5823] Bluetooth: hci0: command tx timeout [ 67.471114][ T5141] Bluetooth: hci2: command tx timeout [ 67.490033][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 67.490048][ T30] audit: type=1400 audit(1749210917.122:153): avc: denied { mounton } for pid=6011 comm="syz.4.37" path="/4/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.549983][ T5141] Bluetooth: hci3: command tx timeout [ 67.552733][ T30] audit: type=1400 audit(1749210917.162:154): avc: denied { mount } for pid=6011 comm="syz.4.37" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 67.562075][ T5141] Bluetooth: hci1: command tx timeout [ 67.582360][ T30] audit: type=1400 audit(1749210917.192:155): avc: denied { read append } for pid=5989 comm="syz.3.30" name="event4" dev="devtmpfs" ino=2794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.630100][ T5141] Bluetooth: hci4: command tx timeout [ 67.636069][ T30] audit: type=1400 audit(1749210917.192:156): avc: denied { open } for pid=5989 comm="syz.3.30" path="/dev/input/event4" dev="devtmpfs" ino=2794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.640497][ T5884] usb 4-1: USB disconnect, device number 2 [ 67.715208][ T944] kye 0003:0458:5016.0001: control desc unexpectedly large [ 67.732508][ T944] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0001/input/input6 [ 67.845603][ T944] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0001/input/input7 [ 67.875322][ T30] audit: type=1400 audit(1749210917.512:157): avc: denied { create } for pid=6017 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.921394][ T6018] block nbd4: NBD_DISCONNECT [ 67.928555][ T30] audit: type=1400 audit(1749210917.562:158): avc: denied { write } for pid=6017 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.968121][ T6018] block nbd4: Send disconnect failed -22 [ 68.000357][ T6017] block nbd4: Disconnected due to user request. [ 68.008638][ T944] kye 0003:0458:5016.0001: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 68.048936][ T6017] block nbd4: shutting down sockets [ 68.072205][ T30] audit: type=1400 audit(1749210917.702:159): avc: denied { create } for pid=6023 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.131357][ T944] usb 1-1: USB disconnect, device number 2 [ 68.159415][ T30] audit: type=1400 audit(1749210917.752:160): avc: denied { setopt } for pid=6023 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.216158][ T30] audit: type=1400 audit(1749210917.752:161): avc: denied { read } for pid=6023 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.226827][ T6022] fido_id[6022]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 68.283112][ T6027] serio: Serial port ttyS3 [ 68.287408][ T30] audit: type=1400 audit(1749210917.822:162): avc: denied { write } for pid=6023 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.476823][ T6032] SELinux: failed to load policy [ 68.550359][ T5883] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.701889][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 68.712893][ T5883] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.739057][ T5883] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 68.756729][ T5883] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 68.768781][ T5883] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.785328][ T5883] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 68.795585][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.897128][ T6053] Context (ID=0x0) not attached to queue pair (handle=0x1:0x1ff) [ 69.026747][ T5883] usb 3-1: GET_CAPABILITIES returned 0 [ 69.033584][ T5883] usbtmc 3-1:16.0: can't read capabilities [ 69.047602][ T6058] netlink: 104 bytes leftover after parsing attributes in process `syz.0.54'. [ 69.276763][ T5883] usb 3-1: USB disconnect, device number 3 [ 70.090109][ T5902] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 70.154824][ T6095] ip6gretap0: entered promiscuous mode [ 70.249993][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 70.280149][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.302818][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 70.334204][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 70.356980][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 70.385758][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 70.402435][ T5902] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 70.411554][ T5897] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 70.425437][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 70.435311][ T5902] usb 3-1: Product: syz [ 70.439495][ T5902] usb 3-1: Manufacturer: syz [ 70.474835][ T5902] usb 3-1: SerialNumber: syz [ 70.487141][ T5902] usb 3-1: config 0 descriptor?? [ 70.582080][ T5897] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 70.600704][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.606958][ T6116] Zero length message leads to an empty skb [ 70.622256][ T5897] usb 4-1: config 0 descriptor?? [ 70.636619][ T5897] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 70.650166][ T5883] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.727240][ T5902] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 70.736598][ T5902] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 70.811599][ T5883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.841701][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.867137][ T5883] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 70.871685][ T5897] gp8psk: usb in 128 operation failed. [ 70.877040][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 70.893743][ T5883] usb 2-1: SerialNumber: syz [ 70.916638][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.923747][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.940892][ T5902] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 70.949278][ T5902] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 70.958341][ T5902] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 70.980869][ T5902] usb 3-1: USB disconnect, device number 4 [ 71.108474][ T5897] gp8psk: FW Version = 143.53.200 (0x8f35c8) Build 2244/167/217 [ 71.140267][ T5883] usb 2-1: 0:2 : does not exist [ 71.189788][ T5883] usb 2-1: USB disconnect, device number 2 [ 71.318991][ T5897] gp8psk: usb in 149 operation failed. [ 71.332625][ T6136] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 71.335189][ T5897] gp8psk: failed to get FPGA version [ 71.366848][ T5897] gp8psk: usb in 138 operation failed. [ 71.376636][ T5897] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 71.400073][ T5897] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 71.432432][ T5897] usb 4-1: USB disconnect, device number 3 [ 71.605867][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 71.615312][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 72.199954][ T5902] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.393128][ T5902] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 72.413861][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.440025][ T5902] usb 1-1: Product: syz [ 72.444224][ T5902] usb 1-1: Manufacturer: syz [ 72.448816][ T5902] usb 1-1: SerialNumber: syz [ 72.492394][ T5902] usb 1-1: config 0 descriptor?? [ 72.545337][ T6174] 9pnet: p9_errstr2errno: server reported unknown error [ 72.763381][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 72.763397][ T30] audit: type=1400 audit(1749210922.402:196): avc: denied { map } for pid=6177 comm="syz.2.108" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 72.857434][ T30] audit: type=1400 audit(1749210922.452:197): avc: denied { bind } for pid=6179 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.870978][ T6183] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.110'. [ 73.074025][ T30] audit: type=1400 audit(1749210922.712:198): avc: denied { create } for pid=6188 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.122643][ T30] audit: type=1400 audit(1749210922.742:199): avc: denied { connect } for pid=6188 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.305909][ T5902] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 73.329581][ T5902] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 73.377566][ T5902] asix 1-1:0.0: probe with driver asix failed with error -71 [ 73.392492][ T30] audit: type=1400 audit(1749210923.032:200): avc: denied { map } for pid=6200 comm="syz.3.119" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 73.420314][ T5902] usb 1-1: USB disconnect, device number 3 [ 73.502358][ T30] audit: type=1400 audit(1749210923.052:201): avc: denied { execute } for pid=6200 comm="syz.3.119" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 73.660429][ T30] audit: type=1400 audit(1749210923.292:202): avc: denied { load_policy } for pid=6204 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 73.722284][ T6205] SELinux: failed to load policy [ 73.848507][ T30] audit: type=1400 audit(1749210923.482:203): avc: denied { write } for pid=6210 comm="syz.3.124" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.871553][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.884424][ T6211] input: syz1 as /devices/virtual/input/input8 [ 73.901838][ T30] audit: type=1400 audit(1749210923.522:204): avc: denied { ioctl } for pid=6210 comm="syz.3.124" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.926708][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.980950][ T6213] warning: `syz.4.125' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.028397][ T30] audit: type=1400 audit(1749210923.662:205): avc: denied { getopt } for pid=6215 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.873893][ T6250] sctp: [Deprecated]: syz.3.143 (pid 6250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 74.873893][ T6250] Use struct sctp_sack_info instead [ 75.554654][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'. [ 75.727070][ T6279] Failed to get privilege flags for destination (handle=0x2:0xd) [ 75.979630][ T6291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 76.050055][ T5897] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.239937][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 76.255128][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 76.276683][ T5897] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 76.303227][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.350040][ T5897] usb 2-1: Product: syz [ 76.367062][ T5897] usb 2-1: Manufacturer: syz [ 76.397927][ T5897] usb 2-1: SerialNumber: syz [ 76.417316][ T5897] usb 2-1: config 0 descriptor?? [ 76.875715][ T5897] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 76.881169][ T6325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.178'. [ 77.284737][ T5897] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 77.300303][ T5897] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 77.342873][ T5897] usb 2-1: USB disconnect, device number 3 [ 77.759193][ T6368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.198'. [ 77.770199][ T5876] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 77.930621][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 77.942607][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.975975][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.999265][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 78.017025][ T5876] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 78.033389][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.045749][ T5876] usb 3-1: config 0 descriptor?? [ 78.090434][ T5883] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 78.254697][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 78.276342][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 78.288867][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 78.290426][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 78.290437][ T30] audit: type=1400 audit(1749210927.932:241): avc: denied { write } for pid=6389 comm="syz.1.209" name="sg0" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.340273][ T5883] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 78.360848][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.380021][ T5883] usb 1-1: Product: syz [ 78.386455][ T5883] usb 1-1: Manufacturer: syz [ 78.392598][ T30] audit: type=1400 audit(1749210927.992:242): avc: denied { shutdown } for pid=6391 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.396019][ T5883] usb 1-1: SerialNumber: syz [ 78.448792][ T5883] usb 1-1: config 0 descriptor?? [ 78.472721][ T6372] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 78.474055][ T30] audit: type=1400 audit(1749210927.992:243): avc: denied { connect } for pid=6391 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.508743][ T30] audit: type=1400 audit(1749210927.992:244): avc: denied { name_connect } for pid=6391 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 78.512780][ T6372] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 78.532094][ T30] audit: type=1400 audit(1749210928.012:245): avc: denied { setopt } for pid=6391 comm="syz.4.210" lport=34307 faddr=fc02:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.535826][ C1] vkms_vblank_simulate: vblank timer overrun [ 78.602350][ T30] audit: type=1400 audit(1749210928.222:246): avc: denied { read write } for pid=6395 comm="syz.1.212" name="rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 78.632824][ T5876] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 78.641649][ T5883] usb 1-1: ucan: probing device on interface #0 [ 78.648788][ T5876] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 78.658694][ T5876] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 78.667024][ T5876] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 78.674903][ T5876] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 78.686898][ T5876] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 78.710056][ T30] audit: type=1400 audit(1749210928.222:247): avc: denied { open } for pid=6395 comm="syz.1.212" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 78.763755][ T5876] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 78.771805][ T30] audit: type=1400 audit(1749210928.402:248): avc: denied { append } for pid=6399 comm="syz.3.214" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.810524][ T5876] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 78.822489][ T6360] random: crng reseeded on system resumption [ 78.863562][ T30] audit: type=1400 audit(1749210928.462:249): avc: denied { read write } for pid=6358 comm="syz.2.194" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 78.889517][ T30] audit: type=1400 audit(1749210928.462:250): avc: denied { ioctl open } for pid=6358 comm="syz.2.194" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 78.919954][ T5902] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 78.925679][ T944] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 78.948168][ T5876] usb 3-1: USB disconnect, device number 5 [ 78.970074][ T944] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 78.994758][ T944] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 79.035881][ T944] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 79.058285][ T6404] netem: change failed [ 79.090316][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 79.111309][ T5902] usb 2-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.123565][ T5902] usb 2-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.161629][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 79.168276][ T5902] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 79.179650][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.194130][ T5902] usb 2-1: config 0 descriptor?? [ 79.307951][ T5883] ucan 1-1:0.0: probe with driver ucan failed with error -22 [ 79.390238][ T944] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 79.563568][ T944] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 79.580012][ T944] usb 4-1: config 179 has no interface number 0 [ 79.586324][ T944] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 79.591207][ T5897] usb 1-1: USB disconnect, device number 4 [ 79.621910][ T944] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 79.626198][ T5902] kone 0003:1E7D:2CED.0003: item fetching failed at offset 2/5 [ 79.644184][ T944] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 79.660454][ T5902] kone 0003:1E7D:2CED.0003: parse failed [ 79.669834][ T5902] kone 0003:1E7D:2CED.0003: probe with driver kone failed with error -22 [ 79.674845][ T944] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 79.718771][ T944] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 79.740035][ T944] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 79.749143][ T944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.762545][ T6409] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.779703][ T944] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 79.893373][ T5897] usb 2-1: USB disconnect, device number 4 [ 80.044043][ T944] usb 4-1: USB disconnect, device number 4 [ 81.153830][ T10] cfg80211: failed to load regulatory.db [ 81.278186][ T6472] CUSE: DEVNAME unspecified [ 81.690102][ T5883] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 81.691783][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 81.712570][ T5902] hid-generic 0005:0B57:3DDA.0004: collection stack underflow [ 81.733061][ T5902] hid-generic 0005:0B57:3DDA.0004: item 0 0 0 12 parsing failed [ 81.745960][ T5902] hid-generic 0005:0B57:3DDA.0004: probe with driver hid-generic failed with error -22 [ 81.865650][ T5883] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 81.875689][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.897216][ T5883] usb 1-1: config 0 descriptor?? [ 81.922848][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 81.965255][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.989208][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.016012][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 82.042048][ T10] usb 5-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 82.055464][ T6499] netlink: del zone limit has 4 unknown bytes [ 82.072505][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.088467][ T10] usb 5-1: config 0 descriptor?? [ 82.150173][ T5883] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 82.342823][ T5883] [drm:udl_init] *ERROR* Selecting channel failed [ 82.376837][ T5883] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 82.390484][ T5883] [drm] Initialized udl on minor 2 [ 82.400374][ T5883] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 82.414808][ T5883] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 82.428676][ T944] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 82.451728][ T5883] usb 1-1: USB disconnect, device number 5 [ 82.466750][ T944] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 82.514201][ T10] hid (null): invalid report_count 903462111 [ 82.537455][ T10] waltop 0003:172F:0502.0005: invalid report_count 903462111 [ 82.546681][ T10] waltop 0003:172F:0502.0005: item 0 4 1 9 parsing failed [ 82.554738][ T10] waltop 0003:172F:0502.0005: probe with driver waltop failed with error -22 [ 82.740766][ T10] usb 5-1: USB disconnect, device number 2 [ 83.400768][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 83.495440][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 83.495454][ T30] audit: type=1400 audit(1749210933.132:282): avc: denied { connect } for pid=6541 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 83.570423][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 83.576978][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.580073][ T944] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 83.588606][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 83.641067][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.664255][ T10] usb 4-1: config 0 descriptor?? [ 83.752648][ T30] audit: type=1400 audit(1749210933.392:283): avc: denied { create } for pid=6549 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 83.760251][ T944] usb 2-1: Using ep0 maxpacket: 16 [ 83.792571][ T30] audit: type=1400 audit(1749210933.412:284): avc: denied { connect } for pid=6549 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 83.793820][ T944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.843732][ T944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.857585][ T944] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 83.870487][ T944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.904826][ T944] usb 2-1: config 0 descriptor?? [ 83.961129][ T30] audit: type=1400 audit(1749210933.602:285): avc: denied { bind } for pid=6553 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.000934][ T30] audit: type=1400 audit(1749210933.622:286): avc: denied { listen } for pid=6553 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.089630][ T10] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 84.129684][ T30] audit: type=1400 audit(1749210933.762:287): avc: denied { write } for pid=6559 comm="syz.4.284" name="tcp6" dev="proc" ino=4026533174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 84.327165][ T944] kye 0003:0458:5016.0007: control desc unexpectedly large [ 84.335794][ T30] audit: type=1400 audit(1749210933.962:288): avc: denied { ioctl } for pid=6566 comm="syz.4.287" path="socket:[9847]" dev="sockfs" ino=9847 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.368535][ T944] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0007/input/input10 [ 84.381873][ T30] audit: type=1400 audit(1749210933.962:289): avc: denied { setopt } for pid=6566 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.438814][ T30] audit: type=1400 audit(1749210934.072:290): avc: denied { read write } for pid=6568 comm="syz.4.288" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.486417][ T944] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0007/input/input11 [ 84.514965][ T30] audit: type=1400 audit(1749210934.072:291): avc: denied { ioctl } for pid=6568 comm="syz.4.288" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.584012][ T10] usb 4-1: USB disconnect, device number 5 [ 84.652652][ T944] kye 0003:0458:5016.0007: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 84.693482][ T944] usb 2-1: USB disconnect, device number 5 [ 84.797741][ T6576] fido_id[6576]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 84.798622][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 85.015728][ T6586] netlink: 'syz.0.297': attribute type 2 has an invalid length. [ 85.250202][ T6594] sp0: Synchronizing with TNC [ 85.271205][ T12] [ 85.273523][ T12] ===================================================== [ 85.280422][ T12] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 85.287842][ T12] 6.15.0-syzkaller-12426-ge271ed52b344 #0 Not tainted [ 85.294565][ T12] ----------------------------------------------------- [ 85.301462][ T12] kworker/u8:0/12 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 85.309068][ T12] ffffffff8f79a478 (disc_data_lock){.+.+}-{3:3}, at: sp_get+0x18/0xf0 [ 85.317213][ T12] [ 85.317213][ T12] and this task is already holding: [ 85.324543][ T12] ffffffff9b082e38 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 85.333204][ T12] which would create a new lock dependency: [ 85.339063][ T12] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock){.+.+}-{3:3} [ 85.346693][ T12] [ 85.346693][ T12] but this new dependency connects a HARDIRQ-irq-safe lock: [ 85.356114][ T12] (&port_lock_key){-.-.}-{3:3} [ 85.356128][ T12] [ 85.356128][ T12] ... which became HARDIRQ-irq-safe at: [ 85.368610][ T12] lock_acquire+0x179/0x350 [ 85.373175][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 85.378430][ T12] serial8250_handle_irq+0x95/0xcb0 [ 85.383683][ T12] serial8250_default_handle_irq+0x9a/0x210 [ 85.389628][ T12] serial8250_interrupt+0x106/0x210 [ 85.394881][ T12] __handle_irq_event_percpu+0x22c/0x7d0 [ 85.400568][ T12] handle_irq_event+0xab/0x1e0 [ 85.405388][ T12] handle_edge_irq+0x28e/0xab0 [ 85.410206][ T12] __common_interrupt+0xdf/0x250 [ 85.415203][ T12] common_interrupt+0xba/0xe0 [ 85.419934][ T12] asm_common_interrupt+0x26/0x40 [ 85.425018][ T12] pv_native_safe_halt+0xf/0x20 [ 85.429923][ T12] default_idle+0x13/0x20 [ 85.434310][ T12] default_idle_call+0x6d/0xb0 [ 85.439140][ T12] do_idle+0x391/0x510 [ 85.443265][ T12] cpu_startup_entry+0x4f/0x60 [ 85.448085][ T12] start_secondary+0x21d/0x2b0 [ 85.452903][ T12] common_startup_64+0x13e/0x148 [ 85.457894][ T12] [ 85.457894][ T12] to a HARDIRQ-irq-unsafe lock: [ 85.464877][ T12] (disc_data_lock){.+.+}-{3:3} [ 85.464891][ T12] [ 85.464891][ T12] ... which became HARDIRQ-irq-unsafe at: [ 85.477560][ T12] ... [ 85.477566][ T12] lock_acquire+0x179/0x350 [ 85.484692][ T12] _raw_read_lock+0x5f/0x70 [ 85.489269][ T12] sp_get+0x18/0xf0 [ 85.493159][ T12] sixpack_receive_buf+0x59/0x1c90 [ 85.498333][ T12] tty_ldisc_receive_buf+0x15a/0x1a0 [ 85.503684][ T12] tty_port_default_receive_buf+0x70/0xb0 [ 85.509466][ T12] flush_to_ldisc+0x268/0x780 [ 85.514205][ T12] process_one_work+0x9cf/0x1b70 [ 85.519214][ T12] worker_thread+0x6c8/0xf10 [ 85.523858][ T12] kthread+0x3c5/0x780 [ 85.527980][ T12] ret_from_fork+0x5d4/0x6f0 [ 85.532639][ T12] ret_from_fork_asm+0x1a/0x30 [ 85.537459][ T12] [ 85.537459][ T12] other info that might help us debug this: [ 85.537459][ T12] [ 85.547657][ T12] Possible interrupt unsafe locking scenario: [ 85.547657][ T12] [ 85.555949][ T12] CPU0 CPU1 [ 85.561285][ T12] ---- ---- [ 85.566617][ T12] lock(disc_data_lock); [ 85.570915][ T12] local_irq_disable(); [ 85.577637][ T12] lock(&port_lock_key); [ 85.584464][ T12] lock(disc_data_lock); [ 85.591281][ T12] [ 85.594708][ T12] lock(&port_lock_key); [ 85.599180][ T12] [ 85.599180][ T12] *** DEADLOCK *** [ 85.599180][ T12] [ 85.607293][ T12] 6 locks held by kworker/u8:0/12: [ 85.612371][ T12] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 85.623468][ T12] #1: ffffc90000117d10 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 85.634475][ T12] #2: ffff888026210ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x34/0x780 [ 85.643490][ T12] #3: ffff88805c17a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 85.652765][ T12] #4: ffffffff9b082e38 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 85.661871][ T12] #5: ffff88805c17a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 85.671146][ T12] [ 85.671146][ T12] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 85.681516][ T12] -> (&port_lock_key){-.-.}-{3:3} { [ 85.686695][ T12] IN-HARDIRQ-W at: [ 85.690647][ T12] lock_acquire+0x179/0x350 [ 85.696777][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 85.703601][ T12] serial8250_handle_irq+0x95/0xcb0 [ 85.710428][ T12] serial8250_default_handle_irq+0x9a/0x210 [ 85.717946][ T12] serial8250_interrupt+0x106/0x210 [ 85.724766][ T12] __handle_irq_event_percpu+0x22c/0x7d0 [ 85.732020][ T12] handle_irq_event+0xab/0x1e0 [ 85.738406][ T12] handle_edge_irq+0x28e/0xab0 [ 85.744794][ T12] __common_interrupt+0xdf/0x250 [ 85.751354][ T12] common_interrupt+0xba/0xe0 [ 85.757649][ T12] asm_common_interrupt+0x26/0x40 [ 85.764292][ T12] pv_native_safe_halt+0xf/0x20 [ 85.770761][ T12] default_idle+0x13/0x20 [ 85.776712][ T12] default_idle_call+0x6d/0xb0 [ 85.783097][ T12] do_idle+0x391/0x510 [ 85.788793][ T12] cpu_startup_entry+0x4f/0x60 [ 85.795181][ T12] start_secondary+0x21d/0x2b0 [ 85.801563][ T12] common_startup_64+0x13e/0x148 [ 85.808118][ T12] IN-SOFTIRQ-W at: [ 85.812067][ T12] lock_acquire+0x179/0x350 [ 85.818198][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 85.825018][ T12] serial8250_handle_irq+0x95/0xcb0 [ 85.831838][ T12] serial8250_default_handle_irq+0x9a/0x210 [ 85.839356][ T12] serial8250_interrupt+0x106/0x210 [ 85.846177][ T12] __handle_irq_event_percpu+0x22c/0x7d0 [ 85.853433][ T12] handle_irq_event+0xab/0x1e0 [ 85.859819][ T12] handle_edge_irq+0x28e/0xab0 [ 85.866213][ T12] __common_interrupt+0xdf/0x250 [ 85.872769][ T12] common_interrupt+0x61/0xe0 [ 85.879079][ T12] asm_common_interrupt+0x26/0x40 [ 85.885726][ T12] _raw_spin_unlock_irqrestore+0x31/0x80 [ 85.892982][ T12] try_to_wake_up+0xa25/0x1680 [ 85.899364][ T12] call_timer_fn+0x19a/0x620 [ 85.905573][ T12] __run_timers+0x6ef/0x960 [ 85.911695][ T12] run_timer_base+0x114/0x190 [ 85.917993][ T12] run_timer_softirq+0x1a/0x40 [ 85.924390][ T12] handle_softirqs+0x219/0x8e0 [ 85.930771][ T12] __irq_exit_rcu+0x109/0x170 [ 85.937066][ T12] irq_exit_rcu+0x9/0x30 [ 85.942938][ T12] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 85.950188][ T12] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.957783][ T12] pv_native_safe_halt+0xf/0x20 [ 85.964252][ T12] default_idle+0x13/0x20 [ 85.970209][ T12] default_idle_call+0x6d/0xb0 [ 85.976593][ T12] do_idle+0x391/0x510 [ 85.982279][ T12] cpu_startup_entry+0x4f/0x60 [ 85.988662][ T12] start_secondary+0x21d/0x2b0 [ 85.995054][ T12] common_startup_64+0x13e/0x148 [ 86.001606][ T12] INITIAL USE at: [ 86.005468][ T12] lock_acquire+0x179/0x350 [ 86.011505][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 86.018241][ T12] serial8250_do_set_termios+0x310/0x1710 [ 86.025491][ T12] serial8250_set_termios+0x6e/0x80 [ 86.032217][ T12] uart_set_options+0x31a/0x5f0 [ 86.038600][ T12] serial8250_console_setup+0x189/0x450 [ 86.045674][ T12] univ8250_console_setup+0x1eb/0x2e0 [ 86.052577][ T12] try_enable_preferred_console+0x2fd/0x530 [ 86.060002][ T12] register_console+0x3ab/0x11b0 [ 86.066475][ T12] univ8250_console_init+0x5f/0x90 [ 86.073120][ T12] console_init+0x14f/0x680 [ 86.079154][ T12] start_kernel+0x29f/0x4d0 [ 86.085187][ T12] x86_64_start_reservations+0x18/0x30 [ 86.092176][ T12] x86_64_start_kernel+0x130/0x190 [ 86.098817][ T12] common_startup_64+0x13e/0x148 [ 86.105283][ T12] } [ 86.107749][ T12] ... key at: [] port_lock_key+0x0/0x40 [ 86.115350][ T12] [ 86.115350][ T12] the dependencies between the lock to be acquired [ 86.115355][ T12] and HARDIRQ-irq-unsafe lock: [ 86.128804][ T12] -> (disc_data_lock){.+.+}-{3:3} { [ 86.133980][ T12] HARDIRQ-ON-R at: [ 86.137926][ T12] lock_acquire+0x179/0x350 [ 86.144050][ T12] _raw_read_lock+0x5f/0x70 [ 86.150171][ T12] sp_get+0x18/0xf0 [ 86.155599][ T12] sixpack_receive_buf+0x59/0x1c90 [ 86.162341][ T12] tty_ldisc_receive_buf+0x15a/0x1a0 [ 86.169245][ T12] tty_port_default_receive_buf+0x70/0xb0 [ 86.176584][ T12] flush_to_ldisc+0x268/0x780 [ 86.182890][ T12] process_one_work+0x9cf/0x1b70 [ 86.189443][ T12] worker_thread+0x6c8/0xf10 [ 86.195649][ T12] kthread+0x3c5/0x780 [ 86.201345][ T12] ret_from_fork+0x5d4/0x6f0 [ 86.207554][ T12] ret_from_fork_asm+0x1a/0x30 [ 86.213934][ T12] SOFTIRQ-ON-R at: [ 86.217881][ T12] lock_acquire+0x179/0x350 [ 86.224004][ T12] _raw_read_lock+0x5f/0x70 [ 86.230133][ T12] sp_get+0x18/0xf0 [ 86.235572][ T12] sixpack_receive_buf+0x59/0x1c90 [ 86.242302][ T12] tty_ldisc_receive_buf+0x15a/0x1a0 [ 86.249206][ T12] tty_port_default_receive_buf+0x70/0xb0 [ 86.256546][ T12] flush_to_ldisc+0x268/0x780 [ 86.262841][ T12] process_one_work+0x9cf/0x1b70 [ 86.269394][ T12] worker_thread+0x6c8/0xf10 [ 86.275599][ T12] kthread+0x3c5/0x780 [ 86.281282][ T12] ret_from_fork+0x5d4/0x6f0 [ 86.287490][ T12] ret_from_fork_asm+0x1a/0x30 [ 86.293868][ T12] INITIAL READ USE at: [ 86.298186][ T12] lock_acquire+0x179/0x350 [ 86.304666][ T12] _raw_read_lock+0x5f/0x70 [ 86.311141][ T12] sp_get+0x18/0xf0 [ 86.316926][ T12] sixpack_receive_buf+0x59/0x1c90 [ 86.324013][ T12] tty_ldisc_receive_buf+0x15a/0x1a0 [ 86.331282][ T12] tty_port_default_receive_buf+0x70/0xb0 [ 86.338974][ T12] flush_to_ldisc+0x268/0x780 [ 86.345618][ T12] process_one_work+0x9cf/0x1b70 [ 86.352521][ T12] worker_thread+0x6c8/0xf10 [ 86.359080][ T12] kthread+0x3c5/0x780 [ 86.365111][ T12] ret_from_fork+0x5d4/0x6f0 [ 86.371682][ T12] ret_from_fork_asm+0x1a/0x30 [ 86.378414][ T12] } [ 86.380886][ T12] ... key at: [] disc_data_lock+0x18/0xfe0 [ 86.388750][ T12] ... acquired at: [ 86.392523][ T12] lock_acquire+0x179/0x350 [ 86.397179][ T12] _raw_read_lock+0x5f/0x70 [ 86.401832][ T12] sp_get+0x18/0xf0 [ 86.405789][ T12] sixpack_write_wakeup+0x20/0x390 [ 86.411045][ T12] tty_wakeup+0xe8/0x120 [ 86.415435][ T12] tty_port_default_wakeup+0x2a/0x40 [ 86.420862][ T12] serial8250_tx_chars+0x68e/0x860 [ 86.426116][ T12] __start_tx+0x3e9/0x4a0 [ 86.430585][ T12] serial8250_start_tx+0x368/0x530 [ 86.435835][ T12] __uart_start+0x292/0x4c0 [ 86.440483][ T12] uart_write+0x218/0xb30 [ 86.444958][ T12] sixpack_receive_buf+0x3d0/0x1c90 [ 86.450300][ T12] tty_ldisc_receive_buf+0x15a/0x1a0 [ 86.455730][ T12] tty_port_default_receive_buf+0x70/0xb0 [ 86.461593][ T12] flush_to_ldisc+0x268/0x780 [ 86.466413][ T12] process_one_work+0x9cf/0x1b70 [ 86.471490][ T12] worker_thread+0x6c8/0xf10 [ 86.476223][ T12] kthread+0x3c5/0x780 [ 86.480443][ T12] ret_from_fork+0x5d4/0x6f0 [ 86.485179][ T12] ret_from_fork_asm+0x1a/0x30 [ 86.490089][ T12] [ 86.492382][ T12] [ 86.492382][ T12] stack backtrace: [ 86.498238][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 86.498251][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.498258][ T12] Workqueue: events_unbound flush_to_ldisc [ 86.498273][ T12] Call Trace: [ 86.498279][ T12] [ 86.498283][ T12] dump_stack_lvl+0x116/0x1f0 [ 86.498297][ T12] check_irq_usage+0x7dc/0x920 [ 86.498313][ T12] ? check_path.constprop.0+0x24/0x50 [ 86.498328][ T12] ? __lock_acquire+0x1285/0x1c90 [ 86.498341][ T12] __lock_acquire+0x1285/0x1c90 [ 86.498357][ T12] ? lock_acquire+0x179/0x350 [ 86.498371][ T12] lock_acquire+0x179/0x350 [ 86.498385][ T12] ? sp_get+0x18/0xf0 [ 86.498399][ T12] ? ldsem_down_read_trylock+0x11a/0x180 [ 86.498409][ T12] ? ldsem_down_read_trylock+0x120/0x180 [ 86.498419][ T12] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 86.498433][ T12] _raw_read_lock+0x5f/0x70 [ 86.498443][ T12] ? sp_get+0x18/0xf0 [ 86.498456][ T12] sp_get+0x18/0xf0 [ 86.498469][ T12] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 86.498483][ T12] sixpack_write_wakeup+0x20/0x390 [ 86.498497][ T12] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 86.498511][ T12] tty_wakeup+0xe8/0x120 [ 86.498523][ T12] tty_port_default_wakeup+0x2a/0x40 [ 86.498532][ T12] serial8250_tx_chars+0x68e/0x860 [ 86.498542][ T12] __start_tx+0x3e9/0x4a0 [ 86.498551][ T12] serial8250_start_tx+0x368/0x530 [ 86.498561][ T12] __uart_start+0x292/0x4c0 [ 86.498572][ T12] uart_write+0x218/0xb30 [ 86.498587][ T12] sixpack_receive_buf+0x3d0/0x1c90 [ 86.498602][ T12] ? ldsem_down_read_trylock+0x120/0x180 [ 86.498612][ T12] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 86.498623][ T12] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 86.498637][ T12] tty_ldisc_receive_buf+0x15a/0x1a0 [ 86.498651][ T12] tty_port_default_receive_buf+0x70/0xb0 [ 86.498667][ T12] flush_to_ldisc+0x268/0x780 [ 86.498682][ T12] ? rcu_is_watching+0x12/0xc0 [ 86.498694][ T12] process_one_work+0x9cf/0x1b70 [ 86.498705][ T12] ? __pfx_batadv_nc_worker+0x10/0x10 [ 86.498717][ T12] ? __pfx_process_one_work+0x10/0x10 [ 86.498728][ T12] ? assign_work+0x1a0/0x250 [ 86.498736][ T12] worker_thread+0x6c8/0xf10 [ 86.498748][ T12] ? __pfx_worker_thread+0x10/0x10 [ 86.498757][ T12] kthread+0x3c5/0x780 [ 86.498766][ T12] ? __pfx_kthread+0x10/0x10 [ 86.498774][ T12] ? rcu_is_watching+0x12/0xc0 [ 86.498785][ T12] ? __pfx_kthread+0x10/0x10 [ 86.498794][ T12] ret_from_fork+0x5d4/0x6f0 [ 86.498806][ T12] ? __pfx_kthread+0x10/0x10 [ 86.498815][ T12] ret_from_fork_asm+0x1a/0x30 [ 86.498826][ T12] [ 86.793177][ T1096] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.864581][ T1096] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.953525][ T1096] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.040888][ T1096] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.132003][ T1096] bridge_slave_1: left allmulticast mode [ 87.137672][ T1096] bridge_slave_1: left promiscuous mode [ 87.146520][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.154728][ T1096] bridge_slave_0: left allmulticast mode [ 87.161460][ T1096] bridge_slave_0: left promiscuous mode [ 87.167124][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.295138][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.304778][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.314268][ T1096] bond0 (unregistering): Released all slaves [ 87.514570][ T1096] hsr_slave_0: left promiscuous mode [ 87.531143][ T1096] hsr_slave_1: left promiscuous mode [ 87.542273][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.549658][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.576464][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.583910][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.595350][ T1096] veth1_macvtap: left promiscuous mode [ 87.600861][ T1096] veth0_macvtap: left promiscuous mode [ 87.606432][ T1096] veth1_vlan: left promiscuous mode [ 87.612573][ T1096] veth0_vlan: left promiscuous mode [ 87.735009][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 87.757784][ T1096] team0 (unregistering): Port device team_slave_0 removed