[ 71.180424][ T42] audit: type=1400 audit(1792446018.955:198): avc: denied { write } for pid=5959 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.217983][ T42] audit: type=1400 audit(1792446018.995:199): avc: denied { write } for pid=5962 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.225731][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.225766][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.572806][ T42] audit: type=1400 audit(1792446019.345:200): avc: denied { write } for pid=5965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.631070][ T42] audit: type=1400 audit(1792446019.405:201): avc: denied { write } for pid=5968 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.891617][ T42] audit: type=1400 audit(1792446019.665:202): avc: denied { write } for pid=5971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.967348][ T42] audit: type=1400 audit(1792446019.745:203): avc: denied { write } for pid=5974 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:8489' (ED25519) to the list of known hosts. [ 72.603945][ T42] audit: type=1400 audit(1792446020.385:204): avc: denied { write } for pid=5985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.660551][ T42] audit: type=1400 audit(1792446020.435:205): avc: denied { write } for pid=5988 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 2026/10/19 21:40:21 parsed 1 programs 2026/10/19 21:40:21 serving rpc on tcp://43583 [ 76.213414][ T42] audit: type=1400 audit(1792446023.995:206): avc: denied { read write } for pid=5998 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 76.213578][ T42] audit: type=1400 audit(1792446023.995:207): avc: denied { open } for pid=5998 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 76.254766][ T42] audit: type=1400 audit(1792446024.035:208): avc: denied { unlink } for pid=5998 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 76.349564][ T850] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 76.645173][ T42] audit: type=1400 audit(1792446024.425:209): avc: denied { relabelto } for pid=6002 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 77.317727][ T5998] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.865202][ T42] audit: type=1401 audit(1792446027.645:210): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 81.057492][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.057617][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.057712][ T6043] bridge_slave_0: entered allmulticast mode [ 81.059103][ T6043] bridge_slave_0: entered promiscuous mode [ 81.062679][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.062755][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.063158][ T6043] bridge_slave_1: entered allmulticast mode [ 81.065177][ T6043] bridge_slave_1: entered promiscuous mode [ 81.092074][ T6043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.095052][ T6043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.122143][ T6043] team0: Port device team_slave_0 added [ 81.124928][ T6043] team0: Port device team_slave_1 added [ 81.139777][ T6043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.139788][ T6043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.139800][ T6043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.140618][ T6043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.140625][ T6043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.140637][ T6043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.160324][ T6043] hsr_slave_0: entered promiscuous mode [ 81.160745][ T6043] hsr_slave_1: entered promiscuous mode [ 81.262736][ T42] audit: type=1400 audit(1792446029.035:211): avc: denied { write } for pid=6059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.315379][ T42] audit: type=1400 audit(1792446029.095:212): avc: denied { write } for pid=6063 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.411457][ T42] audit: type=1400 audit(1792446029.185:213): avc: denied { write } for pid=6065 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.465098][ T42] audit: type=1400 audit(1792446029.245:214): avc: denied { write } for pid=6068 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.556788][ T42] audit: type=1400 audit(1792446029.335:215): avc: denied { write } for pid=6070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.614356][ T42] audit: type=1400 audit(1792446029.395:216): avc: denied { write } for pid=6073 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.678628][ T42] audit: type=1400 audit(1792446029.455:217): avc: denied { write } for pid=6075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.710625][ T6043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.714114][ T6043] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.715015][ T6043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.718382][ T6043] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.719272][ T6043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.724305][ T6043] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.725196][ T6043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.728264][ T6043] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.731690][ T42] audit: type=1400 audit(1792446029.505:218): avc: denied { write } for pid=6078 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.747547][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.747764][ T6043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.748301][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.748392][ T6043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.787472][ T6043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.792612][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.796237][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.805576][ T6043] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.808491][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.808562][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.808736][ T42] audit: type=1400 audit(1792446029.585:219): avc: denied { write } for pid=6086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.811682][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.811749][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.862228][ T42] audit: type=1400 audit(1792446029.635:220): avc: denied { write } for pid=6089 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.074028][ T6043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.099814][ T6043] veth0_vlan: entered promiscuous mode [ 82.105179][ T6043] veth1_vlan: entered promiscuous mode [ 82.125282][ T6043] veth0_macvtap: entered promiscuous mode [ 82.127980][ T6043] veth1_macvtap: entered promiscuous mode [ 82.136467][ T6043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.139784][ T6043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.183165][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.183193][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.183210][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.183228][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.248019][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.334972][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.454009][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.531622][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.695000][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.697048][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.697998][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.699390][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.699829][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.007039][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.007059][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.023146][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.023163][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/10/19 21:40:31 executed programs: 0 [ 83.395230][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.396573][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.397147][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.398057][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.398571][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.815327][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.815433][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.815526][ T6179] bridge_slave_0: entered allmulticast mode [ 83.816768][ T6179] bridge_slave_0: entered promiscuous mode [ 83.824290][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.824332][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.824392][ T6179] bridge_slave_1: entered allmulticast mode [ 83.825163][ T6179] bridge_slave_1: entered promiscuous mode [ 83.844460][ T6179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.845895][ T6179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.862868][ T6179] team0: Port device team_slave_0 added [ 83.865153][ T6179] team0: Port device team_slave_1 added [ 83.888140][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.888155][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.888174][ T6179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.889545][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.889556][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.889630][ T6179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.921939][ T6179] hsr_slave_0: entered promiscuous mode [ 83.922534][ T6179] hsr_slave_1: entered promiscuous mode [ 83.923118][ T6179] debugfs: 'hsr0' already exists in 'hsr' [ 83.923133][ T6179] Cannot create hsr debugfs directory [ 85.473091][ T5819] Bluetooth: hci0: command tx timeout [ 85.493827][ T13] bridge_slave_1: left allmulticast mode [ 85.493845][ T13] bridge_slave_1: left promiscuous mode [ 85.494365][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.497522][ T13] bridge_slave_0: left allmulticast mode [ 85.497542][ T13] bridge_slave_0: left promiscuous mode [ 85.497711][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.594289][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.596250][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.597469][ T13] bond0 (unregistering): Released all slaves [ 85.653148][ T13] hsr_slave_0: left promiscuous mode [ 85.653806][ T13] hsr_slave_1: left promiscuous mode [ 85.654403][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.654419][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.655095][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.655109][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.657919][ T13] veth1_macvtap: left promiscuous mode [ 85.657947][ T13] veth0_macvtap: left promiscuous mode [ 85.658020][ T13] veth1_vlan: left promiscuous mode [ 85.658117][ T13] veth0_vlan: left promiscuous mode [ 85.804612][ T13] team0 (unregistering): Port device team_slave_1 removed [ 85.810169][ T13] team0 (unregistering): Port device team_slave_0 removed [ 85.910135][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 86.221924][ T6179] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.231492][ T6179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.232197][ T6179] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.236012][ T6179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.236436][ T6179] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.240538][ T6179] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.241267][ T6179] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.243757][ T6179] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.318435][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 86.318453][ T42] audit: type=1400 audit(1792446034.095:243): avc: denied { write } for pid=6224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.387968][ T42] audit: type=1400 audit(1792446034.165:244): avc: denied { write } for pid=6227 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.465513][ T6179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.477465][ T6179] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.481810][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.481895][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.492581][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.492662][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.809701][ T6179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.829249][ T6179] veth0_vlan: entered promiscuous mode [ 86.833564][ T6179] veth1_vlan: entered promiscuous mode [ 86.852482][ T6179] veth0_macvtap: entered promiscuous mode [ 86.854838][ T6179] veth1_macvtap: entered promiscuous mode [ 86.861007][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.866695][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.883133][ T5546] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.883157][ T5546] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.883174][ T5546] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.883190][ T5546] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.916684][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.916697][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.931631][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.931644][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.956383][ T42] audit: type=1400 audit(1792446034.735:245): avc: denied { mount } for pid=6239 comm="syz.0.17" name="/" dev="configfs" ino=3112 sco ** replaying previous printk message ** [ 86.956383][ T42] audit: type=1400 audit(1792446034.735:245): avc: denied { mount } for pid=6239 comm="syz.0.17" name="/" dev="configfs" ino=3112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 86.956693][ T42] audit: type=1400 audit(1792446034.735:246): avc: denied { search } for pid=6239 comm="syz.0.17" name="/" dev="configfs" ino=3112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.956736][ T42] audit: type=1400 audit(1792446034.735:247): avc: denied { search } for pid=6239 comm="syz.0.17" name="usb_gadget" dev="configfs" ino=3755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.957557][ T42] audit: type=1400 audit(1792446034.735:248): avc: denied { write search } for pid=6239 comm="syz.0.17" name="usb_gadget" dev="configfs" ino=3755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.957852][ T42] audit: type=1400 audit(1792446034.735:249): avc: denied { add_name } for pid=6239 comm="syz.0.17" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.958029][ T42] audit: type=1400 audit(1792446034.735:250): avc: denied { create } for pid=6239 comm="syz.0.17" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 86.959221][ T42] audit: type=1400 audit(1792446034.735:251): avc: denied { search } for pid=6239 comm="syz.0.17" name="/" dev="configfs" ino=3112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.959289][ T42] audit: type=1400 audit(1792446034.735:252): avc: denied { search } for pid=6239 comm="syz.0.17" name="usb_gadget" dev="configfs" ino=3755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.967879][ T6240] [ 87.026555][ T6240] ====================================================== [ 87.029486][ T6240] WARNING: possible circular locking dependency detected [ 87.032455][ T6240] syzkaller #0 Not tainted [ 87.034380][ T6240] ------------------------------------------------------ [ 87.037288][ T6240] syz.0.17/6240 is trying to acquire lock: [ 87.039161][ T6240] ffffffff91481f80 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x20/0x440 [ 87.041915][ T6240] [ 87.041915][ T6240] but task is already holding lock: [ 87.044192][ T6240] ffff888030ec4390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 87.047035][ T6240] [ 87.047035][ T6240] which lock already depends on the new lock. [ 87.047035][ T6240] [ 87.051179][ T6240] [ 87.051179][ T6240] the existing dependency chain (in reverse order) is: [ 87.054203][ T6240] [ 87.054203][ T6240] -> #2 (&gi->lock){+.+.}-{4:4}: [ 87.057125][ T6240] lock_acquire+0x1d1/0x380 [ 87.059349][ T6240] __mutex_lock+0x1a4/0x1bd0 [ 87.061150][ T6240] config_usb_cfg_link+0x57/0x3a0 [ 87.063374][ T6240] configfs_symlink+0x695/0x1340 [ 87.065650][ T6240] vfs_symlink+0x178/0x4d0 [ 87.068151][ T6240] filename_symlinkat+0x2a6/0x560 [ 87.069899][ T6240] __x64_sys_symlinkat+0x9c/0xe0 [ 87.071614][ T6240] do_syscall_64+0x123/0x790 [ 87.073240][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.075298][ T6240] [ 87.075298][ T6240] -> #1 (&sb->s_type->i_mutex_key#25){+.+.}-{4:4}: [ 87.077975][ T6240] lock_acquire+0x1d1/0x380 [ 87.079510][ T6240] down_write+0x8b/0x1f0 [ 87.081334][ T6240] configfs_depend_item_unlocked+0xf3/0x6a0 [ 87.083720][ T6240] usbg_make_tpg+0x251/0x610 [ 87.085459][ T6240] target_fabric_make_tpg+0xab/0x8c0 [ 87.087344][ T6240] configfs_mkdir+0x525/0xd40 [ 87.089115][ T6240] vfs_mkdir+0x364/0x850 [ 87.091124][ T6240] filename_mkdirat+0x48b/0x5e0 [ 87.092806][ T6240] __x64_sys_mkdirat+0x89/0xc0 [ 87.094799][ T6240] do_syscall_64+0x123/0x790 [ 87.096938][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.099310][ T6240] [ 87.099310][ T6240] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 87.102165][ T6240] check_prev_add+0xeb/0xe60 [ 87.103932][ T6240] __lock_acquire+0x1528/0x1f40 [ 87.105913][ T6240] lock_acquire+0x1d1/0x380 [ 87.108019][ T6240] __mutex_lock+0x1a4/0x1bd0 [ 87.109613][ T6240] tcm_alloc+0x20/0x440 [ 87.111151][ T6240] usb_get_function+0x5e/0xd0 [ 87.112950][ T6240] config_usb_cfg_link+0x1ed/0x3a0 [ 87.115308][ T6240] configfs_symlink+0x695/0x1340 [ 87.117574][ T6240] vfs_symlink+0x178/0x4d0 [ 87.119614][ T6240] filename_symlinkat+0x2a6/0x560 [ 87.121954][ T6240] __x64_sys_symlinkat+0x9c/0xe0 [ 87.123920][ T6240] do_syscall_64+0x123/0x790 [ 87.125813][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.128278][ T6240] [ 87.128278][ T6240] other info that might help us debug this: [ 87.128278][ T6240] [ 87.131970][ T6240] Chain exists of: [ 87.131970][ T6240] tpg_instances_lock --> &sb->s_type->i_mutex_key#25 --> &gi->lock [ 87.131970][ T6240] [ 87.137049][ T6240] Possible unsafe locking scenario: [ 87.137049][ T6240] [ 87.139871][ T6240] CPU0 CPU1 [ 87.141746][ T6240] ---- ---- [ 87.143978][ T6240] lock(&gi->lock); [ 87.145292][ T6240] lock(&sb->s_type->i_mutex_key#25); [ 87.148385][ T6240] lock(&gi->lock); [ 87.150784][ T6240] lock(tpg_instances_lock); [ 87.152372][ T6240] [ 87.152372][ T6240] *** DEADLOCK *** [ 87.152372][ T6240] [ 87.155389][ T6240] locks held by syz.0.17/6240: 3, last CPU#2: [ 87.164471][ T6240] #0: ffff8880253ac460 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 87.168105][ T6240] #1: ffff888048019900 (&sb->s_type->i_mutex_key#25){+.+.}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 87.172390][ T6240] #2: ffff888030ec4390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 87.175440][ T6240] [ 87.175440][ T6240] stack backtrace: [ 87.177901][ T6240] CPU: 2 UID: 0 PID: 6240 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 87.181355][ T6240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.184592][ T6240] Call Trace: [ 87.185698][ T6240] [ 87.186934][ T6240] dump_stack_lvl+0x100/0x190 [ 87.188793][ T6240] print_circular_bug.cold+0x178/0x1be [ 87.190632][ T6240] check_noncircular+0x146/0x160 [ 87.192395][ T6240] check_prev_add+0xeb/0xe60 [ 87.194168][ T6240] __lock_acquire+0x1528/0x1f40 [ 87.196221][ T6240] lock_acquire+0x1d1/0x380 [ 87.198046][ T6240] ? tcm_alloc+0x20/0x440 [ 87.199844][ T6240] ? __pfx___might_resched+0x10/0x10 [ 87.201697][ T6240] ? config_usb_cfg_link+0x57/0x3a0 [ 87.203315][ T6240] __mutex_lock+0x1a4/0x1bd0 [ 87.205140][ T6240] ? tcm_alloc+0x20/0x440 [ 87.206710][ T6240] ? tcm_alloc+0x20/0x440 [ 87.208522][ T6240] ? __mutex_lock+0x26c/0x1bd0 [ 87.210174][ T6240] ? config_usb_cfg_link+0x57/0x3a0 [ 87.212314][ T6240] ? __pfx___mutex_lock+0x10/0x10 [ 87.214058][ T6240] ? __pfx_selinux_inode_permission+0x10/0x10 [ 87.216165][ T6240] ? tcm_alloc+0x20/0x440 [ 87.217522][ T6240] tcm_alloc+0x20/0x440 [ 87.219044][ T6240] usb_get_function+0x5e/0xd0 [ 87.220654][ T6240] config_usb_cfg_link+0x1ed/0x3a0 [ 87.222796][ T6240] ? mntput_no_expire+0xe8/0x220 [ 87.224718][ T6240] configfs_symlink+0x695/0x1340 [ 87.226373][ T6240] ? __pfx_configfs_symlink+0x10/0x10 [ 87.228214][ T6240] vfs_symlink+0x178/0x4d0 [ 87.229867][ T6240] filename_symlinkat+0x2a6/0x560 [ 87.232013][ T6240] ? __pfx_filename_symlinkat+0x10/0x10 [ 87.233862][ T6240] ? strncpy_from_user+0x19d/0x2d0 [ 87.235570][ T6240] ? do_getname+0x191/0x390 [ 87.237033][ T6240] __x64_sys_symlinkat+0x9c/0xe0 [ 87.238645][ T6240] do_syscall_64+0x123/0x790 [ 87.240145][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.242113][ T6240] RIP: 0033:0x7f927279e019 [ 87.243553][ T6240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.250035][ T6240] RSP: 002b:00007f927368d028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 87.252729][ T6240] RAX: ffffffffffffffda RBX: 00007f9272a25fa0 RCX: 00007f927279e019 [ 87.255390][ T6240] RDX: 00002000000009c0 RSI: ffffffffffffff9c RDI: 0000200000000980 [ 87.258014][ T6240] RBP: 00007f927283500c R08: 0000000000000000 R09: 0000000000000000 [ 87.260729][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.263382][ T6240] R13: 00007f9272a26038 R14: 00007f9272a25fa0 R15: 00007ffd1cb88628 [ 87.266135][ T6240] [ 87.543061][ T5819] Bluetooth: hci0: command tx timeout 2026/10/19 21:40:36 executed programs: 60 [ 89.633089][ T5819] Bluetooth: hci0: command tx timeout [ 91.713049][ T5819] Bluetooth: hci0: command tx timeout 2026/10/19 21:40:41 executed programs: 348