Warning: Permanently added '10.128.1.204' (ED25519) to the list of known hosts. 2025/08/10 08:04:40 ignoring optional flag "sandboxArg"="0" 2025/08/10 08:04:41 parsed 1 programs [ 111.124657][ T30] audit: type=1400 audit(1754813083.125:115): avc: denied { unlink } for pid=6359 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 112.421422][ T6359] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 114.490015][ T30] audit: type=1400 audit(1754813086.485:116): avc: denied { mount } for pid=6365 comm="syz-executor" name="/" dev="gadgetfs" ino=8390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 114.985277][ T5171] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.993815][ T5171] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.001403][ T5171] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.009740][ T5171] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.019077][ T5171] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.241689][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.251066][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.293503][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.301807][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.368375][ T30] audit: type=1401 audit(1754813088.365:117): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 116.575659][ T6422] chnl_net:caif_netlink_parms(): no params data found [ 116.632254][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.639451][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.646925][ T6422] bridge_slave_0: entered allmulticast mode [ 116.654977][ T6422] bridge_slave_0: entered promiscuous mode [ 116.662410][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.669928][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.677143][ T6422] bridge_slave_1: entered allmulticast mode [ 116.684202][ T6422] bridge_slave_1: entered promiscuous mode [ 116.715103][ T6422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.727222][ T6422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.757764][ T6422] team0: Port device team_slave_0 added [ 116.765548][ T6422] team0: Port device team_slave_1 added [ 116.786883][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.793877][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.819969][ T6422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.831702][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.839009][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.865607][ T6422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.898150][ T6422] hsr_slave_0: entered promiscuous mode [ 116.904318][ T6422] hsr_slave_1: entered promiscuous mode [ 117.411642][ T6422] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.424607][ T6422] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.436543][ T6422] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.447113][ T6422] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.530251][ T6422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.551956][ T6422] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.566133][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.573726][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.592740][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.599850][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.648161][ T6422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.837629][ T6422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.887144][ T6422] veth0_vlan: entered promiscuous mode [ 117.902447][ T6422] veth1_vlan: entered promiscuous mode [ 117.941068][ T6422] veth0_macvtap: entered promiscuous mode [ 117.950715][ T6422] veth1_macvtap: entered promiscuous mode [ 117.971444][ T6422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.989402][ T6422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.007545][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.024865][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.044577][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.067198][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.145883][ T2996] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.209508][ T2996] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.331198][ T2996] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.410465][ T2996] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/08/10 08:04:51 executed programs: 0 [ 119.056719][ T5171] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.066449][ T5171] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.076049][ T5171] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.084428][ T5171] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.092083][ T5171] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.315687][ T6517] chnl_net:caif_netlink_parms(): no params data found [ 119.409760][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.418497][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.426102][ T6517] bridge_slave_0: entered allmulticast mode [ 119.436581][ T6517] bridge_slave_0: entered promiscuous mode [ 119.462427][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.469676][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.479328][ T6517] bridge_slave_1: entered allmulticast mode [ 119.487053][ T6517] bridge_slave_1: entered promiscuous mode [ 119.530303][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.546350][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.584707][ T6517] team0: Port device team_slave_0 added [ 119.592889][ T6517] team0: Port device team_slave_1 added [ 119.638385][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.645555][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.671803][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.685246][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.692186][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.720790][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.785974][ T6517] hsr_slave_0: entered promiscuous mode [ 119.792399][ T6517] hsr_slave_1: entered promiscuous mode [ 119.798983][ T6517] debugfs: 'hsr0' already exists in 'hsr' [ 119.806262][ T6517] Cannot create hsr debugfs directory [ 120.455342][ T2996] bridge_slave_1: left allmulticast mode [ 120.461010][ T2996] bridge_slave_1: left promiscuous mode [ 120.469576][ T2996] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.485742][ T2996] bridge_slave_0: left allmulticast mode [ 120.491400][ T2996] bridge_slave_0: left promiscuous mode [ 120.498581][ T2996] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.754530][ T2996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.765502][ T2996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.776815][ T2996] bond0 (unregistering): Released all slaves [ 120.877515][ T2996] hsr_slave_0: left promiscuous mode [ 120.884074][ T2996] hsr_slave_1: left promiscuous mode [ 120.889961][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.898671][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.910965][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.919714][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.937661][ T2996] veth1_macvtap: left promiscuous mode [ 120.943239][ T2996] veth0_macvtap: left promiscuous mode [ 120.949398][ T2996] veth1_vlan: left promiscuous mode [ 120.956017][ T2996] veth0_vlan: left promiscuous mode [ 121.133154][ T5171] Bluetooth: hci0: command tx timeout [ 121.294256][ T2996] team0 (unregistering): Port device team_slave_1 removed [ 121.364189][ T2996] team0 (unregistering): Port device team_slave_0 removed [ 121.796188][ T6517] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.807359][ T6517] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.829643][ T6517] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.847986][ T6517] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.958210][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.055472][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.068569][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.075707][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.098678][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.105813][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.359880][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.412441][ T6517] veth0_vlan: entered promiscuous mode [ 122.427391][ T6517] veth1_vlan: entered promiscuous mode [ 122.461814][ T6517] veth0_macvtap: entered promiscuous mode [ 122.473617][ T6517] veth1_macvtap: entered promiscuous mode [ 122.496376][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.515296][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.534690][ T2996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.557743][ T2996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.570992][ T2996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.581958][ T2996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.648633][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.662206][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.697291][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.705219][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.754425][ T30] audit: type=1400 audit(1754813094.755:118): avc: denied { read } for pid=6648 comm="syz.0.16" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 122.757777][ T6649] input: syz1 as /devices/virtual/input/input5 [ 122.815563][ T30] audit: type=1400 audit(1754813094.755:119): avc: denied { open } for pid=6648 comm="syz.0.16" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 122.818886][ T6649] [ 122.839550][ T30] audit: type=1400 audit(1754813094.755:120): avc: denied { ioctl } for pid=6648 comm="syz.0.16" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 122.841147][ T6649] ====================================================== [ 122.841154][ T6649] WARNING: possible circular locking dependency detected [ 122.866014][ T30] audit: type=1400 audit(1754813094.795:121): avc: denied { read } for pid=5205 comm="acpid" name="event4" dev="devtmpfs" ino=2789 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.872834][ T6649] 6.16.0-syzkaller-12288-g2b38afce25c4 #0 Not tainted [ 122.872845][ T6649] ------------------------------------------------------ [ 122.872851][ T6649] syz.0.16/6649 is trying to acquire lock: [ 122.879991][ T30] audit: type=1400 audit(1754813094.795:122): avc: denied { open } for pid=5205 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2789 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.902358][ T6649] ffff888032b27070 (&newdev->mutex){+.+.}-{4:4}, at: uinput_request_submit.part.0+0x25/0x2e0 [ 122.902414][ T6649] [ 122.902414][ T6649] but task is already holding lock: [ 122.902419][ T6649] ffff888032b278b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_upload+0x1dd/0xc40 [ 122.902465][ T6649] [ 122.902465][ T6649] which lock already depends on the new lock. [ 122.902465][ T6649] [ 122.902471][ T6649] [ 122.902471][ T6649] the existing dependency chain (in reverse order) is: [ 122.902476][ T6649] [ 122.902476][ T6649] -> #3 (&ff->mutex){+.+.}-{4:4}: [ 122.902500][ T6649] __mutex_lock+0x193/0x10b0 [ 122.902520][ T6649] input_ff_flush+0x63/0x1a0 [ 122.902545][ T6649] uinput_dev_flush+0x2a/0x40 [ 122.902570][ T6649] input_flush_device+0xc6/0x140 [ 122.909645][ T30] audit: type=1400 audit(1754813094.795:123): avc: denied { ioctl } for pid=5205 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2789 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.916284][ T6649] evdev_release+0x344/0x420 [ 122.916308][ T6649] __fput+0x3ff/0xb70 [ 122.916328][ T6649] fput_close_sync+0x118/0x210 [ 122.916348][ T6649] __x64_sys_close+0x8b/0x120 [ 122.916369][ T6649] do_syscall_64+0xcd/0x4c0 [ 122.916384][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.916401][ T6649] [ 122.916401][ T6649] -> #2 (&dev->mutex#2){+.+.}-{4:4}: [ 123.082428][ T6649] __mutex_lock+0x193/0x10b0 [ 123.087519][ T6649] input_register_handle+0xca/0x630 [ 123.093217][ T6649] kbd_connect+0xca/0x160 [ 123.098038][ T6649] input_attach_handler.isra.0+0x176/0x250 [ 123.104343][ T6649] input_register_device+0xab9/0x1180 [ 123.110212][ T6649] acpi_button_add+0x582/0xb70 [ 123.115471][ T6649] acpi_device_probe+0xc6/0x330 [ 123.120822][ T6649] really_probe+0x241/0xa90 [ 123.125819][ T6649] __driver_probe_device+0x1de/0x440 [ 123.131601][ T6649] driver_probe_device+0x4c/0x1b0 [ 123.137119][ T6649] __driver_attach+0x283/0x580 [ 123.142379][ T6649] bus_for_each_dev+0x13b/0x1d0 [ 123.147728][ T6649] bus_add_driver+0x2e9/0x690 [ 123.152904][ T6649] driver_register+0x15c/0x4b0 [ 123.158162][ T6649] __acpi_bus_register_driver+0xdf/0x130 [ 123.164308][ T6649] acpi_button_driver_init+0x82/0x110 [ 123.170178][ T6649] do_one_initcall+0x120/0x6e0 [ 123.175440][ T6649] kernel_init_freeable+0x5c2/0x910 [ 123.181156][ T6649] kernel_init+0x1c/0x2b0 [ 123.185985][ T6649] ret_from_fork+0x5d7/0x6f0 [ 123.191068][ T6649] ret_from_fork_asm+0x1a/0x30 [ 123.196329][ T6649] [ 123.196329][ T6649] -> #1 (input_mutex){+.+.}-{4:4}: [ 123.203615][ T6649] __mutex_lock+0x193/0x10b0 [ 123.208702][ T6649] input_register_device+0x992/0x1180 [ 123.214577][ T6649] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 123.221054][ T6649] __x64_sys_ioctl+0x18b/0x210 [ 123.226319][ T6649] do_syscall_64+0xcd/0x4c0 [ 123.231319][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.237710][ T6649] [ 123.237710][ T6649] -> #0 (&newdev->mutex){+.+.}-{4:4}: [ 123.245246][ T6649] __lock_acquire+0x12a6/0x1ce0 [ 123.250605][ T6649] lock_acquire+0x179/0x350 [ 123.255609][ T6649] __mutex_lock+0x193/0x10b0 [ 123.260695][ T6649] uinput_request_submit.part.0+0x25/0x2e0 [ 123.267005][ T6649] uinput_dev_upload_effect+0x174/0x1f0 [ 123.273045][ T6649] input_ff_upload+0x582/0xc40 [ 123.278311][ T6649] evdev_do_ioctl+0xf40/0x1b30 [ 123.283577][ T6649] evdev_ioctl+0x16f/0x1a0 [ 123.288500][ T6649] __x64_sys_ioctl+0x18b/0x210 [ 123.293779][ T6649] do_syscall_64+0xcd/0x4c0 [ 123.298785][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.305183][ T6649] [ 123.305183][ T6649] other info that might help us debug this: [ 123.305183][ T6649] [ 123.315388][ T6649] Chain exists of: [ 123.315388][ T6649] &newdev->mutex --> &dev->mutex#2 --> &ff->mutex [ 123.315388][ T6649] [ 123.327714][ T6649] Possible unsafe locking scenario: [ 123.327714][ T6649] [ 123.335139][ T6649] CPU0 CPU1 [ 123.340479][ T6649] ---- ---- [ 123.345818][ T6649] lock(&ff->mutex); [ 123.349790][ T6649] lock(&dev->mutex#2); [ 123.356543][ T6649] lock(&ff->mutex); [ 123.363025][ T6649] lock(&newdev->mutex); [ 123.367337][ T6649] [ 123.367337][ T6649] *** DEADLOCK *** [ 123.367337][ T6649] [ 123.375457][ T6649] 2 locks held by syz.0.16/6649: [ 123.380365][ T6649] #0: ffff888034cd9118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_ioctl+0x7f/0x1a0 [ 123.389404][ T6649] #1: ffff888032b278b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_upload+0x1dd/0xc40 [ 123.398616][ T6649] [ 123.398616][ T6649] stack backtrace: [ 123.404493][ T6649] CPU: 0 UID: 0 PID: 6649 Comm: syz.0.16 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 123.404512][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.404526][ T6649] Call Trace: [ 123.404532][ T6649] [ 123.404539][ T6649] dump_stack_lvl+0x116/0x1f0 [ 123.404559][ T6649] print_circular_bug+0x275/0x350 [ 123.404581][ T6649] check_noncircular+0x14c/0x170 [ 123.404604][ T6649] __lock_acquire+0x12a6/0x1ce0 [ 123.404628][ T6649] lock_acquire+0x179/0x350 [ 123.404648][ T6649] ? uinput_request_submit.part.0+0x25/0x2e0 [ 123.404672][ T6649] ? __pfx___might_resched+0x10/0x10 [ 123.404691][ T6649] ? uinput_request_submit.part.0+0x25/0x2e0 [ 123.404712][ T6649] __mutex_lock+0x193/0x10b0 [ 123.404728][ T6649] ? uinput_request_submit.part.0+0x25/0x2e0 [ 123.404749][ T6649] ? find_held_lock+0x2b/0x80 [ 123.404766][ T6649] ? uinput_request_reserve_slot+0x3ca/0x4d0 [ 123.404780][ T6649] ? __pfx___mutex_lock+0x10/0x10 [ 123.404794][ T6649] ? _raw_spin_unlock+0x28/0x50 [ 123.404815][ T6649] ? __pfx_uinput_request_reserve_slot+0x10/0x10 [ 123.404829][ T6649] ? __pfx___might_resched+0x10/0x10 [ 123.404846][ T6649] ? rcu_is_watching+0x12/0xc0 [ 123.404864][ T6649] ? uinput_request_submit.part.0+0x25/0x2e0 [ 123.404887][ T6649] uinput_request_submit.part.0+0x25/0x2e0 [ 123.404910][ T6649] uinput_dev_upload_effect+0x174/0x1f0 [ 123.404924][ T6649] ? __pfx_uinput_dev_upload_effect+0x10/0x10 [ 123.404941][ T6649] ? __might_fault+0x13b/0x190 [ 123.404958][ T6649] input_ff_upload+0x582/0xc40 [ 123.404980][ T6649] evdev_do_ioctl+0xf40/0x1b30 [ 123.404999][ T6649] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 123.405024][ T6649] evdev_ioctl+0x16f/0x1a0 [ 123.405042][ T6649] ? __pfx_evdev_ioctl+0x10/0x10 [ 123.405060][ T6649] __x64_sys_ioctl+0x18b/0x210 [ 123.405082][ T6649] do_syscall_64+0xcd/0x4c0 [ 123.405104][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.405120][ T6649] RIP: 0033:0x7f4c0818e9a9 [ 123.405132][ T6649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.405149][ T6649] RSP: 002b:00007f4c08f36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.405163][ T6649] RAX: ffffffffffffffda RBX: 00007f4c083b5fa0 RCX: 00007f4c0818e9a9 [ 123.405172][ T6649] RDX: 0000200000000300 RSI: 0000000040304580 RDI: 0000000000000004 [ 123.405182][ T6649] RBP: 00007f4c08210d69 R08: 0000000000000000 R09: 0000000000000000 [ 123.405190][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.405199][ T6649] R13: 0000000000000000 R14: 00007f4c083b5fa0 R15: 00007ffcd0ec8ea8 [ 123.405212][ T6649] [ 123.407337][ T30] audit: type=1400 audit(1754813094.815:124): avc: denied { read } for pid=6648 comm="syz.0.16" name="event4" dev="devtmpfs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.437133][ T5171] Bluetooth: hci0: command tx timeout [ 123.462853][ T30] audit: type=1400 audit(1754813094.815:125): avc: denied { open } for pid=6648 comm="syz.0.16" path="/dev/input/event4" dev="devtmpfs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.724903][ T30] audit: type=1400 audit(1754813094.815:126): avc: denied { ioctl } for pid=6648 comm="syz.0.16" path="/dev/input/event4" dev="devtmpfs" ino=2789 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.778861][ T6667] input: syz1 as /devices/virtual/input/input6 2025/08/10 08:04:56 executed programs: 4 [ 124.627906][ T6736] input: syz1 as /devices/virtual/input/input7 [ 125.472177][ T6809] input: syz1 as /devices/virtual/input/input8 [ 125.522739][ T5171] Bluetooth: hci0: command tx timeout [ 126.314469][ T6818] input: syz1 as /devices/virtual/input/input9 [ 127.157175][ T6820] input: syz1 as /devices/virtual/input/input10 [ 127.602956][ T5171] Bluetooth: hci0: command tx timeout [ 128.001966][ T6822] input: syz1 as /devices/virtual/input/input11 [ 128.844164][ T6824] input: syz1 as /devices/virtual/input/input12 2025/08/10 08:05:01 executed programs: 10 [ 129.687581][ T6826] input: syz1 as /devices/virtual/input/input13 [ 130.529755][ T6828] input: syz1 as /devices/virtual/input/input14 [ 131.372349][ T6830] input: syz1 as /devices/virtual/input/input15 [ 132.214216][ T6832] input: syz1 as /devices/virtual/input/input16 [ 132.564003][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.570275][ T1301] ieee802154 phy1 wpan1: encryption failed: -22