Warning: Permanently added '10.128.1.241' (ED25519) to the list of known hosts. 2025/07/26 18:43:39 ignoring optional flag "sandboxArg"="0" [ 58.989011][ T30] audit: type=1400 audit(1753555419.315:62): avc: denied { write } for pid=5819 comm="syz-execprog" path="pipe:[3941]" dev="pipefs" ino=3941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 2025/07/26 18:43:40 parsed 1 programs [ 59.735939][ T30] audit: type=1400 audit(1753555420.065:63): avc: denied { node_bind } for pid=5819 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 61.493059][ T30] audit: type=1400 audit(1753555421.825:64): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 61.496684][ T5827] cgroup: Unknown subsys name 'net' [ 61.515907][ T30] audit: type=1400 audit(1753555421.825:65): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.543844][ T30] audit: type=1400 audit(1753555421.855:66): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.753241][ T5827] cgroup: Unknown subsys name 'cpuset' [ 61.761010][ T5827] cgroup: Unknown subsys name 'rlimit' [ 61.926472][ T30] audit: type=1400 audit(1753555422.255:67): avc: denied { setattr } for pid=5827 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.959022][ T30] audit: type=1400 audit(1753555422.255:68): avc: denied { create } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.979724][ T30] audit: type=1400 audit(1753555422.255:69): avc: denied { write } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.000537][ T30] audit: type=1400 audit(1753555422.255:70): avc: denied { read } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.026236][ T30] audit: type=1400 audit(1753555422.265:71): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 62.033099][ T5829] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 62.916838][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.475946][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 64.475961][ T30] audit: type=1400 audit(1753555424.805:78): avc: denied { execmem } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 64.605289][ T30] audit: type=1400 audit(1753555424.935:79): avc: denied { read } for pid=5834 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.627620][ T30] audit: type=1400 audit(1753555424.935:80): avc: denied { open } for pid=5834 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.651370][ T30] audit: type=1400 audit(1753555424.935:81): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 64.676436][ T30] audit: type=1400 audit(1753555425.005:82): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.ovx3TR/syz-tmp" dev="sda1" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.701086][ T30] audit: type=1400 audit(1753555425.005:83): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.723149][ T30] audit: type=1400 audit(1753555425.005:84): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.ovx3TR/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.748308][ T30] audit: type=1400 audit(1753555425.005:85): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.770127][ T30] audit: type=1400 audit(1753555425.015:86): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.ovx3TR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.796683][ T30] audit: type=1400 audit(1753555425.015:87): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.ovx3TR/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.827513][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.704051][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.715933][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.739176][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.747341][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.838081][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.847874][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.855865][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.875692][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.884074][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.222008][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 66.307295][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.315116][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.322563][ T5880] bridge_slave_0: entered allmulticast mode [ 66.333245][ T5880] bridge_slave_0: entered promiscuous mode [ 66.345652][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.355367][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.363027][ T5880] bridge_slave_1: entered allmulticast mode [ 66.370512][ T5880] bridge_slave_1: entered promiscuous mode [ 66.397927][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.408612][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.436172][ T5880] team0: Port device team_slave_0 added [ 66.444054][ T5880] team0: Port device team_slave_1 added [ 66.467209][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.474876][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.501165][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.514098][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.521111][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.547052][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.583938][ T5880] hsr_slave_0: entered promiscuous mode [ 66.589989][ T5880] hsr_slave_1: entered promiscuous mode [ 66.683156][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.693989][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.703416][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.713346][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.765459][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.784149][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.794698][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.801902][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.815629][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.822756][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.939369][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.971838][ T5880] veth0_vlan: entered promiscuous mode [ 66.982346][ T5880] veth1_vlan: entered promiscuous mode [ 67.003389][ T5880] veth0_macvtap: entered promiscuous mode [ 67.012216][ T5880] veth1_macvtap: entered promiscuous mode [ 67.026326][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.038345][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.049447][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.058507][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.067727][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.076621][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.174895][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.237841][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.308099][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.371672][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/07/26 18:43:48 executed programs: 0 [ 68.500890][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.508714][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.516826][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.525746][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.534086][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.641571][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 68.696212][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.703487][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.711381][ T5931] bridge_slave_0: entered allmulticast mode [ 68.717993][ T5931] bridge_slave_0: entered promiscuous mode [ 68.726690][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.733922][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.741106][ T5931] bridge_slave_1: entered allmulticast mode [ 68.747733][ T5931] bridge_slave_1: entered promiscuous mode [ 68.768827][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.780172][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.811365][ T5931] team0: Port device team_slave_0 added [ 68.821870][ T5931] team0: Port device team_slave_1 added [ 68.840800][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.847762][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.873744][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.885897][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.893295][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.919279][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.956734][ T5931] hsr_slave_0: entered promiscuous mode [ 68.962818][ T5931] hsr_slave_1: entered promiscuous mode [ 68.968712][ T5931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.976724][ T5931] Cannot create hsr debugfs directory [ 69.782386][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 69.782401][ T30] audit: type=1400 audit(1753555430.115:108): avc: denied { search } for pid=5493 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.809865][ T30] audit: type=1400 audit(1753555430.115:109): avc: denied { search } for pid=5493 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.831540][ T30] audit: type=1400 audit(1753555430.115:110): avc: denied { search } for pid=5493 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.854835][ T36] bridge_slave_1: left allmulticast mode [ 69.860834][ T36] bridge_slave_1: left promiscuous mode [ 69.867023][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.876710][ T36] bridge_slave_0: left allmulticast mode [ 69.883369][ T36] bridge_slave_0: left promiscuous mode [ 69.889080][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.084330][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.094661][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.104300][ T36] bond0 (unregistering): Released all slaves [ 70.163778][ T30] audit: type=1400 audit(1753555430.495:111): avc: denied { read open } for pid=5941 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.189345][ T30] audit: type=1400 audit(1753555430.505:112): avc: denied { getattr } for pid=5941 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.238983][ T36] hsr_slave_0: left promiscuous mode [ 70.245844][ T36] hsr_slave_1: left promiscuous mode [ 70.260383][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.267838][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.276292][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.283934][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.301067][ T36] veth1_macvtap: left promiscuous mode [ 70.306810][ T36] veth0_macvtap: left promiscuous mode [ 70.313733][ T36] veth1_vlan: left promiscuous mode [ 70.319145][ T36] veth0_vlan: left promiscuous mode [ 70.376475][ T30] audit: type=1400 audit(1753555430.705:113): avc: denied { add_name } for pid=5940 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.452766][ T30] audit: type=1400 audit(1753555430.775:114): avc: denied { remove_name } for pid=5951 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2024 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.550988][ T5149] Bluetooth: hci0: command tx timeout [ 70.645613][ T36] team0 (unregistering): Port device team_slave_1 removed [ 70.668033][ T36] team0 (unregistering): Port device team_slave_0 removed [ 70.956778][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.967937][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.995512][ T5931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.006213][ T5931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.018004][ T5931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.028701][ T5931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.119071][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.158150][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.172899][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.179994][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.200248][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.207353][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.538295][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.584312][ T5931] veth0_vlan: entered promiscuous mode [ 71.595685][ T5931] veth1_vlan: entered promiscuous mode [ 71.621817][ T5931] veth0_macvtap: entered promiscuous mode [ 71.629852][ T5931] veth1_macvtap: entered promiscuous mode [ 71.644106][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.656259][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.666880][ T5931] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.676065][ T5931] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.684867][ T5931] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.693637][ T5931] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.745673][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.757784][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.778278][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.786175][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.825363][ T30] audit: type=1400 audit(1753555432.155:115): avc: denied { read } for pid=5977 comm="syz.0.16" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.827807][ T5977] input: syz1 as /devices/virtual/input/input5 [ 71.867131][ T30] audit: type=1400 audit(1753555432.155:116): avc: denied { open } for pid=5977 comm="syz.0.16" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.890733][ T30] audit: type=1400 audit(1753555432.155:117): avc: denied { ioctl } for pid=5977 comm="syz.0.16" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.630653][ T5149] Bluetooth: hci0: command tx timeout [ 74.710511][ T5149] Bluetooth: hci0: command tx timeout [ 76.070990][ T1205] cfg80211: failed to load regulatory.db [ 76.790952][ T5149] Bluetooth: hci0: command tx timeout [ 86.852828][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.861618][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.869639][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.877889][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.885609][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.985081][ T5979] chnl_net:caif_netlink_parms(): no params data found [ 87.030152][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.037367][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.044721][ T5979] bridge_slave_0: entered allmulticast mode [ 87.051403][ T5979] bridge_slave_0: entered promiscuous mode [ 87.059194][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.066477][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.073691][ T5979] bridge_slave_1: entered allmulticast mode [ 87.080577][ T5979] bridge_slave_1: entered promiscuous mode [ 87.101417][ T5979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.112181][ T5979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.137639][ T5979] team0: Port device team_slave_0 added [ 87.145404][ T5979] team0: Port device team_slave_1 added [ 87.165116][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.172412][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.199482][ T5979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.211683][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.218613][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.244588][ T5979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.274767][ T5979] hsr_slave_0: entered promiscuous mode [ 87.280812][ T5979] hsr_slave_1: entered promiscuous mode [ 87.370764][ T5979] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.379527][ T5979] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.388913][ T5979] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.397739][ T5979] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.418217][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.425459][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.433258][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.440366][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.479970][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.493588][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.502303][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.515724][ T5979] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.527058][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.534143][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.545740][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.552924][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.669979][ T5979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.699275][ T5979] veth0_vlan: entered promiscuous mode [ 87.708749][ T5979] veth1_vlan: entered promiscuous mode [ 87.729133][ T5979] veth0_macvtap: entered promiscuous mode [ 87.737040][ T5979] veth1_macvtap: entered promiscuous mode [ 87.751797][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.762844][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.775533][ T5979] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.784422][ T5979] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.793238][ T5979] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.802055][ T5979] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/07/26 18:44:08 executed programs: 3 [ 87.848494][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.859335][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.882373][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.890890][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.934877][ T5997] input: syz1 as /devices/virtual/input/input6 [ 87.954397][ T5831] [ 87.956732][ T5831] ====================================================== [ 87.963729][ T5831] WARNING: possible circular locking dependency detected [ 87.970719][ T5831] 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 Not tainted [ 87.977795][ T5831] ------------------------------------------------------ [ 87.984813][ T5831] udevd/5831 is trying to acquire lock: [ 87.990335][ T5831] ffff8880259b80b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_flush+0x63/0x180 [ 87.998927][ T5831] [ 87.998927][ T5831] but task is already holding lock: [ 88.006287][ T5831] ffff8880268022c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_flush_device+0x55/0x110 [ 88.015509][ T5831] [ 88.015509][ T5831] which lock already depends on the new lock. [ 88.015509][ T5831] [ 88.025883][ T5831] [ 88.025883][ T5831] the existing dependency chain (in reverse order) is: [ 88.034866][ T5831] [ 88.034866][ T5831] -> #3 (&dev->mutex#2){+.+.}-{4:4}: [ 88.042306][ T5831] __mutex_lock+0x199/0xb90 [ 88.047303][ T5831] input_register_handle+0xdc/0x620 [ 88.053005][ T5831] kbd_connect+0xca/0x160 [ 88.057834][ T5831] input_attach_handler.isra.0+0x184/0x260 [ 88.064143][ T5831] input_register_device+0xa84/0x1130 [ 88.070013][ T5831] acpi_button_add+0x582/0xb70 [ 88.075272][ T5831] acpi_device_probe+0xc6/0x330 [ 88.080636][ T5831] really_probe+0x23e/0xa90 [ 88.085644][ T5831] __driver_probe_device+0x1de/0x440 [ 88.091419][ T5831] driver_probe_device+0x4c/0x1b0 [ 88.096932][ T5831] __driver_attach+0x283/0x580 [ 88.102187][ T5831] bus_for_each_dev+0x13e/0x1d0 [ 88.107531][ T5831] bus_add_driver+0x2e9/0x690 [ 88.112711][ T5831] driver_register+0x15c/0x4b0 [ 88.117972][ T5831] __acpi_bus_register_driver+0xdf/0x130 [ 88.124110][ T5831] acpi_button_driver_init+0x82/0x110 [ 88.129986][ T5831] do_one_initcall+0x120/0x6e0 [ 88.135243][ T5831] kernel_init_freeable+0x5c2/0x900 [ 88.140937][ T5831] kernel_init+0x1c/0x2b0 [ 88.145776][ T5831] ret_from_fork+0x5d4/0x6f0 [ 88.150865][ T5831] ret_from_fork_asm+0x1a/0x30 [ 88.156131][ T5831] [ 88.156131][ T5831] -> #2 (input_mutex){+.+.}-{4:4}: [ 88.163401][ T5831] __mutex_lock+0x199/0xb90 [ 88.168398][ T5831] input_register_device+0x98a/0x1130 [ 88.174287][ T5831] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 88.180759][ T5831] __x64_sys_ioctl+0x18e/0x210 [ 88.186020][ T5831] do_syscall_64+0xcd/0x4c0 [ 88.191016][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.197401][ T5831] [ 88.197401][ T5831] -> #1 (&newdev->mutex){+.+.}-{4:4}: [ 88.204925][ T5831] __mutex_lock+0x199/0xb90 [ 88.209928][ T5831] uinput_request_submit.part.0+0x25/0x2e0 [ 88.216232][ T5831] uinput_dev_upload_effect+0x174/0x1f0 [ 88.222279][ T5831] input_ff_upload+0x568/0xc10 [ 88.227536][ T5831] evdev_do_ioctl+0xf40/0x1b30 [ 88.232795][ T5831] evdev_ioctl+0x16f/0x1a0 [ 88.237705][ T5831] __x64_sys_ioctl+0x18e/0x210 [ 88.242963][ T5831] do_syscall_64+0xcd/0x4c0 [ 88.247958][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.254356][ T5831] [ 88.254356][ T5831] -> #0 (&ff->mutex){+.+.}-{4:4}: [ 88.261549][ T5831] __lock_acquire+0x126f/0x1c90 [ 88.266934][ T5831] lock_acquire+0x179/0x350 [ 88.271936][ T5831] __mutex_lock+0x199/0xb90 [ 88.276935][ T5831] input_ff_flush+0x63/0x180 [ 88.282020][ T5831] uinput_dev_flush+0x2a/0x40 [ 88.287193][ T5831] input_flush_device+0xa1/0x110 [ 88.292638][ T5831] evdev_release+0x344/0x420 [ 88.297734][ T5831] __fput+0x3ff/0xb70 [ 88.302208][ T5831] fput_close_sync+0x118/0x260 [ 88.307468][ T5831] __x64_sys_close+0x8b/0x120 [ 88.312649][ T5831] do_syscall_64+0xcd/0x4c0 [ 88.317675][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.324061][ T5831] [ 88.324061][ T5831] other info that might help us debug this: [ 88.324061][ T5831] [ 88.334261][ T5831] Chain exists of: [ 88.334261][ T5831] &ff->mutex --> input_mutex --> &dev->mutex#2 [ 88.334261][ T5831] [ 88.346326][ T5831] Possible unsafe locking scenario: [ 88.346326][ T5831] [ 88.353759][ T5831] CPU0 CPU1 [ 88.359095][ T5831] ---- ---- [ 88.364438][ T5831] lock(&dev->mutex#2); [ 88.368658][ T5831] lock(input_mutex); [ 88.375216][ T5831] lock(&dev->mutex#2); [ 88.381970][ T5831] lock(&ff->mutex); [ 88.385923][ T5831] [ 88.385923][ T5831] *** DEADLOCK *** [ 88.385923][ T5831] [ 88.394054][ T5831] 2 locks held by udevd/5831: [ 88.398706][ T5831] #0: ffff888026803118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_release+0x79/0x420 [ 88.407909][ T5831] #1: ffff8880268022c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_flush_device+0x55/0x110 [ 88.417560][ T5831] [ 88.417560][ T5831] stack backtrace: [ 88.423426][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: udevd Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 88.423440][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.423446][ T5831] Call Trace: [ 88.423450][ T5831] [ 88.423454][ T5831] dump_stack_lvl+0x116/0x1f0 [ 88.423473][ T5831] print_circular_bug+0x275/0x350 [ 88.423490][ T5831] check_noncircular+0x14c/0x170 [ 88.423506][ T5831] __lock_acquire+0x126f/0x1c90 [ 88.423516][ T5831] lock_acquire+0x179/0x350 [ 88.423525][ T5831] ? input_ff_flush+0x63/0x180 [ 88.423537][ T5831] ? __pfx___might_resched+0x10/0x10 [ 88.423550][ T5831] ? __mutex_trylock_common+0xe9/0x250 [ 88.423560][ T5831] __mutex_lock+0x199/0xb90 [ 88.423570][ T5831] ? input_ff_flush+0x63/0x180 [ 88.423580][ T5831] ? rcu_is_watching+0x12/0xc0 [ 88.423593][ T5831] ? input_ff_flush+0x63/0x180 [ 88.423603][ T5831] ? trace_contention_end+0xdd/0x130 [ 88.423612][ T5831] ? __pfx___mutex_lock+0x10/0x10 [ 88.423620][ T5831] ? trace_contention_end+0xdd/0x130 [ 88.423629][ T5831] ? input_flush_device+0x55/0x110 [ 88.423644][ T5831] ? __pfx___mutex_lock+0x10/0x10 [ 88.423653][ T5831] ? __fsnotify_parent+0x24b/0xc40 [ 88.423668][ T5831] ? input_ff_flush+0x63/0x180 [ 88.423678][ T5831] input_ff_flush+0x63/0x180 [ 88.423688][ T5831] ? __pfx___fsnotify_parent+0x10/0x10 [ 88.423702][ T5831] ? __pfx_uinput_dev_flush+0x10/0x10 [ 88.423712][ T5831] uinput_dev_flush+0x2a/0x40 [ 88.423722][ T5831] input_flush_device+0xa1/0x110 [ 88.423737][ T5831] evdev_release+0x344/0x420 [ 88.423751][ T5831] ? evm_file_release+0xd0/0x200 [ 88.423761][ T5831] ? __pfx_evdev_release+0x10/0x10 [ 88.423776][ T5831] __fput+0x3ff/0xb70 [ 88.423788][ T5831] fput_close_sync+0x118/0x260 [ 88.423799][ T5831] ? __pfx_fput_close_sync+0x10/0x10 [ 88.423810][ T5831] ? dnotify_flush+0x79/0x4c0 [ 88.423821][ T5831] __x64_sys_close+0x8b/0x120 [ 88.423833][ T5831] do_syscall_64+0xcd/0x4c0 [ 88.423843][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.423853][ T5831] RIP: 0033:0x7f7c2f2a7407 [ 88.423861][ T5831] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 88.423870][ T5831] RSP: 002b:00007fff6a7623b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 88.423880][ T5831] RAX: ffffffffffffffda RBX: 00007f7c2fa12880 RCX: 00007f7c2f2a7407 [ 88.423886][ T5831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 88.423892][ T5831] RBP: 00007f7c2fa126e8 R08: 0000000000000000 R09: 0000000000000000 [ 88.423897][ T5831] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000016 [ 88.423903][ T5831] R13: 00007fff6a7624c0 R14: 0000000000000000 R15: 0000000000000000 [ 88.423911][ T5831] [ 88.950316][ T5149] Bluetooth: hci1: command tx timeout [ 90.949277][ T5998] input: syz1 as /devices/virtual/input/input7 [ 91.040259][ T5149] Bluetooth: hci1: command tx timeout [ 93.110561][ T5149] Bluetooth: hci1: command tx timeout 2025/07/26 18:44:14 executed programs: 5 [ 93.968018][ T5999] input: syz1 as /devices/virtual/input/input8 [ 95.190268][ T5149] Bluetooth: hci1: command tx timeout [ 96.982433][ T6000] input: syz1 as /devices/virtual/input/input9