[ 71.261698][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.261734][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.957690][ T44] audit: type=1400 audit(1791930063.259:202): avc: denied { write } for pid=5972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.004540][ T44] audit: type=1400 audit(1791930063.309:203): avc: denied { write } for pid=5977 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:4173' (ED25519) to the list of known hosts. [ 72.221076][ T44] audit: type=1400 audit(1791930063.529:204): avc: denied { write } for pid=5982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.266134][ T44] audit: type=1400 audit(1791930063.569:205): avc: denied { write } for pid=5987 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [+] configfs and gadget directories created. [+] Symlink created. [+] nl80211 ID: 38 [*] Racing for 5 seconds... [ 72.279335][ T44] audit: type=1400 audit(1791930063.589:206): avc: denied { mounton } for pid=5986 comm="syz-executor387" path="/sys/kernel/config" dev="configfs" ino=3102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.279651][ T44] audit: type=1400 audit(1791930063.589:207): avc: denied { mount } for pid=5986 comm="syz-executor387" name="/" dev="configfs" ino=3102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 72.280385][ T44] audit: type=1400 audit(1791930063.589:208): avc: denied { search } for pid=5986 comm="syz-executor387" name="/" dev="configfs" ino=3102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.280761][ T44] audit: type=1400 audit(1791930063.589:209): avc: denied { search } for pid=5986 comm="syz-executor387" name="/" dev="configfs" ino=3102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.280923][ T44] audit: type=1400 audit(1791930063.589:210): avc: denied { search } for pid=5986 comm="syz-executor387" name="usb_gadget" dev="configfs" ino=2308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.282710][ T44] audit: type=1400 audit(1791930063.589:211): avc: denied { write search } for pid=5986 comm="syz-executor387" name="usb_gadget" dev="configfs" ino=2308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.286197][ T5986] LUN: removable file: (no medium) [ 72.295525][ T5989] mass_storage.0/lun.0: invalid file type: /tmp/myfifo0 [ 72.296051][ T5989] mass_storage.0/lun.0: invalid file type: /tmp/myfifo0 [ 76.382362][ T5989] mass_storage.0/lun.0: invalid fil ** replaying previous printk message ** [ 76.382362][ T5989] mass_storage.0/lun.0: invalid file type: /tmp/myfifo0 [ 76.383088][ T5989] mass_storage.0/lun.0: invalid file type: /tmp/myfifo0 [ 76.388763][ T35] cfg80211: failed to load regulatory.db [ 76.390653][ T5997] [ 76.400225][ T5997] ====================================================== [ 76.402958][ T5997] WARNING: possible circular locking dependency detected [ 76.405785][ T5997] syzkaller #0 Not tainted [ 76.407295][ T5997] ------------------------------------------------------ [ 76.410029][ T5997] syz-executor387/5997 is trying to acquire lock: [ 76.412384][ T5997] ffff888035be1570 (&p->frag_sem){.+.+}-{4:4}, at: __configfs_open_file+0xe8/0x9c0 [ 76.415336][ T5997] [ 76.415336][ T5997] but task is already holding lock: [ 76.417617][ T5997] ffffffff91d84848 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 76.420103][ T5997] [ 76.420103][ T5997] which lock already depends on the new lock. [ 76.420103][ T5997] [ 76.423291][ T5997] [ 76.423291][ T5997] the existing dependency chain (in reverse order) is: [ 76.426119][ T5997] [ 76.426119][ T5997] -> #3 (cb_lock){++++}-{4:4}: [ 76.428344][ T5997] lock_acquire+0x1d1/0x380 [ 76.429960][ T5997] down_read+0x99/0x4c0 [ 76.431447][ T5997] genl_rcv+0x19/0x40 [ 76.432877][ T5997] netlink_unicast+0x585/0x850 [ 76.434570][ T5997] netlink_sendmsg+0x8b0/0xda0 [ 76.436225][ T5997] sock_sendmsg+0x394/0x410 [ 76.437822][ T5997] splice_to_socket+0xb3c/0x11a0 [ 76.439589][ T5997] do_splice+0x109c/0x1fa0 [ 76.441162][ T5997] __do_splice+0x33b/0x370 [ 76.442721][ T5997] __x64_sys_splice+0x187/0x250 [ 76.444430][ T5997] do_syscall_64+0x123/0x790 [ 76.446035][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.448051][ T5997] [ 76.448051][ T5997] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 76.450384][ T5997] lock_acquire+0x1d1/0x380 [ 76.451980][ T5997] __mutex_lock+0x1a4/0x1bd0 [ 76.453614][ T5997] fifo_open+0x139/0xb40 [ 76.455155][ T5997] do_dentry_open+0x6ab/0x14d0 [ 76.456814][ T5997] vfs_open+0x82/0x3f0 [ 76.458315][ T5997] path_openat+0x19fa/0x2440 [ 76.460332][ T5997] do_file_open+0x20e/0x430 [ 76.462430][ T5997] file_open_name+0x1c3/0x3e0 [ 76.464607][ T5997] filp_open+0x2e/0x50 [ 76.466067][ T5997] fsg_lun_open+0x6b/0x7b0 [ 76.468134][ T5997] fsg_store_file+0x1e7/0x450 [ 76.470343][ T5997] configfs_write_iter+0x302/0x4e0 [ 76.472735][ T5997] vfs_write+0x6af/0x1050 [ 76.474814][ T5997] ksys_write+0x12a/0x250 [ 76.476885][ T5997] do_syscall_64+0x123/0x790 [ 76.479048][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.481679][ T5997] [ 76.481679][ T5997] -> #1 (&common->filesem){+.+.}-{4:4}: [ 76.484399][ T5997] lock_acquire+0x1d1/0x380 [ 76.486558][ T5997] down_write+0x8b/0x1f0 [ 76.488126][ T5997] fsg_store_file+0x264/0x450 [ 76.489761][ T5997] configfs_write_iter+0x302/0x4e0 [ 76.491522][ T5997] vfs_write+0x6af/0x1050 [ 76.493275][ T5997] ksys_write+0x12a/0x250 [ 76.495034][ T5997] do_syscall_64+0x123/0x790 [ 76.496638][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.499124][ T5997] [ 76.499124][ T5997] -> #0 (&p->frag_sem){.+.+}-{4:4}: [ 76.501330][ T5997] check_prev_add+0xeb/0xe60 [ 76.503671][ T5997] __lock_acquire+0x1528/0x1f40 [ 76.505338][ T5997] lock_acquire+0x1d1/0x380 [ 76.506932][ T5997] down_read+0x99/0x4c0 [ 76.508397][ T5997] __configfs_open_file+0xe8/0x9c0 [ 76.510131][ T5997] do_dentry_open+0x6ab/0x14d0 [ 76.511786][ T5997] vfs_open+0x82/0x3f0 [ 76.513242][ T5997] path_openat+0x19fa/0x2440 [ 76.514891][ T5997] do_file_open+0x20e/0x430 [ 76.516514][ T5997] file_open_name+0x1c3/0x3e0 [ 76.518193][ T5997] filp_open+0x2e/0x50 [ 76.519675][ T5997] kernel_read_file_from_path_initns+0xec/0x240 [ 76.521761][ T5997] _request_firmware+0x733/0x13c0 [ 76.523518][ T5997] request_firmware+0x35/0x50 [ 76.525127][ T5997] reg_reload_regdb+0x85/0x460 [ 76.526785][ T5997] genl_family_rcv_msg_doit+0x214/0x300 [ 76.528742][ T5997] genl_rcv_msg+0x560/0x800 [ 76.530368][ T5997] netlink_rcv_skb+0x159/0x420 [ 76.532028][ T5997] genl_rcv+0x28/0x40 [ 76.533507][ T5997] netlink_unicast+0x585/0x850 [ 76.535539][ T5997] netlink_sendmsg+0x8b0/0xda0 [ 76.537265][ T5997] sock_sendmsg+0x394/0x410 [ 76.539132][ T5997] splice_to_socket+0xb3c/0x11a0 [ 76.540839][ T5997] do_splice+0x109c/0x1fa0 [ 76.542407][ T5997] __do_splice+0x33b/0x370 [ 76.544026][ T5997] __x64_sys_splice+0x187/0x250 [ 76.545696][ T5997] do_syscall_64+0x123/0x790 [ 76.547305][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.549414][ T5997] [ 76.549414][ T5997] other info that might help us debug this: [ 76.549414][ T5997] [ 76.552561][ T5997] Chain exists of: [ 76.552561][ T5997] &p->frag_sem --> &pipe->mutex --> cb_lock [ 76.552561][ T5997] [ 76.556248][ T5997] Possible unsafe locking scenario: [ 76.556248][ T5997] [ 76.558749][ T5997] CPU0 CPU1 [ 76.560473][ T5997] ---- ---- [ 76.562141][ T5997] rlock(cb_lock); [ 76.563386][ T5997] lock(&pipe->mutex); [ 76.565492][ T5997] lock(cb_lock); [ 76.567428][ T5997] rlock(&p->frag_sem); [ 76.568769][ T5997] [ 76.568769][ T5997] *** DEADLOCK *** [ 76.568769][ T5997] [ 76.571292][ T5997] locks held by syz-executor387/5997: 2, last CPU#0: [ 76.573359][ T5997] #0: ffff888035fc7860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 76.576130][ T5997] #1: ffffffff91d84848 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 76.578719][ T5997] [ 76.578719][ T5997] stack backtrace: [ 76.580601][ T5997] CPU: 0 UID: 0 PID: 5997 Comm: syz-executor387 Not tainted syzkaller #0 PREEMPT(full) [ 76.583619][ T5997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.586740][ T5997] Call Trace: [ 76.587832][ T5997] [ 76.588987][ T5997] dump_stack_lvl+0x100/0x190 [ 76.590548][ T5997] print_circular_bug.cold+0x178/0x1be [ 76.592258][ T5997] check_noncircular+0x146/0x160 [ 76.593984][ T5997] ? kasan_save_stack+0x30/0x50 [ 76.596084][ T5997] ? filp_open+0x2e/0x50 [ 76.597873][ T5997] check_prev_add+0xeb/0xe60 [ 76.599875][ T5997] ? genl_rcv+0x28/0x40 [ 76.601648][ T5997] ? netlink_sendmsg+0x8b0/0xda0 [ 76.603794][ T5997] __lock_acquire+0x1528/0x1f40 [ 76.605901][ T5997] lock_acquire+0x1d1/0x380 [ 76.607815][ T5997] ? __configfs_open_file+0xe8/0x9c0 [ 76.610039][ T5997] ? __pfx___might_resched+0x10/0x10 [ 76.612265][ T5997] down_read+0x99/0x4c0 [ 76.614004][ T5997] ? __configfs_open_file+0xe8/0x9c0 [ 76.616231][ T5997] ? __pfx_down_read+0x10/0x10 [ 76.618265][ T5997] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 76.620582][ T5997] ? __configfs_open_file+0xcb/0x9c0 [ 76.622846][ T5997] __configfs_open_file+0xe8/0x9c0 [ 76.625016][ T5997] do_dentry_open+0x6ab/0x14d0 [ 76.627070][ T5997] ? __pfx_configfs_open_file+0x10/0x10 [ 76.629410][ T5997] vfs_open+0x82/0x3f0 [ 76.631171][ T5997] path_openat+0x19fa/0x2440 [ 76.633138][ T5997] ? __pfx_path_openat+0x10/0x10 [ 76.635274][ T5997] ? kasan_save_stack+0x3f/0x50 [ 76.637351][ T5997] ? kasan_save_stack+0x30/0x50 [ 76.639490][ T5997] ? kasan_save_track+0x14/0x30 [ 76.641575][ T5997] ? __kasan_slab_alloc+0x89/0x90 [ 76.643743][ T5997] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 76.646130][ T5997] ? do_getname_kernel+0x5d/0x250 [ 76.648275][ T5997] ? filp_open+0x1d/0x50 [ 76.650082][ T5997] ? kernel_read_file_from_path_initns+0xec/0x240 [ 76.652795][ T5997] do_file_open+0x20e/0x430 [ 76.654766][ T5997] ? netlink_sendmsg+0x8b0/0xda0 [ 76.656877][ T5997] ? __pfx_do_file_open+0x10/0x10 [ 76.658879][ T5997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.661244][ T5997] ? rcu_is_watching+0x13/0xc0 [ 76.663296][ T5997] file_open_name+0x1c3/0x3e0 [ 76.665284][ T5997] ? __pfx_file_open_name+0x10/0x10 [ 76.667463][ T5997] ? do_getname_kernel+0x5d/0x250 [ 76.669070][ T5997] ? __asan_memcpy+0x3c/0x60 [ 76.670680][ T5997] ? do_getname_kernel+0x1be/0x250 [ 76.672327][ T5997] filp_open+0x2e/0x50 [ 76.673634][ T5997] kernel_read_file_from_path_initns+0xec/0x240 [ 76.675601][ T5997] _request_firmware+0x733/0x13c0 [ 76.677189][ T5997] ? __pfx__request_firmware+0x10/0x10 [ 76.678940][ T5997] ? __pfx_netdev_run_todo+0x10/0x10 [ 76.680588][ T5997] ? rcu_is_watching+0x13/0xc0 [ 76.682100][ T5997] ? trace_kmalloc+0xeb/0x110 [ 76.683607][ T5997] request_firmware+0x35/0x50 [ 76.685095][ T5997] reg_reload_regdb+0x85/0x460 [ 76.686615][ T5997] ? __pfx_reg_reload_regdb+0x10/0x10 [ 76.688326][ T5997] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 76.690011][ T5997] ? nl80211_pre_doit+0x19a/0xae0 [ 76.691609][ T5997] genl_family_rcv_msg_doit+0x214/0x300 [ 76.693358][ T5997] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 76.695276][ T5997] ? bpf_lsm_capable+0x9/0x10 [ 76.696785][ T5997] ? security_capable+0x80/0x260 [ 76.698388][ T5997] genl_rcv_msg+0x560/0x800 [ 76.699831][ T5997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 76.701411][ T5997] ? __lock_acquire+0x5c0/0x1f40 [ 76.702976][ T5997] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 76.704671][ T5997] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 76.706426][ T5997] ? __pfx_nl80211_post_doit+0x10/0x10 [ 76.708166][ T5997] ? __lock_acquire+0x5c0/0x1f40 [ 76.709724][ T5997] netlink_rcv_skb+0x159/0x420 [ 76.711239][ T5997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 76.712816][ T5997] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 76.714498][ T5997] ? netlink_deliver_tap+0x1ae/0xcc0 [ 76.716346][ T5997] genl_rcv+0x28/0x40 [ 76.717756][ T5997] netlink_unicast+0x585/0x850 [ 76.719309][ T5997] ? __pfx_netlink_unicast+0x10/0x10 [ 76.720968][ T5997] ? __pfx_sock_has_perm+0x10/0x10 [ 76.722585][ T5997] netlink_sendmsg+0x8b0/0xda0 [ 76.724312][ T5997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.726122][ T5997] ? selinux_socket_sendmsg+0x198/0x2f0 [ 76.727891][ T5997] sock_sendmsg+0x394/0x410 [ 76.729324][ T5997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.730987][ T5997] ? __pfx_sock_sendmsg+0x10/0x10 [ 76.732566][ T5997] ? avc_has_perm_noaudit+0x56/0x470 [ 76.734228][ T5997] splice_to_socket+0xb3c/0x11a0 [ 76.735792][ T5997] ? __pfx_splice_to_socket+0x10/0x10 [ 76.737445][ T5997] ? __pfx_timestamp_truncate+0x10/0x10 [ 76.739234][ T5997] ? inode_has_perm.isra.0+0x14a/0x1a0 [ 76.740948][ T5997] ? bpf_lsm_file_permission+0x9/0x10 [ 76.743306][ T5997] ? security_file_permission+0x76/0x210 [ 76.745071][ T5997] ? __pfx_splice_to_socket+0x10/0x10 [ 76.746761][ T5997] do_splice+0x109c/0x1fa0 [ 76.748188][ T5997] ? __lock_acquire+0x5c0/0x1f40 [ 76.749750][ T5997] ? __pfx_fifo_pipe_write+0x10/0x10 [ 76.751412][ T5997] ? __pfx_do_splice+0x10/0x10 [ 76.752915][ T5997] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 76.754640][ T5997] ? __fget_files+0x34/0x3d0 [ 76.756101][ T5997] ? find_held_lock+0x2b/0x80 [ 76.757566][ T5997] __do_splice+0x33b/0x370 [ 76.759004][ T5997] ? __pfx___do_splice+0x10/0x10 [ 76.760553][ T5997] __x64_sys_splice+0x187/0x250 [ 76.762083][ T5997] do_syscall_64+0x123/0x790 [ 76.763563][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.765406][ T5997] RIP: 0033:0x7f7180644b5e [ 76.766827][ T5997] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 76.772797][ T5997] RSP: 002b:00007f717cde6f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 76.775396][ T5997] RAX: ffffffffffffffda RBX: 00007f717cde76c0 RCX: 00007f7180644b5e [ 76.777874][ T5997] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000011 [ 76.780361][ T5997] RBP: 00007f717cde6fe0 R08: 0000000000000014 R09: 0000000000000000 [ 76.783386][ T5997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 76.785875][ T5997] R13: 00007f717cde6f80 R14: 000000000000017e R15: 0000000000000010 [ 76.788353][ T5997] [ 76.790481][ T5997] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -26 [ 76.790516][ T5997] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -26 [ 76.790771][ T5997] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db