last executing test programs: 3.123664824s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000740)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 testdomain\n', 0x25) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='testdomain / 2147483647 8194 0 0 0\n', 0x23) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='testdomain 1 \\x00000000 2147483647 /\n', 0x25) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.2\x00']) openat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt/file1\x00', 0x42, 0x1ff) rename(&(0x7f0000000480)='./mnt/file1\x00', &(0x7f00000004c0)='./mnt/file2\x00') 3.055862636s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001ffffff40cd0c39000101000000010902200001010080320904000002ffffff000705810240000007050102400000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="0812") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b4') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5446, 0x0) 2.963167134s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902370001010080fa0904000000ffffff000904000104ffffff0007058102000200070501020002000705820200020007050602000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="010000000001010101010101010100"/64) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) syz_usb_disconnect(r0) 2.940673805s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac00070582010002010904020002010300000705030240000007058402400000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) 1.809545296s ago: executing program 3 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 b\x00', 0x29) 1.429885181s ago: executing program 3 (id=6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x5c}}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) 1.359376492s ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000740)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 testdomain\n', 0x25) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='testdomain / 2147483647 8194 0 0 0\n', 0x23) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='testdomain 1 \\x00000000 2147483647 /\n', 0x25) 549.116485ms ago: executing program 1 (id=8): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1234, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, {0xa, 0x1234, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x120) 0s ago: executing program 1 (id=9): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x1c, 0x20f}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000200)={{}, 0x1, 0x1c, 0x1}, 0x18) write$input_event(r1, &(0x7f0000000240), 0x18) kernel console output (not intermixed with test programs): [ 37.944379][ T42] audit: type=1400 audit(1785849776.099:113): avc: denied { write } for pid=5645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.954285][ T42] audit: type=1400 audit(1785849776.099:114): avc: denied { write } for pid=5646 comm="sh" path="pipe:[2654]" dev="pipefs" ino=2654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 37.962671][ T42] audit: type=1400 audit(1785849776.099:115): avc: denied { rlimitinh } for pid=5646 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.968606][ T42] audit: type=1400 audit(1785849776.099:116): avc: denied { siginh } for pid=5646 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.973963][ T42] audit: type=1400 audit(1785849776.139:117): avc: denied { write } for pid=5649 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.348739][ T42] audit: type=1400 audit(1785849776.519:118): avc: denied { write } for pid=5656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.391317][ T42] audit: type=1400 audit(1785849776.559:119): avc: denied { write } for pid=5659 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.477342][ T42] audit: type=1400 audit(1785849776.649:120): avc: denied { write } for pid=5662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:52843' (ED25519) to the list of known hosts. [ 41.361676][ T5677] cgroup: Unknown subsys name 'net' [ 41.499316][ T5677] cgroup: Unknown subsys name 'cpuset' [ 41.503500][ T5677] cgroup: Unknown subsys name 'rlimit' [ 41.763871][ T5730] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.460591][ T5677] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.859601][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 45.859616][ T42] audit: type=1400 audit(1785849784.019:158): avc: denied { execmem } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.070435][ T42] audit: type=1400 audit(1785849784.239:159): avc: denied { create } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.077612][ T42] audit: type=1400 audit(1785849784.239:160): avc: denied { read write } for pid=5739 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.087013][ T42] audit: type=1400 audit(1785849784.239:161): avc: denied { open } for pid=5739 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.094923][ T42] audit: type=1400 audit(1785849784.249:162): avc: denied { ioctl } for pid=5741 comm="syz-executor" path="socket:[7282]" dev="sockfs" ino=7282 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.101933][ T5751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.103503][ T5752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.106725][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.107521][ T5755] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.110538][ T5755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.110800][ T5752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.111175][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.111436][ T5752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.112634][ T5751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.112947][ T5751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.113482][ T5751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.113765][ T5751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.115177][ T5755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.117792][ T5752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.119392][ T5755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.122222][ T5752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.124488][ T5757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.124673][ T5755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.125935][ T42] audit: type=1400 audit(1785849784.289:163): avc: denied { read } for pid=5744 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.129057][ T5757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.129345][ T42] audit: type=1400 audit(1785849784.289:164): avc: denied { open } for pid=5744 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.133181][ T5757] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.136877][ T42] audit: type=1400 audit(1785849784.299:165): avc: denied { mounton } for pid=5744 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.168850][ T42] audit: type=1400 audit(1785849784.299:166): avc: denied { module_request } for pid=5744 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.175699][ T42] audit: type=1400 audit(1785849784.339:167): avc: denied { sys_module } for pid=5744 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.670274][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.674000][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.677154][ T5739] bridge_slave_0: entered allmulticast mode [ 46.681068][ T5739] bridge_slave_0: entered promiscuous mode [ 46.715181][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.717602][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.719964][ T5739] bridge_slave_1: entered allmulticast mode [ 46.722714][ T5739] bridge_slave_1: entered promiscuous mode [ 46.774508][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.777623][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.782063][ T5740] bridge_slave_0: entered allmulticast mode [ 46.786038][ T5740] bridge_slave_0: entered promiscuous mode [ 46.791492][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.794462][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.797274][ T5740] bridge_slave_1: entered allmulticast mode [ 46.800684][ T5740] bridge_slave_1: entered promiscuous mode [ 46.836690][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.850863][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.854101][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.857578][ T5744] bridge_slave_0: entered allmulticast mode [ 46.860855][ T5744] bridge_slave_0: entered promiscuous mode [ 46.864811][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.866904][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.869020][ T5744] bridge_slave_1: entered allmulticast mode [ 46.871489][ T5744] bridge_slave_1: entered promiscuous mode [ 46.881620][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.903576][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.913110][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.915196][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.917595][ T5741] bridge_slave_0: entered allmulticast mode [ 46.920990][ T5741] bridge_slave_0: entered promiscuous mode [ 46.924500][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.926599][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.928598][ T5741] bridge_slave_1: entered allmulticast mode [ 46.931096][ T5741] bridge_slave_1: entered promiscuous mode [ 46.935197][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.939442][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.943745][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.971468][ T5739] team0: Port device team_slave_0 added [ 46.981175][ T5739] team0: Port device team_slave_1 added [ 47.003927][ T5740] team0: Port device team_slave_0 added [ 47.024857][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.029560][ T5740] team0: Port device team_slave_1 added [ 47.032775][ T5744] team0: Port device team_slave_0 added [ 47.036026][ T5744] team0: Port device team_slave_1 added [ 47.044379][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.046607][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.054284][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.060666][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.095005][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.097479][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.105704][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.125023][ T5741] team0: Port device team_slave_0 added [ 47.135560][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.138160][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.147230][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.151745][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.153858][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.162442][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.167400][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.169476][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.176967][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.181329][ T5741] team0: Port device team_slave_1 added [ 47.183624][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.186542][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.195503][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.232740][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.234883][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.242487][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.246826][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.248978][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.256622][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.267110][ T5739] hsr_slave_0: entered promiscuous mode [ 47.269518][ T5739] hsr_slave_1: entered promiscuous mode [ 47.311481][ T5744] hsr_slave_0: entered promiscuous mode [ 47.314232][ T5744] hsr_slave_1: entered promiscuous mode [ 47.317005][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 47.319803][ T5744] Cannot create hsr debugfs directory [ 47.353390][ T5740] hsr_slave_0: entered promiscuous mode [ 47.355974][ T5740] hsr_slave_1: entered promiscuous mode [ 47.358415][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 47.360344][ T5740] Cannot create hsr debugfs directory [ 47.365035][ T5741] hsr_slave_0: entered promiscuous mode [ 47.367382][ T5741] hsr_slave_1: entered promiscuous mode [ 47.369445][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 47.371255][ T5741] Cannot create hsr debugfs directory [ 47.635347][ T5739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.650638][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.656140][ T5739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.662484][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.666090][ T5739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.671141][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.679565][ T5739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.683314][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.716276][ T5740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.720718][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.723452][ T5740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.728309][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.732255][ T5740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.736364][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.740513][ T5740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.744797][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.798909][ T5744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.802929][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.805500][ T5744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.809373][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.813026][ T5744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.816883][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.819768][ T5744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.823459][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.886007][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.889803][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.892444][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.895972][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.901743][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.906542][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.909628][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.913488][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.938611][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.947335][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.972063][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.988542][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.997013][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.999569][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.007446][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.009696][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.018933][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.021149][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.032415][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.039439][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.041623][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.087101][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.102096][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.104399][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.118829][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.121505][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.135532][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.162805][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.172186][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.174403][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.180973][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.183089][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.197509][ T5757] Bluetooth: hci1: command tx timeout [ 48.197712][ T5746] Bluetooth: hci0: command tx timeout [ 48.197712][ T64] Bluetooth: hci2: command tx timeout [ 48.197717][ T5752] Bluetooth: hci3: command tx timeout [ 48.360843][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.373403][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.417486][ T5739] veth0_vlan: entered promiscuous mode [ 48.437389][ T5739] veth1_vlan: entered promiscuous mode [ 48.450951][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.456205][ T5740] veth0_vlan: entered promiscuous mode [ 48.463056][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.474533][ T5740] veth1_vlan: entered promiscuous mode [ 48.489722][ T5739] veth0_macvtap: entered promiscuous mode [ 48.498657][ T5739] veth1_macvtap: entered promiscuous mode [ 48.531326][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.550683][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.560718][ T5744] veth0_vlan: entered promiscuous mode [ 48.563534][ T5741] veth0_vlan: entered promiscuous mode [ 48.573255][ T5740] veth0_macvtap: entered promiscuous mode [ 48.583441][ T5744] veth1_vlan: entered promiscuous mode [ 48.591090][ T5741] veth1_vlan: entered promiscuous mode [ 48.594040][ T5740] veth1_macvtap: entered promiscuous mode [ 48.624557][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.642205][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.659311][ T5741] veth0_macvtap: entered promiscuous mode [ 48.671495][ T5744] veth0_macvtap: entered promiscuous mode [ 48.674761][ T5741] veth1_macvtap: entered promiscuous mode [ 48.680291][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.680943][ T5744] veth1_macvtap: entered promiscuous mode [ 48.683281][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.711458][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.723584][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.723647][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.728720][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.735920][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.740422][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.754383][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.770643][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.773584][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.784663][ T5739] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.800043][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.804201][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.816600][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.837182][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.861630][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.864318][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.876009][ T5853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.879691][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.892651][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.896057][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.898346][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.900713][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.932610][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.935151][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.949099][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.953080][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.966762][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.969638][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.986681][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.990182][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.992888][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.015916][ T5794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.019061][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.036180][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.039515][ T5853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.205976][ T59] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 49.296392][ T1371] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 49.299242][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.368506][ T59] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 1.01 [ 49.371775][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.382211][ T59] pvrusb2: Hardware description: Terratec Grabster AV400 [ 49.385124][ T59] pvrusb2: ********** [ 49.387386][ T59] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 49.390917][ T59] pvrusb2: Important functionality might not be entirely working. [ 49.393485][ T59] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 49.397112][ T59] pvrusb2: ********** [ 49.458699][ T1371] usb 6-1: config 1 interface 2 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 49.462123][ T1371] usb 6-1: config 1 interface 2 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 49.465252][ T1371] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 49.468157][ T1371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.472299][ T34] usb 7-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 49.475573][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.479226][ T34] usb 7-1: Product: syz [ 49.480597][ T34] usb 7-1: Manufacturer: syz [ 49.482266][ T34] usb 7-1: SerialNumber: syz [ 49.916734][ C3] usb 7-1: received EP1 urb->status = -2 [ 49.918559][ T34] usb 7-1: unable to init card! (ret=-110) [ 49.921411][ T34] snd-usb-caiaq 7-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 50.055960][ T5893] NFSD: Unable to initialize client recovery tracking! (-110) [ 50.058374][ T5893] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 50.061230][ T5893] NFSD: starting 90-second grace period (net f0000412) [ 50.275935][ T64] Bluetooth: hci1: command tx timeout [ 50.276627][ T5757] Bluetooth: hci3: command tx timeout [ 50.276860][ T5746] Bluetooth: hci0: command tx timeout [ 50.286015][ T5757] Bluetooth: hci2: command tx timeout [ 50.940066][ T2523] pvrusb2: Module ID 2 (cx25840) for device Terratec Grabster AV400 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 50.945330][ T2523] pvrusb2: Device being rendered inoperable [ 50.947858][ T2523] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 50.952167][ T2523] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 51.329283][ T24] usb 6-1: USB disconnect, device number 2 [ 51.352136][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 51.352165][ T42] audit: type=1400 audit(1785849789.519:194): avc: denied { create } for pid=5926 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.363269][ T42] audit: type=1400 audit(1785849789.519:195): avc: denied { write } for pid=5926 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.409077][ T42] audit: type=1400 audit(1785849789.579:196): avc: denied { read write } for pid=5926 comm="syz.1.8" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 51.418477][ T42] audit: type=1400 audit(1785849789.579:197): avc: denied { open } for pid=5926 comm="syz.1.8" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 51.463384][ T5927] infiniband syz0: set active [ 51.465330][ T5927] infiniband syz0: added veth0 [ 51.475165][ T5927] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 51.480635][ T5927] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 51.486157][ T5927] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 51.500640][ T5927] RDS/IB: syz0: added [ 51.502151][ T5927] smc: adding ib device syz0 with port count 1 [ 51.504051][ T5927] smc: ib device syz0 port 1 has no pnetid [ 51.686020][ T5919] NFSD: Unable to initialize client recovery tracking! (-110) [ 51.690212][ T5919] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 51.694046][ T5919] NFSD: starting 90-second grace period (net f0000412) [ 51.917644][ T42] audit: type=1400 audit(1785849790.089:198): avc: denied { read write } for pid=5932 comm="syz.1.9" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.921765][ T5933] input: syz0 as /devices/virtual/input/input5 [ 51.926813][ T42] audit: type=1400 audit(1785849790.089:199): avc: denied { open } for pid=5932 comm="syz.1.9" path="/dev/uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.937559][ T42] audit: type=1400 audit(1785849790.089:200): avc: denied { ioctl } for pid=5932 comm="syz.1.9" path="/dev/uinput" dev="devtmpfs" ino=944 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.938528][ T24] [ 51.938534][ T24] ====================================================== [ 51.938538][ T24] WARNING: possible circular locking dependency detected [ 51.938543][ T24] syzkaller #0 Not tainted [ 51.938549][ T24] ------------------------------------------------------ [ 51.938553][ T24] kworker/2:0/24 is trying to acquire lock: [ 51.938558][ T24] ffff888057c612c8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_flush_buffer+0x25/0x1b0 [ 51.938607][ T24] [ 51.938607][ T24] but task is already holding lock: [ 51.938610][ T24] ffff88801c2c20b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 51.938636][ T24] [ 51.938636][ T24] which lock already depends on the new lock. [ 51.938636][ T24] [ 51.938640][ T24] [ 51.938640][ T24] the existing dependency chain (in reverse order) is: [ 51.938644][ T24] [ 51.938644][ T24] -> #3 (&buf->lock){+.+.}-{4:4}: [ 51.938658][ T24] lock_acquire+0x1b9/0x370 [ 51.938672][ T24] __mutex_lock+0x1a4/0x1bd0 [ 51.938684][ T24] tty_buffer_flush+0x72/0x310 [ 51.938696][ T24] tty_ldisc_flush+0x68/0xf0 [ 51.938705][ T24] __do_SAK+0x368/0x480 [ 51.938717][ T24] vc_SAK+0x7f/0x320 [ 51.938732][ T24] process_one_work+0xa23/0x1940 [ 51.938742][ T24] worker_thread+0x5ef/0xe50 [ 51.938752][ T24] kthread+0x370/0x450 [ 51.938762][ T24] ret_from_fork+0x72b/0xd50 [ 51.938776][ T24] ret_from_fork_asm+0x1a/0x30 [ 51.938792][ T24] [ 51.938792][ T24] -> #2 (console_lock){+.+.}-{0:0}: [ 51.938806][ T24] lock_acquire+0x1b9/0x370 [ 51.938818][ T24] console_lock+0x7a/0xa0 [ 51.938830][ T24] serial_core_register_port+0xe65/0x16f0 [ 51.938845][ T24] serial8250_register_8250_port+0x15af/0x2330 [ 51.938855][ T24] serial_pnp_probe+0x436/0x930 [ 51.938865][ T24] pnp_device_probe+0x2b3/0x4a0 [ 51.938879][ T24] really_probe+0x241/0xa60 [ 51.938891][ T24] __driver_probe_device+0x20e/0x450 [ 51.938904][ T24] driver_probe_device+0x4a/0x140 [ 51.938916][ T24] __driver_attach+0x21f/0x5b0 [ 51.938928][ T24] bus_for_each_dev+0x13e/0x1d0 [ 51.938937][ T24] bus_add_driver+0x305/0x5b0 [ 51.938947][ T24] driver_register+0x1e2/0x360 [ 51.938960][ T24] serial8250_init+0xcc/0x1c0 [ 51.938973][ T24] do_one_initcall+0x11d/0x700 [ 51.938987][ T24] kernel_init_freeable+0x6ea/0x7b0 [ 51.939002][ T24] kernel_init+0x1f/0x1e0 [ 51.939016][ T24] ret_from_fork+0x72b/0xd50 [ 51.939038][ T24] ret_from_fork_asm+0x1a/0x30 [ 51.939053][ T24] [ 51.939053][ T24] -> #1 (&port->mutex){+.+.}-{4:4}: [ 51.939067][ T24] lock_acquire+0x1b9/0x370 [ 51.939078][ T24] __mutex_lock+0x1a4/0x1bd0 [ 51.939090][ T24] uart_set_termios+0x8e/0x690 [ 51.939123][ T24] tty_set_termios+0x64d/0x980 [ 51.939132][ T24] set_termios+0x5c8/0x880 [ 51.939141][ T24] tty_mode_ioctl+0x17e/0xd40 [ 51.939150][ T24] n_tty_ioctl_helper+0x47/0x2b0 [ 51.939159][ T24] n_tty_ioctl+0x53/0x340 [ 51.939172][ T24] tty_ioctl+0x11b4/0x1640 [ 51.939183][ T24] __x64_sys_ioctl+0x18e/0x210 [ 51.939199][ T24] do_syscall_64+0x115/0x870 [ 51.939210][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.939221][ T24] [ 51.939221][ T24] -> #0 (&tty->termios_rwsem){++++}-{4:4}: [ 51.939236][ T24] check_prev_add+0xeb/0xe60 [ 51.939247][ T24] __lock_acquire+0x136c/0x1a40 [ 51.939258][ T24] lock_acquire+0x1b9/0x370 [ 51.939269][ T24] down_write+0x8b/0x1f0 [ 51.939281][ T24] n_tty_flush_buffer+0x25/0x1b0 [ 51.939296][ T24] tty_buffer_flush+0x239/0x310 [ 51.939307][ T24] tty_ldisc_flush+0x68/0xf0 [ 51.939317][ T24] __do_SAK+0x368/0x480 [ 51.939328][ T24] vc_SAK+0x7f/0x320 [ 51.939342][ T24] process_one_work+0xa23/0x1940 [ 51.939353][ T24] worker_thread+0x5ef/0xe50 [ 51.939362][ T24] kthread+0x370/0x450 [ 51.939371][ T24] ret_from_fork+0x72b/0xd50 [ 51.939384][ T24] ret_from_fork_asm+0x1a/0x30 [ 51.939398][ T24] [ 51.939398][ T24] other info that might help us debug this: [ 51.939398][ T24] [ 51.939405][ T24] Chain exists of: [ 51.939405][ T24] &tty->termios_rwsem --> console_lock --> &buf->lock [ 51.939405][ T24] [ 51.939422][ T24] Possible unsafe locking scenario: [ 51.939422][ T24] [ 51.939425][ T24] CPU0 CPU1 [ 51.939428][ T24] ---- ---- [ 51.939431][ T24] lock(&buf->lock); [ 51.939438][ T24] lock(console_lock); [ 51.939446][ T24] lock(&buf->lock); [ 51.939453][ T24] lock(&tty->termios_rwsem); [ 51.939461][ T24] [ 51.939461][ T24] *** DEADLOCK *** [ 51.939461][ T24] [ 51.939463][ T24] 5 locks held by kworker/2:0/24: [ 51.939469][ T24] #0: ffff88801bcaa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 51.939494][ T24] #1: ffffc9000062fd08 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 51.939520][ T24] #2: ffffffff8ebd45a0 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x320 [ 51.939549][ T24] #3: ffff888057c610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xf0 [ 51.939573][ T24] #4: ffff88801c2c20b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 51.939599][ T24] [ 51.939599][ T24] stack backtrace: [ 51.939614][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 51.939626][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.939633][ T24] Workqueue: events vc_SAK [ 51.939648][ T24] Call Trace: [ 51.939658][ T24] [ 51.939662][ T24] dump_stack_lvl+0x100/0x190 [ 51.939675][ T24] print_circular_bug.cold+0x178/0x1c7 [ 51.939692][ T24] check_noncircular+0x146/0x160 [ 51.939705][ T24] check_prev_add+0xeb/0xe60 [ 51.939717][ T24] __lock_acquire+0x136c/0x1a40 [ 51.939730][ T24] lock_acquire+0x1b9/0x370 [ 51.939742][ T24] ? n_tty_flush_buffer+0x25/0x1b0 [ 51.939757][ T24] ? __pfx___might_resched+0x10/0x10 [ 51.939771][ T24] down_write+0x8b/0x1f0 [ 51.939784][ T24] ? n_tty_flush_buffer+0x25/0x1b0 [ 51.939799][ T24] ? __pfx_down_write+0x10/0x10 [ 51.939813][ T24] ? __pfx_n_tty_flush_buffer+0x10/0x10 [ 51.939828][ T24] n_tty_flush_buffer+0x25/0x1b0 [ 51.939855][ T24] ? __pfx_n_tty_flush_buffer+0x10/0x10 [ 51.939870][ T24] tty_buffer_flush+0x239/0x310 [ 51.939883][ T24] tty_ldisc_flush+0x68/0xf0 [ 51.939893][ T24] __do_SAK+0x368/0x480 [ 51.939905][ T24] ? mark_held_locks+0x40/0x70 [ 51.939918][ T24] vc_SAK+0x7f/0x320 [ 51.939933][ T24] process_one_work+0xa23/0x1940 [ 51.939945][ T24] ? __pfx_process_one_work+0x10/0x10 [ 51.939957][ T24] ? __pfx_vc_SAK+0x10/0x10 [ 51.939973][ T24] worker_thread+0x5ef/0xe50 [ 51.939985][ T24] ? kthread+0x13a/0x450 [ 51.939994][ T24] ? __pfx_worker_thread+0x10/0x10 [ 51.940004][ T24] kthread+0x370/0x450 [ 51.940013][ T24] ? __pfx_kthread+0x10/0x10 [ 51.940022][ T24] ret_from_fork+0x72b/0xd50 [ 51.940036][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 51.940050][ T24] ? __switch_to+0x800/0x10f0 [ 51.940061][ T24] ? __pfx_kthread+0x10/0x10 [ 51.940071][ T24] ret_from_fork_asm+0x1a/0x30 [ 51.940088][ T24] [ 52.010994][ T59] usb 7-1: USB disconnect, device number 2 [ 52.102470][ T42] audit: type=1400 audit(1785849790.269:201): avc: denied { read } for pid=5894 comm="syz.0.1" name="video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 52.212073][ T42] audit: type=1400 audit(1785849790.269:202): avc: denied { open } for pid=5894 comm="syz.0.1" path="/dev/video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 52.212109][ T42] audit: type=1400 audit(1785849790.269:203): avc: denied { ioctl } for pid=5894 comm="syz.0.1" path="/dev/video0" dev="devtmpfs" ino=956 ioctlcmd=0x5446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 52.355922][ T5757] Bluetooth: hci0: command tx timeout [ 52.356030][ T5746] Bluetooth: hci3: command tx timeout [ 52.356288][ T64] Bluetooth: hci2: command tx timeout [ 52.365897][ T5746] Bluetooth: hci1: command tx timeout [ 53.124113][ T5558] usb 5-1: USB disconnect, device number 2 [ 54.436365][ T5746] Bluetooth: hci2: command tx timeout [ 54.436382][ T5757] Bluetooth: hci1: command tx timeout [ 54.436657][ T64] Bluetooth: hci3: command tx timeout [ 54.446155][ T5757] Bluetooth: hci0: command tx timeout