Warning: Permanently added '[localhost]:6370' (ED25519) to the list of known hosts. [ 45.323272][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 45.323342][ T43] audit: type=1400 audit(1788443470.308:138): avc: denied { execute } for pid=5729 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.325411][ T43] audit: type=1400 audit(1788443470.308:139): avc: denied { execute_no_trans } for pid=5729 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/09/03 13:51:11 parsed 1 programs 2026/09/03 13:51:11 serving rpc on tcp://43247 [ 46.708472][ T43] audit: type=1400 audit(1788443471.698:140): avc: denied { node_bind } for pid=5729 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 46.714351][ T43] audit: type=1400 audit(1788443471.698:141): avc: denied { node_bind } for pid=5729 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 49.423952][ T43] audit: type=1400 audit(1788443474.408:142): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 49.434482][ T43] audit: type=1400 audit(1788443474.418:143): avc: denied { mount } for pid=5740 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.437606][ T5740] cgroup: Unknown subsys name 'net' [ 49.439200][ T43] audit: type=1400 audit(1788443474.428:144): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.560714][ T5740] cgroup: Unknown subsys name 'cpuset' [ 49.567531][ T5740] cgroup: Unknown subsys name 'rlimit' [ 49.733468][ T43] audit: type=1400 audit(1788443474.718:145): avc: denied { setattr } for pid=5740 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.733829][ T43] audit: type=1400 audit(1788443474.718:146): avc: denied { create } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.734070][ T43] audit: type=1400 audit(1788443474.718:147): avc: denied { write } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.793096][ T5743] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 50.709575][ T5740] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.693918][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 52.694009][ T43] audit: type=1400 audit(1788443477.678:159): avc: denied { execmem } for pid=5745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.759085][ T43] audit: type=1400 audit(1788443477.748:160): avc: denied { read } for pid=5746 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.759495][ T43] audit: type=1400 audit(1788443477.748:161): avc: denied { open } for pid=5746 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.761185][ T43] audit: type=1400 audit(1788443477.748:162): avc: denied { mounton } for pid=5746 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.823407][ T43] audit: type=1400 audit(1788443477.808:163): avc: denied { mount } for pid=5746 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.824949][ T43] audit: type=1400 audit(1788443477.808:164): avc: denied { mounton } for pid=5746 comm="syz-executor" path="/syzkaller.bDkgtW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 52.826331][ T43] audit: type=1400 audit(1788443477.818:165): avc: denied { mount } for pid=5746 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 52.828513][ T43] audit: type=1400 audit(1788443477.818:166): avc: denied { mounton } for pid=5746 comm="syz-executor" path="/syzkaller.bDkgtW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 52.829193][ T43] audit: type=1400 audit(1788443477.818:167): avc: denied { mounton } for pid=5746 comm="syz-executor" path="/syzkaller.bDkgtW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 52.831904][ T43] audit: type=1400 audit(1788443477.818:168): avc: denied { unmount } for pid=5746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.876781][ T5746] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.554353][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.554954][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.555016][ T5759] bridge_slave_0: entered allmulticast mode [ 53.555950][ T5759] bridge_slave_0: entered promiscuous mode [ 53.561204][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.561280][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.561409][ T5759] bridge_slave_1: entered allmulticast mode [ 53.562797][ T5759] bridge_slave_1: entered promiscuous mode [ 53.585747][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.587862][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.604966][ T5759] team0: Port device team_slave_0 added [ 53.606656][ T5759] team0: Port device team_slave_1 added [ 53.620085][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.620151][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.620227][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.623187][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.623201][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.623218][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.647365][ T5759] hsr_slave_0: entered promiscuous mode [ 53.647957][ T5759] hsr_slave_1: entered promiscuous mode [ 53.759253][ T5759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.766129][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.767132][ T5759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.771506][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.772023][ T5759] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.774886][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.775999][ T5759] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.779717][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.803403][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.803523][ T5759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.803863][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.803916][ T5759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.839680][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.848985][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.852222][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.865363][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.870055][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.870196][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.877386][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.877519][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.167961][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.203659][ T5759] veth0_vlan: entered promiscuous mode [ 54.210211][ T5759] veth1_vlan: entered promiscuous mode [ 54.227375][ T5759] veth0_macvtap: entered promiscuous mode [ 54.231408][ T5759] veth1_macvtap: entered promiscuous mode [ 54.241587][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.249294][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.288235][ T5754] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.288325][ T5754] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.295894][ T5754] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.295939][ T5754] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.364374][ T5754] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.431709][ T5754] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.498080][ T5754] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.576731][ T5754] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.655829][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.655912][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.685847][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.685931][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.003688][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.006717][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.007350][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.009673][ T5091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.010552][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/09/03 13:51:21 executed programs: 0 [ 56.744999][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.746269][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.746730][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.749832][ T5091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.750489][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.187114][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.187195][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.187389][ T5867] bridge_slave_0: entered allmulticast mode [ 57.188188][ T5867] bridge_slave_0: entered promiscuous mode [ 57.189583][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.189651][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.189744][ T5867] bridge_slave_1: entered allmulticast mode [ 57.190450][ T5867] bridge_slave_1: entered promiscuous mode [ 57.204897][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.206713][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.223504][ T5867] team0: Port device team_slave_0 added [ 57.224850][ T5867] team0: Port device team_slave_1 added [ 57.237341][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.237394][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.237441][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.239169][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.239178][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.239189][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.260702][ T5867] hsr_slave_0: entered promiscuous mode [ 57.261400][ T5867] hsr_slave_1: entered promiscuous mode [ 57.261861][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 57.261946][ T5867] Cannot create hsr debugfs directory [ 57.700470][ T5754] bridge_slave_1: left allmulticast mode [ 57.700584][ T5754] bridge_slave_1: left promiscuous mode [ 57.702859][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.709273][ T5754] bridge_slave_0: left allmulticast mode [ 57.709332][ T5754] bridge_slave_0: left promiscuous mode [ 57.709526][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.861395][ T5754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.867104][ T5754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.872409][ T5754] bond0 (unregistering): Released all slaves [ 57.939542][ T5754] hsr_slave_0: left promiscuous mode [ 57.941502][ T5754] hsr_slave_1: left promiscuous mode [ 57.942468][ T5754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.942506][ T5754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.945312][ T5754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.945679][ T5754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.954320][ T5754] veth1_macvtap: left promiscuous mode [ 57.954356][ T5754] veth0_macvtap: left promiscuous mode [ 57.954404][ T5754] veth1_vlan: left promiscuous mode [ 57.954446][ T5754] veth0_vlan: left promiscuous mode [ 57.965144][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 57.965156][ T43] audit: type=1400 audit(1788443482.948:189): avc: denied { write } for pid=5886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.965180][ T43] audit: type=1400 audit(1788443482.948:190): avc: denied { create } for pid=5886 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.965206][ T43] audit: type=1400 audit(1788443482.948:191): avc: denied { write } for pid=5886 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2039 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.965231][ T43] audit: type=1400 audit(1788443482.948:192): avc: denied { append } for pid=5886 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2039 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.008025][ T43] audit: type=1400 audit(1788443482.998:193): avc: denied { write } for pid=5889 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.008811][ T43] audit: type=1400 audit(1788443482.998:194): avc: denied { unlink } for pid=5889 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2039 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.103150][ T5754] team0 (unregistering): Port device team_slave_1 removed [ 58.109907][ T5754] team0 (unregistering): Port device team_slave_0 removed [ 58.182720][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 58.271934][ T43] audit: type=1400 audit(1788443483.258:195): avc: denied { write } for pid=5892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.332489][ T43] audit: type=1400 audit(1788443483.318:196): avc: denied { write } for pid=5895 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.380140][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.385240][ T5867] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.385848][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.398830][ T5867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.403262][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.407948][ T5867] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.408600][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.412332][ T5867] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.469791][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.488174][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.492706][ T43] audit: type=1400 audit(1788443483.488:197): avc: denied { write } for pid=5904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.497904][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.497997][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.506967][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.507045][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.555451][ T43] audit: type=1400 audit(1788443483.538:198): avc: denied { write } for pid=5907 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.805965][ T66] Bluetooth: hci0: command tx timeout [ 59.164295][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.211117][ T5867] veth0_vlan: entered promiscuous mode [ 59.216704][ T5867] veth1_vlan: entered promiscuous mode [ 59.232259][ T5867] veth0_macvtap: entered promiscuous mode [ 59.235209][ T5867] veth1_macvtap: entered promiscuous mode [ 59.249771][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.255315][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.345107][ T403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.345177][ T403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.365305][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.367972][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.375844][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.375890][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.375931][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.375963][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.655667][ T2741] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.815552][ T2741] usb 5-1: Using ep0 maxpacket: 8 [ 59.818446][ T2741] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 59.824467][ T2741] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 59.828141][ T2741] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 59.828190][ T2741] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 59.828226][ T2741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.834251][ T5924] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 59.834443][ T5924] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 59.834518][ T5924] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 59.836196][ T2741] mdc800 5-1:1.0: Found Mustek MDC800 on USB. [ 60.036268][ T5924] [ 60.038040][ T5924] ====================================================== [ 60.041247][ T5924] WARNING: possible circular locking dependency detected [ 60.044174][ T5924] syzkaller #0 Not tainted [ 60.046041][ T5924] ------------------------------------------------------ [ 60.048919][ T5924] syz.0.17/5924 is trying to acquire lock: [ 60.051344][ T5924] ffff888026c82218 (&mdc800->io_lock){+.+.}-{4:4}, at: mdc800_device_open+0x22/0x450 [ 60.055497][ T5924] [ 60.055497][ T5924] but task is already holding lock: [ 60.058783][ T5924] ffffffff9028cda8 (minor_rwsem#2){++++}-{4:4}, at: usb_open+0x23/0x220 [ 60.062479][ T5924] [ 60.062479][ T5924] which lock already depends on the new lock. [ 60.062479][ T5924] [ 60.066762][ T5924] [ 60.066762][ T5924] the existing dependency chain (in reverse order) is: [ 60.070572][ T5924] [ 60.070572][ T5924] -> #1 (minor_rwsem#2){++++}-{4:4}: [ 60.073997][ T5924] lock_acquire+0x1d1/0x380 [ 60.076496][ T5924] down_write+0x8b/0x1f0 [ 60.078644][ T5924] usb_register_dev+0x11d/0x570 [ 60.080925][ T5924] mdc800_usb_probe+0x382/0x6d0 [ 60.083195][ T5924] usb_probe_interface+0x386/0x9b0 [ 60.085556][ T5924] really_probe+0x241/0xa60 [ 60.087649][ T5924] __driver_probe_device+0x210/0x460 [ 60.090135][ T5924] driver_probe_device+0x4a/0x140 [ 60.092598][ T5924] __device_attach_driver+0x1df/0x320 [ 60.095290][ T5924] bus_for_each_drv+0x159/0x1e0 [ 60.097716][ T5924] __device_attach+0x1e4/0x4d0 [ 60.100010][ T5924] device_initial_probe+0xaf/0xd0 [ 60.102303][ T5924] bus_probe_device+0x64/0x160 [ 60.104509][ T5924] device_add+0x121d/0x1970 [ 60.106583][ T5924] usb_set_configuration+0xd97/0x1c60 [ 60.109205][ T5924] usb_generic_driver_probe+0xa1/0xe0 [ 60.111854][ T5924] usb_probe_device+0xef/0x400 [ 60.114383][ T5924] really_probe+0x241/0xa60 [ 60.116550][ T5924] __driver_probe_device+0x210/0x460 [ 60.118985][ T5924] driver_probe_device+0x4a/0x140 [ 60.121318][ T5924] __device_attach_driver+0x1df/0x320 [ 60.123909][ T5924] bus_for_each_drv+0x159/0x1e0 [ 60.126386][ T5924] __device_attach+0x1e4/0x4d0 [ 60.128751][ T5924] device_initial_probe+0xaf/0xd0 [ 60.131143][ T5924] bus_probe_device+0x64/0x160 [ 60.133461][ T5924] device_add+0x121d/0x1970 [ 60.135609][ T5924] usb_new_device.part.0+0xcc2/0x1686 [ 60.138147][ T5924] hub_event.cold+0x1e3/0xe90 [ 60.140378][ T5924] process_one_work+0xac7/0x1b10 [ 60.142849][ T5924] worker_thread+0x5ef/0xe50 [ 60.145300][ T5924] kthread+0x373/0x450 [ 60.147530][ T5924] ret_from_fork+0x730/0xd60 [ 60.149790][ T5924] ret_from_fork_asm+0x1a/0x30 [ 60.152035][ T5924] [ 60.152035][ T5924] -> #0 (&mdc800->io_lock){+.+.}-{4:4}: [ 60.155308][ T5924] check_prev_add+0xeb/0xe60 [ 60.157356][ T5924] __lock_acquire+0x1492/0x1ec0 [ 60.159460][ T5924] lock_acquire+0x1d1/0x380 [ 60.161506][ T5924] __mutex_lock+0x1a4/0x1bd0 [ 60.163482][ T5924] mdc800_device_open+0x22/0x450 [ 60.165662][ T5924] usb_open+0x189/0x220 [ 60.167596][ T5924] chrdev_open+0x234/0x6a0 [ 60.169467][ T5924] do_dentry_open+0x6ab/0x14d0 [ 60.171188][ T5924] vfs_open+0x82/0x3f0 [ 60.172677][ T5924] path_openat+0x19fa/0x2440 [ 60.174308][ T5924] do_file_open+0x20e/0x430 [ 60.175825][ T5924] do_sys_openat2+0x10f/0x1e0 [ 60.177448][ T5924] __x64_sys_openat+0x12d/0x210 [ 60.179108][ T5924] do_syscall_64+0x123/0x790 [ 60.180710][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.182771][ T5924] [ 60.182771][ T5924] other info that might help us debug this: [ 60.182771][ T5924] [ 60.186205][ T5924] Possible unsafe locking scenario: [ 60.186205][ T5924] [ 60.188853][ T5924] CPU0 CPU1 [ 60.190667][ T5924] ---- ---- [ 60.192367][ T5924] rlock(minor_rwsem#2); [ 60.193695][ T5924] lock(&mdc800->io_lock); [ 60.195776][ T5924] lock(minor_rwsem#2); [ 60.198020][ T5924] lock(&mdc800->io_lock); [ 60.199598][ T5924] [ 60.199598][ T5924] *** DEADLOCK *** [ 60.199598][ T5924] [ 60.202912][ T5924] locks held by syz.0.17/5924: 1, last CPU#0: [ 60.205641][ T5924] #0: ffffffff9028cda8 (minor_rwsem#2){++++}-{4:4}, at: usb_open+0x23/0x220 [ 60.209215][ T5924] [ 60.209215][ T5924] stack backtrace: [ 60.211533][ T5924] CPU: 0 UID: 0 PID: 5924 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 60.215487][ T5924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.220146][ T5924] Call Trace: [ 60.221769][ T5924] [ 60.223056][ T5924] dump_stack_lvl+0x100/0x190 [ 60.224975][ T5924] print_circular_bug.cold+0x178/0x1be [ 60.227204][ T5924] check_noncircular+0x146/0x160 [ 60.229318][ T5924] check_prev_add+0xeb/0xe60 [ 60.231279][ T5924] __lock_acquire+0x1492/0x1ec0 [ 60.233363][ T5924] ? mark_lock+0x44b/0x1020 [ 60.235184][ T5924] lock_acquire+0x1d1/0x380 [ 60.237165][ T5924] ? mdc800_device_open+0x22/0x450 [ 60.239882][ T5924] ? __pfx___might_resched+0x10/0x10 [ 60.242406][ T5924] __mutex_lock+0x1a4/0x1bd0 [ 60.244466][ T5924] ? mdc800_device_open+0x22/0x450 [ 60.246457][ T5924] ? mdc800_device_open+0x22/0x450 [ 60.248638][ T5924] ? __pfx___mutex_lock+0x10/0x10 [ 60.250785][ T5924] ? __pfx___might_resched+0x10/0x10 [ 60.252509][ T5924] ? down_read+0x13b/0x4c0 [ 60.254113][ T5924] ? __pfx_down_read+0x10/0x10 [ 60.256148][ T5924] ? __pfx_mdc800_device_open+0x10/0x10 [ 60.258443][ T5924] ? mdc800_device_open+0x22/0x450 [ 60.260802][ T5924] mdc800_device_open+0x22/0x450 [ 60.263101][ T5924] ? __pfx_mdc800_device_open+0x10/0x10 [ 60.265619][ T5924] usb_open+0x189/0x220 [ 60.267351][ T5924] ? __pfx_usb_open+0x10/0x10 [ 60.269400][ T5924] chrdev_open+0x234/0x6a0 [ 60.271180][ T5924] ? __pfx_chrdev_open+0x10/0x10 [ 60.273304][ T5924] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 60.276375][ T5924] do_dentry_open+0x6ab/0x14d0 [ 60.278557][ T5924] ? __pfx_chrdev_open+0x10/0x10 [ 60.280712][ T5924] vfs_open+0x82/0x3f0 [ 60.282403][ T5924] path_openat+0x19fa/0x2440 [ 60.284390][ T5924] ? __pfx_path_openat+0x10/0x10 [ 60.286454][ T5924] do_file_open+0x20e/0x430 [ 60.288645][ T5924] ? __pfx_do_file_open+0x10/0x10 [ 60.291077][ T5924] ? _raw_spin_unlock+0x28/0x50 [ 60.293418][ T5924] ? alloc_fd+0x471/0x7a0 [ 60.295300][ T5924] do_sys_openat2+0x10f/0x1e0 [ 60.297326][ T5924] ? __pfx_do_sys_openat2+0x10/0x10 [ 60.299477][ T5924] __x64_sys_openat+0x12d/0x210 [ 60.301573][ T5924] ? __pfx___x64_sys_openat+0x10/0x10 [ 60.303903][ T5924] do_syscall_64+0x123/0x790 [ 60.306191][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.308928][ T5924] RIP: 0033:0x7f288195e98e [ 60.310902][ T5924] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.319103][ T5924] RSP: 002b:00007ffebffdd938 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.322856][ T5924] RAX: ffffffffffffffda RBX: 0000555567898500 RCX: 00007f288195e98e [ 60.326099][ T5924] RDX: 0000000000000002 RSI: 00007ffebffdda10 RDI: ffffffffffffff9c [ 60.329570][ T5924] RBP: 00007f2881a35024 R08: 0000000000000000 R09: 0000000000000000 [ 60.333114][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.336647][ T5924] R13: 00007f2881c25fac R14: 00007f2881c25fa0 R15: 00007f2881c25fa0 [ 60.340086][ T5924] [ 60.342783][ T30] usb 5-1: USB disconnect, device number 2 [ 60.344771][ T30] mdc800 5-1:1.0: Mustek MDC800 disconnected from USB. [ 62.462323][ T5754] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.548345][ T5754] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.599660][ T5754] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.670489][ T5754] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.745047][ T5754] bridge_slave_1: left allmulticast mode [ 62.745091][ T5754] bridge_slave_1: left promiscuous mode [ 62.745192][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.750195][ T5754] bridge_slave_0: left allmulticast mode [ 62.750217][ T5754] bridge_slave_0: left promiscuous mode [ 62.750342][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.802171][ T5754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.809561][ T5754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.814122][ T5754] bond0 (unregistering): Released all slaves [ 62.929743][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 62.975533][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 62.975745][ T43] audit: type=1400 audit(1788443487.958:206): avc: denied { write } for pid=5933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.013168][ T43] audit: type=1400 audit(1788443487.998:207): avc: denied { write } for pid=5936 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.035411][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 63.052411][ T5754] hsr_slave_0: left promiscuous mode [ 63.054473][ T5754] hsr_slave_1: left promiscuous mode [ 63.054957][ T5754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.054970][ T5754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.056863][ T5754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.056875][ T5754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.061494][ T5754] veth1_macvtap: left promiscuous mode [ 63.061530][ T5754] veth0_macvtap: left promiscuous mode [ 63.061590][ T5754] veth1_vlan: left promiscuous mode [ 63.061620][ T5754] veth0_vlan: left promiscuous mode [ 63.099040][ T43] audit: type=1400 audit(1788443488.088:208): avc: denied { write } for pid=5939 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.124628][ T5754] team0 (unregistering): Port device team_slave_1 removed [ 63.127664][ T5754] team0 (unregistering): Port device team_slave_0 removed [ 63.144130][ T43] audit: type=1400 audit(1788443488.128:209): avc: denied { write } for pid=5942 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.176446][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 63.258122][ T43] audit: type=1400 audit(1788443488.248:210): avc: denied { write } for pid=5946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.301174][ T43] audit: type=1400 audit(1788443488.288:211): avc: denied { write } for pid=5949 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.330452][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5