Warning: Permanently added '[localhost]:63035' (ED25519) to the list of known hosts. [ 43.163038][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 43.163049][ T42] audit: type=1400 audit(1785861697.033:138): avc: denied { execute } for pid=5733 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 43.172546][ T42] audit: type=1400 audit(1785861697.043:139): avc: denied { execute_no_trans } for pid=5733 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/08/04 16:41:38 parsed 1 programs 2026/08/04 16:41:38 serving rpc on tcp://43603 [ 44.200073][ T42] audit: type=1400 audit(1785861698.063:140): avc: denied { node_bind } for pid=5733 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 44.206746][ T42] audit: type=1400 audit(1785861698.073:141): avc: denied { node_bind } for pid=5733 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 46.830248][ T42] audit: type=1400 audit(1785861700.693:142): avc: denied { mounton } for pid=5742 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.838731][ T42] audit: type=1400 audit(1785861700.703:143): avc: denied { mount } for pid=5742 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.841438][ T5742] cgroup: Unknown subsys name 'net' [ 46.849001][ T42] audit: type=1400 audit(1785861700.723:144): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.985149][ T5742] cgroup: Unknown subsys name 'cpuset' [ 46.989054][ T5742] cgroup: Unknown subsys name 'rlimit' [ 47.186130][ T42] audit: type=1400 audit(1785861701.053:145): avc: denied { setattr } for pid=5742 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.196375][ T42] audit: type=1400 audit(1785861701.053:146): avc: denied { create } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.203030][ T42] audit: type=1400 audit(1785861701.053:147): avc: denied { write } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.235092][ T5745] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 47.984150][ T5742] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.651001][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 49.651014][ T42] audit: type=1400 audit(1785861703.513:159): avc: denied { execmem } for pid=5750 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.659191][ T42] audit: type=1400 audit(1785861703.523:160): avc: denied { read } for pid=5751 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.665833][ T42] audit: type=1400 audit(1785861703.523:161): avc: denied { open } for pid=5751 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.673121][ T42] audit: type=1400 audit(1785861703.523:162): avc: denied { mounton } for pid=5751 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 49.708387][ T42] audit: type=1400 audit(1785861703.573:163): avc: denied { mount } for pid=5751 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.715284][ T42] audit: type=1400 audit(1785861703.573:164): avc: denied { mounton } for pid=5751 comm="syz-executor" path="/syzkaller.4gqq2t/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.723484][ T42] audit: type=1400 audit(1785861703.573:165): avc: denied { mount } for pid=5751 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.730462][ T42] audit: type=1400 audit(1785861703.573:166): avc: denied { mounton } for pid=5751 comm="syz-executor" path="/syzkaller.4gqq2t/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.739167][ T42] audit: type=1400 audit(1785861703.583:167): avc: denied { mounton } for pid=5751 comm="syz-executor" path="/syzkaller.4gqq2t/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 49.747956][ T42] audit: type=1400 audit(1785861703.583:168): avc: denied { unmount } for pid=5751 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.758980][ T5751] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.963478][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.966180][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.994429][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.997663][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.509132][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.511800][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.514071][ T5769] bridge_slave_0: entered allmulticast mode [ 50.517142][ T5769] bridge_slave_0: entered promiscuous mode [ 50.521074][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.523735][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.525922][ T5769] bridge_slave_1: entered allmulticast mode [ 50.528577][ T5769] bridge_slave_1: entered promiscuous mode [ 50.553098][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.572361][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.588018][ T5769] team0: Port device team_slave_0 added [ 50.591465][ T5769] team0: Port device team_slave_1 added [ 50.606035][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.608205][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.616162][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.621072][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.623369][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.631267][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.660579][ T5769] hsr_slave_0: entered promiscuous mode [ 50.663244][ T5769] hsr_slave_1: entered promiscuous mode [ 50.779019][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.786569][ T5769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.790092][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.795181][ T5769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.798658][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.804650][ T5769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.808291][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.812897][ T5769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.831368][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.833977][ T5769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.836665][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.838911][ T5769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.909140][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.919933][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.924084][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.931908][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.945431][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.948489][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.956462][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.959255][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.190935][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.216185][ T5769] veth0_vlan: entered promiscuous mode [ 51.222066][ T5769] veth1_vlan: entered promiscuous mode [ 51.239677][ T5769] veth0_macvtap: entered promiscuous mode [ 51.243542][ T5769] veth1_macvtap: entered promiscuous mode [ 51.254036][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.260214][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.302674][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.306099][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.332392][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.335242][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.365575][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.438751][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.523516][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.596040][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.235011][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.239908][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.245148][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.249473][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.253746][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/08/04 16:41:46 executed programs: 0 [ 52.895859][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.899690][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.903267][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.906200][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.908963][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.251489][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.254576][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.256749][ T5863] bridge_slave_0: entered allmulticast mode [ 53.259657][ T5863] bridge_slave_0: entered promiscuous mode [ 53.263382][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.265912][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.268259][ T5863] bridge_slave_1: entered allmulticast mode [ 53.270862][ T5863] bridge_slave_1: entered promiscuous mode [ 53.285992][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.290596][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.307569][ T5863] team0: Port device team_slave_0 added [ 53.310780][ T5863] team0: Port device team_slave_1 added [ 53.325144][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.327562][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.335796][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.340411][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.342931][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.350702][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.376152][ T5863] hsr_slave_0: entered promiscuous mode [ 53.378325][ T5863] hsr_slave_1: entered promiscuous mode [ 53.380752][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 53.382926][ T5863] Cannot create hsr debugfs directory [ 54.907445][ T12] bridge_slave_1: left allmulticast mode [ 54.909563][ T12] bridge_slave_1: left promiscuous mode [ 54.912110][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.917948][ T12] bridge_slave_0: left allmulticast mode [ 54.920004][ T12] bridge_slave_0: left promiscuous mode [ 54.921855][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.982856][ T5097] Bluetooth: hci0: command tx timeout [ 54.999622][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.004047][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.007898][ T12] bond0 (unregistering): Released all slaves [ 55.072870][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 55.072882][ T42] audit: type=1400 audit(1785861708.933:189): avc: denied { write } for pid=5885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.081699][ T42] audit: type=1400 audit(1785861708.943:190): avc: denied { create } for pid=5885 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.088759][ T42] audit: type=1400 audit(1785861708.943:191): avc: denied { write } for pid=5885 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2033 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.097687][ T42] audit: type=1400 audit(1785861708.943:192): avc: denied { append } for pid=5885 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2033 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.109038][ T42] audit: type=1400 audit(1785861708.973:193): avc: denied { write } for pid=5888 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.117547][ T42] audit: type=1400 audit(1785861708.973:194): avc: denied { unlink } for pid=5888 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2033 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.139709][ T12] hsr_slave_0: left promiscuous mode [ 55.141838][ T12] hsr_slave_1: left promiscuous mode [ 55.144047][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.146400][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.149192][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.151506][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.157647][ T12] veth1_macvtap: left promiscuous mode [ 55.159791][ T12] veth0_macvtap: left promiscuous mode [ 55.161563][ T12] veth1_vlan: left promiscuous mode [ 55.163748][ T12] veth0_vlan: left promiscuous mode [ 55.267104][ T12] team0 (unregistering): Port device team_slave_1 removed [ 55.274659][ T12] team0 (unregistering): Port device team_slave_0 removed [ 55.333312][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 55.400050][ T42] audit: type=1400 audit(1785861709.263:195): avc: denied { write } for pid=5891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.438886][ T42] audit: type=1400 audit(1785861709.303:196): avc: denied { write } for pid=5894 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.527340][ T42] audit: type=1400 audit(1785861709.393:197): avc: denied { write } for pid=5897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.575885][ T42] audit: type=1400 audit(1785861709.443:198): avc: denied { write } for pid=5900 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.785560][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.791251][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.795741][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.800619][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.803323][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.807223][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.812586][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.817601][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.855949][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.866940][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.872504][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.874976][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.880431][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.882754][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.308698][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.342215][ T5863] veth0_vlan: entered promiscuous mode [ 56.349358][ T5863] veth1_vlan: entered promiscuous mode [ 56.366845][ T5863] veth0_macvtap: entered promiscuous mode [ 56.376739][ T5863] veth1_macvtap: entered promiscuous mode [ 56.419017][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.425412][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.460848][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.463826][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.481643][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.485250][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.503516][ T5760] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.506702][ T5760] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.509669][ T5760] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.513245][ T5760] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.535022][ T5927] [ 56.535846][ T5927] ====================================================== [ 56.538027][ T5927] WARNING: possible circular locking dependency detected [ 56.540195][ T5927] syzkaller #0 Not tainted [ 56.541530][ T5927] ------------------------------------------------------ [ 56.543580][ T5927] syz.0.18/5927 is trying to acquire lock: [ 56.545295][ T5927] ffff888020233a40 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 56.548773][ T5927] [ 56.548773][ T5927] but task is already holding lock: [ 56.551115][ T5927] ffff888034c0dd18 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 56.553906][ T5927] [ 56.553906][ T5927] which lock already depends on the new lock. [ 56.553906][ T5927] [ 56.557086][ T5927] [ 56.557086][ T5927] the existing dependency chain (in reverse order) is: [ 56.559870][ T5927] [ 56.559870][ T5927] -> #3 (&opts->dep_lock){+.+.}-{4:4}: [ 56.562249][ T5927] lock_acquire+0x1b9/0x370 [ 56.563831][ T5927] __mutex_lock+0x1a4/0x1bd0 [ 56.565446][ T5927] usbg_make_tpg+0x1a4/0x620 [ 56.567067][ T5927] target_fabric_make_tpg+0xab/0x8c0 [ 56.568889][ T5927] configfs_mkdir+0x51e/0xb70 [ 56.570551][ T5927] vfs_mkdir+0x361/0x850 [ 56.572064][ T5927] filename_mkdirat+0x48b/0x5e0 [ 56.573752][ T5927] __x64_sys_mkdirat+0x89/0xc0 [ 56.575418][ T5927] do_syscall_64+0x115/0x870 [ 56.577033][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.579035][ T5927] [ 56.579035][ T5927] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 56.581480][ T5927] lock_acquire+0x1b9/0x370 [ 56.583068][ T5927] __mutex_lock+0x1a4/0x1bd0 [ 56.584670][ T5927] tcm_alloc+0x20/0x440 [ 56.586141][ T5927] usb_get_function+0x5e/0xd0 [ 56.587728][ T5927] config_usb_cfg_link+0x1ed/0x3a0 [ 56.589418][ T5927] configfs_symlink+0x540/0x11f0 [ 56.591090][ T5927] vfs_symlink+0x178/0x4d0 [ 56.592578][ T5927] filename_symlinkat+0x2a6/0x560 [ 56.594176][ T5927] __x64_sys_symlinkat+0x9c/0xe0 [ 56.595790][ T5927] do_syscall_64+0x115/0x870 [ 56.597292][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.599258][ T5927] [ 56.599258][ T5927] -> #1 (&gi->lock){+.+.}-{4:4}: [ 56.601412][ T5927] lock_acquire+0x1b9/0x370 [ 56.602974][ T5927] __mutex_lock+0x1a4/0x1bd0 [ 56.604549][ T5927] config_usb_cfg_link+0x57/0x3a0 [ 56.606232][ T5927] configfs_symlink+0x540/0x11f0 [ 56.608046][ T5927] vfs_symlink+0x178/0x4d0 [ 56.609576][ T5927] filename_symlinkat+0x2a6/0x560 [ 56.611311][ T5927] __x64_sys_symlinkat+0x9c/0xe0 [ 56.612989][ T5927] do_syscall_64+0x115/0x870 [ 56.614599][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.616582][ T5927] [ 56.616582][ T5927] -> #0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 56.619189][ T5927] check_prev_add+0xeb/0xe60 [ 56.620776][ T5927] __lock_acquire+0x136c/0x1a40 [ 56.622457][ T5927] lock_acquire+0x1b9/0x370 [ 56.624017][ T5927] down_write+0x8b/0x1f0 [ 56.625498][ T5927] configfs_depend_item_unlocked+0xf3/0x6a0 [ 56.627449][ T5927] usbg_make_tpg+0x261/0x620 [ 56.628985][ T5927] target_fabric_make_tpg+0xab/0x8c0 [ 56.630787][ T5927] configfs_mkdir+0x51e/0xb70 [ 56.632399][ T5927] vfs_mkdir+0x361/0x850 [ 56.633890][ T5927] filename_mkdirat+0x48b/0x5e0 [ 56.635543][ T5927] __x64_sys_mkdirat+0x89/0xc0 [ 56.637171][ T5927] do_syscall_64+0x115/0x870 [ 56.638759][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.640742][ T5927] [ 56.640742][ T5927] other info that might help us debug this: [ 56.640742][ T5927] [ 56.643813][ T5927] Chain exists of: [ 56.643813][ T5927] &sb->s_type->i_mutex_key#24 --> tpg_instances_lock --> &opts->dep_lock [ 56.643813][ T5927] [ 56.648105][ T5927] Possible unsafe locking scenario: [ 56.648105][ T5927] [ 56.650383][ T5927] CPU0 CPU1 [ 56.652019][ T5927] ---- ---- [ 56.653647][ T5927] lock(&opts->dep_lock); [ 56.655045][ T5927] lock(tpg_instances_lock); [ 56.657231][ T5927] lock(&opts->dep_lock); [ 56.659344][ T5927] lock(&sb->s_type->i_mutex_key#24); [ 56.661032][ T5927] [ 56.661032][ T5927] *** DEADLOCK *** [ 56.661032][ T5927] [ 56.663445][ T5927] 5 locks held by syz.0.18/5927: [ 56.664978][ T5927] #0: ffff88802451c450 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 56.667883][ T5927] #1: ffff888041d19dc0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 56.671190][ T5927] #2: ffffffff8fd87f28 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 56.674118][ T5927] #3: ffffffff90253240 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 [ 56.677075][ T5927] #4: ffff888034c0dd18 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 56.679997][ T5927] [ 56.679997][ T5927] stack backtrace: [ 56.681833][ T5927] CPU: 3 UID: 0 PID: 5927 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 56.681846][ T5927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.681852][ T5927] Call Trace: [ 56.681870][ T5927] [ 56.681874][ T5927] dump_stack_lvl+0x100/0x190 [ 56.681889][ T5927] print_circular_bug.cold+0x178/0x1c7 [ 56.681907][ T5927] check_noncircular+0x146/0x160 [ 56.681921][ T5927] check_prev_add+0xeb/0xe60 [ 56.681934][ T5927] __lock_acquire+0x136c/0x1a40 [ 56.681947][ T5927] ? rcu_is_watching+0x12/0xc0 [ 56.681964][ T5927] lock_acquire+0x1b9/0x370 [ 56.681976][ T5927] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 56.681990][ T5927] ? __pfx___might_resched+0x10/0x10 [ 56.682004][ T5927] down_write+0x8b/0x1f0 [ 56.682018][ T5927] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 56.682032][ T5927] ? __pfx_down_write+0x10/0x10 [ 56.682046][ T5927] configfs_depend_item_unlocked+0xf3/0x6a0 [ 56.682059][ T5927] ? __lock_acquire+0x49f/0x1a40 [ 56.682072][ T5927] usbg_make_tpg+0x261/0x620 [ 56.682083][ T5927] ? __pfx_usbg_make_tpg+0x10/0x10 [ 56.682095][ T5927] ? find_held_lock+0x2b/0x80 [ 56.682104][ T5927] ? __pfx_usbg_make_tpg+0x10/0x10 [ 56.682116][ T5927] target_fabric_make_tpg+0xab/0x8c0 [ 56.682131][ T5927] configfs_mkdir+0x51e/0xb70 [ 56.682145][ T5927] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 56.682160][ T5927] ? __pfx_configfs_mkdir+0x10/0x10 [ 56.682174][ T5927] ? inode_permission+0x374/0x620 [ 56.682189][ T5927] vfs_mkdir+0x361/0x850 [ 56.682203][ T5927] filename_mkdirat+0x48b/0x5e0 [ 56.682215][ T5927] ? __pfx_filename_mkdirat+0x10/0x10 [ 56.682235][ T5927] ? strncpy_from_user+0x19d/0x2d0 [ 56.682249][ T5927] ? do_getname+0x191/0x390 [ 56.682262][ T5927] __x64_sys_mkdirat+0x89/0xc0 [ 56.682274][ T5927] do_syscall_64+0x115/0x870 [ 56.682286][ T5927] ? clear_bhb_loop+0x40/0x90 [ 56.682298][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.682309][ T5927] RIP: 0033:0x7f8fc399e019 [ 56.682319][ T5927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.682329][ T5927] RSP: 002b:00007ffc7e9ca2b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 56.682346][ T5927] RAX: ffffffffffffffda RBX: 00007f8fc3c25fa0 RCX: 00007f8fc399e019 [ 56.682370][ T5927] RDX: 00000000000001ff RSI: 0000200000000740 RDI: ffffffffffffff9c [ 56.682376][ T5927] RBP: 00007f8fc3a3500c R08: 0000000000000000 R09: 0000000000000000 [ 56.682382][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.682388][ T5927] R13: 00007f8fc3c25fac R14: 00007f8fc3c25fa0 R15: 00007f8fc3c25fa0 [ 56.682397][ T5927] [ 57.052400][ T5097] Bluetooth: hci0: command tx timeout 2026/08/04 16:41:51 executed programs: 67 [ 59.142329][ T5097] Bluetooth: hci0: command tx timeout [ 61.212357][ T5097] Bluetooth: hci0: command tx timeout 2026/08/04 16:41:56 executed programs: 367