Warning: Permanently added '[localhost]:49030' (ED25519) to the list of known hosts. [ 43.751731][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 43.751743][ T42] audit: type=1400 audit(1785062438.759:138): avc: denied { execute } for pid=5729 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 43.761831][ T42] audit: type=1400 audit(1785062438.759:139): avc: denied { execute_no_trans } for pid=5729 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/07/26 10:40:39 parsed 1 programs 2026/07/26 10:40:39 serving rpc on tcp://42057 [ 44.780402][ T42] audit: type=1400 audit(1785062439.789:140): avc: denied { node_bind } for pid=5729 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 44.787341][ T42] audit: type=1400 audit(1785062439.789:141): avc: denied { node_bind } for pid=5729 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 46.971799][ T42] audit: type=1400 audit(1785062441.979:142): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.980368][ T42] audit: type=1400 audit(1785062441.989:143): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.982677][ T5737] cgroup: Unknown subsys name 'net' [ 46.989903][ T42] audit: type=1400 audit(1785062441.999:144): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.111318][ T5737] cgroup: Unknown subsys name 'cpuset' [ 47.115547][ T5737] cgroup: Unknown subsys name 'rlimit' [ 47.275148][ T42] audit: type=1400 audit(1785062442.279:145): avc: denied { setattr } for pid=5737 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.284812][ T42] audit: type=1400 audit(1785062442.279:146): avc: denied { create } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.293715][ T42] audit: type=1400 audit(1785062442.279:147): avc: denied { write } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.342607][ T5742] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.152946][ T5737] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.260356][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 50.260371][ T42] audit: type=1400 audit(1785062445.269:159): avc: denied { execmem } for pid=5747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.272490][ T42] audit: type=1400 audit(1785062445.279:160): avc: denied { read } for pid=5748 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.281051][ T42] audit: type=1400 audit(1785062445.279:161): avc: denied { open } for pid=5748 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.290576][ T42] audit: type=1400 audit(1785062445.279:162): avc: denied { mounton } for pid=5748 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 50.346383][ T42] audit: type=1400 audit(1785062445.349:163): avc: denied { mounton } for pid=5748 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 50.356250][ T42] audit: type=1400 audit(1785062445.349:164): avc: denied { mount } for pid=5748 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.365366][ T42] audit: type=1400 audit(1785062445.359:165): avc: denied { mounton } for pid=5748 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 50.373627][ T42] audit: type=1400 audit(1785062445.359:166): avc: denied { mount } for pid=5748 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 50.541322][ T42] audit: type=1400 audit(1785062445.549:167): avc: denied { mount } for pid=5754 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.550602][ T42] audit: type=1400 audit(1785062445.559:168): avc: denied { mounton } for pid=5754 comm="syz-executor" path="/syzkaller.pmGU4k/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.587180][ T5754] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.754086][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.756917][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.760150][ T5781] bridge_slave_0: entered allmulticast mode [ 51.763057][ T5781] bridge_slave_0: entered promiscuous mode [ 51.769719][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.772541][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.775124][ T5781] bridge_slave_1: entered allmulticast mode [ 51.778405][ T5781] bridge_slave_1: entered promiscuous mode [ 51.801607][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.807057][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.827378][ T5781] team0: Port device team_slave_0 added [ 51.831953][ T5781] team0: Port device team_slave_1 added [ 51.846802][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.849085][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.856770][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.861471][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.863595][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.871433][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.893606][ T5781] hsr_slave_0: entered promiscuous mode [ 51.895862][ T5781] hsr_slave_1: entered promiscuous mode [ 51.987655][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.994500][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.998832][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.004801][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.008831][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.015986][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.019728][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.025635][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.055976][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.059310][ T5781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.062857][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.065866][ T5781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.129262][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.143367][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.147510][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.161944][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.170367][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.172656][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.181546][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.183907][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.419150][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.458544][ T5781] veth0_vlan: entered promiscuous mode [ 52.464508][ T5781] veth1_vlan: entered promiscuous mode [ 52.481757][ T5781] veth0_macvtap: entered promiscuous mode [ 52.485600][ T5781] veth1_macvtap: entered promiscuous mode [ 52.496470][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.504533][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.515582][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.519829][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.525901][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.529191][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.622551][ T5797] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.703338][ T5797] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.785288][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.787897][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.803580][ T5797] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.830607][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.834629][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.901000][ T5797] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.256317][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.260083][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.263193][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.266434][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.269156][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/07/26 10:40:48 executed programs: 0 [ 53.739137][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.743051][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.745991][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.749860][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.752600][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.045631][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.048263][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.050705][ T5863] bridge_slave_0: entered allmulticast mode [ 54.053445][ T5863] bridge_slave_0: entered promiscuous mode [ 54.057361][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.059899][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.062204][ T5863] bridge_slave_1: entered allmulticast mode [ 54.064929][ T5863] bridge_slave_1: entered promiscuous mode [ 54.080893][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.086661][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.104572][ T5863] team0: Port device team_slave_0 added [ 54.109633][ T5863] team0: Port device team_slave_1 added [ 54.130796][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.133827][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.142141][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.146671][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.148988][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.157586][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.192634][ T5863] hsr_slave_0: entered promiscuous mode [ 54.195953][ T5863] hsr_slave_1: entered promiscuous mode [ 54.198231][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 54.200213][ T5863] Cannot create hsr debugfs directory [ 55.077430][ T5797] bridge_slave_1: left allmulticast mode [ 55.080331][ T5797] bridge_slave_1: left promiscuous mode [ 55.084082][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.092516][ T5797] bridge_slave_0: left allmulticast mode [ 55.094883][ T5797] bridge_slave_0: left promiscuous mode [ 55.097511][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.201449][ T5797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.205828][ T5797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.211010][ T5797] bond0 (unregistering): Released all slaves [ 55.268192][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 55.268203][ T42] audit: type=1400 audit(1785062450.269:189): avc: denied { write } for pid=5884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.277813][ T42] audit: type=1400 audit(1785062450.279:190): avc: denied { create } for pid=5884 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.284773][ T42] audit: type=1400 audit(1785062450.279:191): avc: denied { write } for pid=5884 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.292645][ T42] audit: type=1400 audit(1785062450.279:192): avc: denied { append } for pid=5884 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.318418][ T42] audit: type=1400 audit(1785062450.329:193): avc: denied { write } for pid=5887 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.326550][ T42] audit: type=1400 audit(1785062450.329:194): avc: denied { unlink } for pid=5887 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.338835][ T5797] hsr_slave_0: left promiscuous mode [ 55.341777][ T5797] hsr_slave_1: left promiscuous mode [ 55.344512][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.347544][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.351347][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.353681][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.360761][ T5797] veth1_macvtap: left promiscuous mode [ 55.362598][ T5797] veth0_macvtap: left promiscuous mode [ 55.364341][ T5797] veth1_vlan: left promiscuous mode [ 55.365974][ T5797] veth0_vlan: left promiscuous mode [ 55.474705][ T5797] team0 (unregistering): Port device team_slave_1 removed [ 55.481790][ T5797] team0 (unregistering): Port device team_slave_0 removed [ 55.558608][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 55.622919][ T42] audit: type=1400 audit(1785062450.629:195): avc: denied { write } for pid=5891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.681527][ T42] audit: type=1400 audit(1785062450.689:196): avc: denied { write } for pid=5894 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.762883][ T65] Bluetooth: hci0: command tx timeout [ 55.774808][ T42] audit: type=1400 audit(1785062450.779:197): avc: denied { write } for pid=5897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.830367][ T42] audit: type=1400 audit(1785062450.839:198): avc: denied { write } for pid=5900 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.958689][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.963786][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.966579][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.971129][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.973842][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.979038][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.981843][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.985520][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.044424][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.054022][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.059391][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.062440][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.071396][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.073654][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.492264][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.530369][ T5863] veth0_vlan: entered promiscuous mode [ 56.538746][ T5863] veth1_vlan: entered promiscuous mode [ 56.558728][ T5863] veth0_macvtap: entered promiscuous mode [ 56.563749][ T5863] veth1_macvtap: entered promiscuous mode [ 56.598728][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.606605][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.615790][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.619089][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.622323][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.625824][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.657538][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.660793][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.675843][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.679803][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.740444][ T5926] [ 56.741217][ T5926] ====================================================== [ 56.743367][ T5926] WARNING: possible circular locking dependency detected [ 56.745513][ T5926] syzkaller #0 Not tainted [ 56.746926][ T5926] ------------------------------------------------------ [ 56.749070][ T5926] syz.0.18/5926 is trying to acquire lock: [ 56.750872][ T5926] ffff888020281440 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 56.754326][ T5926] [ 56.754326][ T5926] but task is already holding lock: [ 56.756557][ T5926] ffff888036b18918 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 56.759286][ T5926] [ 56.759286][ T5926] which lock already depends on the new lock. [ 56.759286][ T5926] [ 56.762380][ T5926] [ 56.762380][ T5926] the existing dependency chain (in reverse order) is: [ 56.765153][ T5926] [ 56.765153][ T5926] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 56.767494][ T5926] lock_acquire+0x1b9/0x370 [ 56.769049][ T5926] __mutex_lock+0x1a4/0x1bd0 [ 56.770647][ T5926] tcm_set_name+0x29/0xb0 [ 56.772164][ T5926] function_make+0x21c/0x3f0 [ 56.773741][ T5926] configfs_mkdir+0x51e/0xb70 [ 56.775349][ T5926] vfs_mkdir+0x361/0x850 [ 56.776827][ T5926] filename_mkdirat+0x48b/0x5e0 [ 56.778477][ T5926] __x64_sys_mkdirat+0x89/0xc0 [ 56.780116][ T5926] do_syscall_64+0x115/0x870 [ 56.781689][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.783660][ T5926] [ 56.783660][ T5926] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 56.786168][ T5926] lock_acquire+0x1b9/0x370 [ 56.787716][ T5926] __mutex_lock+0x1a4/0x1bd0 [ 56.789289][ T5926] configfs_rmdir+0x5ae/0x950 [ 56.790892][ T5926] vfs_rmdir+0x328/0x8a0 [ 56.792372][ T5926] filename_rmdir+0x31a/0x5c0 [ 56.793977][ T5926] __x64_sys_unlinkat+0xf5/0x130 [ 56.795754][ T5926] do_syscall_64+0x115/0x870 [ 56.797363][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.799328][ T5926] [ 56.799328][ T5926] -> #0 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}: [ 56.801951][ T5926] check_prev_add+0xeb/0xe60 [ 56.803531][ T5926] __lock_acquire+0x136c/0x1a40 [ 56.805222][ T5926] lock_acquire+0x1b9/0x370 [ 56.806773][ T5926] down_write+0x8b/0x1f0 [ 56.808251][ T5926] configfs_depend_item_unlocked+0xf3/0x6a0 [ 56.810229][ T5926] usbg_make_tpg+0x261/0x620 [ 56.811796][ T5926] target_fabric_make_tpg+0xab/0x8c0 [ 56.813612][ T5926] configfs_mkdir+0x51e/0xb70 [ 56.815260][ T5926] vfs_mkdir+0x361/0x850 [ 56.816735][ T5926] filename_mkdirat+0x48b/0x5e0 [ 56.818391][ T5926] __x64_sys_mkdirat+0x89/0xc0 [ 56.820023][ T5926] do_syscall_64+0x115/0x870 [ 56.821589][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.823579][ T5926] [ 56.823579][ T5926] other info that might help us debug this: [ 56.823579][ T5926] [ 56.826689][ T5926] Chain exists of: [ 56.826689][ T5926] &sb->s_type->i_mutex_key#24 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 56.826689][ T5926] [ 56.831086][ T5926] Possible unsafe locking scenario: [ 56.831086][ T5926] [ 56.833555][ T5926] CPU0 CPU1 [ 56.835238][ T5926] ---- ---- [ 56.836868][ T5926] lock(&opts->dep_lock); [ 56.838249][ T5926] lock(gadget_subsys.su_mutex); [ 56.840533][ T5926] lock(&opts->dep_lock); [ 56.842633][ T5926] lock(&sb->s_type->i_mutex_key#24); [ 56.844356][ T5926] [ 56.844356][ T5926] *** DEADLOCK *** [ 56.844356][ T5926] [ 56.846800][ T5926] 5 locks held by syz.0.18/5926: [ 56.848314][ T5926] #0: ffff88802483a450 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 56.851197][ T5926] #1: ffff88803b30e040 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 56.854492][ T5926] #2: ffffffff8fd87468 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 56.857437][ T5926] #3: ffffffff90252420 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 [ 56.860392][ T5926] #4: ffff888036b18918 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 56.863264][ T5926] [ 56.863264][ T5926] stack backtrace: [ 56.865146][ T5926] CPU: 3 UID: 0 PID: 5926 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 56.865159][ T5926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.865165][ T5926] Call Trace: [ 56.865170][ T5926] [ 56.865174][ T5926] dump_stack_lvl+0x100/0x190 [ 56.865188][ T5926] print_circular_bug.cold+0x178/0x1c7 [ 56.865205][ T5926] check_noncircular+0x146/0x160 [ 56.865217][ T5926] check_prev_add+0xeb/0xe60 [ 56.865229][ T5926] __lock_acquire+0x136c/0x1a40 [ 56.865242][ T5926] ? rcu_is_watching+0x12/0xc0 [ 56.865258][ T5926] lock_acquire+0x1b9/0x370 [ 56.865269][ T5926] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 56.865283][ T5926] ? __pfx___might_resched+0x10/0x10 [ 56.865296][ T5926] down_write+0x8b/0x1f0 [ 56.865308][ T5926] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 56.865321][ T5926] ? __pfx_down_write+0x10/0x10 [ 56.865334][ T5926] configfs_depend_item_unlocked+0xf3/0x6a0 [ 56.865346][ T5926] ? __lock_acquire+0x49f/0x1a40 [ 56.865358][ T5926] usbg_make_tpg+0x261/0x620 [ 56.865369][ T5926] ? __pfx_usbg_make_tpg+0x10/0x10 [ 56.865380][ T5926] ? find_held_lock+0x2b/0x80 [ 56.865396][ T5926] ? __pfx_usbg_make_tpg+0x10/0x10 [ 56.865406][ T5926] target_fabric_make_tpg+0xab/0x8c0 [ 56.865421][ T5926] configfs_mkdir+0x51e/0xb70 [ 56.865434][ T5926] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 56.865448][ T5926] ? __pfx_configfs_mkdir+0x10/0x10 [ 56.865461][ T5926] ? inode_permission+0x374/0x620 [ 56.865476][ T5926] vfs_mkdir+0x361/0x850 [ 56.865490][ T5926] filename_mkdirat+0x48b/0x5e0 [ 56.865502][ T5926] ? __pfx_filename_mkdirat+0x10/0x10 [ 56.865512][ T5926] ? strncpy_from_user+0x19d/0x2d0 [ 56.865525][ T5926] ? do_getname+0x191/0x390 [ 56.865538][ T5926] __x64_sys_mkdirat+0x89/0xc0 [ 56.865548][ T5926] do_syscall_64+0x115/0x870 [ 56.865559][ T5926] ? clear_bhb_loop+0x40/0x90 [ 56.865570][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.865581][ T5926] RIP: 0033:0x7fc81e79de99 [ 56.865590][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.865600][ T5926] RSP: 002b:00007ffd859ba1a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 56.865610][ T5926] RAX: ffffffffffffffda RBX: 00007fc81ea25fa0 RCX: 00007fc81e79de99 [ 56.865616][ T5926] RDX: 00000000000001ff RSI: 0000200000001000 RDI: ffffffffffffff9c [ 56.865622][ T5926] RBP: 00007fc81e833eaf R08: 0000000000000000 R09: 0000000000000000 [ 56.865628][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.865634][ T5926] R13: 00007fc81ea25fac R14: 00007fc81ea25fa0 R15: 00007fc81ea25fa0 [ 56.865643][ T5926] [ 57.838331][ T65] Bluetooth: hci0: command tx timeout 2026/07/26 10:40:53 executed programs: 103 [ 59.918209][ T65] Bluetooth: hci0: command tx timeout [ 60.302960][ T42] kauditd_printk_skb: 409 callbacks suppressed [ 60.302970][ T42] audit: type=1400 audit(1785062455.309:608): avc: denied { write } for pid=6116 comm="syz.0.204" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.311946][ T42] audit: type=1400 audit(1785062455.309:609): avc: denied { write } for pid=6116 comm="syz.0.204" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.324270][ T42] audit: type=1400 audit(1785062455.329:610): avc: denied { write } for pid=6117 comm="syz.0.205" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.331296][ T42] audit: type=1400 audit(1785062455.329:611): avc: denied { write } for pid=6117 comm="syz.0.205" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.344832][ T42] audit: type=1400 audit(1785062455.349:612): avc: denied { write } for pid=6118 comm="syz.0.206" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.352390][ T42] audit: type=1400 audit(1785062455.349:613): avc: denied { write } for pid=6118 comm="syz.0.206" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.365349][ T42] audit: type=1400 audit(1785062455.369:614): avc: denied { write } for pid=6119 comm="syz.0.207" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.372426][ T42] audit: type=1400 audit(1785062455.369:615): avc: denied { write } for pid=6119 comm="syz.0.207" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.385200][ T42] audit: type=1400 audit(1785062455.389:616): avc: denied { write } for pid=6120 comm="syz.0.208" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.391892][ T42] audit: type=1400 audit(1785062455.389:617): avc: denied { write } for pid=6120 comm="syz.0.208" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.008275][ T65] Bluetooth: hci0: command tx timeout 2026/07/26 10:40:58 executed programs: 382 [ 65.311312][ T42] kauditd_printk_skb: 560 callbacks suppressed [ 65.311329][ T42] audit: type=1400 audit(1785062460.319:1178): avc: denied { write } for pid=6401 comm="syz.0.489" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.322527][ T42] audit: type=1400 audit(1785062460.319:1179): avc: denied { write } for pid=6401 comm="syz.0.489" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.331407][ T42] audit: type=1400 audit(1785062460.329:1180): avc: denied { write } for pid=6402 comm="syz.0.490" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.339007][ T42] audit: type=1400 audit(1785062460.329:1181): avc: denied { write } for pid=6402 comm="syz.0.490" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.346583][ T42] audit: type=1400 audit(1785062460.349:1182): avc: denied { write } for pid=6403 comm="syz.0.491" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.355270][ T42] audit: type=1400 audit(1785062460.349:1183): avc: denied { write } for pid=6403 comm="syz.0.491" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.371259][ T42] audit: type=1400 audit(1785062460.379:1184): avc: denied { write } for pid=6404 comm="syz.0.492" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.378317][ T42] audit: type=1400 audit(1785062460.379:1185): avc: denied { write } for pid=6404 comm="syz.0.492" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.393692][ T42] audit: type=1400 audit(1785062460.399:1186): avc: denied { write } for pid=6405 comm="syz.0.493" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.402131][ T42] audit: type=1400 audit(1785062460.399:1187): avc: denied { write } for pid=6405 comm="syz.0.493" name="functions" dev="configfs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1