Warning: Permanently added '[localhost]:57277' (ED25519) to the list of known hosts. [ 54.537392][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 54.537410][ T42] audit: type=1400 audit(1785424596.132:138): avc: denied { execute } for pid=5738 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 54.548705][ T42] audit: type=1400 audit(1785424596.132:139): avc: denied { execute_no_trans } for pid=5738 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/07/30 15:16:37 parsed 1 programs [ 56.083861][ T42] audit: type=1400 audit(1785424597.672:140): avc: denied { node_bind } for pid=5738 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 2026/07/30 15:16:37 serving rpc on tcp://38281 [ 56.094076][ T42] audit: type=1400 audit(1785424597.682:141): avc: denied { node_bind } for pid=5738 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 58.619970][ T42] audit: type=1400 audit(1785424600.212:142): avc: denied { mounton } for pid=5748 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.628958][ T42] audit: type=1400 audit(1785424600.222:143): avc: denied { mount } for pid=5748 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.632277][ T5748] cgroup: Unknown subsys name 'net' [ 58.639863][ T42] audit: type=1400 audit(1785424600.232:144): avc: denied { unmount } for pid=5748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.831591][ T5748] cgroup: Unknown subsys name 'cpuset' [ 58.838126][ T5748] cgroup: Unknown subsys name 'rlimit' [ 59.023701][ T42] audit: type=1400 audit(1785424600.612:145): avc: denied { setattr } for pid=5748 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.032635][ T42] audit: type=1400 audit(1785424600.612:146): avc: denied { create } for pid=5748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.040603][ T42] audit: type=1400 audit(1785424600.612:147): avc: denied { write } for pid=5748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.074355][ T5750] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 59.927741][ T5748] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.927385][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 61.927403][ T42] audit: type=1400 audit(1785424603.522:159): avc: denied { execmem } for pid=5760 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.938409][ T42] audit: type=1400 audit(1785424603.522:160): avc: denied { read } for pid=5761 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.947320][ T42] audit: type=1400 audit(1785424603.522:161): avc: denied { open } for pid=5761 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.957346][ T42] audit: type=1400 audit(1785424603.522:162): avc: denied { mounton } for pid=5761 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.028313][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.035440][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.063687][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.066912][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.073890][ T42] audit: type=1400 audit(1785424603.662:163): avc: denied { mount } for pid=5761 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.081703][ T42] audit: type=1400 audit(1785424603.672:164): avc: denied { mounton } for pid=5761 comm="syz-executor" path="/syzkaller.pazqBe/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.089391][ T42] audit: type=1400 audit(1785424603.672:165): avc: denied { mount } for pid=5761 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.096887][ T42] audit: type=1400 audit(1785424603.672:166): avc: denied { mounton } for pid=5761 comm="syz-executor" path="/syzkaller.pazqBe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.105539][ T42] audit: type=1400 audit(1785424603.672:167): avc: denied { mounton } for pid=5761 comm="syz-executor" path="/syzkaller.pazqBe/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 62.113831][ T42] audit: type=1400 audit(1785424603.672:168): avc: denied { unmount } for pid=5761 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.124604][ T5761] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.491113][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.494048][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.496740][ T5797] bridge_slave_0: entered allmulticast mode [ 63.500591][ T5797] bridge_slave_0: entered promiscuous mode [ 63.505311][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.509021][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.511926][ T5797] bridge_slave_1: entered allmulticast mode [ 63.515474][ T5797] bridge_slave_1: entered promiscuous mode [ 63.541559][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.548967][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.574286][ T5797] team0: Port device team_slave_0 added [ 63.579127][ T5797] team0: Port device team_slave_1 added [ 63.603455][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.606500][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.616964][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.623640][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.626611][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.637001][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.678634][ T5797] hsr_slave_0: entered promiscuous mode [ 63.682097][ T5797] hsr_slave_1: entered promiscuous mode [ 63.834251][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.843697][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.847345][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.851767][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.854781][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.860264][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.864414][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.869709][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.897040][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.900467][ T5797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.903849][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.907222][ T5797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.964261][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.979698][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.983777][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.995591][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.005557][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.008685][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.018849][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.021870][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.343791][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.379809][ T5797] veth0_vlan: entered promiscuous mode [ 64.389373][ T5797] veth1_vlan: entered promiscuous mode [ 64.418231][ T5797] veth0_macvtap: entered promiscuous mode [ 64.424614][ T5797] veth1_macvtap: entered promiscuous mode [ 64.436510][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.444563][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.455729][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.459419][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.465815][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.474993][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.556130][ T5609] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.662547][ T5609] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.754957][ T5609] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.867869][ T5609] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.498661][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.502756][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.506053][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.514190][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.519227][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/07/30 15:16:47 executed programs: 0 [ 66.044386][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.047484][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.050902][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.053797][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.056289][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.433747][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.436644][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.439453][ T5876] bridge_slave_0: entered allmulticast mode [ 66.442887][ T5876] bridge_slave_0: entered promiscuous mode [ 66.447390][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.450234][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.453025][ T5876] bridge_slave_1: entered allmulticast mode [ 66.456564][ T5876] bridge_slave_1: entered promiscuous mode [ 66.482462][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.488909][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.512166][ T5876] team0: Port device team_slave_0 added [ 66.516976][ T5876] team0: Port device team_slave_1 added [ 66.534339][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.536694][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.544232][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.548600][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.550695][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.558597][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.583367][ T5876] hsr_slave_0: entered promiscuous mode [ 66.585598][ T5876] hsr_slave_1: entered promiscuous mode [ 66.588266][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 66.590542][ T5876] Cannot create hsr debugfs directory [ 67.630727][ T5609] bridge_slave_1: left allmulticast mode [ 67.633447][ T5609] bridge_slave_1: left promiscuous mode [ 67.637134][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.644651][ T5609] bridge_slave_0: left allmulticast mode [ 67.648038][ T5609] bridge_slave_0: left promiscuous mode [ 67.651087][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.789067][ T5609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.795853][ T5609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.802119][ T5609] bond0 (unregistering): Released all slaves [ 67.903648][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 67.903661][ T42] audit: type=1400 audit(1785424609.492:189): avc: denied { write } for pid=5894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.913653][ T42] audit: type=1400 audit(1785424609.492:190): avc: denied { create } for pid=5894 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.920575][ T42] audit: type=1400 audit(1785424609.492:191): avc: denied { write } for pid=5894 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2024 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.932066][ T42] audit: type=1400 audit(1785424609.492:192): avc: denied { append } for pid=5894 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2024 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.952873][ T5609] hsr_slave_0: left promiscuous mode [ 67.955779][ T5609] hsr_slave_1: left promiscuous mode [ 67.958593][ T5609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.961543][ T5609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.965773][ T5609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.967924][ T42] audit: type=1400 audit(1785424609.562:193): avc: denied { write } for pid=5897 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.968873][ T5609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.978388][ T42] audit: type=1400 audit(1785424609.562:194): avc: denied { unlink } for pid=5897 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2024 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.988031][ T5609] veth1_macvtap: left promiscuous mode [ 67.990852][ T5609] veth0_macvtap: left promiscuous mode [ 67.993070][ T5609] veth1_vlan: left promiscuous mode [ 67.995195][ T5609] veth0_vlan: left promiscuous mode [ 68.067616][ T5867] Bluetooth: hci0: command tx timeout [ 68.154949][ T5609] team0 (unregistering): Port device team_slave_1 removed [ 68.163134][ T5609] team0 (unregistering): Port device team_slave_0 removed [ 68.265278][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 68.421895][ T42] audit: type=1400 audit(1785424610.012:195): avc: denied { write } for pid=5900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.491385][ T42] audit: type=1400 audit(1785424610.082:196): avc: denied { write } for pid=5903 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.529661][ T5876] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.538816][ T5876] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.541851][ T5876] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.550902][ T5876] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.554249][ T5876] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.560218][ T5876] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.564016][ T5876] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.570406][ T5876] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.587720][ T42] audit: type=1400 audit(1785424610.182:197): avc: denied { write } for pid=5905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.641962][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.645043][ T42] audit: type=1400 audit(1785424610.232:198): avc: denied { write } for pid=5914 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.659319][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.667645][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.670570][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.681316][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.684228][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.226355][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.250911][ T5876] veth0_vlan: entered promiscuous mode [ 69.256288][ T5876] veth1_vlan: entered promiscuous mode [ 69.288089][ T5876] veth0_macvtap: entered promiscuous mode [ 69.291906][ T5876] veth1_macvtap: entered promiscuous mode [ 69.300414][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.309275][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.322798][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.326324][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.331585][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.335156][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.387533][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.390769][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.410341][ T110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.413452][ T110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.479634][ T5928] [ 69.480667][ T5928] ====================================================== [ 69.483445][ T5928] WARNING: possible circular locking dependency detected [ 69.486223][ T5928] syzkaller #0 Not tainted [ 69.487985][ T5928] ------------------------------------------------------ [ 69.490718][ T5928] syz.0.18/5928 is trying to acquire lock: [ 69.492961][ T5928] ffff88802026ba40 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 69.497233][ T5928] [ 69.497233][ T5928] but task is already holding lock: [ 69.500093][ T5928] ffff8880343f4918 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 69.503605][ T5928] [ 69.503605][ T5928] which lock already depends on the new lock. [ 69.503605][ T5928] [ 69.507521][ T5928] [ 69.507521][ T5928] the existing dependency chain (in reverse order) is: [ 69.510958][ T5928] [ 69.510958][ T5928] -> #3 (&opts->dep_lock){+.+.}-{4:4}: [ 69.513973][ T5928] lock_acquire+0x1b9/0x370 [ 69.515969][ T5928] __mutex_lock+0x1a4/0x1bd0 [ 69.517921][ T5928] usbg_make_tpg+0x1a4/0x620 [ 69.519907][ T5928] target_fabric_make_tpg+0xab/0x8c0 [ 69.522242][ T5928] configfs_mkdir+0x51e/0xb70 [ 69.524207][ T5928] vfs_mkdir+0x361/0x850 [ 69.526034][ T5928] filename_mkdirat+0x48b/0x5e0 [ 69.528083][ T5928] __x64_sys_mkdir+0x6b/0x90 [ 69.530050][ T5928] do_syscall_64+0x115/0x870 [ 69.532047][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.534515][ T5928] [ 69.534515][ T5928] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 69.537526][ T5928] lock_acquire+0x1b9/0x370 [ 69.539514][ T5928] __mutex_lock+0x1a4/0x1bd0 [ 69.541543][ T5928] tcm_alloc+0x20/0x440 [ 69.543401][ T5928] usb_get_function+0x5e/0xd0 [ 69.545429][ T5928] config_usb_cfg_link+0x1ed/0x3a0 [ 69.547586][ T5928] configfs_symlink+0x540/0x11f0 [ 69.549697][ T5928] vfs_symlink+0x178/0x4d0 [ 69.551656][ T5928] filename_symlinkat+0x2a6/0x560 [ 69.553814][ T5928] __x64_sys_symlinkat+0x9c/0xe0 [ 69.555934][ T5928] do_syscall_64+0x115/0x870 [ 69.557941][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.560412][ T5928] [ 69.560412][ T5928] -> #1 (&gi->lock){+.+.}-{4:4}: [ 69.563148][ T5928] lock_acquire+0x1b9/0x370 [ 69.565133][ T5928] __mutex_lock+0x1a4/0x1bd0 [ 69.567184][ T5928] config_usb_cfg_link+0x57/0x3a0 [ 69.569320][ T5928] configfs_symlink+0x540/0x11f0 [ 69.571423][ T5928] vfs_symlink+0x178/0x4d0 [ 69.573333][ T5928] filename_symlinkat+0x2a6/0x560 [ 69.575439][ T5928] __x64_sys_symlinkat+0x9c/0xe0 [ 69.577525][ T5928] do_syscall_64+0x115/0x870 [ 69.579487][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.581966][ T5928] [ 69.581966][ T5928] -> #0 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}: [ 69.585283][ T5928] check_prev_add+0xeb/0xe60 [ 69.587232][ T5928] __lock_acquire+0x136c/0x1a40 [ 69.589251][ T5928] lock_acquire+0x1b9/0x370 [ 69.591189][ T5928] down_write+0x8b/0x1f0 [ 69.592992][ T5928] configfs_depend_item_unlocked+0xf3/0x6a0 [ 69.594940][ T5928] usbg_make_tpg+0x261/0x620 [ 69.596437][ T5928] target_fabric_make_tpg+0xab/0x8c0 [ 69.598155][ T5928] configfs_mkdir+0x51e/0xb70 [ 69.599794][ T5928] vfs_mkdir+0x361/0x850 [ 69.601237][ T5928] filename_mkdirat+0x48b/0x5e0 [ 69.602922][ T5928] __x64_sys_mkdir+0x6b/0x90 [ 69.604564][ T5928] do_syscall_64+0x115/0x870 [ 69.606165][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.608101][ T5928] [ 69.608101][ T5928] other info that might help us debug this: [ 69.608101][ T5928] [ 69.611235][ T5928] Chain exists of: [ 69.611235][ T5928] &sb->s_type->i_mutex_key#24 --> tpg_instances_lock --> &opts->dep_lock [ 69.611235][ T5928] [ 69.615609][ T5928] Possible unsafe locking scenario: [ 69.615609][ T5928] [ 69.617842][ T5928] CPU0 CPU1 [ 69.619519][ T5928] ---- ---- [ 69.621133][ T5928] lock(&opts->dep_lock); [ 69.622577][ T5928] lock(tpg_instances_lock); [ 69.624780][ T5928] lock(&opts->dep_lock); [ 69.626930][ T5928] lock(&sb->s_type->i_mutex_key#24); [ 69.628605][ T5928] [ 69.628605][ T5928] *** DEADLOCK *** [ 69.628605][ T5928] [ 69.631539][ T5928] 5 locks held by syz.0.18/5928: [ 69.633465][ T5928] #0: ffff8880239a0450 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 69.637140][ T5928] #1: ffff88803fd40600 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 69.641266][ T5928] #2: ffffffff8fd87a68 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 69.645039][ T5928] #3: ffffffff90252b60 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 [ 69.648856][ T5928] #4: ffff8880343f4918 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 69.652674][ T5928] [ 69.652674][ T5928] stack backtrace: [ 69.654994][ T5928] CPU: 2 UID: 0 PID: 5928 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 69.655016][ T5928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.655039][ T5928] Call Trace: [ 69.655068][ T5928] [ 69.655075][ T5928] dump_stack_lvl+0x100/0x190 [ 69.655099][ T5928] print_circular_bug.cold+0x178/0x1c7 [ 69.655126][ T5928] check_noncircular+0x146/0x160 [ 69.655147][ T5928] check_prev_add+0xeb/0xe60 [ 69.655166][ T5928] __lock_acquire+0x136c/0x1a40 [ 69.655185][ T5928] ? rcu_is_watching+0x12/0xc0 [ 69.655209][ T5928] lock_acquire+0x1b9/0x370 [ 69.655227][ T5928] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 69.655248][ T5928] ? __pfx___might_resched+0x10/0x10 [ 69.655269][ T5928] down_write+0x8b/0x1f0 [ 69.655289][ T5928] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 69.655309][ T5928] ? __pfx_down_write+0x10/0x10 [ 69.655328][ T5928] configfs_depend_item_unlocked+0xf3/0x6a0 [ 69.655347][ T5928] ? __lock_acquire+0x49f/0x1a40 [ 69.655366][ T5928] usbg_make_tpg+0x261/0x620 [ 69.655384][ T5928] ? __pfx_usbg_make_tpg+0x10/0x10 [ 69.655401][ T5928] ? find_held_lock+0x2b/0x80 [ 69.655425][ T5928] ? __pfx_usbg_make_tpg+0x10/0x10 [ 69.655441][ T5928] target_fabric_make_tpg+0xab/0x8c0 [ 69.655464][ T5928] configfs_mkdir+0x51e/0xb70 [ 69.655484][ T5928] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 69.655505][ T5928] ? __pfx_configfs_mkdir+0x10/0x10 [ 69.655526][ T5928] ? inode_permission+0x374/0x620 [ 69.655550][ T5928] vfs_mkdir+0x361/0x850 [ 69.655571][ T5928] filename_mkdirat+0x48b/0x5e0 [ 69.655590][ T5928] ? __pfx_filename_mkdirat+0x10/0x10 [ 69.655606][ T5928] ? strncpy_from_user+0x19d/0x2d0 [ 69.655627][ T5928] ? do_getname+0x191/0x390 [ 69.655646][ T5928] __x64_sys_mkdir+0x6b/0x90 [ 69.655662][ T5928] do_syscall_64+0x115/0x870 [ 69.655679][ T5928] ? clear_bhb_loop+0x40/0x90 [ 69.655697][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.655713][ T5928] RIP: 0033:0x7f443159df99 [ 69.655727][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.655742][ T5928] RSP: 002b:00007ffe913f15d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 69.655767][ T5928] RAX: ffffffffffffffda RBX: 00007f4431825fa0 RCX: 00007f443159df99 [ 69.655777][ T5928] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00 [ 69.655787][ T5928] RBP: 00007f4431634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 69.655796][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.655805][ T5928] R13: 00007f4431825fac R14: 00007f4431825fa0 R15: 00007f4431825fa0 [ 69.655818][ T5928] [ 70.147369][ T5867] Bluetooth: hci0: command tx timeout 2026/07/30 15:16:52 executed programs: 76 [ 71.507704][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.510359][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.226549][ T5867] Bluetooth: hci0: command tx timeout [ 74.306638][ T5867] Bluetooth: hci0: command tx timeout 2026/07/30 15:16:57 executed programs: 373