Warning: Permanently added '[localhost]:65443' (ED25519) to the list of known hosts. [ 59.133376][ T42] audit: type=1400 audit(1783009337.334:138): avc: denied { execute } for pid=5735 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 59.142475][ T42] audit: type=1400 audit(1783009337.344:139): avc: denied { execute_no_trans } for pid=5735 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/07/02 16:22:18 parsed 1 programs 2026/07/02 16:22:18 serving rpc on tcp://37491 [ 60.626958][ T42] audit: type=1400 audit(1783009338.824:140): avc: denied { node_bind } for pid=5735 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 63.103785][ T42] audit: type=1400 audit(1783009341.304:141): avc: denied { mounton } for pid=5744 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.114708][ T42] audit: type=1400 audit(1783009341.314:142): avc: denied { mount } for pid=5744 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.116548][ T5744] cgroup: Unknown subsys name 'net' [ 63.126810][ T42] audit: type=1400 audit(1783009341.334:143): avc: denied { unmount } for pid=5744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.312656][ T5744] cgroup: Unknown subsys name 'cpuset' [ 63.319698][ T5744] cgroup: Unknown subsys name 'rlimit' [ 63.507126][ T42] audit: type=1400 audit(1783009341.704:144): avc: denied { setattr } for pid=5744 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.514424][ T42] audit: type=1400 audit(1783009341.714:145): avc: denied { create } for pid=5744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.520858][ T42] audit: type=1400 audit(1783009341.714:146): avc: denied { write } for pid=5744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.527142][ T42] audit: type=1400 audit(1783009341.714:147): avc: denied { read } for pid=5744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.582045][ T5748] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 64.364524][ T5744] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.157109][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 66.157129][ T42] audit: type=1400 audit(1783009344.354:158): avc: denied { execmem } for pid=5752 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.167424][ T42] audit: type=1400 audit(1783009344.364:159): avc: denied { read } for pid=5753 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.175786][ T42] audit: type=1400 audit(1783009344.364:160): avc: denied { open } for pid=5753 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.185541][ T42] audit: type=1400 audit(1783009344.364:161): avc: denied { mounton } for pid=5753 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 66.247042][ T42] audit: type=1400 audit(1783009344.444:162): avc: denied { mount } for pid=5753 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.253918][ T42] audit: type=1400 audit(1783009344.454:163): avc: denied { mounton } for pid=5753 comm="syz-executor" path="/syzkaller.yK7w2u/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.262194][ T42] audit: type=1400 audit(1783009344.454:164): avc: denied { mount } for pid=5753 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.269260][ T42] audit: type=1400 audit(1783009344.454:165): avc: denied { mounton } for pid=5753 comm="syz-executor" path="/syzkaller.yK7w2u/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.277508][ T42] audit: type=1400 audit(1783009344.454:166): avc: denied { mounton } for pid=5753 comm="syz-executor" path="/syzkaller.yK7w2u/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.286441][ T42] audit: type=1400 audit(1783009344.454:167): avc: denied { unmount } for pid=5753 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.296272][ T5753] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.853136][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.857164][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.889487][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.892799][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.574390][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.578821][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.582245][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.585222][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.589282][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.661019][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.664158][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.666405][ T5817] bridge_slave_0: entered allmulticast mode [ 68.669955][ T5817] bridge_slave_0: entered promiscuous mode [ 68.675074][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.677359][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.680140][ T5817] bridge_slave_1: entered allmulticast mode [ 68.683031][ T5817] bridge_slave_1: entered promiscuous mode [ 68.702438][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.707066][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.724906][ T5817] team0: Port device team_slave_0 added [ 68.728524][ T5817] team0: Port device team_slave_1 added [ 68.743326][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.745776][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.753584][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.759843][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.761985][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.769981][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.796762][ T5817] hsr_slave_0: entered promiscuous mode [ 68.799169][ T5817] hsr_slave_1: entered promiscuous mode [ 68.902383][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.910979][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.913846][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.918413][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.921072][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.925201][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.928304][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.932610][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.981031][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.993289][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.999794][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.002345][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.011001][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.013320][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.258313][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.287412][ T5817] veth0_vlan: entered promiscuous mode [ 69.299547][ T5817] veth1_vlan: entered promiscuous mode [ 69.321838][ T5817] veth0_macvtap: entered promiscuous mode [ 69.327174][ T5817] veth1_macvtap: entered promiscuous mode [ 69.339942][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.346528][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.354374][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.359340][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.363746][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.366547][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.467458][ T5773] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.552117][ T5773] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.652113][ T5773] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.759510][ T5773] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/07/02 16:22:28 executed programs: 0 [ 69.987005][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.990070][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.992817][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.996043][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.999910][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.318369][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.321021][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.323938][ T5872] bridge_slave_0: entered allmulticast mode [ 70.327021][ T5872] bridge_slave_0: entered promiscuous mode [ 70.331357][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.334154][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.336714][ T5872] bridge_slave_1: entered allmulticast mode [ 70.340456][ T5872] bridge_slave_1: entered promiscuous mode [ 70.357428][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.362807][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.379270][ T5872] team0: Port device team_slave_0 added [ 70.383028][ T5872] team0: Port device team_slave_1 added [ 70.397982][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.400532][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.409967][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.415964][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.419034][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.431751][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.476975][ T5872] hsr_slave_0: entered promiscuous mode [ 70.480297][ T5872] hsr_slave_1: entered promiscuous mode [ 70.483211][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 70.485707][ T5872] Cannot create hsr debugfs directory [ 72.018654][ T5094] Bluetooth: hci0: command tx timeout [ 72.747792][ T5773] bridge_slave_1: left allmulticast mode [ 72.750280][ T5773] bridge_slave_1: left promiscuous mode [ 72.754011][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.761874][ T5773] bridge_slave_0: left allmulticast mode [ 72.764576][ T5773] bridge_slave_0: left promiscuous mode [ 72.766965][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.877006][ T5773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.882070][ T5773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.885527][ T5773] bond0 (unregistering): Released all slaves [ 72.986864][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 72.986878][ T42] audit: type=1400 audit(1783009351.184:188): avc: denied { write } for pid=5891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.997780][ T42] audit: type=1400 audit(1783009351.184:189): avc: denied { create } for pid=5891 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.006599][ T42] audit: type=1400 audit(1783009351.184:190): avc: denied { write } for pid=5891 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2023 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.017066][ T42] audit: type=1400 audit(1783009351.194:191): avc: denied { append } for pid=5891 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2023 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.036625][ T5773] hsr_slave_0: left promiscuous mode [ 73.040332][ T5773] hsr_slave_1: left promiscuous mode [ 73.043258][ T5773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.044231][ T42] audit: type=1400 audit(1783009351.244:192): avc: denied { write } for pid=5894 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.046377][ T5773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.053527][ T42] audit: type=1400 audit(1783009351.244:193): avc: denied { unlink } for pid=5894 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2023 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.067406][ T5773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.070732][ T5773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.082657][ T5773] veth1_macvtap: left promiscuous mode [ 73.084442][ T5773] veth0_macvtap: left promiscuous mode [ 73.086326][ T5773] veth1_vlan: left promiscuous mode [ 73.088751][ T5773] veth0_vlan: left promiscuous mode [ 73.204582][ T5773] team0 (unregistering): Port device team_slave_1 removed [ 73.212600][ T5773] team0 (unregistering): Port device team_slave_0 removed [ 73.284323][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 73.426564][ T42] audit: type=1400 audit(1783009351.624:194): avc: denied { write } for pid=5897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.477049][ T42] audit: type=1400 audit(1783009351.674:195): avc: denied { write } for pid=5900 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.544109][ T42] audit: type=1400 audit(1783009351.744:196): avc: denied { write } for pid=5902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.579630][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.591047][ T5872] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.594072][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.596219][ T42] audit: type=1400 audit(1783009351.794:197): avc: denied { write } for pid=5905 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.604811][ T5872] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.607549][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.619434][ T5872] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.622316][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.629870][ T5872] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.676302][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.685823][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.691934][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.694229][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.700931][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.703276][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.067083][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.103931][ T5872] veth0_vlan: entered promiscuous mode [ 74.108673][ T5094] Bluetooth: hci0: command tx timeout [ 74.113705][ T5872] veth1_vlan: entered promiscuous mode [ 74.134785][ T5872] veth0_macvtap: entered promiscuous mode [ 74.141389][ T5872] veth1_macvtap: entered promiscuous mode [ 74.154681][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.162846][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.170816][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.174232][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.178828][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.182808][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.223529][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.226035][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.239152][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.241824][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.329558][ T5925] [ 74.330414][ T5925] ====================================================== [ 74.332635][ T5925] WARNING: possible circular locking dependency detected [ 74.334741][ T5925] syzkaller #0 Not tainted [ 74.336203][ T5925] ------------------------------------------------------ [ 74.338383][ T5925] syz.0.17/5925 is trying to acquire lock: [ 74.340181][ T5925] ffff88801d2a6210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 74.343287][ T5925] [ 74.343287][ T5925] but task is already holding lock: [ 74.345467][ T5925] ffff888028b79c50 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 74.348895][ T5925] [ 74.348895][ T5925] which lock already depends on the new lock. [ 74.348895][ T5925] [ 74.352108][ T5925] [ 74.352108][ T5925] the existing dependency chain (in reverse order) is: [ 74.354748][ T5925] [ 74.354748][ T5925] -> #2 (&q->q_usage_counter(io)#20){++++}-{0:0}: [ 74.357393][ T5925] lock_acquire+0x1b9/0x370 [ 74.358923][ T5925] blk_alloc_queue+0x610/0x790 [ 74.360565][ T5925] blk_mq_alloc_queue+0x174/0x290 [ 74.362254][ T5925] __blk_mq_alloc_disk+0x29/0x120 [ 74.363933][ T5925] loop_add+0x498/0xb60 [ 74.365426][ T5925] loop_init+0x1d3/0x200 [ 74.366937][ T5925] do_one_initcall+0x11d/0x700 [ 74.368583][ T5925] kernel_init_freeable+0x6ea/0x7b0 [ 74.370419][ T5925] kernel_init+0x1f/0x1e0 [ 74.371940][ T5925] ret_from_fork+0x72b/0xd50 [ 74.373552][ T5925] ret_from_fork_asm+0x1a/0x30 [ 74.375238][ T5925] [ 74.375238][ T5925] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 74.377568][ T5925] lock_acquire+0x1b9/0x370 [ 74.379250][ T5925] fs_reclaim_acquire+0xc4/0x100 [ 74.380971][ T5925] kmem_cache_alloc_noprof+0x63/0x6a0 [ 74.382857][ T5925] __kernfs_iattrs+0x126/0x450 [ 74.384466][ T5925] __kernfs_setattr+0x4d/0x3c0 [ 74.386115][ T5925] kernfs_iop_setattr+0xda/0x130 [ 74.387754][ T5925] notify_change+0xb25/0x1330 [ 74.389390][ T5925] do_truncate+0x1df/0x240 [ 74.390944][ T5925] path_openat+0x370f/0x4280 [ 74.392613][ T5925] do_file_open+0x20e/0x430 [ 74.394202][ T5925] do_sys_openat2+0x10f/0x1e0 [ 74.395829][ T5925] __x64_sys_openat+0x12d/0x210 [ 74.397549][ T5925] do_syscall_64+0x115/0x870 [ 74.399136][ T5925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.401172][ T5925] [ 74.401172][ T5925] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 74.403862][ T5925] check_prev_add+0xeb/0xe60 [ 74.405483][ T5925] __lock_acquire+0x136c/0x1a40 [ 74.407156][ T5925] lock_acquire+0x1b9/0x370 [ 74.408767][ T5925] down_read+0x99/0x4c0 [ 74.410296][ T5925] kernfs_iop_getattr+0x9c/0xf0 [ 74.412008][ T5925] vfs_getattr_nosec+0x2d4/0x430 [ 74.413713][ T5925] vfs_getattr+0x4a/0x60 [ 74.415387][ T5925] loop_query_min_dio_size.isra.0+0x117/0x250 [ 74.417947][ T5925] lo_ioctl+0x13aa/0x1bc0 [ 74.419859][ T5925] blkdev_ioctl+0x5ad/0x6f0 [ 74.421822][ T5925] __x64_sys_ioctl+0x18e/0x210 [ 74.423460][ T5925] do_syscall_64+0x115/0x870 [ 74.425092][ T5925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.427053][ T5925] [ 74.427053][ T5925] other info that might help us debug this: [ 74.427053][ T5925] [ 74.430925][ T5925] Chain exists of: [ 74.430925][ T5925] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#20 [ 74.430925][ T5925] [ 74.436555][ T5925] Possible unsafe locking scenario: [ 74.436555][ T5925] [ 74.439587][ T5925] CPU0 CPU1 [ 74.441687][ T5925] ---- ---- [ 74.443789][ T5925] lock(&q->q_usage_counter(io)#20); [ 74.445938][ T5925] lock(fs_reclaim); [ 74.448583][ T5925] lock(&q->q_usage_counter(io)#20); [ 74.451838][ T5925] rlock(&root->kernfs_iattr_rwsem); [ 74.453904][ T5925] [ 74.453904][ T5925] *** DEADLOCK *** [ 74.453904][ T5925] [ 74.457134][ T5925] 3 locks held by syz.0.17/5925: [ 74.459197][ T5925] #0: ffff888029030430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 74.463338][ T5925] #1: ffff888028b79c50 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 74.467968][ T5925] #2: ffff888028b79c88 (&q->q_usage_counter(queue)#4){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 74.472672][ T5925] [ 74.472672][ T5925] stack backtrace: [ 74.475009][ T5925] CPU: 2 UID: 0 PID: 5925 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 74.475029][ T5925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.475039][ T5925] Call Trace: [ 74.475046][ T5925] [ 74.475052][ T5925] dump_stack_lvl+0x100/0x190 [ 74.475077][ T5925] print_circular_bug.cold+0x178/0x1c7 [ 74.475102][ T5925] check_noncircular+0x146/0x160 [ 74.475121][ T5925] check_prev_add+0xeb/0xe60 [ 74.475137][ T5925] __lock_acquire+0x136c/0x1a40 [ 74.475156][ T5925] lock_acquire+0x1b9/0x370 [ 74.475172][ T5925] ? kernfs_iop_getattr+0x9c/0xf0 [ 74.475194][ T5925] ? __pfx___might_resched+0x10/0x10 [ 74.475212][ T5925] down_read+0x99/0x4c0 [ 74.475235][ T5925] ? kernfs_iop_getattr+0x9c/0xf0 [ 74.475254][ T5925] ? find_held_lock+0x2b/0x80 [ 74.475274][ T5925] ? __pfx_down_read+0x10/0x10 [ 74.475295][ T5925] ? kernfs_root+0xee/0x2a0 [ 74.475316][ T5925] kernfs_iop_getattr+0x9c/0xf0 [ 74.475337][ T5925] vfs_getattr_nosec+0x2d4/0x430 [ 74.475383][ T5925] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 74.475408][ T5925] vfs_getattr+0x4a/0x60 [ 74.475423][ T5925] loop_query_min_dio_size.isra.0+0x117/0x250 [ 74.475446][ T5925] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 74.475473][ T5925] lo_ioctl+0x13aa/0x1bc0 [ 74.475496][ T5925] ? __pfx_lo_ioctl+0x10/0x10 [ 74.475516][ T5925] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 74.475542][ T5925] ? kasan_quarantine_put+0x104/0x240 [ 74.475557][ T5925] ? blk_get_meta_cap+0xd4/0x6c0 [ 74.475576][ T5925] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 74.475596][ T5925] ? blkdev_common_ioctl+0x515/0x2b80 [ 74.475616][ T5925] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 74.475637][ T5925] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.475652][ T5925] ? do_vfs_ioctl+0x226/0x13e0 [ 74.475672][ T5925] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 74.475690][ T5925] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 74.475714][ T5925] ? __fget_files+0x215/0x3d0 [ 74.475736][ T5925] ? __pfx_lo_ioctl+0x10/0x10 [ 74.475756][ T5925] blkdev_ioctl+0x5ad/0x6f0 [ 74.475797][ T5925] ? __pfx_blkdev_ioctl+0x10/0x10 [ 74.475813][ T5925] ? selinux_file_ioctl+0x13b/0x290 [ 74.475829][ T5925] ? selinux_file_ioctl+0xb6/0x290 [ 74.475846][ T5925] ? __pfx_blkdev_ioctl+0x10/0x10 [ 74.475861][ T5925] __x64_sys_ioctl+0x18e/0x210 [ 74.475878][ T5925] do_syscall_64+0x115/0x870 [ 74.475895][ T5925] ? clear_bhb_loop+0x40/0x90 [ 74.475911][ T5925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.475924][ T5925] RIP: 0033:0x7fa11f19de59 [ 74.475937][ T5925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.475949][ T5925] RSP: 002b:00007fa11fff2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.475992][ T5925] RAX: ffffffffffffffda RBX: 00007fa11f425fa0 RCX: 00007fa11f19de59 [ 74.476000][ T5925] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 74.476008][ T5925] RBP: 00007fa11f233e6f R08: 0000000000000000 R09: 0000000000000000 [ 74.476016][ T5925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.476024][ T5925] R13: 00007fa11f426038 R14: 00007fa11f425fa0 R15: 00007ffcd51a8538 [ 74.476035][ T5925] [ 76.162517][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.578994][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.581697][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.862225][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.961464][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.027435][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.098266][ T12] bridge_slave_1: left allmulticast mode [ 78.100535][ T12] bridge_slave_1: left promiscuous mode [ 78.102685][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.107425][ T12] bridge_slave_0: left allmulticast mode [ 78.110156][ T12] bridge_slave_0: left promiscuous mode [ 78.112389][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.154364][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.159841][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.164421][ T12] bond0 (unregistering): Released all slaves [ 78.223161][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 78.223180][ T42] audit: type=1400 audit(1783009356.424:199): avc: denied { write } for pid=5930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.265026][ T42] audit: type=1400 audit(1783009356.464:200): avc: denied { write } for pid=5933 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.291100][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 78.343308][ T42] audit: type=1400 audit(1783009356.544:201): avc: denied { write } for pid=5936 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.370668][ T42] audit: type=1400 audit(1783009356.574:202): avc: denied { write } for pid=5939 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.409298][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 78.478993][ T42] audit: type=1400 audit(1783009356.674:203): avc: denied { write } for pid=5943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.491396][ T12] hsr_slave_0: left promiscuous mode [ 78.493534][ T12] hsr_slave_1: left promiscuous mode [ 78.495404][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.498349][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.501068][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.503341][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.508146][ T12] veth1_macvtap: left promiscuous mode [ 78.509969][ T12] veth0_macvtap: left promiscuous mode [ 78.511743][ T12] veth1_vlan: left promiscuous mode [ 78.513413][ T12] veth0_vlan: left promiscuous mode [ 78.516637][ T42] audit: type=1400 audit(1783009356.714:204): avc: denied { write } for pid=5946 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.583426][ T12] team0 (unregistering): Port device team_slave_1 removed [ 78.587880][ T12] team0 (unregistering): Port device team_slave_0 removed [ 78.621447][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 78.678792][ T42] audit: type=1400 audit(1783009356.884:205): avc: denied { write } for pid=5949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.717262][ T42] audit: type=1400 audit(1783009356.914:206): avc: denied { write } for pid=5952 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.746746][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4