Warning: Permanently added '[localhost]:7636' (ED25519) to the list of known hosts. [ 45.674649][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 45.674750][ T43] audit: type=1400 audit(1788438093.606:138): avc: denied { execute } for pid=5725 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.675130][ T43] audit: type=1400 audit(1788438093.606:139): avc: denied { execute_no_trans } for pid=5725 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/09/03 12:21:35 parsed 1 programs 2026/09/03 12:21:35 serving rpc on tcp://38091 [ 47.134456][ T43] audit: type=1400 audit(1788438095.066:140): avc: denied { node_bind } for pid=5725 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 47.139050][ T43] audit: type=1400 audit(1788438095.066:141): avc: denied { node_bind } for pid=5725 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 49.813425][ T43] audit: type=1400 audit(1788438097.746:142): avc: denied { mounton } for pid=5735 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 49.826075][ T43] audit: type=1400 audit(1788438097.756:143): avc: denied { mount } for pid=5735 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.829153][ T5735] cgroup: Unknown subsys name 'net' [ 49.830438][ T43] audit: type=1400 audit(1788438097.756:144): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.958308][ T5735] cgroup: Unknown subsys name 'cpuset' [ 49.965075][ T5735] cgroup: Unknown subsys name 'rlimit' [ 50.100851][ T43] audit: type=1400 audit(1788438098.026:145): avc: denied { setattr } for pid=5735 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.101323][ T43] audit: type=1400 audit(1788438098.026:146): avc: denied { create } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.101506][ T43] audit: type=1400 audit(1788438098.026:147): avc: denied { write } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.164002][ T5737] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 50.910859][ T5735] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.350157][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 53.350262][ T43] audit: type=1400 audit(1788438101.276:159): avc: denied { execmem } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.357265][ T43] audit: type=1400 audit(1788438101.286:160): avc: denied { read } for pid=5743 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.357654][ T43] audit: type=1400 audit(1788438101.286:161): avc: denied { open } for pid=5743 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.358901][ T43] audit: type=1400 audit(1788438101.286:162): avc: denied { mounton } for pid=5743 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.434451][ T43] audit: type=1400 audit(1788438101.366:163): avc: denied { mount } for pid=5743 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.436935][ T43] audit: type=1400 audit(1788438101.366:164): avc: denied { mounton } for pid=5743 comm="syz-executor" path="/syzkaller.rrGIbU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.438574][ T43] audit: type=1400 audit(1788438101.366:165): avc: denied { mount } for pid=5743 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.442008][ T43] audit: type=1400 audit(1788438101.366:166): avc: denied { mounton } for pid=5743 comm="syz-executor" path="/syzkaller.rrGIbU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 53.443536][ T43] audit: type=1400 audit(1788438101.376:167): avc: denied { mounton } for pid=5743 comm="syz-executor" path="/syzkaller.rrGIbU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 53.448571][ T43] audit: type=1400 audit(1788438101.376:168): avc: denied { unmount } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.487386][ T5743] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.098764][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.102337][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.105457][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.108529][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.112149][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.438448][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.438813][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.483215][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.483289][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.496676][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.500409][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.500512][ T5815] bridge_slave_0: entered allmulticast mode [ 56.501278][ T5815] bridge_slave_0: entered promiscuous mode [ 56.505040][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.505141][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.505234][ T5815] bridge_slave_1: entered allmulticast mode [ 56.507422][ T5815] bridge_slave_1: entered promiscuous mode [ 56.524912][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.527073][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.541440][ T5815] team0: Port device team_slave_0 added [ 56.543113][ T5815] team0: Port device team_slave_1 added [ 56.555459][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.555519][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.555566][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.557446][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.557458][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.557470][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.584359][ T5815] hsr_slave_0: entered promiscuous mode [ 56.585221][ T5815] hsr_slave_1: entered promiscuous mode [ 56.724108][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.730251][ T5815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.731680][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.735723][ T5815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.736655][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.741149][ T5815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.742950][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.746032][ T5815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.810310][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.828026][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.837450][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.837622][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.844008][ T767] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.844081][ T767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.155947][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.200415][ T5815] veth0_vlan: entered promiscuous mode [ 57.206864][ T5815] veth1_vlan: entered promiscuous mode [ 57.226474][ T5815] veth0_macvtap: entered promiscuous mode [ 57.231058][ T5815] veth1_macvtap: entered promiscuous mode [ 57.243962][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.253749][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.303478][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.303587][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.303622][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.303684][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.389740][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.462645][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.525885][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.619363][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/09/03 12:21:45 executed programs: 0 [ 57.865563][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.866299][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.867535][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.868848][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.869925][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.305087][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.305186][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.305345][ T5860] bridge_slave_0: entered allmulticast mode [ 58.306867][ T5860] bridge_slave_0: entered promiscuous mode [ 58.310007][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.310092][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.310174][ T5860] bridge_slave_1: entered allmulticast mode [ 58.311125][ T5860] bridge_slave_1: entered promiscuous mode [ 58.327903][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.330077][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.344381][ T5860] team0: Port device team_slave_0 added [ 58.346023][ T5860] team0: Port device team_slave_1 added [ 58.361812][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.361873][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.362107][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.365127][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.365141][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.365164][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.413431][ T5860] hsr_slave_0: entered promiscuous mode [ 58.414377][ T5860] hsr_slave_1: entered promiscuous mode [ 58.414960][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 58.415066][ T5860] Cannot create hsr debugfs directory [ 59.944013][ T5084] Bluetooth: hci0: command tx timeout [ 60.481362][ T12] bridge_slave_1: left allmulticast mode [ 60.481451][ T12] bridge_slave_1: left promiscuous mode [ 60.482235][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.491806][ T12] bridge_slave_0: left allmulticast mode [ 60.491881][ T12] bridge_slave_0: left promiscuous mode [ 60.493359][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.640925][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.652160][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.658109][ T12] bond0 (unregistering): Released all slaves [ 60.724103][ T12] hsr_slave_0: left promiscuous mode [ 60.726511][ T12] hsr_slave_1: left promiscuous mode [ 60.728086][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.728112][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.729606][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.729623][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.744988][ T12] veth1_macvtap: left promiscuous mode [ 60.745135][ T12] veth0_macvtap: left promiscuous mode [ 60.745273][ T12] veth1_vlan: left promiscuous mode [ 60.745738][ T12] veth0_vlan: left promiscuous mode [ 60.927369][ T12] team0 (unregistering): Port device team_slave_1 removed [ 60.936763][ T12] team0 (unregistering): Port device team_slave_0 removed [ 61.138900][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 61.138968][ T43] audit: type=1400 audit(1788438109.066:189): avc: denied { write } for pid=5879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.139036][ T43] audit: type=1400 audit(1788438109.066:190): avc: denied { create } for pid=5879 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.139084][ T43] audit: type=1400 audit(1788438109.066:191): avc: denied { write } for pid=5879 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2039 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.139135][ T43] audit: type=1400 audit(1788438109.066:192): avc: denied { append } for pid=5879 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2039 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.200385][ T43] audit: type=1400 audit(1788438109.126:193): avc: denied { write } for pid=5882 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.200887][ T43] audit: type=1400 audit(1788438109.126:194): avc: denied { unlink } for pid=5882 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2039 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.292050][ T43] audit: type=1400 audit(1788438109.216:195): avc: denied { write } for pid=5884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.302319][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.308049][ T5860] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.309592][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.315153][ T5860] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.316029][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.321241][ T5860] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.322129][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.328832][ T5860] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.359697][ T43] audit: type=1400 audit(1788438109.286:196): avc: denied { write } for pid=5887 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.422648][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.436996][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.444691][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.444815][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.450548][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.450671][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.810224][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.852908][ T5860] veth0_vlan: entered promiscuous mode [ 61.860114][ T5860] veth1_vlan: entered promiscuous mode [ 61.886045][ T5860] veth0_macvtap: entered promiscuous mode [ 61.889812][ T5860] veth1_macvtap: entered promiscuous mode [ 61.901640][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.909323][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.933731][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.934043][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.963749][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.963912][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.970212][ T767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.970233][ T767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.005852][ T767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.005936][ T767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.024173][ T5084] Bluetooth: hci0: command tx timeout [ 62.048667][ T43] audit: type=1400 audit(1788438109.976:197): avc: denied { mount } for pid=5906 comm="syz.0.17" name="/" dev="configfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 62.051851][ T43] audit: type=1400 audit(1788438109.976:198): avc: denied { search } for pid=5906 comm="syz.0.17" name="/" dev="configfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.080857][ T5906] [ 62.082035][ T5906] ====================================================== [ 62.085222][ T5906] WARNING: possible circular locking dependency detected [ 62.088291][ T5906] syzkaller #0 Not tainted [ 62.090225][ T5906] ------------------------------------------------------ [ 62.093336][ T5906] syz.0.17/5906 is trying to acquire lock: [ 62.096199][ T5906] ffff888020488ac0 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 62.101192][ T5906] [ 62.101192][ T5906] but task is already holding lock: [ 62.104282][ T5906] ffffffff9047b920 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 62.108397][ T5906] [ 62.108397][ T5906] which lock already depends on the new lock. [ 62.108397][ T5906] [ 62.113466][ T5906] [ 62.113466][ T5906] the existing dependency chain (in reverse order) is: [ 62.117254][ T5906] [ 62.117254][ T5906] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 62.120559][ T5906] lock_acquire+0x1d1/0x380 [ 62.122677][ T5906] __mutex_lock+0x1a4/0x1bd0 [ 62.124940][ T5906] usbg_make_tpg+0x10b/0x610 [ 62.127197][ T5906] target_fabric_make_tpg+0xab/0x8c0 [ 62.129973][ T5906] configfs_mkdir+0x525/0xd40 [ 62.132550][ T5906] vfs_mkdir+0x364/0x850 [ 62.134736][ T5906] filename_mkdirat+0x48b/0x5e0 [ 62.137921][ T5906] __x64_sys_mkdir+0x6b/0x90 [ 62.140104][ T5906] do_syscall_64+0x123/0x790 [ 62.142246][ T5906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.145128][ T5906] [ 62.145128][ T5906] -> #1 (&subsys->su_mutex){+.+.}-{4:4}: [ 62.148853][ T5906] lock_acquire+0x1d1/0x380 [ 62.151704][ T5906] __mutex_lock+0x1a4/0x1bd0 [ 62.154013][ T5906] configfs_rmdir+0x5ae/0x950 [ 62.156215][ T5906] vfs_rmdir+0x328/0x8a0 [ 62.158250][ T5906] filename_rmdir+0x31a/0x5c0 [ 62.160387][ T5906] __x64_sys_rmdir+0x46/0x70 [ 62.162593][ T5906] do_syscall_64+0x123/0x790 [ 62.164795][ T5906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.167810][ T5906] [ 62.167810][ T5906] -> #0 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}: [ 62.171590][ T5906] check_prev_add+0xeb/0xe60 [ 62.173698][ T5906] __lock_acquire+0x1492/0x1ec0 [ 62.175914][ T5906] lock_acquire+0x1d1/0x380 [ 62.178004][ T5906] down_write+0x8b/0x1f0 [ 62.180230][ T5906] configfs_depend_item_unlocked+0xf3/0x6a0 [ 62.184037][ T5906] usbg_make_tpg+0x251/0x610 [ 62.186644][ T5906] target_fabric_make_tpg+0xab/0x8c0 [ 62.189088][ T5906] configfs_mkdir+0x525/0xd40 [ 62.191269][ T5906] vfs_mkdir+0x364/0x850 [ 62.193273][ T5906] filename_mkdirat+0x48b/0x5e0 [ 62.195471][ T5906] __x64_sys_mkdir+0x6b/0x90 [ 62.197764][ T5906] do_syscall_64+0x123/0x790 [ 62.200025][ T5906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.203018][ T5906] [ 62.203018][ T5906] other info that might help us debug this: [ 62.203018][ T5906] [ 62.207277][ T5906] Chain exists of: [ 62.207277][ T5906] &sb->s_type->i_mutex_key#24 --> &subsys->su_mutex --> tpg_instances_lock [ 62.207277][ T5906] [ 62.213402][ T5906] Possible unsafe locking scenario: [ 62.213402][ T5906] [ 62.216709][ T5906] CPU0 CPU1 [ 62.219021][ T5906] ---- ---- [ 62.221305][ T5906] lock(tpg_instances_lock); [ 62.223295][ T5906] lock(&subsys->su_mutex); [ 62.226296][ T5906] lock(tpg_instances_lock); [ 62.229239][ T5906] lock(&sb->s_type->i_mutex_key#24); [ 62.231421][ T5906] [ 62.231421][ T5906] *** DEADLOCK *** [ 62.231421][ T5906] [ 62.234691][ T5906] locks held by syz.0.17/5906: 4, last CPU#2: [ 62.237142][ T5906] #0: ffff888023b98460 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 62.241465][ T5906] #1: ffff88803f7b3a40 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 62.246798][ T5906] #2: ffffffff8ffae648 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40 [ 62.250861][ T5906] #3: ffffffff9047b920 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 62.254658][ T5906] [ 62.254658][ T5906] stack backtrace: [ 62.257032][ T5906] CPU: 2 UID: 0 PID: 5906 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 62.260575][ T5906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.265055][ T5906] Call Trace: [ 62.266670][ T5906] [ 62.268008][ T5906] dump_stack_lvl+0x100/0x190 [ 62.270330][ T5906] print_circular_bug.cold+0x178/0x1be [ 62.272417][ T5906] check_noncircular+0x146/0x160 [ 62.274339][ T5906] check_prev_add+0xeb/0xe60 [ 62.276155][ T5906] __lock_acquire+0x1492/0x1ec0 [ 62.278196][ T5906] ? rcu_is_watching+0x13/0xc0 [ 62.280154][ T5906] lock_acquire+0x1d1/0x380 [ 62.282063][ T5906] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 62.284966][ T5906] ? __pfx___might_resched+0x10/0x10 [ 62.287287][ T5906] down_write+0x8b/0x1f0 [ 62.288891][ T5906] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 62.291078][ T5906] ? __pfx_down_write+0x10/0x10 [ 62.292747][ T5906] ? kstrtou16+0xde/0x130 [ 62.294123][ T5906] configfs_depend_item_unlocked+0xf3/0x6a0 [ 62.296209][ T5906] usbg_make_tpg+0x251/0x610 [ 62.297673][ T5906] ? __pfx_usbg_make_tpg+0x10/0x10 [ 62.299379][ T5906] ? find_held_lock+0x2b/0x80 [ 62.300963][ T5906] ? __pfx_usbg_make_tpg+0x10/0x10 [ 62.302669][ T5906] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 62.304803][ T5906] target_fabric_make_tpg+0xab/0x8c0 [ 62.306674][ T5906] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 62.308891][ T5906] configfs_mkdir+0x525/0xd40 [ 62.310582][ T5906] ? may_create+0x285/0x440 [ 62.312235][ T5906] ? __pfx_configfs_mkdir+0x10/0x10 [ 62.314035][ T5906] vfs_mkdir+0x364/0x850 [ 62.315553][ T5906] filename_mkdirat+0x48b/0x5e0 [ 62.317373][ T5906] ? __pfx_filename_mkdirat+0x10/0x10 [ 62.319329][ T5906] ? strncpy_from_user+0x19d/0x2d0 [ 62.321610][ T5906] ? do_getname+0x191/0x390 [ 62.323908][ T5906] __x64_sys_mkdir+0x6b/0x90 [ 62.325983][ T5906] do_syscall_64+0x123/0x790 [ 62.327981][ T5906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.330413][ T5906] RIP: 0033:0x7f0437f9e159 [ 62.331924][ T5906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.339091][ T5906] RSP: 002b:00007ffdfc5c3fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 62.341629][ T5906] RAX: ffffffffffffffda RBX: 00007f0438225fa0 RCX: 00007f0437f9e159 [ 62.344049][ T5906] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 62.346740][ T5906] RBP: 00007f0438035024 R08: 0000000000000000 R09: 0000000000000000 [ 62.349491][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.352615][ T5906] R13: 00007f0438225fac R14: 00007f0438225fa0 R15: 00007f0438225fa0 [ 62.355526][ T5906] [ 64.012240][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.727477][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.768290][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.818853][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.909140][ T12] bridge_slave_1: left allmulticast mode [ 65.909195][ T12] bridge_slave_1: left promiscuous mode [ 65.909478][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.916242][ T12] bridge_slave_0: left allmulticast mode [ 65.916308][ T12] bridge_slave_0: left promiscuous mode [ 65.916610][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.968816][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.973615][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.977273][ T12] bond0 (unregistering): Released all slaves [ 66.111952][ T5440] 8021q: adding VLAN 0 to HW filter on device eth2 [ 66.191836][ T43] kauditd_printk_skb: 40 callbacks suppressed [ 66.191904][ T43] audit: type=1400 audit(1788438114.116:239): avc: denied { write } for pid=5918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.209203][ T12] hsr_slave_0: left promiscuous mode [ 66.211798][ T12] hsr_slave_1: left promiscuous mode [ 66.212095][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.212105][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.214967][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.214979][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.220716][ T12] veth1_macvtap: left promiscuous mode [ 66.220734][ T12] veth0_macvtap: left promiscuous mode [ 66.220763][ T12] veth1_vlan: left promiscuous mode [ 66.220789][ T12] veth0_vlan: left promiscuous mode [ 66.228201][ T43] audit: type=1400 audit(1788438114.156:240): avc: denied { write } for pid=5921 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.288007][ T12] team0 (unregistering): Port device team_slave_1 removed [ 66.290720][ T12] team0 (unregistering): Port device team_slave_0 removed [ 66.318424][ T5440] 8021q: adding VLAN 0 to HW filter on device eth3 [ 66.368173][ T43] audit: type=1400 audit(1788438114.296:241): avc: denied { write } for pid=5924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.405579][ T43] audit: type=1400 audit(1788438114.336:242): avc: denied { write } for pid=5927 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.427735][ T5440] 8021q: adding VLAN 0 to HW filter on device eth4 [ 66.476815][ T43] audit: type=1400 audit(1788438114.406:243): avc: denied { write } for pid=5930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.510600][ T43] audit: type=1400 audit(1788438114.436:244): avc: denied { write } for pid=5933 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.532145][ T5440] 8021q: adding VLAN 0 to HW filter on device eth5 [ 71.633703][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.636021][ T1437] ieee802154 phy1 wpan1: encryption failed: -22