Warning: Permanently added '[localhost]:45902' (ED25519) to the list of known hosts. [ 44.981111][ T44] kauditd_printk_skb: 17 callbacks suppressed [ 44.981123][ T44] audit: type=1400 audit(1791203484.690:138): avc: denied { execute } for pid=5729 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.981707][ T44] audit: type=1400 audit(1791203484.690:139): avc: denied { execute_no_trans } for pid=5729 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/10/05 12:31:26 parsed 1 programs 2026/10/05 12:31:26 serving rpc on tcp://46499 [ 46.288569][ T44] audit: type=1400 audit(1791203486.000:140): avc: denied { node_bind } for pid=5729 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 46.293091][ T44] audit: type=1400 audit(1791203486.000:141): avc: denied { node_bind } for pid=5729 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 49.382698][ T44] audit: type=1400 audit(1791203489.090:142): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 49.384320][ T44] audit: type=1400 audit(1791203489.090:143): avc: denied { mount } for pid=5740 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.386570][ T5740] cgroup: Unknown subsys name 'net' [ 49.390032][ T44] audit: type=1400 audit(1791203489.100:144): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.530893][ T5740] cgroup: Unknown subsys name 'cpuset' [ 49.533714][ T5740] cgroup: Unknown subsys name 'rlimit' [ 49.721372][ T44] audit: type=1400 audit(1791203489.430:145): avc: denied { setattr } for pid=5740 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.723838][ T44] audit: type=1400 audit(1791203489.430:146): avc: denied { create } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.723867][ T44] audit: type=1400 audit(1791203489.430:147): avc: denied { write } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.792606][ T5742] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 50.739288][ T5740] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.189867][ T44] kauditd_printk_skb: 11 callbacks suppressed [ 53.189886][ T44] audit: type=1400 audit(1791203492.900:159): avc: denied { execmem } for pid=5746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.198047][ T44] audit: type=1400 audit(1791203492.900:160): avc: denied { read } for pid=5747 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.198093][ T44] audit: type=1400 audit(1791203492.900:161): avc: denied { open } for pid=5747 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.198126][ T44] audit: type=1400 audit(1791203492.910:162): avc: denied { mounton } for pid=5747 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.256338][ T44] audit: type=1400 audit(1791203492.960:163): avc: denied { mount } for pid=5747 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.258433][ T44] audit: type=1400 audit(1791203492.970:164): avc: denied { mounton } for pid=5747 comm="syz-executor" path="/syzkaller.cQzJoW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.259955][ T44] audit: type=1400 audit(1791203492.970:165): avc: denied { mount } for pid=5747 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.263023][ T44] audit: type=1400 audit(1791203492.970:166): avc: denied { mounton } for pid=5747 comm="syz-executor" path="/syzkaller.cQzJoW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 53.264297][ T44] audit: type=1400 audit(1791203492.970:167): avc: denied { mounton } for pid=5747 comm="syz-executor" path="/syzkaller.cQzJoW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 53.270070][ T44] audit: type=1400 audit(1791203492.980:168): avc: denied { unmount } for pid=5747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.312017][ T5747] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.023234][ T5770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.023701][ T5770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.024064][ T5770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.025335][ T5770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.025910][ T5770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.329325][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.329339][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.358877][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.358896][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.085518][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.086235][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.086337][ T5793] bridge_slave_0: entered allmulticast mode [ 55.087958][ T5793] bridge_slave_0: entered promiscuous mode [ 55.092047][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.092159][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.092256][ T5793] bridge_slave_1: entered allmulticast mode [ 55.093591][ T5793] bridge_slave_1: entered promiscuous mode [ 55.112333][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.114565][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.135509][ T5793] team0: Port device team_slave_0 added [ 55.137693][ T5793] team0: Port device team_slave_1 added [ 55.154268][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.154281][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.154293][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.156021][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.156032][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.156051][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.183305][ T5793] hsr_slave_0: entered promiscuous mode [ 55.183829][ T5793] hsr_slave_1: entered promiscuous mode [ 55.333249][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.341775][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.347613][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.352860][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.354040][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.357775][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.359162][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.362762][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.419196][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.432591][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.438925][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.439057][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.446337][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.446409][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.709987][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.738604][ T5793] veth0_vlan: entered promiscuous mode [ 55.742709][ T5793] veth1_vlan: entered promiscuous mode [ 55.760257][ T5793] veth0_macvtap: entered promiscuous mode [ 55.762650][ T5793] veth1_macvtap: entered promiscuous mode [ 55.772869][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.779906][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.797873][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.827104][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.827132][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.827150][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.871939][ T5778] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.930564][ T5778] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.980940][ T5778] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.043063][ T5778] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/10/05 12:31:36 executed programs: 0 [ 57.105040][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.106089][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.106445][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.107793][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.108342][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.440874][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.441004][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.441100][ T5867] bridge_slave_0: entered allmulticast mode [ 57.442492][ T5867] bridge_slave_0: entered promiscuous mode [ 57.445717][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.445793][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.445885][ T5867] bridge_slave_1: entered allmulticast mode [ 57.447528][ T5867] bridge_slave_1: entered promiscuous mode [ 57.465830][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.468710][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.494920][ T5867] team0: Port device team_slave_0 added [ 57.497509][ T5867] team0: Port device team_slave_1 added [ 57.518771][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.518787][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.518808][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.520355][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.520367][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.520387][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.559448][ T5867] hsr_slave_0: entered promiscuous mode [ 57.560223][ T5867] hsr_slave_1: entered promiscuous mode [ 57.560763][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 57.560849][ T5867] Cannot create hsr debugfs directory [ 58.824412][ T5778] bridge_slave_1: left allmulticast mode [ 58.824443][ T5778] bridge_slave_1: left promiscuous mode [ 58.824869][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.830656][ T5778] bridge_slave_0: left allmulticast mode [ 58.830671][ T5778] bridge_slave_0: left promiscuous mode [ 58.831397][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.912358][ T5778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.914089][ T5778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.914979][ T5778] bond0 (unregistering): Released all slaves [ 58.956774][ T5778] hsr_slave_0: left promiscuous mode [ 58.959049][ T5778] hsr_slave_1: left promiscuous mode [ 58.959693][ T5778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.959715][ T5778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.962113][ T5778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.962127][ T5778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.972544][ T5778] veth1_macvtap: left promiscuous mode [ 58.972613][ T5778] veth0_macvtap: left promiscuous mode [ 58.972677][ T5778] veth1_vlan: left promiscuous mode [ 58.972722][ T5778] veth0_vlan: left promiscuous mode [ 59.097646][ T5778] team0 (unregistering): Port device team_slave_1 removed [ 59.102852][ T5778] team0 (unregistering): Port device team_slave_0 removed [ 59.187390][ T5090] Bluetooth: hci0: command tx timeout [ 59.239256][ T44] kauditd_printk_skb: 20 callbacks suppressed [ 59.239269][ T44] audit: type=1400 audit(1791203498.950:189): avc: denied { write } for pid=5887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.239294][ T44] audit: type=1400 audit(1791203498.950:190): avc: denied { create } for pid=5887 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.239424][ T44] audit: type=1400 audit(1791203498.950:191): avc: denied { write } for pid=5887 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=1939 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.239673][ T44] audit: type=1400 audit(1791203498.950:192): avc: denied { append } for pid=5887 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=1939 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.314117][ T44] audit: type=1400 audit(1791203499.020:193): avc: denied { write } for pid=5890 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.314755][ T44] audit: type=1400 audit(1791203499.020:194): avc: denied { unlink } for pid=5890 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=1939 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.415217][ T44] audit: type=1400 audit(1791203499.120:195): avc: denied { write } for pid=5892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.469563][ T44] audit: type=1400 audit(1791203499.180:196): avc: denied { write } for pid=5895 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.540220][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.543275][ T5867] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.544049][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.547321][ T5867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.547845][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.555375][ T5867] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.556069][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.561418][ T5867] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.613480][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.624464][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.629092][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.629176][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.634354][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.634435][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.096652][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.117293][ T5867] veth0_vlan: entered promiscuous mode [ 60.120975][ T5867] veth1_vlan: entered promiscuous mode [ 60.134543][ T5867] veth0_macvtap: entered promiscuous mode [ 60.138505][ T5867] veth1_macvtap: entered promiscuous mode [ 60.147811][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.152512][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.161989][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.162186][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.214584][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.214606][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.241629][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.241648][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.247799][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.267138][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.284442][ T44] audit: type=1400 audit(1791203499.990:197): avc: denied { read write } for pid=5914 comm="syz.0.17" name="ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.286699][ T44] audit: type=1400 audit(1791203499.990:198): avc: denied { open } for pid=5914 comm="syz.0.17" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.318803][ T5914] [ 60.320196][ T5914] ============================= [ 60.322292][ T5914] WARNING: suspicious RCU usage [ 60.324383][ T5914] syzkaller #0 Not tainted [ 60.326290][ T5914] ----------------------------- [ 60.328399][ T5914] lib/maple_tree.c:720 suspicious rcu_dereference_check() usage! [ 60.330880][ T5914] [ 60.330880][ T5914] other info that might help us debug this: [ 60.330880][ T5914] [ 60.334029][ T5914] [ 60.334029][ T5914] rcu_scheduler_active = 2, debug_locks = 1 [ 60.336531][ T5914] locks held by syz.0.17/5914: 1, last CPU#2: [ 60.338713][ T5914] #0: ffff88802cae40a0 (&ctx->uring_lock){+.+.}-{4:4}, at: tctx_task_work_run+0x1cd/0xbf0 [ 60.341933][ T5914] [ 60.341933][ T5914] stack backtrace: [ 60.343787][ T5914] CPU: 2 UID: 0 PID: 5914 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 60.346577][ T5914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.349771][ T5914] Call Trace: [ 60.350866][ T5914] [ 60.351844][ T5914] dump_stack_lvl+0x100/0x190 [ 60.353357][ T5914] lockdep_rcu_suspicious.cold+0x4f/0xb2 [ 60.355125][ T5914] mas_start+0x621/0x7c0 [ 60.356326][ T5914] mas_walk+0x82/0x310 [ 60.357619][ T5914] ublk_try_buf_match+0x469/0x7e0 [ 60.359252][ T5914] ? __pfx_ublk_try_buf_match+0x10/0x10 [ 60.360998][ T5914] ? lock_acquire+0x1d1/0x380 [ 60.362532][ T5914] ? tctx_task_work_run+0x1cd/0xbf0 [ 60.364203][ T5914] ublk_init_iod+0x4a4/0x5b0 [ 60.365671][ T5914] ? __pfx_ublk_init_iod+0x10/0x10 [ 60.367279][ T5914] ublk_setup_iod+0x145/0x2f0 [ 60.368825][ T5914] ? __mutex_unlock_slowpath+0x35d/0x930 [ 60.370580][ T5914] ublk_dispatch_req+0x4e/0xb00 [ 60.372136][ T5914] ublk_cmd_tw_cb+0xbe/0x110 [ 60.373583][ T5914] ? __pfx_ublk_cmd_tw_cb+0x10/0x10 [ 60.375265][ T5914] ? __pfx_ublk_cmd_tw_cb+0x10/0x10 [ 60.376904][ T5914] tctx_task_work_run+0xabe/0xbf0 [ 60.378524][ T5914] ? lockdep_hardirqs_on+0x7d/0x110 [ 60.380398][ T5914] ? __pfx_tctx_task_work_run+0x10/0x10 [ 60.382170][ T5914] tctx_task_work+0x7a/0xa0 [ 60.383635][ T5914] ? __pfx_tctx_task_work+0x10/0x10 [ 60.385273][ T5914] ? _raw_spin_unlock_irq+0x23/0x50 [ 60.386912][ T5914] task_work_run+0x150/0x240 [ 60.388406][ T5914] ? __pfx_task_work_run+0x10/0x10 [ 60.390531][ T5914] ? do_raw_spin_unlock+0x145/0x1e0 [ 60.392752][ T5914] do_exit+0x8da/0x2a50 [ 60.394532][ T5914] ? signal_wake_up_state+0xa8/0x130 [ 60.396800][ T5914] ? __pfx_do_exit+0x10/0x10 [ 60.398764][ T5914] ? do_group_exit+0x1bd/0x2a0 [ 60.400842][ T5914] ? rcu_is_watching+0x13/0xc0 [ 60.402935][ T5914] do_group_exit+0xd5/0x2a0 [ 60.404838][ T5914] __x64_sys_exit_group+0x3e/0x50 [ 60.406899][ T5914] x64_sys_call+0x1567/0x1570 [ 60.408923][ T5914] do_syscall_64+0x123/0x790 [ 60.410819][ T5914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.413236][ T5914] RIP: 0033:0x7f13cdb9e199 [ 60.415136][ T5914] Code: Unable to access opcode bytes at 0x7f13cdb9e16f. [ 60.417828][ T5914] RSP: 002b:00007ffd90322c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 60.421331][ T5914] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f13cdb9e199 [ 60.424732][ T5914] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.428071][ T5914] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007f13cdded3e0 [ 60.431415][ T5914] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 60.434851][ T5914] R13: 00007f13cdded3e0 R14: 0000000000000003 R15: 00007ffd90322d10 [ 60.438263][ T5914] [ 60.440713][ T5914] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 60.440753][ T5914] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 60.444521][ T26] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 60.444547][ T26] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 60.445343][ T5106] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 60.445360][ T5106] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 60.445417][ T5106] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 60.445430][ T5106] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 60.445480][ T5106] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 60.445493][ T5106] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 60.445547][ T5106] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 60.445560][ T5106] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 60.445611][ T5106] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 60.445624][ T5106] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 60.445670][ T5106] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 60.445682][ T5106] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 60.445698][ T1781] ldm_validate_partition_table(): Disk read failed. [ 60.445736][ T5106] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 60.445748][ T5106] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 60.446057][ T5106] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 60.446071][ T5106] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 60.446418][ T1781] Dev ublkb0: unable to read RDB block 0 [ 60.446882][ T1781] ublkb0: unable to read partition table [ 62.165755][ T5778] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.670261][ T5778] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.750829][ T5778] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.832544][ T5778] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.936452][ T5778] bridge_slave_1: left allmulticast mode [ 63.936469][ T5778] bridge_slave_1: left promiscuous mode [ 63.936573][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.941753][ T5778] bridge_slave_0: left allmulticast mode [ 63.941768][ T5778] bridge_slave_0: left promiscuous mode [ 63.941874][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.042850][ T5778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.044357][ T5778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.045136][ T5778] bond0 (unregistering): Released all slaves [ 64.225858][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 64.312769][ T44] kauditd_printk_skb: 8 callbacks suppressed [ 64.312786][ T44] audit: type=1400 audit(1791203504.020:207): avc: denied { write } for pid=5927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.354384][ T5778] hsr_slave_0: left promiscuous mode [ 64.354950][ T5778] hsr_slave_1: left promiscuous mode [ 64.355627][ T5778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.355641][ T5778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.356276][ T5778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.356289][ T5778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.361090][ T44] audit: type=1400 audit(1791203504.070:208): avc: denied { write } for pid=5930 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.362116][ T5778] veth1_macvtap: left promiscuous mode [ 64.362143][ T5778] veth0_macvtap: left promiscuous mode [ 64.362220][ T5778] veth1_vlan: left promiscuous mode [ 64.362267][ T5778] veth0_vlan: left promiscuous mode [ 64.540947][ T5778] team0 (unregistering): Port device team_slave_1 removed [ 64.546357][ T5778] team0 (unregistering): Port device team_slave_0 removed [ 64.602920][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 64.704447][ T44] audit: type=1400 audit(1791203504.410:209): avc: denied { write } for pid=5934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.767643][ T44] audit: type=1400 audit(1791203504.480:210): avc: denied { write } for pid=5937 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.807788][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 64.869162][ T44] audit: type=1400 audit(1791203504.580:211): avc: denied { write } for pid=5940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.911959][ T44] audit: type=1400 audit(1791203504.620:212): avc: denied { write } for pid=5943 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.941203][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5