Warning: Permanently added '[localhost]:22241' (ED25519) to the list of known hosts. [ 49.783359][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 49.783376][ T42] audit: type=1400 audit(1785299141.176:138): avc: denied { execute } for pid=5730 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 49.791463][ T42] audit: type=1400 audit(1785299141.176:139): avc: denied { execute_no_trans } for pid=5730 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/07/29 04:25:42 parsed 1 programs 2026/07/29 04:25:42 serving rpc on tcp://46109 [ 50.955789][ T42] audit: type=1400 audit(1785299142.346:140): avc: denied { node_bind } for pid=5730 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 50.963932][ T42] audit: type=1400 audit(1785299142.346:141): avc: denied { node_bind } for pid=5730 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 53.322252][ T42] audit: type=1400 audit(1785299144.716:142): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 53.334408][ T42] audit: type=1400 audit(1785299144.726:143): avc: denied { mount } for pid=5740 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.344669][ T5740] cgroup: Unknown subsys name 'net' [ 53.349212][ T42] audit: type=1400 audit(1785299144.736:144): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.544576][ T5740] cgroup: Unknown subsys name 'cpuset' [ 53.548943][ T5740] cgroup: Unknown subsys name 'rlimit' [ 53.708158][ T42] audit: type=1400 audit(1785299145.096:145): avc: denied { setattr } for pid=5740 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.717564][ T42] audit: type=1400 audit(1785299145.096:146): avc: denied { create } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.726548][ T42] audit: type=1400 audit(1785299145.096:147): avc: denied { write } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.764925][ T5743] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 54.523902][ T5740] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.363779][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 56.363793][ T42] audit: type=1400 audit(1785299147.756:159): avc: denied { execmem } for pid=5748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.372098][ T42] audit: type=1400 audit(1785299147.756:160): avc: denied { create } for pid=5748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 56.379262][ T42] audit: type=1400 audit(1785299147.756:161): avc: denied { sys_admin } for pid=5748 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 56.385702][ T42] audit: type=1400 audit(1785299147.756:162): avc: denied { read } for pid=5749 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.393932][ T42] audit: type=1400 audit(1785299147.756:163): avc: denied { open } for pid=5749 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.402906][ T42] audit: type=1400 audit(1785299147.766:164): avc: denied { mounton } for pid=5749 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.428048][ T42] audit: type=1400 audit(1785299147.816:165): avc: denied { mount } for pid=5749 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.436579][ T42] audit: type=1400 audit(1785299147.816:166): avc: denied { mounton } for pid=5749 comm="syz-executor" path="/syzkaller.2Gaom0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.446264][ T42] audit: type=1400 audit(1785299147.816:167): avc: denied { mount } for pid=5749 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.454537][ T42] audit: type=1400 audit(1785299147.826:168): avc: denied { mounton } for pid=5749 comm="syz-executor" path="/syzkaller.2Gaom0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.469645][ T5749] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.458888][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.466885][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.470361][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.474202][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.477175][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.346204][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.348942][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.376105][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.381842][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.048418][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.054214][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.058414][ T5820] bridge_slave_0: entered allmulticast mode [ 59.061927][ T5820] bridge_slave_0: entered promiscuous mode [ 59.070674][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.076573][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.079505][ T5820] bridge_slave_1: entered allmulticast mode [ 59.082835][ T5820] bridge_slave_1: entered promiscuous mode [ 59.107458][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.111838][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.126870][ T5820] team0: Port device team_slave_0 added [ 59.130133][ T5820] team0: Port device team_slave_1 added [ 59.144875][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.147487][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.156545][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.163673][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.166516][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.176732][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.212107][ T5820] hsr_slave_0: entered promiscuous mode [ 59.215257][ T5820] hsr_slave_1: entered promiscuous mode [ 59.383984][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.391054][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.394897][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.399937][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.402729][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.408230][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.410901][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.414801][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.477997][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.494303][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.500666][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.504147][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.514262][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.516617][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.810387][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.839549][ T5820] veth0_vlan: entered promiscuous mode [ 59.845686][ T5820] veth1_vlan: entered promiscuous mode [ 59.866844][ T5820] veth0_macvtap: entered promiscuous mode [ 59.871484][ T5820] veth1_macvtap: entered promiscuous mode [ 59.883794][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.891010][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.899275][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.902716][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.906725][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.912720][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.984598][ T5811] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.066989][ T5811] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.132924][ T5811] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.205983][ T5811] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/07/29 04:25:51 executed programs: 0 [ 60.425497][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.428623][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.432120][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.435567][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.438313][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.809403][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.812682][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.815391][ T5862] bridge_slave_0: entered allmulticast mode [ 60.818312][ T5862] bridge_slave_0: entered promiscuous mode [ 60.822302][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.824674][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.826930][ T5862] bridge_slave_1: entered allmulticast mode [ 60.829609][ T5862] bridge_slave_1: entered promiscuous mode [ 60.846705][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.851351][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.867784][ T5862] team0: Port device team_slave_0 added [ 60.871219][ T5862] team0: Port device team_slave_1 added [ 60.886228][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.888367][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.896354][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.901687][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.903908][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.912156][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.937352][ T5862] hsr_slave_0: entered promiscuous mode [ 60.940042][ T5862] hsr_slave_1: entered promiscuous mode [ 60.943375][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 60.945245][ T5862] Cannot create hsr debugfs directory [ 62.492461][ T5094] Bluetooth: hci0: command tx timeout [ 62.981353][ T5811] bridge_slave_1: left allmulticast mode [ 62.984051][ T5811] bridge_slave_1: left promiscuous mode [ 62.987842][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.995370][ T5811] bridge_slave_0: left allmulticast mode [ 62.997768][ T5811] bridge_slave_0: left promiscuous mode [ 63.000252][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.133259][ T5811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.139234][ T5811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.144137][ T5811] bond0 (unregistering): Released all slaves [ 63.238192][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 63.238211][ T42] audit: type=1400 audit(1785299154.626:189): avc: denied { write } for pid=5886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.250791][ T42] audit: type=1400 audit(1785299154.626:190): avc: denied { create } for pid=5886 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.259848][ T42] audit: type=1400 audit(1785299154.626:191): avc: denied { write } for pid=5886 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2025 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.271523][ T42] audit: type=1400 audit(1785299154.626:192): avc: denied { append } for pid=5886 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2025 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.271787][ T5811] hsr_slave_0: left promiscuous mode [ 63.283847][ T5811] hsr_slave_1: left promiscuous mode [ 63.286627][ T5811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.286961][ T42] audit: type=1400 audit(1785299154.676:193): avc: denied { write } for pid=5889 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.289167][ T5811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.298690][ T42] audit: type=1400 audit(1785299154.676:194): avc: denied { unlink } for pid=5889 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2025 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.311010][ T5811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.313776][ T5811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.322917][ T5811] veth1_macvtap: left promiscuous mode [ 63.325624][ T5811] veth0_macvtap: left promiscuous mode [ 63.327994][ T5811] veth1_vlan: left promiscuous mode [ 63.330290][ T5811] veth0_vlan: left promiscuous mode [ 63.447751][ T5811] team0 (unregistering): Port device team_slave_1 removed [ 63.458877][ T5811] team0 (unregistering): Port device team_slave_0 removed [ 63.535239][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 63.629575][ T42] audit: type=1400 audit(1785299155.016:195): avc: denied { write } for pid=5893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.690140][ T42] audit: type=1400 audit(1785299155.076:196): avc: denied { write } for pid=5896 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.827642][ T42] audit: type=1400 audit(1785299155.216:197): avc: denied { write } for pid=5899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.877534][ T42] audit: type=1400 audit(1785299155.266:198): avc: denied { write } for pid=5902 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.000505][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.009327][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.012363][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.017448][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.020066][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.024888][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.027572][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.036754][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.079180][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.091132][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.099107][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.101497][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.109193][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.111511][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.379220][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.403466][ T5862] veth0_vlan: entered promiscuous mode [ 64.410753][ T5862] veth1_vlan: entered promiscuous mode [ 64.428643][ T5862] veth0_macvtap: entered promiscuous mode [ 64.434694][ T5862] veth1_macvtap: entered promiscuous mode [ 64.446396][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.452136][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.460483][ T5811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.464160][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.468441][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.471229][ T5811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.509149][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.512398][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.531966][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.534553][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.568068][ T5931] Mass Storage Function, version: 2009/09/11 [ 64.570766][ T5931] LUN: removable file: (no medium) [ 64.577266][ T5931] [ 64.578084][ T5931] ============================================ [ 64.580045][ T5931] WARNING: possible recursive locking detected [ 64.582032][ T5931] syzkaller #0 Not tainted [ 64.582159][ T5094] Bluetooth: hci0: command tx timeout [ 64.583448][ T5931] -------------------------------------------- [ 64.583454][ T5931] syz.0.17/5931 is trying to acquire lock: [ 64.589449][ T5931] ffff888022ef8450 (sb_writers#13){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 64.592228][ T5931] [ 64.592228][ T5931] but task is already holding lock: [ 64.594549][ T5931] ffff888022ef8450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 64.597293][ T5931] [ 64.597293][ T5931] other info that might help us debug this: [ 64.599786][ T5931] Possible unsafe locking scenario: [ 64.599786][ T5931] [ 64.602127][ T5931] CPU0 [ 64.603190][ T5931] ---- [ 64.604256][ T5931] lock(sb_writers#13); [ 64.605616][ T5931] lock(sb_writers#13); [ 64.606964][ T5931] [ 64.606964][ T5931] *** DEADLOCK *** [ 64.606964][ T5931] [ 64.609356][ T5931] May be due to missing lock nesting notation [ 64.609356][ T5931] [ 64.611933][ T5931] 4 locks held by syz.0.17/5931: [ 64.613530][ T5931] #0: ffff888022ef8450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 64.616376][ T5931] #1: ffff88803c6e8480 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 64.619422][ T5931] #2: ffff888022ac4670 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 64.622496][ T5931] #3: ffff888026567120 (&common->filesem){+.+.}-{4:4}, at: fsg_store_file+0x193/0x450 [ 64.625519][ T5931] [ 64.625519][ T5931] stack backtrace: [ 64.627455][ T5931] CPU: 2 UID: 0 PID: 5931 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 64.627468][ T5931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.627486][ T5931] Call Trace: [ 64.627492][ T5931] [ 64.627498][ T5931] dump_stack_lvl+0x100/0x190 [ 64.627514][ T5931] print_deadlock_bug.cold+0xbd/0xca [ 64.627532][ T5931] __lock_acquire+0x1256/0x1a40 [ 64.627548][ T5931] ? try_to_unlazy+0x296/0x910 [ 64.627565][ T5931] lock_acquire+0x1b9/0x370 [ 64.627581][ T5931] ? path_openat+0xad9/0x4280 [ 64.627593][ T5931] ? __pfx___might_resched+0x10/0x10 [ 64.627607][ T5931] mnt_want_write+0x6f/0x410 [ 64.627617][ T5931] ? path_openat+0xad9/0x4280 [ 64.627628][ T5931] path_openat+0xad9/0x4280 [ 64.627641][ T5931] ? __pfx_path_openat+0x10/0x10 [ 64.627652][ T5931] ? kasan_save_stack+0x30/0x50 [ 64.627665][ T5931] ? kasan_save_track+0x14/0x30 [ 64.627677][ T5931] ? __kasan_slab_alloc+0x89/0x90 [ 64.627690][ T5931] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 64.627703][ T5931] ? do_getname_kernel+0x5d/0x250 [ 64.627715][ T5931] ? filp_open+0x1d/0x50 [ 64.627727][ T5931] ? fsg_lun_open+0x6b/0x7b0 [ 64.627739][ T5931] ? fsg_store_file+0x1e7/0x450 [ 64.627751][ T5931] do_file_open+0x20e/0x430 [ 64.627763][ T5931] ? __pfx_do_file_open+0x10/0x10 [ 64.627778][ T5931] ? rcu_is_watching+0x12/0xc0 [ 64.627796][ T5931] file_open_name+0x1c3/0x3e0 [ 64.627810][ T5931] ? __pfx_file_open_name+0x10/0x10 [ 64.627823][ T5931] ? do_getname_kernel+0x5d/0x250 [ 64.627835][ T5931] ? __asan_memcpy+0x3c/0x60 [ 64.627846][ T5931] ? do_getname_kernel+0x1be/0x250 [ 64.627859][ T5931] filp_open+0x2e/0x50 [ 64.627871][ T5931] fsg_lun_open+0x6b/0x7b0 [ 64.627883][ T5931] ? __pfx_down_read+0x10/0x10 [ 64.627899][ T5931] fsg_store_file+0x1e7/0x450 [ 64.627911][ T5931] configfs_write_iter+0x302/0x4e0 [ 64.627924][ T5931] vfs_write+0x6ac/0x1050 [ 64.627941][ T5931] ? __pfx_configfs_write_iter+0x10/0x10 [ 64.627954][ T5931] ? __pfx_vfs_write+0x10/0x10 [ 64.627972][ T5931] ? __x64_sys_futex+0x34f/0x4d0 [ 64.627989][ T5931] ? __x64_sys_futex+0x358/0x4d0 [ 64.628005][ T5931] ksys_write+0x12a/0x250 [ 64.628022][ T5931] ? __pfx_ksys_write+0x10/0x10 [ 64.628045][ T5931] do_syscall_64+0x115/0x870 [ 64.628063][ T5931] ? clear_bhb_loop+0x40/0x90 [ 64.628080][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.628092][ T5931] RIP: 0033:0x7f4dab39de99 [ 64.628102][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.628112][ T5931] RSP: 002b:00007ffcc2fe5d18 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.628131][ T5931] RAX: ffffffffffffffda RBX: 00007f4dab625fa0 RCX: 00007f4dab39de99 [ 64.628138][ T5931] RDX: 0000000000000002 RSI: 0000200000000f00 RDI: 0000000000000003 [ 64.628144][ T5931] RBP: 00007f4dab433eaf R08: 0000000000000000 R09: 0000000000000000 [ 64.628151][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.628157][ T5931] R13: 00007f4dab625fac R14: 00007f4dab625fa0 R15: 00007f4dab625fa0 [ 64.628166][ T5931] [ 64.724469][ T5931] mass_storage.usb0/lun.0: unable to open backing file: fi [ 66.424634][ T5545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.885125][ T5545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.935267][ T5545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.997019][ T5545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.068929][ T5545] bridge_slave_1: left allmulticast mode [ 68.070952][ T5545] bridge_slave_1: left promiscuous mode [ 68.073070][ T5545] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.076728][ T5545] bridge_slave_0: left allmulticast mode [ 68.078609][ T5545] bridge_slave_0: left promiscuous mode [ 68.081773][ T5545] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.113246][ T5545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.117151][ T5545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.120271][ T5545] bond0 (unregistering): Released all slaves [ 68.232845][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 68.288625][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 68.288642][ T42] audit: type=1400 audit(1785299159.676:227): avc: denied { write } for pid=5944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.323803][ T42] audit: type=1400 audit(1785299159.716:228): avc: denied { write } for pid=5947 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.348707][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3 [ 68.428038][ T42] audit: type=1400 audit(1785299159.816:229): avc: denied { write } for pid=5951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.441684][ T5545] hsr_slave_0: left promiscuous mode [ 68.444259][ T5545] hsr_slave_1: left promiscuous mode [ 68.446659][ T5545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.449526][ T5545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.453238][ T5545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.455986][ T5545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.461256][ T5545] veth1_macvtap: left promiscuous mode [ 68.462433][ T42] audit: type=1400 audit(1785299159.846:230): avc: denied { write } for pid=5954 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.463444][ T5545] veth0_macvtap: left promiscuous mode [ 68.475299][ T5545] veth1_vlan: left promiscuous mode [ 68.477279][ T5545] veth0_vlan: left promiscuous mode [ 68.557376][ T5545] team0 (unregistering): Port device team_slave_1 removed [ 68.573023][ T5545] team0 (unregistering): Port device team_slave_0 removed [ 68.613606][ T5446] 8021q: adding VLAN 0 to HW filter on device eth4 [ 68.661141][ T42] audit: type=1400 audit(1785299160.046:231): avc: denied { write } for pid=5957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.700999][ T42] audit: type=1400 audit(1785299160.086:232): avc: denied { write } for pid=5960 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.725930][ T5446] 8021q: adding VLAN 0 to HW filter on device eth5 [ 71.292603][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.294874][ T1443] ieee802154 phy1 wpan1: encryption failed: -22