[ 38.738816][ T43] audit: type=1400 audit(1785320305.250:116): avc: denied { write } for pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.795279][ T43] audit: type=1400 audit(1785320305.300:117): avc: denied { write } for pid=5651 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.260684][ T43] audit: type=1400 audit(1785320305.770:118): avc: denied { write } for pid=5654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.303381][ T43] audit: type=1400 audit(1785320305.810:119): avc: denied { write } for pid=5657 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.370580][ T43] audit: type=1400 audit(1785320305.880:120): avc: denied { write } for pid=5660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:42011' (ED25519) to the list of known hosts. [ 43.589610][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 43.589627][ T43] audit: type=1400 audit(1785320310.100:138): avc: denied { execute } for pid=5734 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 43.601840][ T43] audit: type=1400 audit(1785320310.100:139): avc: denied { execute_no_trans } for pid=5734 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/07/29 10:18:31 parsed 1 programs 2026/07/29 10:18:31 serving rpc on tcp://42699 [ 44.733109][ T43] audit: type=1400 audit(1785320311.240:140): avc: denied { node_bind } for pid=5734 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 44.740066][ T43] audit: type=1400 audit(1785320311.240:141): avc: denied { node_bind } for pid=5734 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 47.083052][ T43] audit: type=1400 audit(1785320313.590:142): avc: denied { mounton } for pid=5742 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.091071][ T43] audit: type=1400 audit(1785320313.600:143): avc: denied { mount } for pid=5742 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.093424][ T5742] cgroup: Unknown subsys name 'net' [ 47.101237][ T43] audit: type=1400 audit(1785320313.610:144): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.272946][ T5742] cgroup: Unknown subsys name 'cpuset' [ 47.279356][ T5742] cgroup: Unknown subsys name 'rlimit' [ 47.427823][ T43] audit: type=1400 audit(1785320313.930:145): avc: denied { setattr } for pid=5742 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.435041][ T43] audit: type=1400 audit(1785320313.940:146): avc: denied { create } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.441495][ T43] audit: type=1400 audit(1785320313.940:147): avc: denied { write } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.486756][ T5747] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.180063][ T5742] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.956314][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 49.956328][ T43] audit: type=1400 audit(1785320316.460:159): avc: denied { execmem } for pid=5751 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.965863][ T43] audit: type=1400 audit(1785320316.470:160): avc: denied { read } for pid=5752 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.973759][ T43] audit: type=1400 audit(1785320316.470:161): avc: denied { open } for pid=5752 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.982426][ T43] audit: type=1400 audit(1785320316.470:162): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 50.014124][ T43] audit: type=1400 audit(1785320316.520:163): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 50.021673][ T43] audit: type=1400 audit(1785320316.530:164): avc: denied { mount } for pid=5752 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.028836][ T43] audit: type=1400 audit(1785320316.530:165): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 50.036128][ T43] audit: type=1400 audit(1785320316.530:166): avc: denied { mount } for pid=5752 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 50.225740][ T43] audit: type=1400 audit(1785320316.730:167): avc: denied { mount } for pid=5758 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.234944][ T43] audit: type=1400 audit(1785320316.730:168): avc: denied { mounton } for pid=5758 comm="syz-executor" path="/syzkaller.TuXOrh/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.261586][ T5758] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.795425][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.799499][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.802429][ T5796] bridge_slave_0: entered allmulticast mode [ 51.806474][ T5796] bridge_slave_0: entered promiscuous mode [ 51.814744][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.817293][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.820521][ T5796] bridge_slave_1: entered allmulticast mode [ 51.823299][ T5796] bridge_slave_1: entered promiscuous mode [ 51.845270][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.850547][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.874621][ T5796] team0: Port device team_slave_0 added [ 51.879580][ T5796] team0: Port device team_slave_1 added [ 51.900073][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.902952][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.912630][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.918941][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.921723][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.932229][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.970354][ T5796] hsr_slave_0: entered promiscuous mode [ 51.974291][ T5796] hsr_slave_1: entered promiscuous mode [ 52.096050][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.104447][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.107553][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.113469][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.117757][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.124109][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.127828][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.135244][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.161209][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.164391][ T5796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.217102][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.228037][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.244468][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.254372][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.257370][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.266708][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.269585][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.550784][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.593304][ T5796] veth0_vlan: entered promiscuous mode [ 52.602214][ T5796] veth1_vlan: entered promiscuous mode [ 52.630022][ T5796] veth0_macvtap: entered promiscuous mode [ 52.636095][ T5796] veth1_macvtap: entered promiscuous mode [ 52.655683][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.666420][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.677081][ T5812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.682683][ T5812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.688345][ T5812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.692555][ T5812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.770441][ T5812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.832460][ T5812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.879649][ T5812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.924448][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.928926][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.932379][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.935507][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.938157][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.955261][ T5812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.267841][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.270654][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.289616][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.293444][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/29 10:18:40 executed programs: 0 [ 53.695441][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.699381][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.703055][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.706799][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.711793][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.054515][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.056919][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.059784][ T5863] bridge_slave_0: entered allmulticast mode [ 54.062507][ T5863] bridge_slave_0: entered promiscuous mode [ 54.065756][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.068124][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.070550][ T5863] bridge_slave_1: entered allmulticast mode [ 54.074306][ T5863] bridge_slave_1: entered promiscuous mode [ 54.089330][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.093798][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.109488][ T5863] team0: Port device team_slave_0 added [ 54.112671][ T5863] team0: Port device team_slave_1 added [ 54.126264][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.128779][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.136766][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.141301][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.143489][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.151738][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.178140][ T5863] hsr_slave_0: entered promiscuous mode [ 54.180805][ T5863] hsr_slave_1: entered promiscuous mode [ 54.182888][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 54.184787][ T5863] Cannot create hsr debugfs directory [ 55.739330][ T64] Bluetooth: hci0: command tx timeout [ 55.897372][ T5812] bridge_slave_1: left allmulticast mode [ 55.901040][ T5812] bridge_slave_1: left promiscuous mode [ 55.904582][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.911657][ T5812] bridge_slave_0: left allmulticast mode [ 55.913451][ T5812] bridge_slave_0: left promiscuous mode [ 55.915219][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.926798][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 55.926814][ T43] audit: type=1400 audit(1785320322.430:189): avc: denied { write } for pid=5881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.938555][ T43] audit: type=1400 audit(1785320322.430:190): avc: denied { create } for pid=5881 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.947202][ T43] audit: type=1400 audit(1785320322.430:191): avc: denied { write } for pid=5881 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2015 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.956460][ T43] audit: type=1400 audit(1785320322.430:192): avc: denied { append } for pid=5881 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2015 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.970642][ T43] audit: type=1400 audit(1785320322.480:193): avc: denied { write } for pid=5884 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.978291][ T43] audit: type=1400 audit(1785320322.480:194): avc: denied { unlink } for pid=5884 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2015 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.036872][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.042582][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.046337][ T5812] bond0 (unregistering): Released all slaves [ 56.053604][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 56.130792][ T43] audit: type=1400 audit(1785320322.640:195): avc: denied { write } for pid=5887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.154607][ T5812] hsr_slave_0: left promiscuous mode [ 56.157286][ T5812] hsr_slave_1: left promiscuous mode [ 56.161041][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.163559][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.166633][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.169337][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.176124][ T5812] veth1_macvtap: left promiscuous mode [ 56.178513][ T5812] veth0_macvtap: left promiscuous mode [ 56.180552][ T5812] veth1_vlan: left promiscuous mode [ 56.182386][ T5812] veth0_vlan: left promiscuous mode [ 56.185723][ T43] audit: type=1400 audit(1785320322.690:196): avc: denied { write } for pid=5890 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.303749][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 56.310767][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 56.374500][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3 [ 56.532521][ T43] audit: type=1400 audit(1785320323.040:197): avc: denied { write } for pid=5894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.579474][ T43] audit: type=1400 audit(1785320323.090:198): avc: denied { write } for pid=5897 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.795649][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.799869][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.805545][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.811167][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.813962][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.818524][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.821432][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.826543][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.869276][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.879796][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.885824][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.888155][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.901690][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.903981][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.269299][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.313665][ T5863] veth0_vlan: entered promiscuous mode [ 57.320483][ T5863] veth1_vlan: entered promiscuous mode [ 57.345422][ T5863] veth0_macvtap: entered promiscuous mode [ 57.349486][ T5863] veth1_macvtap: entered promiscuous mode [ 57.357790][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.366954][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.390553][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.395110][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.399149][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.402242][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.443234][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.446223][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.466923][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.469422][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.519789][ T5928] [ 57.520613][ T5928] ====================================================== [ 57.522719][ T5928] WARNING: possible circular locking dependency detected [ 57.524852][ T5928] syzkaller #0 Not tainted [ 57.526261][ T5928] ------------------------------------------------------ [ 57.528332][ T5928] syz.0.18/5928 is trying to acquire lock: [ 57.530098][ T5928] ffffffff901d0908 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 57.533025][ T5928] [ 57.533025][ T5928] but task is already holding lock: [ 57.535191][ T5928] ffff88803aa6f800 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 57.538071][ T5928] [ 57.538071][ T5928] which lock already depends on the new lock. [ 57.538071][ T5928] [ 57.541124][ T5928] [ 57.541124][ T5928] the existing dependency chain (in reverse order) is: [ 57.543740][ T5928] [ 57.543740][ T5928] -> #2 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}: [ 57.546315][ T5928] lock_acquire+0x1b9/0x370 [ 57.547862][ T5928] down_write+0x8b/0x1f0 [ 57.549292][ T5928] configfs_depend_item_unlocked+0xf3/0x6a0 [ 57.551210][ T5928] usbg_make_tpg+0x261/0x620 [ 57.552790][ T5928] target_fabric_make_tpg+0xab/0x8c0 [ 57.554580][ T5928] configfs_mkdir+0x51e/0xb70 [ 57.556201][ T5928] vfs_mkdir+0x361/0x850 [ 57.557687][ T5928] filename_mkdirat+0x48b/0x5e0 [ 57.559306][ T5928] __x64_sys_mkdir+0x6b/0x90 [ 57.560881][ T5928] do_syscall_64+0x115/0x870 [ 57.562464][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.564415][ T5928] [ 57.564415][ T5928] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 57.566735][ T5928] lock_acquire+0x1b9/0x370 [ 57.568256][ T5928] __mutex_lock+0x1a4/0x1bd0 [ 57.569831][ T5928] tcm_set_name+0x29/0xb0 [ 57.571321][ T5928] function_make+0x21c/0x3f0 [ 57.572893][ T5928] configfs_mkdir+0x51e/0xb70 [ 57.574547][ T5928] vfs_mkdir+0x361/0x850 [ 57.576053][ T5928] filename_mkdirat+0x48b/0x5e0 [ 57.577741][ T5928] __x64_sys_mkdir+0x6b/0x90 [ 57.579369][ T5928] do_syscall_64+0x115/0x870 [ 57.580927][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.582833][ T5928] [ 57.582833][ T5928] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 57.585319][ T5928] check_prev_add+0xeb/0xe60 [ 57.586909][ T5928] __lock_acquire+0x136c/0x1a40 [ 57.588483][ T5928] lock_acquire+0x1b9/0x370 [ 57.589942][ T5928] __mutex_lock+0x1a4/0x1bd0 [ 57.591468][ T5928] configfs_rmdir+0x5ae/0x950 [ 57.593043][ T5928] vfs_rmdir+0x328/0x8a0 [ 57.594497][ T5928] filename_rmdir+0x31a/0x5c0 [ 57.596083][ T5928] __x64_sys_unlinkat+0xf5/0x130 [ 57.597724][ T5928] do_syscall_64+0x115/0x870 [ 57.599276][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.601212][ T5928] [ 57.601212][ T5928] other info that might help us debug this: [ 57.601212][ T5928] [ 57.604333][ T5928] Chain exists of: [ 57.604333][ T5928] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#24 [ 57.604333][ T5928] [ 57.608782][ T5928] Possible unsafe locking scenario: [ 57.608782][ T5928] [ 57.611046][ T5928] CPU0 CPU1 [ 57.612690][ T5928] ---- ---- [ 57.614342][ T5928] lock(&sb->s_type->i_mutex_key#24); [ 57.616023][ T5928] lock(&opts->dep_lock); [ 57.618080][ T5928] lock(&sb->s_type->i_mutex_key#24); [ 57.620446][ T5928] lock(gadget_subsys.su_mutex); [ 57.621945][ T5928] [ 57.621945][ T5928] *** DEADLOCK *** [ 57.621945][ T5928] [ 57.624320][ T5928] 3 locks held by syz.0.18/5928: [ 57.625859][ T5928] #0: ffff888023d44450 (sb_writers#13){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 57.628573][ T5928] #1: ffff888047c6e9c0 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 57.631897][ T5928] #2: ffff88803aa6f800 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 57.634873][ T5928] [ 57.634873][ T5928] stack backtrace: [ 57.636661][ T5928] CPU: 3 UID: 0 PID: 5928 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 57.636674][ T5928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.636691][ T5928] Call Trace: [ 57.636704][ T5928] [ 57.636709][ T5928] dump_stack_lvl+0x100/0x190 [ 57.636723][ T5928] print_circular_bug.cold+0x178/0x1c7 [ 57.636741][ T5928] check_noncircular+0x146/0x160 [ 57.636755][ T5928] check_prev_add+0xeb/0xe60 [ 57.636768][ T5928] ? __bfs+0x150/0x2a0 [ 57.636778][ T5928] __lock_acquire+0x136c/0x1a40 [ 57.636793][ T5928] lock_acquire+0x1b9/0x370 [ 57.636805][ T5928] ? configfs_rmdir+0x5ae/0x950 [ 57.636819][ T5928] ? __pfx___might_resched+0x10/0x10 [ 57.636833][ T5928] __mutex_lock+0x1a4/0x1bd0 [ 57.636847][ T5928] ? configfs_rmdir+0x5ae/0x950 [ 57.636861][ T5928] ? configfs_rmdir+0x5ae/0x950 [ 57.636875][ T5928] ? __pfx___mutex_lock+0x10/0x10 [ 57.636887][ T5928] ? do_raw_spin_lock+0x128/0x260 [ 57.636902][ T5928] ? find_held_lock+0x2b/0x80 [ 57.636919][ T5928] ? fast_dput+0x2fe/0x6d0 [ 57.636934][ T5928] ? do_raw_spin_unlock+0x145/0x1e0 [ 57.636949][ T5928] ? _raw_spin_unlock+0x28/0x50 [ 57.636966][ T5928] ? fast_dput+0x168/0x6d0 [ 57.636980][ T5928] ? configfs_rmdir+0x5ae/0x950 [ 57.636994][ T5928] configfs_rmdir+0x5ae/0x950 [ 57.637009][ T5928] ? __pfx_configfs_rmdir+0x10/0x10 [ 57.637023][ T5928] ? __pfx_down_write+0x10/0x10 [ 57.637037][ T5928] vfs_rmdir+0x328/0x8a0 [ 57.637052][ T5928] filename_rmdir+0x31a/0x5c0 [ 57.637065][ T5928] ? __pfx_filename_rmdir+0x10/0x10 [ 57.637078][ T5928] ? do_getname+0x191/0x390 [ 57.637092][ T5928] __x64_sys_unlinkat+0xf5/0x130 [ 57.637105][ T5928] do_syscall_64+0x115/0x870 [ 57.637117][ T5928] ? clear_bhb_loop+0x40/0x90 [ 57.637129][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.637141][ T5928] RIP: 0033:0x7f838c39de99 [ 57.637152][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.637162][ T5928] RSP: 002b:00007ffd033e6618 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 57.637173][ T5928] RAX: ffffffffffffffda RBX: 00007f838c625fa0 RCX: 00007f838c39de99 [ 57.637179][ T5928] RDX: 0000000000000200 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 57.637186][ T5928] RBP: 00007f838c433eaf R08: 0000000000000000 R09: 0000000000000000 [ 57.637192][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.637198][ T5928] R13: 00007f838c625fac R14: 00007f838c625fa0 R15: 00007f838c625fa0 [ 57.637208][ T5928] [ 57.818495][ T64] Bluetooth: hci0: command tx timeout 2026/07/29 10:18:45 executed programs: 58 [ 59.908584][ T64] Bluetooth: hci0: command tx timeout [ 60.930695][ T43] kauditd_printk_skb: 420 callbacks suppressed [ 60.930711][ T43] audit: type=1400 audit(1785320327.440:619): avc: denied { write } for pid=6128 comm="syz.0.211" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.942072][ T43] audit: type=1400 audit(1785320327.440:620): avc: denied { write } for pid=6128 comm="syz.0.211" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.955123][ T43] audit: type=1400 audit(1785320327.460:621): avc: denied { write } for pid=6129 comm="syz.0.212" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.964673][ T43] audit: type=1400 audit(1785320327.460:622): avc: denied { write } for pid=6129 comm="syz.0.212" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.980553][ T43] audit: type=1400 audit(1785320327.490:623): avc: denied { write } for pid=6130 comm="syz.0.213" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.988017][ T43] audit: type=1400 audit(1785320327.490:624): avc: denied { write } for pid=6130 comm="syz.0.213" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.001658][ T43] audit: type=1400 audit(1785320327.510:625): avc: denied { write } for pid=6131 comm="syz.0.214" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.008867][ T43] audit: type=1400 audit(1785320327.510:626): avc: denied { write } for pid=6131 comm="syz.0.214" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.023110][ T43] audit: type=1400 audit(1785320327.530:627): avc: denied { write } for pid=6132 comm="syz.0.215" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.030873][ T43] audit: type=1400 audit(1785320327.530:628): avc: denied { write } for pid=6132 comm="syz.0.215" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.978531][ T64] Bluetooth: hci0: command tx timeout 2026/07/29 10:18:50 executed programs: 343 [ 65.963115][ T43] kauditd_printk_skb: 534 callbacks suppressed [ 65.963130][ T43] audit: type=1400 audit(1785320332.470:1163): avc: denied { write } for pid=6400 comm="syz.0.483" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.972793][ T43] audit: type=1400 audit(1785320332.480:1164): avc: denied { write } for pid=6400 comm="syz.0.483" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.986570][ T43] audit: type=1400 audit(1785320332.490:1165): avc: denied { write } for pid=6401 comm="syz.0.484" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.996299][ T43] audit: type=1400 audit(1785320332.490:1166): avc: denied { write } for pid=6401 comm="syz.0.484" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.005416][ T43] audit: type=1400 audit(1785320332.510:1167): avc: denied { write } for pid=6402 comm="syz.0.485" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.014923][ T43] audit: type=1400 audit(1785320332.510:1168): avc: denied { write } for pid=6402 comm="syz.0.485" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.024223][ T43] audit: type=1400 audit(1785320332.530:1169): avc: denied { write } for pid=6403 comm="syz.0.486" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.033431][ T43] audit: type=1400 audit(1785320332.530:1170): avc: denied { write } for pid=6403 comm="syz.0.486" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.048965][ T43] audit: type=1400 audit(1785320332.560:1171): avc: denied { write } for pid=6404 comm="syz.0.487" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.058154][ T43] audit: type=1400 audit(1785320332.560:1172): avc: denied { write } for pid=6404 comm="syz.0.487" name="functions" dev="configfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1