[ 43.966766][ T40] audit: type=1400 audit(1770613132.876:61): avc: denied { siginh } for pid=5832 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:47660' (ED25519) to the list of known hosts. [ 49.373056][ T40] audit: type=1400 audit(1770613138.306:62): avc: denied { execute } for pid=5918 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 49.383722][ T40] audit: type=1400 audit(1770613138.306:63): avc: denied { execute_no_trans } for pid=5918 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/02/09 04:58:59 parsed 1 programs [ 50.534427][ T40] audit: type=1400 audit(1770613139.466:64): avc: denied { node_bind } for pid=5918 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.646632][ T40] audit: type=1400 audit(1770613141.576:65): avc: denied { mounton } for pid=5933 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 52.654368][ T40] audit: type=1400 audit(1770613141.586:66): avc: denied { mount } for pid=5933 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.656086][ T5933] cgroup: Unknown subsys name 'net' [ 52.664777][ T40] audit: type=1400 audit(1770613141.596:67): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.778403][ T5933] cgroup: Unknown subsys name 'cpuset' [ 52.783843][ T5933] cgroup: Unknown subsys name 'rlimit' [ 52.916557][ T40] audit: type=1400 audit(1770613141.846:68): avc: denied { setattr } for pid=5933 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.924736][ T40] audit: type=1400 audit(1770613141.846:69): avc: denied { create } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.931621][ T40] audit: type=1400 audit(1770613141.846:70): avc: denied { write } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.938086][ T40] audit: type=1400 audit(1770613141.846:71): avc: denied { read } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.964966][ T5938] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 53.605357][ T5933] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.079985][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 55.079998][ T40] audit: type=1400 audit(1770613144.006:82): avc: denied { execmem } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.088152][ T40] audit: type=1400 audit(1770613144.006:83): avc: denied { mounton } for pid=5942 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 55.095607][ T40] audit: type=1400 audit(1770613144.006:84): avc: denied { mount } for pid=5942 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 55.102566][ T40] audit: type=1400 audit(1770613144.006:85): avc: denied { read } for pid=5942 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.109048][ T40] audit: type=1400 audit(1770613144.006:86): avc: denied { open } for pid=5942 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.116416][ T40] audit: type=1400 audit(1770613144.016:87): avc: denied { mounton } for pid=5942 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.127858][ T40] audit: type=1400 audit(1770613144.056:88): avc: denied { mounton } for pid=5942 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 55.135042][ T40] audit: type=1400 audit(1770613144.056:89): avc: denied { mount } for pid=5942 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 55.142413][ T40] audit: type=1401 audit(1770613144.066:90): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 55.233183][ T40] audit: type=1400 audit(1770613144.166:91): avc: denied { module_request } for pid=5945 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 55.250502][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 55.295274][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.298117][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.300901][ T5945] bridge_slave_0: entered allmulticast mode [ 55.303710][ T5945] bridge_slave_0: entered promiscuous mode [ 55.307338][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.309609][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.312139][ T5945] bridge_slave_1: entered allmulticast mode [ 55.314778][ T5945] bridge_slave_1: entered promiscuous mode [ 55.329758][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.338258][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.352568][ T5945] team0: Port device team_slave_0 added [ 55.355556][ T5945] team0: Port device team_slave_1 added [ 55.367895][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.370125][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.378304][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.383119][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.385347][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.394930][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.419885][ T5945] hsr_slave_0: entered promiscuous mode [ 55.422191][ T5945] hsr_slave_1: entered promiscuous mode [ 55.542271][ T5945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.548045][ T5945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.552550][ T5945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.556779][ T5945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.572903][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.575271][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.577915][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.580150][ T5945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.608634][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.618467][ T1182] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.622541][ T1182] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.629109][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.635094][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.637376][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.642460][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.644722][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.735281][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.755977][ T5945] veth0_vlan: entered promiscuous mode [ 55.760722][ T5945] veth1_vlan: entered promiscuous mode [ 55.774936][ T5945] veth0_macvtap: entered promiscuous mode [ 55.778667][ T5945] veth1_macvtap: entered promiscuous mode [ 55.788110][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.794286][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.800121][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.805183][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.807959][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.812210][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.845720][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.897598][ T1146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.948409][ T1146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.012538][ T1146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.069418][ T1146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.440884][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.443978][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.446592][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.449321][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.452445][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.814321][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.817200][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.836549][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.839039][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/09 04:59:06 executed programs: 0 [ 57.379970][ T5292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.384902][ T5292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.387829][ T5292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.390625][ T5292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.393459][ T5292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.481610][ T6036] chnl_net:caif_netlink_parms(): no params data found [ 57.521364][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.523704][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.526021][ T6036] bridge_slave_0: entered allmulticast mode [ 57.529147][ T6036] bridge_slave_0: entered promiscuous mode [ 57.533110][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.535398][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.537670][ T6036] bridge_slave_1: entered allmulticast mode [ 57.540373][ T6036] bridge_slave_1: entered promiscuous mode [ 57.556908][ T6036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.561509][ T6036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.576153][ T6036] team0: Port device team_slave_0 added [ 57.579458][ T6036] team0: Port device team_slave_1 added [ 57.593022][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.595591][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.603701][ T6036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.608316][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.610653][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.619095][ T6036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.641836][ T6036] hsr_slave_0: entered promiscuous mode [ 57.644083][ T6036] hsr_slave_1: entered promiscuous mode [ 57.646168][ T6036] debugfs: 'hsr0' already exists in 'hsr' [ 57.648349][ T6036] Cannot create hsr debugfs directory [ 59.037409][ T1146] bridge_slave_1: left allmulticast mode [ 59.039362][ T1146] bridge_slave_1: left promiscuous mode [ 59.041870][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.046512][ T1146] bridge_slave_0: left allmulticast mode [ 59.048350][ T1146] bridge_slave_0: left promiscuous mode [ 59.050212][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.229153][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.233300][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.237217][ T1146] bond0 (unregistering): Released all slaves [ 59.364962][ T1146] hsr_slave_0: left promiscuous mode [ 59.367237][ T1146] hsr_slave_1: left promiscuous mode [ 59.369597][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.372047][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.374977][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.377317][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.387510][ T1146] veth1_macvtap: left promiscuous mode [ 59.389339][ T1146] veth0_macvtap: left promiscuous mode [ 59.391792][ T1146] veth1_vlan: left promiscuous mode [ 59.393564][ T1146] veth0_vlan: left promiscuous mode [ 59.462741][ T64] Bluetooth: hci0: command tx timeout [ 59.587656][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 59.601251][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 60.138152][ T6036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.142434][ T6036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.146487][ T6036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.150337][ T6036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.192464][ T6036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.200385][ T6036] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.205532][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.207809][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.213088][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.215362][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.508020][ T6036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.526478][ T6036] veth0_vlan: entered promiscuous mode [ 60.531627][ T6036] veth1_vlan: entered promiscuous mode [ 60.544182][ T6036] veth0_macvtap: entered promiscuous mode [ 60.547825][ T6036] veth1_macvtap: entered promiscuous mode [ 60.555292][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.563373][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.568892][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.572048][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.575247][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.577996][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.620922][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.623841][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.646836][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.649272][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.694165][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 60.694176][ T40] audit: type=1400 audit(1770613149.626:116): avc: denied { mount } for pid=6072 comm="syz.0.17" name="/" dev="autofs" ino=7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 60.746642][ T6075] [ 60.747460][ T6075] ====================================================== [ 60.749654][ T6075] WARNING: possible circular locking dependency detected [ 60.751835][ T6075] syzkaller #0 Not tainted [ 60.753232][ T6075] ------------------------------------------------------ [ 60.755397][ T6075] syz.0.17/6075 is trying to acquire lock: [ 60.757207][ T6075] ffff88802f605088 (&of->mutex){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 60.759940][ T6075] [ 60.759940][ T6075] but task is already holding lock: [ 60.762222][ T6075] ffff888037b95320 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 60.764824][ T6075] [ 60.764824][ T6075] which lock already depends on the new lock. [ 60.764824][ T6075] [ 60.768024][ T6075] [ 60.768024][ T6075] the existing dependency chain (in reverse order) is: [ 60.770806][ T6075] [ 60.770806][ T6075] -> #3 (&p->lock){+.+.}-{4:4}: [ 60.772981][ T6075] __mutex_lock+0x1a2/0x1b90 [ 60.774591][ T6075] seq_read_iter+0xe1/0x1270 [ 60.776202][ T6075] kernfs_fop_read_iter+0x46c/0x610 [ 60.777986][ T6075] copy_splice_read+0x4ba/0xb90 [ 60.779666][ T6075] do_splice_read+0x285/0x370 [ 60.781293][ T6075] splice_file_to_pipe+0x82/0x120 [ 60.783027][ T6075] do_sendfile+0x366/0xe20 [ 60.784591][ T6075] __x64_sys_sendfile64+0x1d8/0x220 [ 60.786380][ T6075] do_syscall_64+0xc9/0xf80 [ 60.787962][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.789970][ T6075] [ 60.789970][ T6075] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 60.792257][ T6075] __mutex_lock+0x1a2/0x1b90 [ 60.793864][ T6075] anon_pipe_write+0x163/0x1d40 [ 60.795577][ T6075] __kernel_write_iter+0x6b2/0x920 [ 60.797325][ T6075] __kernel_write+0xf6/0x140 [ 60.798933][ T6075] autofs_notify_daemon+0x50d/0xd90 [ 60.800705][ T6075] autofs_wait+0x10fd/0x1b50 [ 60.802318][ T6075] autofs_mount_wait+0x132/0x3b0 [ 60.804023][ T6075] autofs_d_automount+0x490/0x950 [ 60.805774][ T6075] __traverse_mounts+0x1b9/0x8a0 [ 60.807478][ T6075] step_into_slowpath+0x76e/0xf50 [ 60.809224][ T6075] path_lookupat+0x58b/0xc40 [ 60.810844][ T6075] filename_lookup+0x202/0x590 [ 60.812487][ T6075] kern_path+0x35/0x50 [ 60.813947][ T6075] lookup_bdev+0xd8/0x280 [ 60.816629][ T6075] resume_store+0x1d6/0x460 [ 60.818246][ T6075] kobj_attr_store+0x58/0x80 [ 60.819888][ T6075] sysfs_kf_write+0xf2/0x150 [ 60.821522][ T6075] kernfs_fop_write_iter+0x3e0/0x5f0 [ 60.823366][ T6075] vfs_write+0x6ac/0x1070 [ 60.824919][ T6075] ksys_write+0x12a/0x250 [ 60.826552][ T6075] do_syscall_64+0xc9/0xf80 [ 60.828144][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.830570][ T6075] [ 60.830570][ T6075] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 60.833709][ T6075] __mutex_lock+0x1a2/0x1b90 [ 60.835786][ T6075] autofs_notify_daemon+0x4f8/0xd90 [ 60.838035][ T6075] autofs_wait+0x10fd/0x1b50 [ 60.839954][ T6075] autofs_mount_wait+0x132/0x3b0 [ 60.841690][ T6075] autofs_d_automount+0x490/0x950 [ 60.843429][ T6075] __traverse_mounts+0x1b9/0x8a0 [ 60.845154][ T6075] step_into_slowpath+0x76e/0xf50 [ 60.846923][ T6075] path_lookupat+0x58b/0xc40 [ 60.848547][ T6075] filename_lookup+0x202/0x590 [ 60.850233][ T6075] kern_path+0x35/0x50 [ 60.851714][ T6075] lookup_bdev+0xd8/0x280 [ 60.853270][ T6075] resume_store+0x1d6/0x460 [ 60.854887][ T6075] kobj_attr_store+0x58/0x80 [ 60.856524][ T6075] sysfs_kf_write+0xf2/0x150 [ 60.858163][ T6075] kernfs_fop_write_iter+0x3e0/0x5f0 [ 60.860008][ T6075] vfs_write+0x6ac/0x1070 [ 60.861586][ T6075] ksys_write+0x12a/0x250 [ 60.863148][ T6075] do_syscall_64+0xc9/0xf80 [ 60.864750][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.866803][ T6075] [ 60.866803][ T6075] -> #0 (&of->mutex){+.+.}-{4:4}: [ 60.869081][ T6075] __lock_acquire+0x14b8/0x2630 [ 60.870798][ T6075] lock_acquire+0x17c/0x330 [ 60.872394][ T6075] __mutex_lock+0x1a2/0x1b90 [ 60.874029][ T6075] kernfs_seq_start+0x4f/0x2a0 [ 60.875716][ T6075] seq_read_iter+0x2c1/0x1270 [ 60.877366][ T6075] kernfs_fop_read_iter+0x46c/0x610 [ 60.879171][ T6075] copy_splice_read+0x4ba/0xb90 [ 60.880871][ T6075] do_splice_read+0x285/0x370 [ 60.882543][ T6075] splice_file_to_pipe+0x82/0x120 [ 60.884297][ T6075] do_sendfile+0x366/0xe20 [ 60.885882][ T6075] __x64_sys_sendfile64+0x1d8/0x220 [ 60.887689][ T6075] do_syscall_64+0xc9/0xf80 [ 60.889284][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.891319][ T6075] [ 60.891319][ T6075] other info that might help us debug this: [ 60.891319][ T6075] [ 60.894503][ T6075] Chain exists of: [ 60.894503][ T6075] &of->mutex --> &pipe->mutex --> &p->lock [ 60.894503][ T6075] [ 60.898139][ T6075] Possible unsafe locking scenario: [ 60.898139][ T6075] [ 60.900470][ T6075] CPU0 CPU1 [ 60.902162][ T6075] ---- ---- [ 60.903854][ T6075] lock(&p->lock); [ 60.905083][ T6075] lock(&pipe->mutex); [ 60.907181][ T6075] lock(&p->lock); [ 60.909170][ T6075] lock(&of->mutex); [ 60.910462][ T6075] [ 60.910462][ T6075] *** DEADLOCK *** [ 60.910462][ T6075] [ 60.912991][ T6075] 2 locks held by syz.0.17/6075: [ 60.914570][ T6075] #0: ffff888038369868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 60.917319][ T6075] #1: ffff888037b95320 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 60.920121][ T6075] [ 60.920121][ T6075] stack backtrace: [ 60.921995][ T6075] CPU: 2 UID: 0 PID: 6075 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 60.922008][ T6075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.922015][ T6075] Call Trace: [ 60.922019][ T6075] [ 60.922024][ T6075] dump_stack_lvl+0x100/0x190 [ 60.922038][ T6075] print_circular_bug.cold+0x178/0x1c7 [ 60.922055][ T6075] check_noncircular+0x146/0x160 [ 60.922074][ T6075] __lock_acquire+0x14b8/0x2630 [ 60.922085][ T6075] ? copy_splice_read+0x4ba/0xb90 [ 60.922097][ T6075] ? do_splice_read+0x285/0x370 [ 60.922110][ T6075] lock_acquire+0x17c/0x330 [ 60.922120][ T6075] ? kernfs_seq_start+0x4f/0x2a0 [ 60.922133][ T6075] ? __pfx___might_resched+0x10/0x10 [ 60.922147][ T6075] __mutex_lock+0x1a2/0x1b90 [ 60.922159][ T6075] ? kernfs_seq_start+0x4f/0x2a0 [ 60.922172][ T6075] ? kernfs_seq_start+0x4f/0x2a0 [ 60.922185][ T6075] ? __pfx___mutex_lock+0x10/0x10 [ 60.922199][ T6075] ? rcu_is_watching+0x12/0xc0 [ 60.922213][ T6075] ? trace_kmalloc+0x83/0xb0 [ 60.922228][ T6075] ? __kvmalloc_node_noprof+0x36a/0xac0 [ 60.922241][ T6075] ? kernfs_seq_start+0x4f/0x2a0 [ 60.922252][ T6075] kernfs_seq_start+0x4f/0x2a0 [ 60.922266][ T6075] seq_read_iter+0x2c1/0x1270 [ 60.922278][ T6075] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 60.922292][ T6075] kernfs_fop_read_iter+0x46c/0x610 [ 60.922306][ T6075] copy_splice_read+0x4ba/0xb90 [ 60.922320][ T6075] ? __pfx_copy_splice_read+0x10/0x10 [ 60.922334][ T6075] ? __fget_files+0x215/0x3d0 [ 60.922347][ T6075] ? __pfx_copy_splice_read+0x10/0x10 [ 60.922360][ T6075] do_splice_read+0x285/0x370 [ 60.922373][ T6075] splice_file_to_pipe+0x82/0x120 [ 60.922387][ T6075] do_sendfile+0x366/0xe20 [ 60.922398][ T6075] ? __pfx_do_sendfile+0x10/0x10 [ 60.922409][ T6075] ? __pfx___seccomp_filter+0x10/0x10 [ 60.922423][ T6075] __x64_sys_sendfile64+0x1d8/0x220 [ 60.922438][ T6075] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 60.922453][ T6075] ? __secure_computing+0x201/0x2e0 [ 60.922469][ T6075] do_syscall_64+0xc9/0xf80 [ 60.922481][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.922492][ T6075] RIP: 0033:0x7f309939aeb9 [ 60.922501][ T6075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.922511][ T6075] RSP: 002b:00007f309a1bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 60.922521][ T6075] RAX: ffffffffffffffda RBX: 00007f3099616090 RCX: 00007f309939aeb9 [ 60.922527][ T6075] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 60.922533][ T6075] RBP: 00007f3099408c1f R08: 0000000000000000 R09: 0000000000000000 [ 60.922540][ T6075] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 60.922545][ T6075] R13: 00007f3099616128 R14: 00007f3099616090 R15: 00007ffd688fc418 [ 60.922554][ T6075] [ 61.524550][ T6073] block device autoloading is deprecated and will be removed. [ 61.526992][ T6073] PM: Image not found (code -22) [ 61.530588][ T40] audit: type=1400 audit(1770613150.456:117): avc: denied { unmount } for pid=6036 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 63.015142][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.423492][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.503564][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.546954][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.638012][ T12] bridge_slave_1: left allmulticast mode [ 64.639831][ T12] bridge_slave_1: left promiscuous mode [ 64.641817][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.646172][ T12] bridge_slave_0: left allmulticast mode [ 64.647981][ T12] bridge_slave_0: left promiscuous mode [ 64.649824][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.743409][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.747293][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.750947][ T12] bond0 (unregistering): Released all slaves [ 65.042819][ T12] hsr_slave_0: left promiscuous mode [ 65.044730][ T12] hsr_slave_1: left promiscuous mode [ 65.046601][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.048923][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.052328][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.054650][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.058420][ T12] veth1_macvtap: left promiscuous mode [ 65.060167][ T12] veth0_macvtap: left promiscuous mode [ 65.062069][ T12] veth1_vlan: left promiscuous mode [ 65.063737][ T12] veth0_vlan: left promiscuous mode [ 65.126641][ T12] team0 (unregistering): Port device team_slave_1 removed [ 65.135876][ T12] team0 (unregistering): Port device team_slave_0 removed