Warning: Permanently added '[localhost]:60976' (ED25519) to the list of known hosts. [ 59.369198][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 59.369217][ T42] audit: type=1400 audit(1782795769.247:138): avc: denied { execute } for pid=5728 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 59.382412][ T42] audit: type=1400 audit(1782795769.247:139): avc: denied { execute_no_trans } for pid=5728 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/06/30 05:02:50 parsed 1 programs 2026/06/30 05:02:50 serving rpc on tcp://43357 [ 60.955006][ T42] audit: type=1400 audit(1782795770.827:140): avc: denied { node_bind } for pid=5728 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 60.964696][ T42] audit: type=1400 audit(1782795770.827:141): avc: denied { node_bind } for pid=5728 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 63.394719][ T42] audit: type=1400 audit(1782795773.267:142): avc: denied { mounton } for pid=5736 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.404974][ T42] audit: type=1400 audit(1782795773.277:143): avc: denied { mount } for pid=5736 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.410186][ T5736] cgroup: Unknown subsys name 'net' [ 63.416707][ T42] audit: type=1400 audit(1782795773.287:144): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.601953][ T5736] cgroup: Unknown subsys name 'cpuset' [ 63.606252][ T5736] cgroup: Unknown subsys name 'rlimit' [ 63.777283][ T42] audit: type=1400 audit(1782795773.647:145): avc: denied { setattr } for pid=5736 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.787299][ T42] audit: type=1400 audit(1782795773.647:146): avc: denied { create } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.796556][ T42] audit: type=1400 audit(1782795773.647:147): avc: denied { write } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.828729][ T5741] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 64.633062][ T5736] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.356070][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 66.356091][ T42] audit: type=1400 audit(1782795776.227:159): avc: denied { execmem } for pid=5745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.365170][ T42] audit: type=1400 audit(1782795776.237:160): avc: denied { read } for pid=5746 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.372413][ T42] audit: type=1400 audit(1782795776.237:161): avc: denied { open } for pid=5746 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.381377][ T42] audit: type=1400 audit(1782795776.237:162): avc: denied { mounton } for pid=5746 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 66.389426][ T42] audit: type=1400 audit(1782795776.247:163): avc: denied { module_request } for pid=5746 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 66.397468][ T42] audit: type=1400 audit(1782795776.267:164): avc: denied { sys_module } for pid=5746 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.736502][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.741055][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.744492][ T5746] bridge_slave_0: entered allmulticast mode [ 66.747752][ T5746] bridge_slave_0: entered promiscuous mode [ 66.755645][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.758528][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.761974][ T5746] bridge_slave_1: entered allmulticast mode [ 66.765662][ T5746] bridge_slave_1: entered promiscuous mode [ 66.794312][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.799336][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.820609][ T5746] team0: Port device team_slave_0 added [ 66.824299][ T5746] team0: Port device team_slave_1 added [ 66.841591][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.845001][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.853194][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.859290][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.861640][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.870893][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.900534][ T5746] hsr_slave_0: entered promiscuous mode [ 66.903445][ T5746] hsr_slave_1: entered promiscuous mode [ 67.022044][ T5746] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.031731][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.035650][ T5746] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.039914][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.042717][ T5746] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.049569][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.053033][ T5746] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.057062][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.088693][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.091904][ T5746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.094892][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.097147][ T5746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.144866][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.158353][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.163513][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.177963][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.186191][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.189849][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.197629][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.201931][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.447066][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.487519][ T5746] veth0_vlan: entered promiscuous mode [ 67.501332][ T5746] veth1_vlan: entered promiscuous mode [ 67.532103][ T5746] veth0_macvtap: entered promiscuous mode [ 67.537201][ T5746] veth1_macvtap: entered promiscuous mode [ 67.558029][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.567848][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.579578][ T5762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.583917][ T5762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.589824][ T5762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.594123][ T5762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.626585][ T42] audit: type=1400 audit(1782795777.497:165): avc: denied { mount } for pid=5746 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.636556][ T42] audit: type=1400 audit(1782795777.497:166): avc: denied { mounton } for pid=5746 comm="syz-executor" path="/syzkaller.zBWhUr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.647969][ T42] audit: type=1400 audit(1782795777.497:167): avc: denied { mount } for pid=5746 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.657440][ T42] audit: type=1400 audit(1782795777.497:168): avc: denied { mounton } for pid=5746 comm="syz-executor" path="/syzkaller.zBWhUr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.684627][ T5746] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.813105][ T5762] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.914915][ T5762] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.995468][ T5762] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.032571][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.037346][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.042272][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.048522][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.052674][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.085987][ T5762] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.902653][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.909553][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.943253][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.946873][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/30 05:03:00 executed programs: 0 [ 70.332238][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.338517][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.342464][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.346180][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.351657][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.778797][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.781281][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.784071][ T5865] bridge_slave_0: entered allmulticast mode [ 70.787294][ T5865] bridge_slave_0: entered promiscuous mode [ 70.791906][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.794569][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.797069][ T5865] bridge_slave_1: entered allmulticast mode [ 70.799888][ T5865] bridge_slave_1: entered promiscuous mode [ 70.829338][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.835974][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.864135][ T5865] team0: Port device team_slave_0 added [ 70.868787][ T5865] team0: Port device team_slave_1 added [ 70.889298][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.892342][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.900657][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.905290][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.907673][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.916320][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.941791][ T5865] hsr_slave_0: entered promiscuous mode [ 70.944746][ T5865] hsr_slave_1: entered promiscuous mode [ 70.948039][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 70.950791][ T5865] Cannot create hsr debugfs directory [ 71.179700][ T5762] bridge_slave_1: left allmulticast mode [ 71.183406][ T5762] bridge_slave_1: left promiscuous mode [ 71.188084][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.197597][ T5762] bridge_slave_0: left allmulticast mode [ 71.201218][ T5762] bridge_slave_0: left promiscuous mode [ 71.205223][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.342548][ T5762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.353896][ T5762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.360263][ T5762] bond0 (unregistering): Released all slaves [ 71.370240][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 71.458136][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 71.458153][ T42] audit: type=1400 audit(1782795781.327:195): avc: denied { write } for pid=5892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.481067][ T5762] hsr_slave_0: left promiscuous mode [ 71.483857][ T5762] hsr_slave_1: left promiscuous mode [ 71.486184][ T5762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.488521][ T5762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.492925][ T5762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.495283][ T5762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.505195][ T5762] veth1_macvtap: left promiscuous mode [ 71.507468][ T5762] veth0_macvtap: left promiscuous mode [ 71.510680][ T5762] veth1_vlan: left promiscuous mode [ 71.511151][ T42] audit: type=1400 audit(1782795781.387:196): avc: denied { write } for pid=5895 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.513025][ T5762] veth0_vlan: left promiscuous mode [ 71.653406][ T5762] team0 (unregistering): Port device team_slave_1 removed [ 71.660547][ T5762] team0 (unregistering): Port device team_slave_0 removed [ 71.721419][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 71.889215][ T42] audit: type=1400 audit(1782795781.757:197): avc: denied { write } for pid=5899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.933854][ T42] audit: type=1400 audit(1782795781.807:198): avc: denied { write } for pid=5902 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.004176][ T42] audit: type=1400 audit(1782795781.877:199): avc: denied { write } for pid=5905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.073314][ T42] audit: type=1400 audit(1782795781.947:200): avc: denied { write } for pid=5908 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.138708][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.143186][ T5865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.146402][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.151444][ T5865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.155237][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.157961][ T42] audit: type=1400 audit(1782795782.027:201): avc: denied { write } for pid=5910 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.173780][ T5865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.177515][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.186289][ T5865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.221106][ T42] audit: type=1400 audit(1782795782.097:202): avc: denied { write } for pid=5919 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.235069][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.245400][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.254575][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.257208][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.268779][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.272102][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.369990][ T5089] Bluetooth: hci0: command tx timeout [ 72.875772][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.925762][ T5865] veth0_vlan: entered promiscuous mode [ 72.955873][ T5865] veth1_vlan: entered promiscuous mode [ 72.981093][ T5865] veth0_macvtap: entered promiscuous mode [ 72.986329][ T5865] veth1_macvtap: entered promiscuous mode [ 72.998645][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.013430][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.084667][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.090143][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.100822][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.104122][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.148368][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.151693][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.198146][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.201570][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.237387][ T42] audit: type=1400 audit(1782795783.107:203): avc: denied { append } for pid=5934 comm="syz.0.17" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.270709][ T5934] [ 73.271846][ T5934] ====================================================== [ 73.274345][ T5934] WARNING: possible circular locking dependency detected [ 73.276680][ T5934] syzkaller #0 Not tainted [ 73.278249][ T5934] ------------------------------------------------------ [ 73.280799][ T5934] syz.0.17/5934 is trying to acquire lock: [ 73.282873][ T5934] ffff88801d28e210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 73.286453][ T5934] [ 73.286453][ T5934] but task is already holding lock: [ 73.288961][ T5934] ffff8880286f1c50 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 73.292765][ T5934] [ 73.292765][ T5934] which lock already depends on the new lock. [ 73.292765][ T5934] [ 73.297519][ T5934] [ 73.297519][ T5934] the existing dependency chain (in reverse order) is: [ 73.300556][ T5934] [ 73.300556][ T5934] -> #2 (&q->q_usage_counter(io)#20){++++}-{0:0}: [ 73.303332][ T5934] lock_acquire+0x1b9/0x370 [ 73.304950][ T5934] blk_alloc_queue+0x610/0x790 [ 73.306803][ T5934] blk_mq_alloc_queue+0x174/0x290 [ 73.308694][ T5934] __blk_mq_alloc_disk+0x29/0x120 [ 73.310763][ T5934] loop_add+0x498/0xb60 [ 73.312329][ T5934] loop_init+0x1d3/0x200 [ 73.313902][ T5934] do_one_initcall+0x11d/0x700 [ 73.315700][ T5934] kernel_init_freeable+0x6ea/0x7b0 [ 73.317619][ T5934] kernel_init+0x1f/0x1e0 [ 73.319375][ T5934] ret_from_fork+0x72b/0xd50 [ 73.321433][ T5934] ret_from_fork_asm+0x1a/0x30 [ 73.323681][ T5934] [ 73.323681][ T5934] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 73.326444][ T5934] lock_acquire+0x1b9/0x370 [ 73.328345][ T5934] fs_reclaim_acquire+0xc4/0x100 [ 73.330518][ T5934] kmem_cache_alloc_noprof+0x63/0x6a0 [ 73.332541][ T5934] __kernfs_iattrs+0x126/0x450 [ 73.334236][ T5934] __kernfs_setattr+0x4d/0x3c0 [ 73.335909][ T5934] kernfs_iop_setattr+0xda/0x130 [ 73.337674][ T5934] notify_change+0xb25/0x1330 [ 73.339317][ T5934] do_truncate+0x1df/0x240 [ 73.341013][ T5934] path_openat+0x370f/0x4280 [ 73.342766][ T5934] do_file_open+0x20e/0x430 [ 73.344440][ T5934] do_sys_openat2+0x10f/0x1e0 [ 73.346319][ T5934] __x64_sys_openat+0x12d/0x210 [ 73.348118][ T5934] do_syscall_64+0x115/0x870 [ 73.349860][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.352053][ T5934] [ 73.352053][ T5934] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 73.354956][ T5934] check_prev_add+0xeb/0xe60 [ 73.356737][ T5934] __lock_acquire+0x136c/0x1a40 [ 73.358425][ T5934] lock_acquire+0x1b9/0x370 [ 73.360004][ T5934] down_read+0x99/0x4c0 [ 73.361450][ T5934] kernfs_iop_getattr+0x9c/0xf0 [ 73.363340][ T5934] vfs_getattr_nosec+0x2d4/0x430 [ 73.365634][ T5934] vfs_getattr+0x4a/0x60 [ 73.367561][ T5934] loop_query_min_dio_size.isra.0+0x117/0x250 [ 73.369966][ T5934] lo_ioctl+0x13aa/0x1bc0 [ 73.371814][ T5934] blkdev_ioctl+0x5ad/0x6f0 [ 73.373539][ T5934] __x64_sys_ioctl+0x18e/0x210 [ 73.375292][ T5934] do_syscall_64+0x115/0x870 [ 73.376872][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.379010][ T5934] [ 73.379010][ T5934] other info that might help us debug this: [ 73.379010][ T5934] [ 73.382257][ T5934] Chain exists of: [ 73.382257][ T5934] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#20 [ 73.382257][ T5934] [ 73.386788][ T5934] Possible unsafe locking scenario: [ 73.386788][ T5934] [ 73.389422][ T5934] CPU0 CPU1 [ 73.391243][ T5934] ---- ---- [ 73.393662][ T5934] lock(&q->q_usage_counter(io)#20); [ 73.395784][ T5934] lock(fs_reclaim); [ 73.398240][ T5934] lock(&q->q_usage_counter(io)#20); [ 73.400705][ T5934] rlock(&root->kernfs_iattr_rwsem); [ 73.402393][ T5934] [ 73.402393][ T5934] *** DEADLOCK *** [ 73.402393][ T5934] [ 73.404908][ T5934] 3 locks held by syz.0.17/5934: [ 73.406629][ T5934] #0: ffff888028770430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 73.410030][ T5934] #1: ffff8880286f1c50 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 73.413882][ T5934] #2: ffff8880286f1c88 (&q->q_usage_counter(queue)#4){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 73.417721][ T5934] [ 73.417721][ T5934] stack backtrace: [ 73.419687][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 73.419700][ T5934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.419730][ T5934] Call Trace: [ 73.419737][ T5934] [ 73.419743][ T5934] dump_stack_lvl+0x100/0x190 [ 73.419761][ T5934] print_circular_bug.cold+0x178/0x1c7 [ 73.419779][ T5934] check_noncircular+0x146/0x160 [ 73.419794][ T5934] check_prev_add+0xeb/0xe60 [ 73.419806][ T5934] __lock_acquire+0x136c/0x1a40 [ 73.419821][ T5934] lock_acquire+0x1b9/0x370 [ 73.419833][ T5934] ? kernfs_iop_getattr+0x9c/0xf0 [ 73.419852][ T5934] ? __pfx___might_resched+0x10/0x10 [ 73.419866][ T5934] down_read+0x99/0x4c0 [ 73.419877][ T5934] ? kernfs_iop_getattr+0x9c/0xf0 [ 73.419897][ T5934] ? find_held_lock+0x2b/0x80 [ 73.419906][ T5934] ? __pfx_down_read+0x10/0x10 [ 73.419915][ T5934] ? kernfs_root+0xee/0x2a0 [ 73.419931][ T5934] kernfs_iop_getattr+0x9c/0xf0 [ 73.419947][ T5934] vfs_getattr_nosec+0x2d4/0x430 [ 73.419961][ T5934] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 73.419977][ T5934] vfs_getattr+0x4a/0x60 [ 73.419988][ T5934] loop_query_min_dio_size.isra.0+0x117/0x250 [ 73.420007][ T5934] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 73.420028][ T5934] lo_ioctl+0x13aa/0x1bc0 [ 73.420038][ T5934] ? __pfx_lo_ioctl+0x10/0x10 [ 73.420046][ T5934] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 73.420060][ T5934] ? kasan_quarantine_put+0x104/0x240 [ 73.420073][ T5934] ? blk_get_meta_cap+0xd4/0x6c0 [ 73.420089][ T5934] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 73.420104][ T5934] ? blkdev_common_ioctl+0x515/0x2b80 [ 73.420120][ T5934] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 73.420135][ T5934] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.420150][ T5934] ? do_vfs_ioctl+0x226/0x13e0 [ 73.420165][ T5934] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 73.420179][ T5934] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 73.420198][ T5934] ? __pfx_lo_ioctl+0x10/0x10 [ 73.420207][ T5934] blkdev_ioctl+0x5ad/0x6f0 [ 73.420221][ T5934] ? __pfx_blkdev_ioctl+0x10/0x10 [ 73.420235][ T5934] ? selinux_file_ioctl+0x13b/0x290 [ 73.420249][ T5934] ? selinux_file_ioctl+0xb6/0x290 [ 73.420266][ T5934] ? __pfx_blkdev_ioctl+0x10/0x10 [ 73.420280][ T5934] __x64_sys_ioctl+0x18e/0x210 [ 73.420295][ T5934] do_syscall_64+0x115/0x870 [ 73.420311][ T5934] ? clear_bhb_loop+0x40/0x90 [ 73.420323][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.420334][ T5934] RIP: 0033:0x7efcd1b9ce59 [ 73.420345][ T5934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.420355][ T5934] RSP: 002b:00007ffdc283c458 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.420366][ T5934] RAX: ffffffffffffffda RBX: 00007efcd1e15fa0 RCX: 00007efcd1b9ce59 [ 73.420372][ T5934] RDX: 0000000000000006 RSI: 0000000000004c06 RDI: 0000000000000005 [ 73.420378][ T5934] RBP: 00007efcd1c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 73.420384][ T5934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.420389][ T5934] R13: 00007efcd1e15fac R14: 00007efcd1e15fa0 R15: 00007efcd1e15fa0 [ 73.420398][ T5934] [ 74.934042][ T5762] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.342825][ T5762] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.402293][ T5762] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.442517][ T5762] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.499911][ T5762] bridge_slave_1: left allmulticast mode [ 76.501762][ T5762] bridge_slave_1: left promiscuous mode [ 76.503647][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.507326][ T5762] bridge_slave_0: left allmulticast mode [ 76.509532][ T5762] bridge_slave_0: left promiscuous mode [ 76.511686][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.559767][ T5762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.567925][ T5762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.574671][ T5762] bond0 (unregistering): Released all slaves [ 76.630507][ T42] audit: type=1400 audit(1782795786.507:204): avc: denied { write } for pid=5938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.680757][ T42] audit: type=1400 audit(1782795786.557:205): avc: denied { write } for pid=5941 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.710206][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 76.768016][ T42] audit: type=1400 audit(1782795786.637:206): avc: denied { write } for pid=5944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.816823][ T42] audit: type=1400 audit(1782795786.687:207): avc: denied { write } for pid=5947 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.855582][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 76.902138][ T5762] hsr_slave_0: left promiscuous mode [ 76.904927][ T5762] hsr_slave_1: left promiscuous mode [ 76.907599][ T5762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.912194][ T5762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.916334][ T5762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.919149][ T42] audit: type=1400 audit(1782795786.787:208): avc: denied { write } for pid=5950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.919636][ T5762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.937326][ T5762] veth1_macvtap: left promiscuous mode [ 76.940908][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.941823][ T5762] veth0_macvtap: left promiscuous mode [ 76.943770][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.945736][ T5762] veth1_vlan: left promiscuous mode [ 76.951085][ T5762] veth0_vlan: left promiscuous mode [ 76.952946][ T42] audit: type=1400 audit(1782795786.827:209): avc: denied { write } for pid=5953 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.049669][ T5762] team0 (unregistering): Port device team_slave_1 removed [ 77.056990][ T5762] team0 (unregistering): Port device team_slave_0 removed [ 77.102984][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4 [ 77.167313][ T42] audit: type=1400 audit(1782795787.037:210): avc: denied { write } for pid=5956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.221179][ T42] audit: type=1400 audit(1782795787.097:211): avc: denied { write } for pid=5959 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.262621][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5