Warning: Permanently added '[localhost]:42801' (ED25519) to the list of known hosts. [ 50.439660][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 50.439692][ T42] audit: type=1400 audit(1786851159.148:138): avc: denied { execute } for pid=5722 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 50.448545][ T42] audit: type=1400 audit(1786851159.148:139): avc: denied { execute_no_trans } for pid=5722 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/08/16 03:32:40 parsed 1 programs 2026/08/16 03:32:40 serving rpc on tcp://43493 [ 51.517046][ T42] audit: type=1400 audit(1786851160.218:140): avc: denied { node_bind } for pid=5722 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 51.524388][ T42] audit: type=1400 audit(1786851160.228:141): avc: denied { node_bind } for pid=5722 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 54.446666][ T42] audit: type=1400 audit(1786851163.148:142): avc: denied { mounton } for pid=5732 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.456694][ T42] audit: type=1400 audit(1786851163.158:143): avc: denied { mount } for pid=5732 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.459440][ T5732] cgroup: Unknown subsys name 'net' [ 54.468666][ T42] audit: type=1400 audit(1786851163.168:144): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.623757][ T5732] cgroup: Unknown subsys name 'cpuset' [ 54.630542][ T5732] cgroup: Unknown subsys name 'rlimit' [ 54.815058][ T42] audit: type=1400 audit(1786851163.518:145): avc: denied { setattr } for pid=5732 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.823474][ T42] audit: type=1400 audit(1786851163.518:146): avc: denied { create } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.831169][ T42] audit: type=1400 audit(1786851163.518:147): avc: denied { write } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.877500][ T5735] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 55.937356][ T5732] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.027401][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 58.027415][ T42] audit: type=1400 audit(1786851166.728:159): avc: denied { execmem } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 58.097269][ T42] audit: type=1400 audit(1786851166.798:160): avc: denied { read } for pid=5739 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.106138][ T42] audit: type=1400 audit(1786851166.808:161): avc: denied { open } for pid=5739 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.113689][ T42] audit: type=1400 audit(1786851166.808:162): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 58.174023][ T42] audit: type=1400 audit(1786851166.878:163): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.182750][ T42] audit: type=1400 audit(1786851166.878:164): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzkaller.PQ6j90/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.191914][ T42] audit: type=1400 audit(1786851166.878:165): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.198652][ T42] audit: type=1400 audit(1786851166.888:166): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzkaller.PQ6j90/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 58.206798][ T42] audit: type=1400 audit(1786851166.888:167): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzkaller.PQ6j90/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 58.215930][ T42] audit: type=1400 audit(1786851166.888:168): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.226063][ T5739] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.725062][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.729241][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.759634][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.763527][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.143555][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.148392][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.152039][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.155836][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.159341][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.836940][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.839864][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.842437][ T5809] bridge_slave_0: entered allmulticast mode [ 60.845509][ T5809] bridge_slave_0: entered promiscuous mode [ 60.850053][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.852517][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.854973][ T5809] bridge_slave_1: entered allmulticast mode [ 60.857781][ T5809] bridge_slave_1: entered promiscuous mode [ 60.879314][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.884897][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.903326][ T5809] team0: Port device team_slave_0 added [ 60.907231][ T5809] team0: Port device team_slave_1 added [ 60.922215][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.924532][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.934965][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.940686][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.943101][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.955048][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.985483][ T5809] hsr_slave_0: entered promiscuous mode [ 60.988488][ T5809] hsr_slave_1: entered promiscuous mode [ 61.123621][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.131489][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.136119][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.145043][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.148630][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.154333][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.158233][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.165426][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.192071][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.195700][ T5809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.198888][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.201647][ T5809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.238424][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.251942][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.256853][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.267045][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.275809][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.278188][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.285219][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.287529][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.558072][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.601204][ T5809] veth0_vlan: entered promiscuous mode [ 61.610044][ T5809] veth1_vlan: entered promiscuous mode [ 61.636287][ T5809] veth0_macvtap: entered promiscuous mode [ 61.643350][ T5809] veth1_macvtap: entered promiscuous mode [ 61.660714][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.670915][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.752446][ T5745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.756928][ T5745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.784017][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.799828][ T5802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.803296][ T5802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.863656][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.941651][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.003025][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/16 03:32:50 executed programs: 0 [ 62.242806][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.246902][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.250721][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.254601][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.257335][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.656457][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.659577][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.662623][ T5862] bridge_slave_0: entered allmulticast mode [ 62.666691][ T5862] bridge_slave_0: entered promiscuous mode [ 62.671809][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.674722][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.677603][ T5862] bridge_slave_1: entered allmulticast mode [ 62.681236][ T5862] bridge_slave_1: entered promiscuous mode [ 62.708710][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.716555][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.737207][ T5862] team0: Port device team_slave_0 added [ 62.741167][ T5862] team0: Port device team_slave_1 added [ 62.756046][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.758484][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.767723][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.775171][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.777951][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.786608][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.812799][ T5862] hsr_slave_0: entered promiscuous mode [ 62.815678][ T5862] hsr_slave_1: entered promiscuous mode [ 62.818555][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 62.821130][ T5862] Cannot create hsr debugfs directory [ 64.279996][ T65] Bluetooth: hci0: command tx timeout [ 64.750108][ T12] bridge_slave_1: left allmulticast mode [ 64.752645][ T12] bridge_slave_1: left promiscuous mode [ 64.756140][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.763936][ T12] bridge_slave_0: left allmulticast mode [ 64.766266][ T12] bridge_slave_0: left promiscuous mode [ 64.768227][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.881723][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.887613][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.892628][ T12] bond0 (unregistering): Released all slaves [ 64.984642][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 64.984656][ T42] audit: type=1400 audit(1786851173.688:189): avc: denied { write } for pid=5880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.994770][ T42] audit: type=1400 audit(1786851173.688:190): avc: denied { create } for pid=5880 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.005498][ T42] audit: type=1400 audit(1786851173.688:191): avc: denied { write } for pid=5880 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2036 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.014356][ T42] audit: type=1400 audit(1786851173.688:192): avc: denied { append } for pid=5880 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2036 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.037800][ T12] hsr_slave_0: left promiscuous mode [ 65.038284][ T42] audit: type=1400 audit(1786851173.738:193): avc: denied { write } for pid=5883 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.047237][ T42] audit: type=1400 audit(1786851173.738:194): avc: denied { unlink } for pid=5883 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2036 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.047337][ T12] hsr_slave_1: left promiscuous mode [ 65.058210][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.061904][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.065890][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.069048][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.078325][ T12] veth1_macvtap: left promiscuous mode [ 65.080715][ T12] veth0_macvtap: left promiscuous mode [ 65.082559][ T12] veth1_vlan: left promiscuous mode [ 65.084315][ T12] veth0_vlan: left promiscuous mode [ 65.197206][ T12] team0 (unregistering): Port device team_slave_1 removed [ 65.211257][ T12] team0 (unregistering): Port device team_slave_0 removed [ 65.266626][ T5439] 8021q: adding VLAN 0 to HW filter on device eth2 [ 65.344354][ T42] audit: type=1400 audit(1786851174.048:195): avc: denied { write } for pid=5886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.390585][ T42] audit: type=1400 audit(1786851174.098:196): avc: denied { write } for pid=5889 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.484086][ T42] audit: type=1400 audit(1786851174.188:197): avc: denied { write } for pid=5892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.538057][ T42] audit: type=1400 audit(1786851174.238:198): avc: denied { write } for pid=5895 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.702936][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.707120][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.711189][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.717241][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.721451][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.725250][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.727973][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.731989][ T5862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.794566][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.808598][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.813475][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.816151][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.824396][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.827233][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.107168][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.145490][ T5862] veth0_vlan: entered promiscuous mode [ 66.152908][ T5862] veth1_vlan: entered promiscuous mode [ 66.175387][ T5862] veth0_macvtap: entered promiscuous mode [ 66.182511][ T5862] veth1_macvtap: entered promiscuous mode [ 66.197744][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.205178][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.247315][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.250056][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.264148][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.266427][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.279400][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.283389][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.286163][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.289466][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.318417][ T5919] [ 66.319247][ T5919] ====================================================== [ 66.321414][ T5919] WARNING: possible circular locking dependency detected [ 66.323714][ T5919] syzkaller #0 Not tainted [ 66.325111][ T5919] ------------------------------------------------------ [ 66.327199][ T5919] syz.0.18/5919 is trying to acquire lock: [ 66.329053][ T5919] ffff88802048a280 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 66.332695][ T5919] [ 66.332695][ T5919] but task is already holding lock: [ 66.334991][ T5919] ffff888036ee5518 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 66.337799][ T5919] [ 66.337799][ T5919] which lock already depends on the new lock. [ 66.337799][ T5919] [ 66.341855][ T5919] [ 66.341855][ T5919] the existing dependency chain (in reverse order) is: [ 66.345529][ T5919] [ 66.345529][ T5919] -> #3 (&opts->dep_lock){+.+.}-{4:4}: [ 66.348466][ T5919] lock_acquire+0x1b9/0x370 [ 66.350419][ T5919] __mutex_lock+0x1a4/0x1bd0 [ 66.352512][ T5919] usbg_make_tpg+0x1a4/0x620 [ 66.354373][ T5919] target_fabric_make_tpg+0xab/0x8c0 [ 66.356206][ T5919] configfs_mkdir+0x51e/0xb70 [ 66.358271][ T5919] vfs_mkdir+0x361/0x850 [ 66.359199][ T65] Bluetooth: hci0: command tx timeout [ 66.360315][ T5919] filename_mkdirat+0x48b/0x5e0 [ 66.360338][ T5919] __x64_sys_mkdirat+0x89/0xc0 [ 66.360354][ T5919] do_syscall_64+0x115/0x870 [ 66.360374][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.360392][ T5919] [ 66.360392][ T5919] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 66.360420][ T5919] lock_acquire+0x1b9/0x370 [ 66.360453][ T5919] __mutex_lock+0x1a4/0x1bd0 [ 66.360471][ T5919] tcm_alloc+0x20/0x440 [ 66.360492][ T5919] usb_get_function+0x5e/0xd0 [ 66.360515][ T5919] config_usb_cfg_link+0x1ed/0x3a0 [ 66.385234][ T5919] configfs_symlink+0x540/0x11f0 [ 66.387299][ T5919] vfs_symlink+0x178/0x4d0 [ 66.388856][ T5919] filename_symlinkat+0x2a6/0x560 [ 66.390585][ T5919] __x64_sys_symlinkat+0x9c/0xe0 [ 66.392321][ T5919] do_syscall_64+0x115/0x870 [ 66.394292][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.396929][ T5919] [ 66.396929][ T5919] -> #1 (&gi->lock){+.+.}-{4:4}: [ 66.399155][ T5919] lock_acquire+0x1b9/0x370 [ 66.400706][ T5919] __mutex_lock+0x1a4/0x1bd0 [ 66.402455][ T5919] config_usb_cfg_link+0x57/0x3a0 [ 66.404196][ T5919] configfs_symlink+0x540/0x11f0 [ 66.405927][ T5919] vfs_symlink+0x178/0x4d0 [ 66.407516][ T5919] filename_symlinkat+0x2a6/0x560 [ 66.409462][ T5919] __x64_sys_symlinkat+0x9c/0xe0 [ 66.411732][ T5919] do_syscall_64+0x115/0x870 [ 66.413828][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.416461][ T5919] [ 66.416461][ T5919] -> #0 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}: [ 66.419868][ T5919] check_prev_add+0xeb/0xe60 [ 66.422034][ T5919] __lock_acquire+0x136c/0x1a40 [ 66.424363][ T5919] lock_acquire+0x1b9/0x370 [ 66.426463][ T5919] down_write+0x8b/0x1f0 [ 66.428477][ T5919] configfs_depend_item_unlocked+0xf3/0x6a0 [ 66.431174][ T5919] usbg_make_tpg+0x261/0x620 [ 66.433292][ T5919] target_fabric_make_tpg+0xab/0x8c0 [ 66.435768][ T5919] configfs_mkdir+0x51e/0xb70 [ 66.437989][ T5919] vfs_mkdir+0x361/0x850 [ 66.439994][ T5919] filename_mkdirat+0x48b/0x5e0 [ 66.442223][ T5919] __x64_sys_mkdirat+0x89/0xc0 [ 66.444331][ T5919] do_syscall_64+0x115/0x870 [ 66.446379][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.448701][ T5919] [ 66.448701][ T5919] other info that might help us debug this: [ 66.448701][ T5919] [ 66.452124][ T5919] Chain exists of: [ 66.452124][ T5919] &sb->s_type->i_mutex_key#24 --> tpg_instances_lock --> &opts->dep_lock [ 66.452124][ T5919] [ 66.457595][ T5919] Possible unsafe locking scenario: [ 66.457595][ T5919] [ 66.460598][ T5919] CPU0 CPU1 [ 66.462735][ T5919] ---- ---- [ 66.464926][ T5919] lock(&opts->dep_lock); [ 66.466731][ T5919] lock(tpg_instances_lock); [ 66.469671][ T5919] lock(&opts->dep_lock); [ 66.472485][ T5919] lock(&sb->s_type->i_mutex_key#24); [ 66.474744][ T5919] [ 66.474744][ T5919] *** DEADLOCK *** [ 66.474744][ T5919] [ 66.478110][ T5919] 5 locks held by syz.0.18/5919: [ 66.480196][ T5919] #0: ffff888024cd6450 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 66.484152][ T5919] #1: ffff88803886db80 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 66.488540][ T5919] #2: ffffffff8ff81228 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 66.492564][ T5919] #3: ffffffff9044c580 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 [ 66.496463][ T5919] #4: ffff888036ee5518 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 66.499608][ T5919] [ 66.499608][ T5919] stack backtrace: [ 66.501774][ T5919] CPU: 0 UID: 0 PID: 5919 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 66.501788][ T5919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.501796][ T5919] Call Trace: [ 66.501811][ T5919] [ 66.501817][ T5919] dump_stack_lvl+0x100/0x190 [ 66.501835][ T5919] print_circular_bug.cold+0x178/0x1c7 [ 66.501854][ T5919] check_noncircular+0x146/0x160 [ 66.501870][ T5919] check_prev_add+0xeb/0xe60 [ 66.501884][ T5919] __lock_acquire+0x136c/0x1a40 [ 66.501898][ T5919] ? rcu_is_watching+0x12/0xc0 [ 66.501917][ T5919] lock_acquire+0x1b9/0x370 [ 66.501930][ T5919] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 66.501947][ T5919] ? __pfx___might_resched+0x10/0x10 [ 66.501962][ T5919] down_write+0x8b/0x1f0 [ 66.501978][ T5919] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 66.501993][ T5919] ? __pfx_down_write+0x10/0x10 [ 66.502008][ T5919] configfs_depend_item_unlocked+0xf3/0x6a0 [ 66.502023][ T5919] ? __lock_acquire+0x49f/0x1a40 [ 66.502041][ T5919] usbg_make_tpg+0x261/0x620 [ 66.502056][ T5919] ? __pfx_usbg_make_tpg+0x10/0x10 [ 66.502069][ T5919] ? find_held_lock+0x2b/0x80 [ 66.502078][ T5919] ? __pfx_usbg_make_tpg+0x10/0x10 [ 66.502091][ T5919] target_fabric_make_tpg+0xab/0x8c0 [ 66.502109][ T5919] configfs_mkdir+0x51e/0xb70 [ 66.502125][ T5919] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 66.502141][ T5919] ? __pfx_configfs_mkdir+0x10/0x10 [ 66.502158][ T5919] ? inode_permission+0x374/0x620 [ 66.502175][ T5919] vfs_mkdir+0x361/0x850 [ 66.502191][ T5919] filename_mkdirat+0x48b/0x5e0 [ 66.502213][ T5919] ? __pfx_filename_mkdirat+0x10/0x10 [ 66.502225][ T5919] ? strncpy_from_user+0x19d/0x2d0 [ 66.502242][ T5919] ? do_getname+0x191/0x390 [ 66.502256][ T5919] __x64_sys_mkdirat+0x89/0xc0 [ 66.502269][ T5919] do_syscall_64+0x115/0x870 [ 66.502282][ T5919] ? clear_bhb_loop+0x70/0xc0 [ 66.502294][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.502306][ T5919] RIP: 0033:0x7f30e179e0d9 [ 66.502317][ T5919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.502327][ T5919] RSP: 002b:00007ffdd4ef71a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 66.502338][ T5919] RAX: ffffffffffffffda RBX: 00007f30e1a25fa0 RCX: 00007f30e179e0d9 [ 66.502345][ T5919] RDX: 00000000000001ff RSI: 0000200000000680 RDI: ffffffffffffff9c [ 66.502369][ T5919] RBP: 00007f30e1835024 R08: 0000000000000000 R09: 0000000000000000 [ 66.502376][ T5919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.502382][ T5919] R13: 00007f30e1a25fac R14: 00007f30e1a25fa0 R15: 00007f30e1a25fa0 [ 66.502391][ T5919] 2026/08/16 03:32:55 executed programs: 37 [ 68.439207][ T65] Bluetooth: hci0: command tx timeout [ 70.519207][ T65] Bluetooth: hci0: command tx timeout [ 71.481179][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.483924][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 2026/08/16 03:33:01 executed programs: 325