[ 73.203269][ T40] audit: type=1400 audit(1771827903.830:116): avc: denied { transition } for pid=6124 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.212561][ T40] audit: type=1400 audit(1771827903.830:117): avc: denied { noatsecure } for pid=6124 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.219272][ T40] audit: type=1400 audit(1771827903.840:118): avc: denied { rlimitinh } for pid=6124 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.225439][ T40] audit: type=1400 audit(1771827903.840:119): avc: denied { siginh } for pid=6124 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.474339][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.476509][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:57488' (ED25519) to the list of known hosts. 2026/02/23 06:25:10 parsed 1 programs [ 80.020693][ T40] audit: type=1400 audit(1771827910.650:120): avc: denied { node_bind } for pid=6151 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 82.381779][ T40] audit: type=1400 audit(1771827913.010:121): avc: denied { read write } for pid=6167 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 82.390541][ T40] audit: type=1400 audit(1771827913.010:122): avc: denied { open } for pid=6167 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 82.472175][ T40] audit: type=1400 audit(1771827913.100:123): avc: denied { unlink } for pid=6167 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 82.762943][ T40] audit: type=1400 audit(1771827913.390:124): avc: denied { relabelto } for pid=6175 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 83.424573][ T6167] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.022129][ T6203] chnl_net:caif_netlink_parms(): no params data found [ 86.092069][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.094939][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.097355][ T6203] bridge_slave_0: entered allmulticast mode [ 86.100371][ T6203] bridge_slave_0: entered promiscuous mode [ 86.104102][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.106546][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.108888][ T6203] bridge_slave_1: entered allmulticast mode [ 86.112566][ T6203] bridge_slave_1: entered promiscuous mode [ 86.131133][ T6203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.136912][ T6203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.153651][ T6203] team0: Port device team_slave_0 added [ 86.156991][ T6203] team0: Port device team_slave_1 added [ 86.171802][ T6203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.174157][ T6203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.182826][ T6203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.187274][ T6203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.189911][ T6203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.198214][ T6203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.222743][ T6203] hsr_slave_0: entered promiscuous mode [ 86.225210][ T6203] hsr_slave_1: entered promiscuous mode [ 86.713559][ T50] cfg80211: failed to load regulatory.db [ 86.772754][ T6203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.777559][ T6203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.782386][ T6203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.786607][ T6203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.802912][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.805248][ T6203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.807786][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.810254][ T6203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.837352][ T6203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.845261][ T129] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.848061][ T129] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.860107][ T6203] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.865562][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.868047][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.873911][ T129] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.876819][ T129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.918763][ T40] audit: type=1400 audit(1771827917.540:125): avc: denied { sys_module } for pid=6203 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 87.012265][ T6203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.046151][ T6203] veth0_vlan: entered promiscuous mode [ 87.054422][ T6203] veth1_vlan: entered promiscuous mode [ 87.076099][ T6203] veth0_macvtap: entered promiscuous mode [ 87.082929][ T6203] veth1_macvtap: entered promiscuous mode [ 87.099985][ T6203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.109645][ T6203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.122417][ T129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.125521][ T129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.129398][ T129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.133637][ T129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.251454][ T129] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.313970][ T129] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.342294][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.346279][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.349370][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.354592][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.357125][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.411434][ T129] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.498589][ T129] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.534126][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.536696][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.558144][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.560880][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.175202][ T40] audit: type=1401 audit(1771827918.800:126): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/02/23 06:25:19 executed programs: 0 [ 88.635276][ T5286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.639185][ T5286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.642803][ T5286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.646722][ T5286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.650912][ T5286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.767535][ T6336] chnl_net:caif_netlink_parms(): no params data found [ 88.842915][ T6336] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.845294][ T6336] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.847959][ T6336] bridge_slave_0: entered allmulticast mode [ 88.850967][ T6336] bridge_slave_0: entered promiscuous mode [ 88.855987][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.859304][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.862514][ T6336] bridge_slave_1: entered allmulticast mode [ 88.865219][ T6336] bridge_slave_1: entered promiscuous mode [ 88.884349][ T6336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.892158][ T6336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.916629][ T6336] team0: Port device team_slave_0 added [ 88.921381][ T6336] team0: Port device team_slave_1 added [ 88.943530][ T6336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.946506][ T6336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.957790][ T6336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.964117][ T6336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.966845][ T6336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.975873][ T6336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.998821][ T6336] hsr_slave_0: entered promiscuous mode [ 89.001254][ T6336] hsr_slave_1: entered promiscuous mode [ 89.003364][ T6336] debugfs: 'hsr0' already exists in 'hsr' [ 89.005232][ T6336] Cannot create hsr debugfs directory [ 90.608687][ T129] bridge_slave_1: left allmulticast mode [ 90.610718][ T129] bridge_slave_1: left promiscuous mode [ 90.613196][ T129] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.619298][ T129] bridge_slave_0: left allmulticast mode [ 90.621951][ T129] bridge_slave_0: left promiscuous mode [ 90.624172][ T129] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.710093][ T5286] Bluetooth: hci0: command tx timeout [ 90.780017][ T129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.785737][ T129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.790795][ T129] bond0 (unregistering): Released all slaves [ 90.906717][ T129] hsr_slave_0: left promiscuous mode [ 90.909794][ T129] hsr_slave_1: left promiscuous mode [ 90.912974][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.916147][ T129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.920736][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.923950][ T129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.931422][ T129] veth1_macvtap: left promiscuous mode [ 90.933853][ T129] veth0_macvtap: left promiscuous mode [ 90.936287][ T129] veth1_vlan: left promiscuous mode [ 90.938580][ T129] veth0_vlan: left promiscuous mode [ 91.087480][ T129] team0 (unregistering): Port device team_slave_1 removed [ 91.098367][ T129] team0 (unregistering): Port device team_slave_0 removed [ 91.626282][ T6336] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.632159][ T6336] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.637488][ T6336] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.643317][ T6336] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.695983][ T6336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.713833][ T6336] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.722106][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.725202][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.729733][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.732767][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.998454][ T6336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.025157][ T6336] veth0_vlan: entered promiscuous mode [ 92.034465][ T6336] veth1_vlan: entered promiscuous mode [ 92.059589][ T6336] veth0_macvtap: entered promiscuous mode [ 92.073444][ T6336] veth1_macvtap: entered promiscuous mode [ 92.090651][ T6336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.101677][ T6336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.112297][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.115389][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.119345][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.126907][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.216387][ T129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.220596][ T129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.235886][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.238867][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.278584][ T40] audit: type=1400 audit(1771827922.900:127): avc: denied { mount } for pid=6384 comm="syz.0.17" name="/" dev="autofs" ino=12974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 92.338899][ T6387] [ 92.340053][ T6387] ====================================================== [ 92.342917][ T6387] WARNING: possible circular locking dependency detected [ 92.345857][ T6387] syzkaller #0 Not tainted [ 92.347799][ T6387] ------------------------------------------------------ [ 92.351055][ T6387] syz.0.17/6387 is trying to acquire lock: [ 92.353496][ T6387] ffff888034f51888 (&of->mutex){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 92.357062][ T6387] [ 92.357062][ T6387] but task is already holding lock: [ 92.360068][ T6387] ffff88803c1e11f8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 92.363299][ T6387] [ 92.363299][ T6387] which lock already depends on the new lock. [ 92.363299][ T6387] [ 92.367103][ T6387] [ 92.367103][ T6387] the existing dependency chain (in reverse order) is: [ 92.370738][ T6387] [ 92.370738][ T6387] -> #3 (&p->lock){+.+.}-{4:4}: [ 92.374048][ T6387] __mutex_lock+0x1a2/0x1b90 [ 92.376531][ T6387] seq_read_iter+0xe1/0x1270 [ 92.378744][ T6387] kernfs_fop_read_iter+0x46c/0x610 [ 92.381279][ T6387] copy_splice_read+0x4ba/0xb90 [ 92.383666][ T6387] do_splice_read+0x285/0x370 [ 92.385789][ T6387] splice_file_to_pipe+0x82/0x120 [ 92.387650][ T6387] do_sendfile+0x366/0xe20 [ 92.389347][ T6387] __x64_sys_sendfile64+0x1d8/0x220 [ 92.391169][ T6387] do_syscall_64+0x106/0xf80 [ 92.392815][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.394865][ T6387] [ 92.394865][ T6387] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 92.397230][ T6387] __mutex_lock+0x1a2/0x1b90 [ 92.398915][ T6387] anon_pipe_write+0x163/0x1d40 [ 92.400780][ T6387] __kernel_write_iter+0x6b2/0x920 [ 92.403154][ T6387] __kernel_write+0xf6/0x140 [ 92.405354][ T6387] autofs_notify_daemon+0x50d/0xd90 [ 92.407864][ T6387] autofs_wait+0x10fd/0x1b50 [ 92.409889][ T6387] autofs_mount_wait+0x132/0x3b0 [ 92.412221][ T6387] autofs_d_automount+0x490/0x950 [ 92.414589][ T6387] __traverse_mounts+0x1b9/0x8a0 [ 92.416922][ T6387] step_into_slowpath+0xb7e/0xf90 [ 92.419380][ T6387] path_lookupat+0x58b/0xc40 [ 92.421665][ T6387] filename_lookup+0x202/0x590 [ 92.423977][ T6387] kern_path+0x37/0x50 [ 92.425962][ T6387] lookup_bdev+0xd8/0x280 [ 92.428185][ T6387] resume_store+0x1d6/0x460 [ 92.430368][ T6387] kobj_attr_store+0x58/0x80 [ 92.432615][ T6387] sysfs_kf_write+0xf2/0x150 [ 92.435011][ T6387] kernfs_fop_write_iter+0x3e0/0x5f0 [ 92.437698][ T6387] vfs_write+0x6ac/0x1070 [ 92.439601][ T6387] ksys_write+0x12a/0x250 [ 92.441498][ T6387] do_syscall_64+0x106/0xf80 [ 92.443690][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.446449][ T6387] [ 92.446449][ T6387] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 92.449998][ T6387] __mutex_lock+0x1a2/0x1b90 [ 92.452223][ T6387] autofs_notify_daemon+0x4f8/0xd90 [ 92.454685][ T6387] autofs_wait+0x10fd/0x1b50 [ 92.456922][ T6387] autofs_mount_wait+0x132/0x3b0 [ 92.459338][ T6387] autofs_d_automount+0x490/0x950 [ 92.461781][ T6387] __traverse_mounts+0x1b9/0x8a0 [ 92.464076][ T6387] step_into_slowpath+0xb7e/0xf90 [ 92.466285][ T6387] path_lookupat+0x58b/0xc40 [ 92.468596][ T6387] filename_lookup+0x202/0x590 [ 92.470913][ T6387] kern_path+0x37/0x50 [ 92.473004][ T6387] lookup_bdev+0xd8/0x280 [ 92.475239][ T6387] resume_store+0x1d6/0x460 [ 92.477499][ T6387] kobj_attr_store+0x58/0x80 [ 92.479833][ T6387] sysfs_kf_write+0xf2/0x150 [ 92.481509][ T6387] kernfs_fop_write_iter+0x3e0/0x5f0 [ 92.483375][ T6387] vfs_write+0x6ac/0x1070 [ 92.484950][ T6387] ksys_write+0x12a/0x250 [ 92.486504][ T6387] do_syscall_64+0x106/0xf80 [ 92.488149][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.490212][ T6387] [ 92.490212][ T6387] -> #0 (&of->mutex){+.+.}-{4:4}: [ 92.492560][ T6387] __lock_acquire+0x14b8/0x2630 [ 92.494316][ T6387] lock_acquire+0x1cf/0x380 [ 92.496003][ T6387] __mutex_lock+0x1a2/0x1b90 [ 92.497615][ T6387] kernfs_seq_start+0x4f/0x2a0 [ 92.499320][ T6387] seq_read_iter+0x2c1/0x1270 [ 92.500934][ T6387] kernfs_fop_read_iter+0x46c/0x610 [ 92.502749][ T6387] copy_splice_read+0x4ba/0xb90 [ 92.504499][ T6387] do_splice_read+0x285/0x370 [ 92.506170][ T6387] splice_file_to_pipe+0x82/0x120 [ 92.507971][ T6387] do_sendfile+0x366/0xe20 [ 92.509578][ T6387] __x64_sys_sendfile64+0x1d8/0x220 [ 92.511437][ T6387] do_syscall_64+0x106/0xf80 [ 92.513091][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.515142][ T6387] [ 92.515142][ T6387] other info that might help us debug this: [ 92.515142][ T6387] [ 92.518367][ T6387] Chain exists of: [ 92.518367][ T6387] &of->mutex --> &pipe->mutex --> &p->lock [ 92.518367][ T6387] [ 92.522081][ T6387] Possible unsafe locking scenario: [ 92.522081][ T6387] [ 92.524731][ T6387] CPU0 CPU1 [ 92.526499][ T6387] ---- ---- [ 92.528299][ T6387] lock(&p->lock); [ 92.529565][ T6387] lock(&pipe->mutex); [ 92.531724][ T6387] lock(&p->lock); [ 92.533745][ T6387] lock(&of->mutex); [ 92.535057][ T6387] [ 92.535057][ T6387] *** DEADLOCK *** [ 92.535057][ T6387] [ 92.537643][ T6387] 2 locks held by syz.0.17/6387: [ 92.539267][ T6387] #0: ffff8880363d8868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 92.542116][ T6387] #1: ffff88803c1e11f8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 92.545046][ T6387] [ 92.545046][ T6387] stack backtrace: [ 92.546969][ T6387] CPU: 1 UID: 0 PID: 6387 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 92.546983][ T6387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.546990][ T6387] Call Trace: [ 92.546995][ T6387] [ 92.547001][ T6387] dump_stack_lvl+0x100/0x190 [ 92.547019][ T6387] print_circular_bug.cold+0x178/0x1c7 [ 92.547037][ T6387] check_noncircular+0x146/0x160 [ 92.547053][ T6387] __lock_acquire+0x14b8/0x2630 [ 92.547070][ T6387] ? kasan_save_stack+0x30/0x50 [ 92.547084][ T6387] ? kasan_save_track+0x14/0x30 [ 92.547098][ T6387] lock_acquire+0x1cf/0x380 [ 92.547113][ T6387] ? kernfs_seq_start+0x4f/0x2a0 [ 92.547126][ T6387] ? __pfx___might_resched+0x10/0x10 [ 92.547138][ T6387] __mutex_lock+0x1a2/0x1b90 [ 92.547149][ T6387] ? kernfs_seq_start+0x4f/0x2a0 [ 92.547160][ T6387] ? kernfs_seq_start+0x4f/0x2a0 [ 92.547171][ T6387] ? __pfx___mutex_lock+0x10/0x10 [ 92.547183][ T6387] ? rcu_is_watching+0x12/0xc0 [ 92.547194][ T6387] ? trace_kmalloc+0x101/0x130 [ 92.547210][ T6387] ? __kasan_kmalloc+0xaa/0xb0 [ 92.547224][ T6387] ? kernfs_seq_start+0x4f/0x2a0 [ 92.547234][ T6387] kernfs_seq_start+0x4f/0x2a0 [ 92.547249][ T6387] seq_read_iter+0x2c1/0x1270 [ 92.547265][ T6387] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 92.547280][ T6387] kernfs_fop_read_iter+0x46c/0x610 [ 92.547293][ T6387] copy_splice_read+0x4ba/0xb90 [ 92.547303][ T6387] ? __pfx_copy_splice_read+0x10/0x10 [ 92.547315][ T6387] ? __fget_files+0x215/0x3d0 [ 92.547324][ T6387] ? __pfx_copy_splice_read+0x10/0x10 [ 92.547333][ T6387] do_splice_read+0x285/0x370 [ 92.547343][ T6387] splice_file_to_pipe+0x82/0x120 [ 92.547353][ T6387] do_sendfile+0x366/0xe20 [ 92.547367][ T6387] ? __pfx_do_sendfile+0x10/0x10 [ 92.547382][ T6387] ? __pfx___seccomp_filter+0x10/0x10 [ 92.547393][ T6387] __x64_sys_sendfile64+0x1d8/0x220 [ 92.547403][ T6387] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 92.547415][ T6387] do_syscall_64+0x106/0xf80 [ 92.547424][ T6387] ? clear_bhb_loop+0x40/0x90 [ 92.547436][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.547447][ T6387] RIP: 0033:0x7f5a5099aeb9 [ 92.547455][ T6387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.547465][ T6387] RSP: 002b:00007f5a518a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 92.547475][ T6387] RAX: ffffffffffffffda RBX: 00007f5a50c16090 RCX: 00007f5a5099aeb9 [ 92.547481][ T6387] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 92.547487][ T6387] RBP: 00007f5a50a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 92.547492][ T6387] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 92.547498][ T6387] R13: 00007f5a50c16128 R14: 00007f5a50c16090 R15: 00007fff067f1188 [ 92.547507][ T6387] [ 92.790071][ T5286] Bluetooth: hci0: command tx timeout [ 93.112604][ T6385] block device autoloading is deprecated and will be removed. [ 93.115131][ T6385] PM: Image not found (code -22) [ 93.118941][ T40] audit: type=1400 audit(1771827923.740:128): avc: denied { unmount } for pid=6336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 93.966960][ T6389] PM: Image not found (code -22) 2026/02/23 06:25:24 executed programs: 4 [ 94.809228][ T6393] PM: Image not found (code -22) [ 94.870288][ T5286] Bluetooth: hci0: command tx timeout [ 95.653644][ T6397] PM: Image not found (code -22) [ 96.499020][ T6402] PM: Image not found (code -22) [ 96.949958][ T5286] Bluetooth: hci0: command tx timeout [ 97.346932][ T6407] PM: Image not found (code -22) [ 98.191168][ T6413] PM: Image not found (code -22) [ 99.033828][ T6419] PM: Image not found (code -22) 2026/02/23 06:25:29 executed programs: 10 [ 99.877663][ T6423] PM: Image not found (code -22) [ 100.723463][ T6428] PM: Image not found (code -22) [ 101.568119][ T6432] PM: Image not found (code -22)