[ 43.961062][ T40] audit: type=1400 audit(1771247193.292:59): avc: denied { write } for pid=5825 comm="sh" path="pipe:[6449]" dev="pipefs" ino=6449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 43.970543][ T40] audit: type=1400 audit(1771247193.292:60): avc: denied { rlimitinh } for pid=5825 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.978464][ T40] audit: type=1400 audit(1771247193.292:61): avc: denied { siginh } for pid=5825 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:14892' (ED25519) to the list of known hosts. [ 49.090335][ T40] audit: type=1400 audit(1771247198.442:62): avc: denied { execute } for pid=5893 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 49.098081][ T40] audit: type=1400 audit(1771247198.452:63): avc: denied { execute_no_trans } for pid=5893 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/02/16 13:06:39 parsed 1 programs [ 50.442798][ T40] audit: type=1400 audit(1771247199.792:64): avc: denied { node_bind } for pid=5893 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.892136][ T40] audit: type=1400 audit(1771247202.242:65): avc: denied { mounton } for pid=5926 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 52.903082][ T40] audit: type=1400 audit(1771247202.252:66): avc: denied { mount } for pid=5926 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.904967][ T5926] cgroup: Unknown subsys name 'net' [ 52.915447][ T40] audit: type=1400 audit(1771247202.262:67): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.082786][ T5926] cgroup: Unknown subsys name 'cpuset' [ 53.088991][ T5926] cgroup: Unknown subsys name 'rlimit' [ 53.286897][ T40] audit: type=1400 audit(1771247202.632:68): avc: denied { setattr } for pid=5926 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.297290][ T40] audit: type=1400 audit(1771247202.652:69): avc: denied { create } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.303665][ T40] audit: type=1400 audit(1771247202.652:70): avc: denied { write } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.310487][ T40] audit: type=1400 audit(1771247202.652:71): avc: denied { read } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.353304][ T5933] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 54.135294][ T5926] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.866167][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 55.866183][ T40] audit: type=1400 audit(1771247205.212:82): avc: denied { execmem } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.874773][ T40] audit: type=1400 audit(1771247205.222:83): avc: denied { read } for pid=5938 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.882153][ T40] audit: type=1400 audit(1771247205.222:84): avc: denied { open } for pid=5938 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.890607][ T40] audit: type=1400 audit(1771247205.222:85): avc: denied { mounton } for pid=5938 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.941987][ T207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.945032][ T207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.961714][ T207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.964430][ T207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.970572][ T40] audit: type=1400 audit(1771247205.322:86): avc: denied { mount } for pid=5938 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.979897][ T40] audit: type=1400 audit(1771247205.322:87): avc: denied { mounton } for pid=5938 comm="syz-executor" path="/syzkaller.YZ2kUy/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.990169][ T40] audit: type=1400 audit(1771247205.332:88): avc: denied { mount } for pid=5938 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.999154][ T40] audit: type=1400 audit(1771247205.332:89): avc: denied { mounton } for pid=5938 comm="syz-executor" path="/syzkaller.YZ2kUy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.008357][ T40] audit: type=1400 audit(1771247205.332:90): avc: denied { mounton } for pid=5938 comm="syz-executor" path="/syzkaller.YZ2kUy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.020134][ T40] audit: type=1400 audit(1771247205.332:91): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.023823][ T5938] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.073803][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 57.154969][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.158517][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.161460][ T5971] bridge_slave_0: entered allmulticast mode [ 57.164987][ T5971] bridge_slave_0: entered promiscuous mode [ 57.170651][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.173808][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.176902][ T5971] bridge_slave_1: entered allmulticast mode [ 57.180900][ T5971] bridge_slave_1: entered promiscuous mode [ 57.206958][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.214435][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.239397][ T5971] team0: Port device team_slave_0 added [ 57.245385][ T5971] team0: Port device team_slave_1 added [ 57.261268][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.263523][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.272444][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.277302][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.279624][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.287558][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.311690][ T5971] hsr_slave_0: entered promiscuous mode [ 57.313967][ T5971] hsr_slave_1: entered promiscuous mode [ 57.498768][ T5971] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.507221][ T5971] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.513923][ T5971] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.520483][ T5971] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.548015][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.551386][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.555300][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.558546][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.610293][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.622714][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.626736][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.636822][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.648615][ T207] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.651639][ T207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.660770][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.663681][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.811620][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.832104][ T5971] veth0_vlan: entered promiscuous mode [ 57.837133][ T5971] veth1_vlan: entered promiscuous mode [ 57.852898][ T5971] veth0_macvtap: entered promiscuous mode [ 57.857004][ T5971] veth1_macvtap: entered promiscuous mode [ 57.867108][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.873755][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.881256][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.884937][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.888298][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.893348][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.983676][ T128] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.083958][ T128] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.139255][ T128] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.216129][ T128] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.500137][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.503419][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.506260][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.509358][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.511795][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/02/16 13:06:48 executed programs: 0 [ 59.239610][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.243305][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.246332][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.250209][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.253001][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.362214][ T6033] chnl_net:caif_netlink_parms(): no params data found [ 59.446044][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.449711][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.452676][ T6033] bridge_slave_0: entered allmulticast mode [ 59.456580][ T6033] bridge_slave_0: entered promiscuous mode [ 59.462528][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.465636][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.468686][ T6033] bridge_slave_1: entered allmulticast mode [ 59.471998][ T6033] bridge_slave_1: entered promiscuous mode [ 59.492081][ T6033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.499082][ T6033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.519401][ T6033] team0: Port device team_slave_0 added [ 59.523024][ T6033] team0: Port device team_slave_1 added [ 59.543225][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.546117][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.555526][ T6033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.561635][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.564278][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.572394][ T6033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.596355][ T6033] hsr_slave_0: entered promiscuous mode [ 59.599403][ T6033] hsr_slave_1: entered promiscuous mode [ 59.601574][ T6033] debugfs: 'hsr0' already exists in 'hsr' [ 59.603389][ T6033] Cannot create hsr debugfs directory [ 61.298719][ T5285] Bluetooth: hci0: command tx timeout [ 61.302138][ T128] bridge_slave_1: left allmulticast mode [ 61.304976][ T128] bridge_slave_1: left promiscuous mode [ 61.307871][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.314177][ T128] bridge_slave_0: left allmulticast mode [ 61.316385][ T128] bridge_slave_0: left promiscuous mode [ 61.318434][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.431959][ T128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.437235][ T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.443877][ T128] bond0 (unregistering): Released all slaves [ 61.517524][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 61.517541][ T40] audit: type=1400 audit(1771247210.862:112): avc: denied { create } for pid=6043 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.528051][ T40] audit: type=1400 audit(1771247210.872:113): avc: denied { write } for pid=6043 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.537301][ T40] audit: type=1400 audit(1771247210.872:114): avc: denied { append } for pid=6043 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.572519][ T40] audit: type=1400 audit(1771247210.922:115): avc: denied { unlink } for pid=6046 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.600734][ T128] hsr_slave_0: left promiscuous mode [ 61.607876][ T128] hsr_slave_1: left promiscuous mode [ 61.610909][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.614035][ T128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.624539][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.627525][ T128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.635455][ T128] veth1_macvtap: left promiscuous mode [ 61.638342][ T128] veth0_macvtap: left promiscuous mode [ 61.640822][ T128] veth1_vlan: left promiscuous mode [ 61.643056][ T128] veth0_vlan: left promiscuous mode [ 61.790071][ T128] team0 (unregistering): Port device team_slave_1 removed [ 61.796328][ T128] team0 (unregistering): Port device team_slave_0 removed [ 62.265770][ T6033] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.290377][ T6033] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.296535][ T6033] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.305269][ T6033] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.367325][ T6033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.379522][ T6033] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.384842][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.387943][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.396599][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.399224][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.659908][ T6033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.696579][ T6033] veth0_vlan: entered promiscuous mode [ 62.704362][ T6033] veth1_vlan: entered promiscuous mode [ 62.725189][ T6033] veth0_macvtap: entered promiscuous mode [ 62.733242][ T6033] veth1_macvtap: entered promiscuous mode [ 62.745574][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.777907][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.787851][ T72] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.793801][ T72] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.796634][ T72] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.799660][ T72] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.827421][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.830717][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.847922][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.851066][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.128295][ T6075] [ 63.129155][ T6075] ====================================================== [ 63.131429][ T6075] WARNING: possible circular locking dependency detected [ 63.134000][ T6075] syzkaller #0 Not tainted [ 63.135560][ T6075] ------------------------------------------------------ [ 63.138510][ T6075] syz.0.17/6075 is trying to acquire lock: [ 63.140753][ T6075] ffffffff8e972e08 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xedc/0x1c50 [ 63.143768][ T6075] [ 63.143768][ T6075] but task is already holding lock: [ 63.146217][ T6075] ffff888028e42680 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x88e/0x1190 [ 63.149743][ T6075] [ 63.149743][ T6075] which lock already depends on the new lock. [ 63.149743][ T6075] [ 63.153025][ T6075] [ 63.153025][ T6075] the existing dependency chain (in reverse order) is: [ 63.155711][ T6075] [ 63.155711][ T6075] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 63.158695][ T6075] blk_alloc_queue+0x610/0x790 [ 63.160358][ T6075] blk_mq_alloc_queue+0x174/0x290 [ 63.162134][ T6075] __blk_mq_alloc_disk+0x29/0x120 [ 63.163827][ T6075] nbd_dev_add+0x492/0xb10 [ 63.165388][ T6075] nbd_init+0x291/0x2b0 [ 63.166907][ T6075] do_one_initcall+0x11d/0x760 [ 63.168545][ T6075] kernel_init_freeable+0x6e5/0x7a0 [ 63.170360][ T6075] kernel_init+0x1f/0x1e0 [ 63.172007][ T6075] ret_from_fork+0x754/0xd80 [ 63.173559][ T6075] ret_from_fork_asm+0x1a/0x30 [ 63.175201][ T6075] [ 63.175201][ T6075] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 63.177502][ T6075] fs_reclaim_acquire+0xc4/0x100 [ 63.179133][ T6075] prepare_alloc_pages+0x166/0x5f0 [ 63.180866][ T6075] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 63.182875][ T6075] __alloc_pages_noprof+0xb/0x1b0 [ 63.184533][ T6075] pcpu_populate_chunk+0x118/0x990 [ 63.186345][ T6075] pcpu_alloc_noprof+0x833/0x1c50 [ 63.188144][ T6075] iova_domain_init_rcaches+0x208/0x5f0 [ 63.190097][ T6075] iommu_setup_dma_ops+0x4b8/0x1630 [ 63.191946][ T6075] bus_iommu_probe+0x264/0x550 [ 63.193701][ T6075] iommu_device_register+0x1af/0x280 [ 63.195552][ T6075] intel_iommu_init+0x2020/0x2970 [ 63.197389][ T6075] pci_iommu_init+0x3c/0x80 [ 63.199052][ T6075] do_one_initcall+0x11d/0x760 [ 63.200822][ T6075] kernel_init_freeable+0x6e5/0x7a0 [ 63.202639][ T6075] kernel_init+0x1f/0x1e0 [ 63.204635][ T6075] ret_from_fork+0x754/0xd80 [ 63.206720][ T6075] ret_from_fork_asm+0x1a/0x30 [ 63.208530][ T6075] [ 63.208530][ T6075] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 63.211033][ T6075] __lock_acquire+0x14b8/0x2630 [ 63.213117][ T6075] lock_acquire+0x1cf/0x380 [ 63.214768][ T6075] __mutex_lock+0x1a2/0x1b90 [ 63.216549][ T6075] pcpu_alloc_noprof+0xedc/0x1c50 [ 63.218323][ T6075] sbitmap_init_node+0x2ff/0x720 [ 63.220044][ T6075] sbitmap_queue_init_node+0x40/0x4a0 [ 63.222137][ T6075] blk_mq_init_tags+0x184/0x300 [ 63.223767][ T6075] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 63.225981][ T6075] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 63.227975][ T6075] blk_mq_update_nr_hw_queues+0xaba/0x1190 [ 63.230162][ T6075] nbd_start_device+0x1a6/0xbd0 [ 63.231989][ T6075] nbd_genl_connect+0xff2/0x1a40 [ 63.233771][ T6075] genl_family_rcv_msg_doit+0x214/0x300 [ 63.235852][ T6075] genl_rcv_msg+0x560/0x800 [ 63.237931][ T6075] netlink_rcv_skb+0x159/0x420 [ 63.239735][ T6075] genl_rcv+0x28/0x40 [ 63.241233][ T6075] netlink_unicast+0x5aa/0x870 [ 63.242941][ T6075] netlink_sendmsg+0x8b0/0xda0 [ 63.244789][ T6075] ____sys_sendmsg+0xa54/0xc30 [ 63.246797][ T6075] ___sys_sendmsg+0x190/0x1e0 [ 63.248586][ T6075] __sys_sendmsg+0x170/0x220 [ 63.250220][ T6075] do_syscall_64+0x106/0xf80 [ 63.251909][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.253951][ T6075] [ 63.253951][ T6075] other info that might help us debug this: [ 63.253951][ T6075] [ 63.257251][ T6075] Chain exists of: [ 63.257251][ T6075] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 63.257251][ T6075] [ 63.261844][ T6075] Possible unsafe locking scenario: [ 63.261844][ T6075] [ 63.264196][ T6075] CPU0 CPU1 [ 63.266011][ T6075] ---- ---- [ 63.267719][ T6075] lock(&q->q_usage_counter(io)#49); [ 63.269420][ T6075] lock(fs_reclaim); [ 63.271446][ T6075] lock(&q->q_usage_counter(io)#49); [ 63.273927][ T6075] lock(pcpu_alloc_mutex); [ 63.275355][ T6075] [ 63.275355][ T6075] *** DEADLOCK *** [ 63.275355][ T6075] [ 63.277981][ T6075] 6 locks held by syz.0.17/6075: [ 63.279526][ T6075] #0: ffffffff906b8e70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 63.282097][ T6075] #1: ffffffff906b8f28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 63.284887][ T6075] #2: ffff888028f5a9d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x91/0x1190 [ 63.288608][ T6075] #3: ffff888028f5a8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa4/0x1190 [ 63.291969][ T6075] #4: ffff888028e42680 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x88e/0x1190 [ 63.295563][ T6075] #5: ffff888028e426b8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: blk_mq_update_nr_hw_queues+0x88e/0x1190 [ 63.299394][ T6075] [ 63.299394][ T6075] stack backtrace: [ 63.301242][ T6075] CPU: 2 UID: 0 PID: 6075 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 63.301256][ T6075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.301262][ T6075] Call Trace: [ 63.301267][ T6075] [ 63.301272][ T6075] dump_stack_lvl+0x100/0x190 [ 63.301293][ T6075] print_circular_bug.cold+0x178/0x1c7 [ 63.301310][ T6075] check_noncircular+0x146/0x160 [ 63.301327][ T6075] __lock_acquire+0x14b8/0x2630 [ 63.301345][ T6075] lock_acquire+0x1cf/0x380 [ 63.301361][ T6075] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 63.301374][ T6075] ? __pfx___might_resched+0x10/0x10 [ 63.301385][ T6075] ? find_held_lock+0x2b/0x80 [ 63.301398][ T6075] __mutex_lock+0x1a2/0x1b90 [ 63.301417][ T6075] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 63.301429][ T6075] ? lockdep_hardirqs_on+0x78/0x100 [ 63.301442][ T6075] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 63.301454][ T6075] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 63.301466][ T6075] ? stack_depot_save_flags+0x479/0x9d0 [ 63.301479][ T6075] ? __pfx___mutex_lock+0x10/0x10 [ 63.301492][ T6075] ? kasan_save_stack+0x3f/0x50 [ 63.301506][ T6075] ? kasan_save_stack+0x30/0x50 [ 63.301519][ T6075] ? kasan_save_track+0x14/0x30 [ 63.301532][ T6075] ? __kasan_kmalloc+0xaa/0xb0 [ 63.301544][ T6075] ? blk_mq_init_tags+0x8c/0x300 [ 63.301561][ T6075] ? blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 63.301575][ T6075] ? __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 63.301590][ T6075] ? nbd_genl_connect+0xff2/0x1a40 [ 63.301600][ T6075] ? genl_family_rcv_msg_doit+0x214/0x300 [ 63.301617][ T6075] ? ____sys_sendmsg+0xa54/0xc30 [ 63.301632][ T6075] ? ___sys_sendmsg+0x190/0x1e0 [ 63.301647][ T6075] ? __sys_sendmsg+0x170/0x220 [ 63.301657][ T6075] ? do_syscall_64+0x106/0xf80 [ 63.301670][ T6075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.301682][ T6075] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 63.301694][ T6075] pcpu_alloc_noprof+0xedc/0x1c50 [ 63.301709][ T6075] sbitmap_init_node+0x2ff/0x720 [ 63.301724][ T6075] sbitmap_queue_init_node+0x40/0x4a0 [ 63.301740][ T6075] blk_mq_init_tags+0x184/0x300 [ 63.301757][ T6075] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 63.301773][ T6075] ? lockdep_hardirqs_on+0x78/0x100 [ 63.301786][ T6075] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 63.301802][ T6075] blk_mq_update_nr_hw_queues+0xaba/0x1190 [ 63.301819][ T6075] ? __mutex_unlock_slowpath+0x15c/0x790 [ 63.301832][ T6075] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 63.301850][ T6075] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 63.301862][ T6075] nbd_start_device+0x1a6/0xbd0 [ 63.301881][ T6075] nbd_genl_connect+0xff2/0x1a40 [ 63.301891][ T6075] ? __pfx_nbd_genl_connect+0x10/0x10 [ 63.301909][ T6075] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 63.301927][ T6075] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 63.301944][ T6075] genl_family_rcv_msg_doit+0x214/0x300 [ 63.301961][ T6075] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 63.301977][ T6075] ? genl_get_cmd+0x3ef/0x720 [ 63.301993][ T6075] ? kasan_save_track+0x14/0x30 [ 63.302006][ T6075] ? __kasan_slab_alloc+0x89/0x90 [ 63.302019][ T6075] ? __radix_tree_lookup+0x217/0x2b0 [ 63.302031][ T6075] genl_rcv_msg+0x560/0x800 [ 63.302047][ T6075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.302063][ T6075] ? __pfx_nbd_genl_connect+0x10/0x10 [ 63.302080][ T6075] ? __lock_acquire+0x4a5/0x2630 [ 63.302097][ T6075] netlink_rcv_skb+0x159/0x420 [ 63.302111][ T6075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.302127][ T6075] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 63.302143][ T6075] ? netlink_deliver_tap+0x1ae/0xcc0 [ 63.302161][ T6075] genl_rcv+0x28/0x40 [ 63.302179][ T6075] netlink_unicast+0x5aa/0x870 [ 63.302198][ T6075] ? __pfx_netlink_unicast+0x10/0x10 [ 63.302219][ T6075] netlink_sendmsg+0x8b0/0xda0 [ 63.302242][ T6075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.302259][ T6075] ? __might_fault+0x20/0x140 [ 63.302282][ T6075] ____sys_sendmsg+0xa54/0xc30 [ 63.302306][ T6075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.302333][ T6075] ___sys_sendmsg+0x190/0x1e0 [ 63.302354][ T6075] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.302370][ T6075] ? futex_hash+0x2c/0x380 [ 63.302384][ T6075] ? futex_hash+0x2cf/0x380 [ 63.302400][ T6075] ? __lock_acquire+0x4a5/0x2630 [ 63.302424][ T6075] ? do_futex+0x192/0x350 [ 63.302441][ T6075] __sys_sendmsg+0x170/0x220 [ 63.302454][ T6075] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.302466][ T6075] ? __x64_sys_futex+0x34f/0x4d0 [ 63.302485][ T6075] do_syscall_64+0x106/0xf80 [ 63.302498][ T6075] ? clear_bhb_loop+0x40/0x90 [ 63.302510][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.302521][ T6075] RIP: 0033:0x7f1054b9bf79 [ 63.302531][ T6075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.302541][ T6075] RSP: 002b:00007ffcc36f8808 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.302552][ T6075] RAX: ffffffffffffffda RBX: 00007f1054e15fa0 RCX: 00007f1054b9bf79 [ 63.302559][ T6075] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 63.302565][ T6075] RBP: 00007f1054c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 63.302571][ T6075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.302577][ T6075] R13: 00007f1054e15fac R14: 00007f1054e15fa0 R15: 00007f1054e15fa0 [ 63.302586][ T6075] [ 63.500583][ T5285] Bluetooth: hci0: command tx timeout [ 63.577765][ T6075] nbd0: detected capacity change from 0 to 127 [ 63.580892][ T63] block nbd0: Receive control failed (result -32) [ 63.581507][ T5935] block nbd0: Send control failed (result -32) [ 63.582802][ T6014] block nbd0: Receive control failed (result -32) [ 63.582857][ T5285] block nbd0: Receive control failed (result -32) [ 63.594528][ T5935] block nbd0: Request send failed, requeueing [ 63.598021][ T5935] block nbd0: Dead connection, failed to find a fallback [ 63.600313][ T2115] block nbd0: Dead connection, failed to find a fallback