Warning: Permanently added '[localhost]:37924' (ED25519) to the list of known hosts. [ 59.554171][ T40] audit: type=1400 audit(1770585330.618:62): avc: denied { execute } for pid=5926 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 59.560343][ T40] audit: type=1400 audit(1770585330.628:63): avc: denied { execute_no_trans } for pid=5926 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/02/08 21:15:31 parsed 1 programs [ 60.880667][ T40] audit: type=1400 audit(1770585331.948:64): avc: denied { node_bind } for pid=5926 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 63.061266][ T40] audit: type=1400 audit(1770585334.128:65): avc: denied { mounton } for pid=5935 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.069712][ T40] audit: type=1400 audit(1770585334.148:66): avc: denied { mount } for pid=5935 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.071362][ T5935] cgroup: Unknown subsys name 'net' [ 63.079767][ T40] audit: type=1400 audit(1770585334.148:67): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.231053][ T5935] cgroup: Unknown subsys name 'cpuset' [ 63.237416][ T5935] cgroup: Unknown subsys name 'rlimit' [ 63.422832][ T40] audit: type=1400 audit(1770585334.488:68): avc: denied { setattr } for pid=5935 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.431984][ T40] audit: type=1400 audit(1770585334.508:69): avc: denied { create } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.440311][ T40] audit: type=1400 audit(1770585334.508:70): avc: denied { write } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.449200][ T40] audit: type=1400 audit(1770585334.508:71): avc: denied { read } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.478771][ T5940] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 64.116981][ T5935] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.639629][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 65.639641][ T40] audit: type=1400 audit(1770585336.708:82): avc: denied { execmem } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 65.649416][ T40] audit: type=1400 audit(1770585336.708:83): avc: denied { read } for pid=5948 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.656781][ T40] audit: type=1400 audit(1770585336.708:84): avc: denied { open } for pid=5948 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.664843][ T40] audit: type=1400 audit(1770585336.708:85): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 65.689906][ T40] audit: type=1400 audit(1770585336.758:86): avc: denied { mount } for pid=5948 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.697885][ T40] audit: type=1400 audit(1770585336.768:87): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/syzkaller.urcjHu/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.706873][ T40] audit: type=1400 audit(1770585336.768:88): avc: denied { mount } for pid=5948 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.714023][ T40] audit: type=1400 audit(1770585336.768:89): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/syzkaller.urcjHu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.722666][ T40] audit: type=1400 audit(1770585336.768:90): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/syzkaller.urcjHu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.731659][ T40] audit: type=1400 audit(1770585336.778:91): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.742548][ T5948] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.299656][ T5972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.303168][ T5972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.306215][ T5972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.308956][ T5972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.311421][ T5972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.527382][ T1200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.532358][ T1200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.566842][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.569235][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.216337][ T6000] chnl_net:caif_netlink_parms(): no params data found [ 67.287127][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.289931][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.292476][ T6000] bridge_slave_0: entered allmulticast mode [ 67.295197][ T6000] bridge_slave_0: entered promiscuous mode [ 67.300077][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.302528][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.304816][ T6000] bridge_slave_1: entered allmulticast mode [ 67.307617][ T6000] bridge_slave_1: entered promiscuous mode [ 67.325107][ T6000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.329817][ T6000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.353914][ T6000] team0: Port device team_slave_0 added [ 67.358484][ T6000] team0: Port device team_slave_1 added [ 67.387433][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.390392][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.401257][ T6000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.407996][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.410971][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.420701][ T6000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.450293][ T6000] hsr_slave_0: entered promiscuous mode [ 67.453486][ T6000] hsr_slave_1: entered promiscuous mode [ 67.663944][ T6000] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.671228][ T6000] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.676841][ T6000] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.684164][ T6000] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.738391][ T6000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.750166][ T6000] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.755439][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.757875][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.764751][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.767551][ T1200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.877327][ T6000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.898979][ T6000] veth0_vlan: entered promiscuous mode [ 67.904118][ T6000] veth1_vlan: entered promiscuous mode [ 67.923649][ T6000] veth0_macvtap: entered promiscuous mode [ 67.931500][ T6000] veth1_macvtap: entered promiscuous mode [ 67.945017][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.952816][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.963025][ T1153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.967248][ T1153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.972471][ T1153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.976029][ T1153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.078776][ T1153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.171698][ T1153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.240496][ T1153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.305267][ T1153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/02/08 21:15:39 executed programs: 0 [ 68.902359][ T5972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.906297][ T5972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.909662][ T5972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.912824][ T5972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.916170][ T5972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.045617][ T6046] chnl_net:caif_netlink_parms(): no params data found [ 69.104924][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.107217][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.109611][ T6046] bridge_slave_0: entered allmulticast mode [ 69.112574][ T6046] bridge_slave_0: entered promiscuous mode [ 69.116873][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.118895][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.120879][ T6046] bridge_slave_1: entered allmulticast mode [ 69.123716][ T6046] bridge_slave_1: entered promiscuous mode [ 69.138259][ T6046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.142469][ T6046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.157139][ T6046] team0: Port device team_slave_0 added [ 69.159970][ T6046] team0: Port device team_slave_1 added [ 69.173167][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.175096][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.182145][ T6046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.186044][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.188152][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.195155][ T6046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.230493][ T6046] hsr_slave_0: entered promiscuous mode [ 69.233531][ T6046] hsr_slave_1: entered promiscuous mode [ 69.236061][ T6046] debugfs: 'hsr0' already exists in 'hsr' [ 69.238670][ T6046] Cannot create hsr debugfs directory [ 70.926915][ T5291] Bluetooth: hci0: command tx timeout [ 71.371174][ T1153] bridge_slave_1: left allmulticast mode [ 71.373127][ T1153] bridge_slave_1: left promiscuous mode [ 71.375813][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.391300][ T1153] bridge_slave_0: left allmulticast mode [ 71.393269][ T1153] bridge_slave_0: left promiscuous mode [ 71.395339][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.576490][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.580444][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.584021][ T1153] bond0 (unregistering): Released all slaves [ 71.649582][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 71.649593][ T40] audit: type=1400 audit(1770585342.718:112): avc: denied { create } for pid=6056 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.659024][ T40] audit: type=1400 audit(1770585342.718:113): avc: denied { write } for pid=6056 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2088 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.671999][ T40] audit: type=1400 audit(1770585342.718:114): avc: denied { append } for pid=6056 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2088 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.699538][ T40] audit: type=1400 audit(1770585342.768:115): avc: denied { unlink } for pid=6059 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2088 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.720130][ T1153] hsr_slave_0: left promiscuous mode [ 71.722607][ T1153] hsr_slave_1: left promiscuous mode [ 71.724606][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.727523][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.730403][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.732806][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.745629][ T1153] veth1_macvtap: left promiscuous mode [ 71.748000][ T1153] veth0_macvtap: left promiscuous mode [ 71.749843][ T1153] veth1_vlan: left promiscuous mode [ 71.751954][ T1153] veth0_vlan: left promiscuous mode [ 71.977257][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 71.992588][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 72.461118][ T6046] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.465166][ T6046] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.469754][ T6046] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.478363][ T6046] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.530287][ T6046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.540858][ T6046] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.546160][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.548958][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.555823][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.558698][ T1200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.670093][ T6046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.691442][ T6046] veth0_vlan: entered promiscuous mode [ 72.695822][ T6046] veth1_vlan: entered promiscuous mode [ 72.803224][ T6046] veth0_macvtap: entered promiscuous mode [ 72.814913][ T6046] veth1_macvtap: entered promiscuous mode [ 72.823323][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.829113][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.835094][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.838960][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.841694][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.844341][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.912354][ T1200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.914762][ T1200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.932254][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.935125][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.964694][ T6082] loop7: detected capacity change from 0 to 7 [ 72.969294][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.972493][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.975656][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.978743][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.981394][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.984351][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.988089][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.991159][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.994525][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.998520][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.001200][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.004509][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.007843][ T5291] Bluetooth: hci0: command tx timeout [ 73.008323][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.012768][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.015335][ T6082] ldm_validate_partition_table(): Disk read failed. [ 73.017987][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.021000][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.023807][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.027403][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.032637][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.035588][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.038705][ T6082] Dev loop7: unable to read RDB block 0 [ 73.047093][ T6082] loop7: unable to read partition table [ 73.049632][ T6082] loop7: partition table beyond EOD, truncated [ 73.052190][ T6082] loop_reread_partitions: partition scan of loop7 (Cj̖P=}Xp %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 73.136662][ T6082] [ 73.137684][ T6082] ====================================================== [ 73.140420][ T6082] WARNING: possible circular locking dependency detected [ 73.143297][ T6082] syzkaller #0 Not tainted [ 73.145109][ T6082] ------------------------------------------------------ [ 73.147873][ T6082] syz.0.17/6082 is trying to acquire lock: [ 73.150148][ T6082] ffff88801ca8f220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 73.154229][ T6082] [ 73.154229][ T6082] but task is already holding lock: [ 73.157073][ T6082] ffff888027555fb0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 73.161573][ T6082] [ 73.161573][ T6082] which lock already depends on the new lock. [ 73.161573][ T6082] [ 73.165488][ T6082] [ 73.165488][ T6082] the existing dependency chain (in reverse order) is: [ 73.168939][ T6082] [ 73.168939][ T6082] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 73.172316][ T6082] blk_alloc_queue+0x610/0x750 [ 73.174394][ T6082] blk_mq_alloc_queue+0x174/0x290 [ 73.176529][ T6082] __blk_mq_alloc_disk+0x29/0x120 [ 73.178719][ T6082] loop_add+0x498/0xb60 [ 73.180551][ T6082] loop_init+0x1d3/0x200 [ 73.182496][ T6082] do_one_initcall+0x11d/0x690 [ 73.184572][ T6082] kernel_init_freeable+0x6e5/0x790 [ 73.186773][ T6082] kernel_init+0x1f/0x1e0 [ 73.188727][ T6082] ret_from_fork+0x754/0xaf0 [ 73.190845][ T6082] ret_from_fork_asm+0x1a/0x30 [ 73.193067][ T6082] [ 73.193067][ T6082] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 73.196071][ T6082] fs_reclaim_acquire+0xc4/0x100 [ 73.198331][ T6082] kmem_cache_alloc_noprof+0x5b/0x780 [ 73.200811][ T6082] __kernfs_iattrs+0x126/0x400 [ 73.203040][ T6082] __kernfs_setattr+0x4d/0x3c0 [ 73.205179][ T6082] kernfs_iop_setattr+0xda/0x130 [ 73.207124][ T6082] notify_change+0xb25/0x12d0 [ 73.208702][ T6082] do_truncate+0x1df/0x240 [ 73.210285][ T6082] path_openat+0x29da/0x3120 [ 73.211846][ T6082] do_filp_open+0x1f7/0x420 [ 73.213470][ T6082] do_sys_openat2+0x12e/0x220 [ 73.215070][ T6082] __x64_sys_openat+0x12d/0x210 [ 73.216757][ T6082] do_syscall_64+0xc9/0xf80 [ 73.218339][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.220374][ T6082] [ 73.220374][ T6082] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 73.223039][ T6082] __lock_acquire+0x14b8/0x2630 [ 73.224719][ T6082] lock_acquire+0x17c/0x330 [ 73.226378][ T6082] down_read+0x99/0x460 [ 73.227811][ T6082] kernfs_iop_getattr+0x9c/0xf0 [ 73.229423][ T6082] vfs_getattr_nosec+0x2d4/0x430 [ 73.231154][ T6082] vfs_getattr+0x4a/0x60 [ 73.232700][ T6082] loop_query_min_dio_size.isra.0+0x117/0x250 [ 73.234686][ T6082] lo_ioctl+0x13aa/0x1bc0 [ 73.236175][ T6082] blkdev_ioctl+0x5ad/0x6f0 [ 73.237761][ T6082] __x64_sys_ioctl+0x18e/0x210 [ 73.239359][ T6082] do_syscall_64+0xc9/0xf80 [ 73.240977][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.242958][ T6082] [ 73.242958][ T6082] other info that might help us debug this: [ 73.242958][ T6082] [ 73.246017][ T6082] Chain exists of: [ 73.246017][ T6082] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 73.246017][ T6082] [ 73.250391][ T6082] Possible unsafe locking scenario: [ 73.250391][ T6082] [ 73.252663][ T6082] CPU0 CPU1 [ 73.254307][ T6082] ---- ---- [ 73.255924][ T6082] lock(&q->q_usage_counter(io)#24); [ 73.257529][ T6082] lock(fs_reclaim); [ 73.259501][ T6082] lock(&q->q_usage_counter(io)#24); [ 73.261904][ T6082] rlock(&root->kernfs_iattr_rwsem); [ 73.263527][ T6082] [ 73.263527][ T6082] *** DEADLOCK *** [ 73.263527][ T6082] [ 73.266013][ T6082] 3 locks held by syz.0.17/6082: [ 73.267496][ T6082] #0: ffff888027665448 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 73.270761][ T6082] #1: ffff888027555fb0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 73.274247][ T6082] #2: ffff888027555fe8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 73.277684][ T6082] [ 73.277684][ T6082] stack backtrace: [ 73.279576][ T6082] CPU: 2 UID: 0 PID: 6082 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 73.279589][ T6082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.279596][ T6082] Call Trace: [ 73.279601][ T6082] [ 73.279606][ T6082] dump_stack_lvl+0x100/0x190 [ 73.279621][ T6082] print_circular_bug.cold+0x178/0x1c7 [ 73.279639][ T6082] check_noncircular+0x146/0x160 [ 73.279657][ T6082] __lock_acquire+0x14b8/0x2630 [ 73.279670][ T6082] lock_acquire+0x17c/0x330 [ 73.279679][ T6082] ? kernfs_iop_getattr+0x9c/0xf0 [ 73.279696][ T6082] ? __pfx___might_resched+0x10/0x10 [ 73.279710][ T6082] down_read+0x99/0x460 [ 73.279723][ T6082] ? kernfs_iop_getattr+0x9c/0xf0 [ 73.279739][ T6082] ? find_held_lock+0x2b/0x80 [ 73.279753][ T6082] ? __pfx_down_read+0x10/0x10 [ 73.279766][ T6082] ? kernfs_root+0xee/0x2a0 [ 73.279782][ T6082] kernfs_iop_getattr+0x9c/0xf0 [ 73.279798][ T6082] vfs_getattr_nosec+0x2d4/0x430 [ 73.279813][ T6082] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 73.279829][ T6082] vfs_getattr+0x4a/0x60 [ 73.279843][ T6082] loop_query_min_dio_size.isra.0+0x117/0x250 [ 73.279860][ T6082] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 73.279880][ T6082] lo_ioctl+0x13aa/0x1bc0 [ 73.279896][ T6082] ? __pfx_lo_ioctl+0x10/0x10 [ 73.279910][ T6082] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 73.279926][ T6082] ? lockdep_hardirqs_on+0x78/0x100 [ 73.279937][ T6082] ? blk_get_meta_cap+0xd4/0x6c0 [ 73.279948][ T6082] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 73.279957][ T6082] ? tomoyo_path_number_perm+0x28f/0x580 [ 73.279980][ T6082] ? blkdev_common_ioctl+0x515/0x2ba0 [ 73.279991][ T6082] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 73.280003][ T6082] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.280020][ T6082] ? do_vfs_ioctl+0x226/0x13e0 [ 73.280030][ T6082] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 73.280039][ T6082] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 73.280052][ T6082] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 73.280066][ T6082] ? __pfx_lo_ioctl+0x10/0x10 [ 73.280081][ T6082] blkdev_ioctl+0x5ad/0x6f0 [ 73.280091][ T6082] ? __pfx_blkdev_ioctl+0x10/0x10 [ 73.280101][ T6082] ? selinux_file_ioctl+0x139/0x290 [ 73.280111][ T6082] ? selinux_file_ioctl+0xb4/0x290 [ 73.280122][ T6082] ? __pfx_blkdev_ioctl+0x10/0x10 [ 73.280132][ T6082] __x64_sys_ioctl+0x18e/0x210 [ 73.280143][ T6082] do_syscall_64+0xc9/0xf80 [ 73.280155][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.280166][ T6082] RIP: 0033:0x7fa5fb39aeb9 [ 73.280175][ T6082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.280185][ T6082] RSP: 002b:00007fff28fa6328 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.280195][ T6082] RAX: ffffffffffffffda RBX: 00007fa5fb615fa0 RCX: 00007fa5fb39aeb9 [ 73.280201][ T6082] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 73.280207][ T6082] RBP: 00007fa5fb408c1f R08: 0000000000000000 R09: 0000000000000000 [ 73.280213][ T6082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.280219][ T6082] R13: 00007fa5fb615fac R14: 00007fa5fb615fa0 R15: 00007fa5fb615fa0 [ 73.280228][ T6082] [ 73.376317][ T6082] ldm_validate_partition_table(): Disk read failed. [ 73.378970][ T6082] Dev loop7: unable to read RDB block 0 [ 73.381037][ T6082] loop7: unable to read partition table [ 73.382827][ T6082] loop7: partition table beyond EOD, truncated [ 73.384675][ T6082] loop_reread_partitions: partition scan of loop7 (Cj̖P=}Xp %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 75.170844][ T1153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.457504][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.459408][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.889485][ T1153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.938956][ T1153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.020391][ T1153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.088579][ T1153] bridge_slave_1: left allmulticast mode [ 77.090708][ T1153] bridge_slave_1: left promiscuous mode [ 77.093217][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.097087][ T1153] bridge_slave_0: left allmulticast mode [ 77.099296][ T1153] bridge_slave_0: left promiscuous mode [ 77.101472][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.208577][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.212121][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.215310][ T1153] bond0 (unregistering): Released all slaves [ 77.525731][ T1153] hsr_slave_0: left promiscuous mode [ 77.528957][ T1153] hsr_slave_1: left promiscuous mode [ 77.530887][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.533264][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.535842][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.538210][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.542108][ T1153] veth1_macvtap: left promiscuous mode [ 77.543878][ T1153] veth0_macvtap: left promiscuous mode [ 77.545655][ T1153] veth1_vlan: left promiscuous mode [ 77.548097][ T1153] veth0_vlan: left promiscuous mode [ 77.613663][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 77.624545][ T1153] team0 (unregistering): Port device team_slave_0 removed