Warning: Permanently added '[localhost]:48030' (ED25519) to the list of known hosts. [ 50.114364][ T40] audit: type=1400 audit(1771703489.918:62): avc: denied { execute } for pid=5918 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 50.122988][ T40] audit: type=1400 audit(1771703489.928:63): avc: denied { execute_no_trans } for pid=5918 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/02/21 19:51:31 parsed 1 programs [ 51.346868][ T40] audit: type=1400 audit(1771703491.158:64): avc: denied { node_bind } for pid=5918 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 53.715104][ T40] audit: type=1400 audit(1771703493.528:65): avc: denied { mounton } for pid=5927 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 53.725455][ T40] audit: type=1400 audit(1771703493.538:66): avc: denied { mount } for pid=5927 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.727393][ T5927] cgroup: Unknown subsys name 'net' [ 53.738577][ T40] audit: type=1400 audit(1771703493.558:67): avc: denied { unmount } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.909353][ T5927] cgroup: Unknown subsys name 'cpuset' [ 53.915603][ T5927] cgroup: Unknown subsys name 'rlimit' [ 54.088243][ T40] audit: type=1400 audit(1771703493.898:68): avc: denied { setattr } for pid=5927 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.095535][ T40] audit: type=1400 audit(1771703493.898:69): avc: denied { create } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.101800][ T40] audit: type=1400 audit(1771703493.898:70): avc: denied { write } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.108221][ T40] audit: type=1400 audit(1771703493.898:71): avc: denied { read } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.164782][ T5933] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 54.850163][ T5927] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.492453][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 56.492472][ T40] audit: type=1400 audit(1771703496.298:82): avc: denied { execmem } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.502817][ T40] audit: type=1400 audit(1771703496.308:83): avc: denied { read } for pid=5938 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.511601][ T40] audit: type=1400 audit(1771703496.308:84): avc: denied { open } for pid=5938 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.521162][ T40] audit: type=1400 audit(1771703496.308:85): avc: denied { mounton } for pid=5938 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.545943][ T40] audit: type=1400 audit(1771703496.358:86): avc: denied { mount } for pid=5938 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.554835][ T40] audit: type=1400 audit(1771703496.358:87): avc: denied { mounton } for pid=5938 comm="syz-executor" path="/syzkaller.NxfqM6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.565082][ T40] audit: type=1400 audit(1771703496.358:88): avc: denied { mount } for pid=5938 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.574367][ T40] audit: type=1400 audit(1771703496.358:89): avc: denied { mounton } for pid=5938 comm="syz-executor" path="/syzkaller.NxfqM6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.584663][ T40] audit: type=1400 audit(1771703496.358:90): avc: denied { mounton } for pid=5938 comm="syz-executor" path="/syzkaller.NxfqM6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.595254][ T40] audit: type=1400 audit(1771703496.368:91): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.606343][ T5938] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.318386][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.321794][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.325788][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.329554][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.333062][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.197030][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.203585][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.229035][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.231604][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.641201][ T6008] chnl_net:caif_netlink_parms(): no params data found [ 58.757994][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.760307][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.762536][ T6008] bridge_slave_0: entered allmulticast mode [ 58.766433][ T6008] bridge_slave_0: entered promiscuous mode [ 58.770227][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.772686][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.775108][ T6008] bridge_slave_1: entered allmulticast mode [ 58.777748][ T6008] bridge_slave_1: entered promiscuous mode [ 58.792955][ T6008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.797363][ T6008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.812353][ T6008] team0: Port device team_slave_0 added [ 58.815852][ T6008] team0: Port device team_slave_1 added [ 58.829907][ T6008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.832299][ T6008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.840603][ T6008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.847648][ T6008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.849918][ T6008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.858113][ T6008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.906155][ T6008] hsr_slave_0: entered promiscuous mode [ 58.908460][ T6008] hsr_slave_1: entered promiscuous mode [ 59.016099][ T6008] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.021797][ T6008] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.026111][ T6008] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.029993][ T6008] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.053557][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.055893][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.058452][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.061079][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.095187][ T6008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.103234][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.106637][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.113308][ T6008] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.126228][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.129114][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.132996][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.135610][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.240458][ T6008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.263947][ T6008] veth0_vlan: entered promiscuous mode [ 59.270075][ T6008] veth1_vlan: entered promiscuous mode [ 59.282960][ T6008] veth0_macvtap: entered promiscuous mode [ 59.287685][ T6008] veth1_macvtap: entered promiscuous mode [ 59.295487][ T6008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.301575][ T6008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.309458][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.312256][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.315650][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.318385][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.423026][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.497178][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.567502][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/02/21 19:51:39 executed programs: 0 [ 59.601356][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.604407][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.607924][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.610834][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.613578][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.673802][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.735689][ T6033] chnl_net:caif_netlink_parms(): no params data found [ 59.774432][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.777277][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.779579][ T6033] bridge_slave_0: entered allmulticast mode [ 59.782618][ T6033] bridge_slave_0: entered promiscuous mode [ 59.785973][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.788218][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.790453][ T6033] bridge_slave_1: entered allmulticast mode [ 59.793633][ T6033] bridge_slave_1: entered promiscuous mode [ 59.808205][ T6033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.812407][ T6033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.827929][ T6033] team0: Port device team_slave_0 added [ 59.830856][ T6033] team0: Port device team_slave_1 added [ 59.843095][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.845447][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.853188][ T6033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.857823][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.860043][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.868416][ T6033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.890240][ T6033] hsr_slave_0: entered promiscuous mode [ 59.892469][ T6033] hsr_slave_1: entered promiscuous mode [ 59.894726][ T6033] debugfs: 'hsr0' already exists in 'hsr' [ 59.896714][ T6033] Cannot create hsr debugfs directory [ 61.695712][ T63] Bluetooth: hci0: command tx timeout [ 62.817307][ T61] bridge_slave_1: left allmulticast mode [ 62.819224][ T61] bridge_slave_1: left promiscuous mode [ 62.821450][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.826363][ T61] bridge_slave_0: left allmulticast mode [ 62.828263][ T61] bridge_slave_0: left promiscuous mode [ 62.830129][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.974427][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.979541][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.982900][ T61] bond0 (unregistering): Released all slaves [ 63.061527][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 63.061546][ T40] audit: type=1400 audit(1771703502.868:112): avc: denied { create } for pid=6048 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.073497][ T40] audit: type=1400 audit(1771703502.868:113): avc: denied { write } for pid=6048 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2102 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.084626][ T40] audit: type=1400 audit(1771703502.868:114): avc: denied { append } for pid=6048 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2102 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.110275][ T61] hsr_slave_0: left promiscuous mode [ 63.113283][ T61] hsr_slave_1: left promiscuous mode [ 63.113645][ T40] audit: type=1400 audit(1771703502.918:115): avc: denied { unlink } for pid=6051 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2102 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.117277][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.126846][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.129757][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.132091][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.138970][ T61] veth1_macvtap: left promiscuous mode [ 63.140826][ T61] veth0_macvtap: left promiscuous mode [ 63.142524][ T61] veth1_vlan: left promiscuous mode [ 63.144168][ T61] veth0_vlan: left promiscuous mode [ 63.305470][ T61] team0 (unregistering): Port device team_slave_1 removed [ 63.324694][ T61] team0 (unregistering): Port device team_slave_0 removed [ 63.784638][ T63] Bluetooth: hci0: command tx timeout [ 63.898064][ T6033] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.903054][ T6033] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.912032][ T6033] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.917450][ T6033] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.981681][ T6033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.992473][ T6033] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.997562][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.000667][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.042540][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.045435][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.198224][ T6033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.232072][ T6033] veth0_vlan: entered promiscuous mode [ 64.241464][ T6033] veth1_vlan: entered promiscuous mode [ 64.256399][ T6033] veth0_macvtap: entered promiscuous mode [ 64.259972][ T6033] veth1_macvtap: entered promiscuous mode [ 64.268001][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.274358][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.282371][ T1148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.286922][ T1148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.291374][ T1148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.296694][ T87] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.328999][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.331520][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.345106][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.348520][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.425294][ T40] audit: type=1400 audit(1771703504.238:116): avc: denied { append } for pid=6084 comm="syz.0.17" name="nbd0" dev="devtmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.655259][ T6084] [ 64.656080][ T6084] ====================================================== [ 64.658218][ T6084] WARNING: possible circular locking dependency detected [ 64.660338][ T6084] syzkaller #0 Not tainted [ 64.661712][ T6084] ------------------------------------------------------ [ 64.663780][ T6084] syz.0.17/6084 is trying to acquire lock: [ 64.665542][ T6084] ffffffff8e972d48 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xedc/0x1c50 [ 64.668352][ T6084] [ 64.668352][ T6084] but task is already holding lock: [ 64.670549][ T6084] ffff8880289b0060 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x88e/0x1190 [ 64.673858][ T6084] [ 64.673858][ T6084] which lock already depends on the new lock. [ 64.673858][ T6084] [ 64.676928][ T6084] [ 64.676928][ T6084] the existing dependency chain (in reverse order) is: [ 64.679644][ T6084] [ 64.679644][ T6084] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 64.682279][ T6084] blk_alloc_queue+0x610/0x790 [ 64.683910][ T6084] blk_mq_alloc_queue+0x174/0x290 [ 64.685571][ T6084] __blk_mq_alloc_disk+0x29/0x120 [ 64.687241][ T6084] nbd_dev_add+0x492/0xb10 [ 64.688807][ T6084] nbd_init+0x291/0x2b0 [ 64.690345][ T6084] do_one_initcall+0x11d/0x760 [ 64.691988][ T6084] kernel_init_freeable+0x6e5/0x7a0 [ 64.693710][ T6084] kernel_init+0x1f/0x1e0 [ 64.695192][ T6084] ret_from_fork+0x754/0xd80 [ 64.696746][ T6084] ret_from_fork_asm+0x1a/0x30 [ 64.698363][ T6084] [ 64.698363][ T6084] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 64.700568][ T6084] fs_reclaim_acquire+0xc4/0x100 [ 64.702203][ T6084] prepare_alloc_pages+0x166/0x5f0 [ 64.703910][ T6084] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 64.705857][ T6084] __alloc_pages_noprof+0xb/0x1b0 [ 64.707591][ T6084] pcpu_populate_chunk+0x118/0x990 [ 64.709398][ T6084] pcpu_alloc_noprof+0x833/0x1c50 [ 64.711078][ T6084] iommu_dma_init_fq+0x1da/0x7e0 [ 64.712735][ T6084] iommu_setup_dma_ops+0x1250/0x1630 [ 64.714504][ T6084] bus_iommu_probe+0x264/0x550 [ 64.716068][ T6084] iommu_device_register+0x1af/0x280 [ 64.717806][ T6084] intel_iommu_init+0x2020/0x2970 [ 64.719520][ T6084] pci_iommu_init+0x3c/0x80 [ 64.721051][ T6084] do_one_initcall+0x11d/0x760 [ 64.722688][ T6084] kernel_init_freeable+0x6e5/0x7a0 [ 64.724508][ T6084] kernel_init+0x1f/0x1e0 [ 64.726003][ T6084] ret_from_fork+0x754/0xd80 [ 64.727553][ T6084] ret_from_fork_asm+0x1a/0x30 [ 64.729147][ T6084] [ 64.729147][ T6084] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 64.731516][ T6084] __lock_acquire+0x14b8/0x2630 [ 64.733218][ T6084] lock_acquire+0x1cf/0x380 [ 64.735062][ T6084] __mutex_lock+0x1a2/0x1b90 [ 64.737158][ T6084] pcpu_alloc_noprof+0xedc/0x1c50 [ 64.739489][ T6084] sbitmap_init_node+0x2ff/0x720 [ 64.741701][ T6084] sbitmap_queue_init_node+0x40/0x4a0 [ 64.743707][ T6084] blk_mq_init_tags+0x184/0x300 [ 64.745337][ T6084] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 64.747239][ T6084] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 64.749634][ T6084] blk_mq_update_nr_hw_queues+0xaba/0x1190 [ 64.752200][ T6084] nbd_start_device+0x1a6/0xbd0 [ 64.754204][ T6084] nbd_ioctl+0x4a6/0xd30 [ 64.755688][ T6084] blkdev_ioctl+0x5ad/0x6f0 [ 64.757682][ T6084] __x64_sys_ioctl+0x18e/0x210 [ 64.759884][ T6084] do_syscall_64+0x106/0xf80 [ 64.762006][ T6084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.764640][ T6084] [ 64.764640][ T6084] other info that might help us debug this: [ 64.764640][ T6084] [ 64.768820][ T6084] Chain exists of: [ 64.768820][ T6084] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 64.768820][ T6084] [ 64.774338][ T6084] Possible unsafe locking scenario: [ 64.774338][ T6084] [ 64.777360][ T6084] CPU0 CPU1 [ 64.779589][ T6084] ---- ---- [ 64.781781][ T6084] lock(&q->q_usage_counter(io)#49); [ 64.784019][ T6084] lock(fs_reclaim); [ 64.786563][ T6084] lock(&q->q_usage_counter(io)#49); [ 64.789686][ T6084] lock(pcpu_alloc_mutex); [ 64.791468][ T6084] [ 64.791468][ T6084] *** DEADLOCK *** [ 64.791468][ T6084] [ 64.794595][ T6084] 4 locks held by syz.0.17/6084: [ 64.796598][ T6084] #0: ffff888028ba01d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x91/0x1190 [ 64.801201][ T6084] #1: ffff888028ba00d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa4/0x1190 [ 64.804407][ T6084] #2: ffff8880289b0060 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x88e/0x1190 [ 64.807941][ T6084] #3: ffff8880289b0098 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: blk_mq_update_nr_hw_queues+0x88e/0x1190 [ 64.811606][ T6084] [ 64.811606][ T6084] stack backtrace: [ 64.813418][ T6084] CPU: 3 UID: 0 PID: 6084 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 64.813431][ T6084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.813437][ T6084] Call Trace: [ 64.813461][ T6084] [ 64.813466][ T6084] dump_stack_lvl+0x100/0x190 [ 64.813484][ T6084] print_circular_bug.cold+0x178/0x1c7 [ 64.813501][ T6084] check_noncircular+0x146/0x160 [ 64.813519][ T6084] __lock_acquire+0x14b8/0x2630 [ 64.813538][ T6084] lock_acquire+0x1cf/0x380 [ 64.813553][ T6084] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 64.813568][ T6084] ? __pfx___might_resched+0x10/0x10 [ 64.813579][ T6084] ? find_held_lock+0x2b/0x80 [ 64.813592][ T6084] __mutex_lock+0x1a2/0x1b90 [ 64.813604][ T6084] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 64.813618][ T6084] ? lockdep_hardirqs_on+0x78/0x100 [ 64.813628][ T6084] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.813644][ T6084] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 64.813657][ T6084] ? stack_depot_save_flags+0x479/0x9d0 [ 64.813674][ T6084] ? __pfx___mutex_lock+0x10/0x10 [ 64.813684][ T6084] ? kasan_save_stack+0x3f/0x50 [ 64.813699][ T6084] ? kasan_save_stack+0x30/0x50 [ 64.813712][ T6084] ? kasan_save_track+0x14/0x30 [ 64.813726][ T6084] ? __kasan_kmalloc+0xaa/0xb0 [ 64.813740][ T6084] ? blk_mq_init_tags+0x8c/0x300 [ 64.813751][ T6084] ? blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 64.813762][ T6084] ? __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 64.813773][ T6084] ? nbd_ioctl+0x4a6/0xd30 [ 64.813785][ T6084] ? blkdev_ioctl+0x5ad/0x6f0 [ 64.813817][ T6084] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 64.813831][ T6084] pcpu_alloc_noprof+0xedc/0x1c50 [ 64.813847][ T6084] sbitmap_init_node+0x2ff/0x720 [ 64.813858][ T6084] sbitmap_queue_init_node+0x40/0x4a0 [ 64.813870][ T6084] blk_mq_init_tags+0x184/0x300 [ 64.813883][ T6084] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 64.813894][ T6084] ? lockdep_hardirqs_on+0x78/0x100 [ 64.813905][ T6084] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 64.813917][ T6084] blk_mq_update_nr_hw_queues+0xaba/0x1190 [ 64.813929][ T6084] ? __mutex_unlock_slowpath+0x15c/0x790 [ 64.813941][ T6084] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 64.813956][ T6084] nbd_start_device+0x1a6/0xbd0 [ 64.813969][ T6084] ? security_capable+0x80/0x260 [ 64.813989][ T6084] nbd_ioctl+0x4a6/0xd30 [ 64.814001][ T6084] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 64.814015][ T6084] ? __pfx_nbd_ioctl+0x10/0x10 [ 64.814027][ T6084] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 64.814041][ T6084] ? __pfx_nbd_ioctl+0x10/0x10 [ 64.814053][ T6084] blkdev_ioctl+0x5ad/0x6f0 [ 64.814070][ T6084] ? __pfx_blkdev_ioctl+0x10/0x10 [ 64.814086][ T6084] ? selinux_file_ioctl+0x139/0x290 [ 64.814097][ T6084] ? selinux_file_ioctl+0xb4/0x290 [ 64.814109][ T6084] ? __pfx_blkdev_ioctl+0x10/0x10 [ 64.814125][ T6084] __x64_sys_ioctl+0x18e/0x210 [ 64.814140][ T6084] do_syscall_64+0x106/0xf80 [ 64.814150][ T6084] ? clear_bhb_loop+0x40/0x90 [ 64.814162][ T6084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.814174][ T6084] RIP: 0033:0x7fddf339c629 [ 64.814183][ T6084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.814194][ T6084] RSP: 002b:00007ffe75944a58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.814220][ T6084] RAX: ffffffffffffffda RBX: 00007fddf3615fa0 RCX: 00007fddf339c629 [ 64.814227][ T6084] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 64.814233][ T6084] RBP: 00007fddf3432b39 R08: 0000000000000000 R09: 0000000000000000 [ 64.814239][ T6084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.814244][ T6084] R13: 00007fddf3615fac R14: 00007fddf3615fa0 R15: 00007fddf3615fa0 [ 64.814253][ T6084] [ 65.855039][ T5965] Bluetooth: hci0: command tx timeout [ 67.375037][ T6084] block nbd0: shutting down sockets [ 67.948968][ T1148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.018597][ T1148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.078919][ T1148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.129422][ T1148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.190311][ T1148] bridge_slave_1: left allmulticast mode [ 68.192622][ T1148] bridge_slave_1: left promiscuous mode [ 68.194675][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.198140][ T1148] bridge_slave_0: left allmulticast mode [ 68.200016][ T1148] bridge_slave_0: left promiscuous mode [ 68.202124][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.357530][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.361767][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.366336][ T1148] bond0 (unregistering): Released all slaves [ 68.594002][ T1148] hsr_slave_0: left promiscuous mode [ 68.596712][ T1148] hsr_slave_1: left promiscuous mode [ 68.599304][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.602467][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.605901][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.609053][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.614646][ T1148] veth1_macvtap: left promiscuous mode [ 68.617023][ T1148] veth0_macvtap: left promiscuous mode [ 68.619366][ T1148] veth1_vlan: left promiscuous mode [ 68.621582][ T1148] veth0_vlan: left promiscuous mode [ 68.670369][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 68.675070][ T1148] team0 (unregistering): Port device team_slave_0 removed