Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs [ 31.424356][ T4682] cgroup: Unknown subsys name 'net' [ 31.555602][ T4682] cgroup: Unknown subsys name 'cpuset' [ 31.557376][ T4682] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.767114][ T4682] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.686159][ T4690] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.408125][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.408150][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.416525][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.416549][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.926912][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.927149][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.927211][ T4736] bridge_slave_0: entered allmulticast mode [ 34.927676][ T4736] bridge_slave_0: entered promiscuous mode [ 34.928700][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.928754][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.928802][ T4736] bridge_slave_1: entered allmulticast mode [ 34.929181][ T4736] bridge_slave_1: entered promiscuous mode [ 34.936819][ T4736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.937690][ T4736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.943999][ T4736] team0: Port device team_slave_0 added [ 34.944716][ T4736] team0: Port device team_slave_1 added [ 34.950897][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.950920][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.950939][ T4736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.951588][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.951596][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.951611][ T4736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.961092][ T4736] hsr_slave_0: entered promiscuous mode [ 34.961408][ T4736] hsr_slave_1: entered promiscuous mode [ 35.030808][ T4736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.034480][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.036129][ T4736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.038339][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.038694][ T4736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.040570][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.040861][ T4736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.044708][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.052858][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.052963][ T4736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.053113][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.053146][ T4736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.074151][ T4736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.079525][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.080869][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.086066][ T4736] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.087990][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.088055][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.091308][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.091342][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.183795][ T4736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.194470][ T4736] veth0_vlan: entered promiscuous mode [ 35.196456][ T4736] veth1_vlan: entered promiscuous mode [ 35.207660][ T4736] veth0_macvtap: entered promiscuous mode [ 35.208766][ T4736] veth1_macvtap: entered promiscuous mode [ 35.213561][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.214683][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.216913][ T3001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.218596][ T3001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.220290][ T3001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.226404][ T3001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.297316][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.339328][ T4779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.339700][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.339897][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.340778][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.341013][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.367222][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.418260][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.486214][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:35 executed programs: 0 [ 35.565463][ T4696] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.566977][ T4696] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.568086][ T4696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.568424][ T4696] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.568663][ T4696] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.699445][ T4786] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.699488][ T4786] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.699571][ T4786] bridge_slave_0: entered allmulticast mode [ 35.700020][ T4786] bridge_slave_0: entered promiscuous mode [ 35.700698][ T4786] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.700719][ T4786] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.700778][ T4786] bridge_slave_1: entered allmulticast mode [ 35.701161][ T4786] bridge_slave_1: entered promiscuous mode [ 35.709501][ T4786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.710548][ T4786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.718131][ T4786] team0: Port device team_slave_0 added [ 35.719436][ T4786] team0: Port device team_slave_1 added [ 35.725489][ T4786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.725507][ T4786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.725523][ T4786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.726031][ T4786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.726038][ T4786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.726053][ T4786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.735987][ T4786] hsr_slave_0: entered promiscuous mode [ 35.736294][ T4786] hsr_slave_1: entered promiscuous mode [ 35.736498][ T4786] debugfs: 'hsr0' already exists in 'hsr' [ 35.736541][ T4786] Cannot create hsr debugfs directory [ 37.593378][ T50] Bluetooth: hci0: command tx timeout [ 38.422959][ T40] bridge_slave_1: left allmulticast mode [ 38.423005][ T40] bridge_slave_1: left promiscuous mode [ 38.423323][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.426564][ T40] bridge_slave_0: left allmulticast mode [ 38.426586][ T40] bridge_slave_0: left promiscuous mode [ 38.426670][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.566068][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.594091][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.613606][ T40] bond0 (unregistering): Released all slaves [ 38.672673][ T40] hsr_slave_0: left promiscuous mode [ 38.680318][ T40] hsr_slave_1: left promiscuous mode [ 38.680644][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.680674][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.684666][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.684689][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.690749][ T40] veth1_macvtap: left promiscuous mode [ 38.691739][ T40] veth0_macvtap: left promiscuous mode [ 38.692730][ T40] veth1_vlan: left promiscuous mode [ 38.693823][ T40] veth0_vlan: left promiscuous mode [ 38.787214][ T40] team0 (unregistering): Port device team_slave_1 removed [ 38.791018][ T40] team0 (unregistering): Port device team_slave_0 removed [ 38.834860][ T4361] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.078613][ T4786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.081005][ T4786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.082722][ T4786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.086100][ T4786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.087630][ T4786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.089959][ T4786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.091548][ T4786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.099354][ T4786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.126969][ T4786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.130005][ T4786] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.136288][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.136345][ T3267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.142052][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.142097][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.302364][ T4786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.319971][ T4786] veth0_vlan: entered promiscuous mode [ 39.322267][ T4786] veth1_vlan: entered promiscuous mode [ 39.329695][ T4786] veth0_macvtap: entered promiscuous mode [ 39.331722][ T4786] veth1_macvtap: entered promiscuous mode [ 39.337013][ T4786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.337962][ T4786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.341832][ T3267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.341894][ T3267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.341914][ T3267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.341931][ T3267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.370934][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.371930][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.376388][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.376412][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.453402][ T4878] [ 39.453889][ T4878] ====================================================== [ 39.455086][ T4878] WARNING: possible circular locking dependency detected [ 39.456364][ T4878] syzkaller #0 Not tainted [ 39.457162][ T4878] ------------------------------------------------------ [ 39.458331][ T4878] syz.0.17/4878 is trying to acquire lock: [ 39.459368][ T4878] ffff0000c1919210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x94/0xdc [ 39.461069][ T4878] [ 39.461069][ T4878] but task is already holding lock: [ 39.462353][ T4878] ffff0000c7aeefc0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 39.464373][ T4878] [ 39.464373][ T4878] which lock already depends on the new lock. [ 39.464373][ T4878] [ 39.466198][ T4878] [ 39.466198][ T4878] the existing dependency chain (in reverse order) is: [ 39.467630][ T4878] [ 39.467630][ T4878] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 39.469189][ T4878] blk_alloc_queue+0x47c/0x57c [ 39.470099][ T4878] blk_mq_alloc_queue+0x148/0x294 [ 39.471061][ T4878] __blk_mq_alloc_disk+0x38/0x10c [ 39.472010][ T4878] loop_add+0x34c/0x8b8 [ 39.472893][ T4878] loop_init+0xe8/0x10c [ 39.473750][ T4878] do_one_initcall+0x274/0xc20 [ 39.474558][ T4878] do_initcall_level+0x128/0x1c4 [ 39.475386][ T4878] do_initcalls+0x70/0xd0 [ 39.476138][ T4878] do_basic_setup+0x7c/0x90 [ 39.476930][ T4878] kernel_init_freeable+0x268/0x3a8 [ 39.477791][ T4878] kernel_init+0x24/0x1dc [ 39.478527][ T4878] ret_from_fork+0x10/0x20 [ 39.479321][ T4878] [ 39.479321][ T4878] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 39.480588][ T4878] fs_reclaim_acquire+0x90/0x110 [ 39.481486][ T4878] kmem_cache_alloc_noprof+0x58/0x610 [ 39.482424][ T4878] __kernfs_iattrs+0xd8/0x2d8 [ 39.483227][ T4878] __kernfs_setattr+0x4c/0x2c4 [ 39.484092][ T4878] kernfs_iop_setattr+0xc4/0x11c [ 39.484958][ T4878] notify_change+0x984/0xbd8 [ 39.485681][ T4878] do_truncate+0x1a8/0x22c [ 39.486447][ T4878] path_openat+0x23a4/0x2a6c [ 39.487196][ T4878] do_file_open+0x1c4/0x2e4 [ 39.488007][ T4878] do_sys_openat2+0x114/0x1e8 [ 39.488846][ T4878] do_sys_open+0xac/0xdc [ 39.489610][ T4878] __arm64_sys_openat+0x9c/0xb8 [ 39.490493][ T4878] invoke_syscall+0x98/0x244 [ 39.491318][ T4878] el0_svc_common+0xe8/0x23c [ 39.492095][ T4878] do_el0_svc+0x48/0x58 [ 39.492806][ T4878] el0_svc+0x64/0x260 [ 39.493476][ T4878] el0t_64_sync_handler+0x48/0x148 [ 39.494308][ T4878] el0t_64_sync+0x198/0x19c [ 39.495104][ T4878] [ 39.495104][ T4878] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 39.496548][ T4878] __lock_acquire+0x1780/0x2f44 [ 39.497530][ T4878] lock_acquire+0x140/0x368 [ 39.498494][ T4878] down_read+0x58/0x2bc [ 39.499384][ T4878] kernfs_iop_getattr+0x94/0xdc [ 39.500315][ T4878] vfs_getattr_nosec+0x254/0x38c [ 39.501290][ T4878] vfs_getattr+0x60/0x88 [ 39.502142][ T4878] loop_assign_backing_file+0x200/0x3cc [ 39.503256][ T4878] lo_ioctl+0x1158/0x1684 [ 39.504107][ T4878] blkdev_ioctl+0x574/0x904 [ 39.504997][ T4878] __arm64_sys_ioctl+0x14c/0x1c4 [ 39.505910][ T4878] invoke_syscall+0x98/0x244 [ 39.506733][ T4878] el0_svc_common+0xe8/0x23c [ 39.507570][ T4878] do_el0_svc+0x48/0x58 [ 39.508338][ T4878] el0_svc+0x64/0x260 [ 39.509068][ T4878] el0t_64_sync_handler+0x48/0x148 [ 39.509949][ T4878] el0t_64_sync+0x198/0x19c [ 39.510735][ T4878] [ 39.510735][ T4878] other info that might help us debug this: [ 39.510735][ T4878] [ 39.512319][ T4878] Chain exists of: [ 39.512319][ T4878] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 39.512319][ T4878] [ 39.514623][ T4878] Possible unsafe locking scenario: [ 39.514623][ T4878] [ 39.515753][ T4878] CPU0 CPU1 [ 39.516577][ T4878] ---- ---- [ 39.517436][ T4878] lock(&q->q_usage_counter(io)#24); [ 39.518250][ T4878] lock(fs_reclaim); [ 39.519644][ T4878] lock(&q->q_usage_counter(io)#24); [ 39.520942][ T4878] rlock(&root->kernfs_iattr_rwsem); [ 39.521806][ T4878] [ 39.521806][ T4878] *** DEADLOCK *** [ 39.521806][ T4878] [ 39.523152][ T4878] 3 locks held by syz.0.17/4878: [ 39.523949][ T4878] #0: ffff0000c7d21430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x64/0xbc [ 39.525691][ T4878] #1: ffff0000c7aeefc0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 39.527552][ T4878] #2: ffff0000c7aeeff8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 39.529290][ T4878] [ 39.529290][ T4878] stack backtrace: [ 39.530136][ T4878] CPU: 1 UID: 0 PID: 4878 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 39.531368][ T4878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 39.532996][ T4878] Call trace: [ 39.533525][ T4878] show_stack+0x2c/0x3c (C) [ 39.534233][ T4878] __dump_stack+0x30/0x40 [ 39.534963][ T4878] dump_stack_lvl+0xd8/0x12c [ 39.535685][ T4878] dump_stack+0x1c/0x28 [ 39.536425][ T4878] print_circular_bug+0x328/0x330 [ 39.537216][ T4878] check_noncircular+0x158/0x174 [ 39.537919][ T4878] __lock_acquire+0x1780/0x2f44 [ 39.538666][ T4878] lock_acquire+0x140/0x368 [ 39.539381][ T4878] down_read+0x58/0x2bc [ 39.540026][ T4878] kernfs_iop_getattr+0x94/0xdc [ 39.540762][ T4878] vfs_getattr_nosec+0x254/0x38c [ 39.541568][ T4878] vfs_getattr+0x60/0x88 [ 39.542253][ T4878] loop_assign_backing_file+0x200/0x3cc [ 39.543111][ T4878] lo_ioctl+0x1158/0x1684 [ 39.543783][ T4878] blkdev_ioctl+0x574/0x904 [ 39.544433][ T4878] __arm64_sys_ioctl+0x14c/0x1c4 [ 39.545247][ T4878] invoke_syscall+0x98/0x244 [ 39.545943][ T4878] el0_svc_common+0xe8/0x23c [ 39.546661][ T4878] do_el0_svc+0x48/0x58 [ 39.547330][ T4878] el0_svc+0x64/0x260 [ 39.547970][ T4878] el0t_64_sync_handler+0x48/0x148 [ 39.548765][ T4878] el0t_64_sync+0x198/0x19c