Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://45567 [ 31.276175][ T4724] cgroup: Unknown subsys name 'net' [ 31.406159][ T4724] cgroup: Unknown subsys name 'cpuset' [ 31.408133][ T4724] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.566941][ T4724] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.697735][ T4733] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.752074][ T1910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.752102][ T1910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.787130][ T1847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.788638][ T1847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.994225][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.995860][ T4785] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.995947][ T4785] bridge_slave_0: entered allmulticast mode [ 35.996500][ T4785] bridge_slave_0: entered promiscuous mode [ 35.998747][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.998769][ T4785] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.998818][ T4785] bridge_slave_1: entered allmulticast mode [ 35.999275][ T4785] bridge_slave_1: entered promiscuous mode [ 36.009669][ T4785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.010718][ T4785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.017128][ T4785] team0: Port device team_slave_0 added [ 36.017869][ T4785] team0: Port device team_slave_1 added [ 36.023914][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.023946][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.023961][ T4785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.025194][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.025204][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.025220][ T4785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.035685][ T4785] hsr_slave_0: entered promiscuous mode [ 36.036031][ T4785] hsr_slave_1: entered promiscuous mode [ 36.170158][ T4785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.173645][ T4785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.175125][ T4785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.177651][ T4785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.178535][ T4785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.179990][ T4785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.181811][ T4785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.183846][ T4785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.246758][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.246813][ T4785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.246962][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.246990][ T4785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.262698][ T4785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.267310][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.269220][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.274286][ T4785] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.278147][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.278206][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.282250][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.282294][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.404957][ T4785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.419266][ T4785] veth0_vlan: entered promiscuous mode [ 36.421334][ T4785] veth1_vlan: entered promiscuous mode [ 36.429420][ T4785] veth0_macvtap: entered promiscuous mode [ 36.430674][ T4785] veth1_macvtap: entered promiscuous mode [ 36.440294][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.442117][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.444012][ T1737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.445452][ T1737] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.445480][ T1737] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.445498][ T1737] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.531591][ T4821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.532713][ T4821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.532962][ T4821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.533293][ T4821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.533508][ T4821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.552503][ T1244] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.608420][ T1244] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.668200][ T1244] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.728323][ T1244] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:36 executed programs: 0 [ 36.863653][ T4821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.864019][ T4821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.864200][ T4821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.864727][ T4821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.864925][ T4821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.999012][ T4832] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.999100][ T4832] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.999208][ T4832] bridge_slave_0: entered allmulticast mode [ 36.999619][ T4832] bridge_slave_0: entered promiscuous mode [ 37.000823][ T4832] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.000870][ T4832] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.000916][ T4832] bridge_slave_1: entered allmulticast mode [ 37.001325][ T4832] bridge_slave_1: entered promiscuous mode [ 37.010227][ T4832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.011269][ T4832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.018336][ T4832] team0: Port device team_slave_0 added [ 37.019581][ T4832] team0: Port device team_slave_1 added [ 37.025911][ T4832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.025934][ T4832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.025949][ T4832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.026461][ T4832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.026467][ T4832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.026481][ T4832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.036877][ T4832] hsr_slave_0: entered promiscuous mode [ 37.037154][ T4832] hsr_slave_1: entered promiscuous mode [ 37.037372][ T4832] debugfs: 'hsr0' already exists in 'hsr' [ 37.037422][ T4832] Cannot create hsr debugfs directory [ 38.905040][ T50] Bluetooth: hci0: command tx timeout [ 39.857452][ T1244] bridge_slave_1: left allmulticast mode [ 39.857497][ T1244] bridge_slave_1: left promiscuous mode [ 39.857791][ T1244] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.862384][ T1244] bridge_slave_0: left allmulticast mode [ 39.863643][ T1244] bridge_slave_0: left promiscuous mode [ 39.864302][ T1244] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.917397][ T1244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.956196][ T1244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.965864][ T1244] bond0 (unregistering): Released all slaves [ 40.031003][ T1244] hsr_slave_0: left promiscuous mode [ 40.032231][ T1244] hsr_slave_1: left promiscuous mode [ 40.032929][ T1244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.032950][ T1244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.034695][ T1244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.034707][ T1244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.039759][ T1244] veth1_macvtap: left promiscuous mode [ 40.039830][ T1244] veth0_macvtap: left promiscuous mode [ 40.039878][ T1244] veth1_vlan: left promiscuous mode [ 40.039916][ T1244] veth0_vlan: left promiscuous mode [ 40.140849][ T1244] team0 (unregistering): Port device team_slave_1 removed [ 40.145026][ T1244] team0 (unregistering): Port device team_slave_0 removed [ 40.188756][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 40.407429][ T4832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.410998][ T4832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.411641][ T4832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.413983][ T4832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.415858][ T4832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.418676][ T4832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.420559][ T4832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.422876][ T4832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.463521][ T4832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.471666][ T4832] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.474889][ T1737] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.474928][ T1737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.485176][ T1737] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.485226][ T1737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.640280][ T4832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.659262][ T4832] veth0_vlan: entered promiscuous mode [ 40.663640][ T4832] veth1_vlan: entered promiscuous mode [ 40.671899][ T4832] veth0_macvtap: entered promiscuous mode [ 40.673543][ T4832] veth1_macvtap: entered promiscuous mode [ 40.678522][ T4832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.679505][ T4832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.681828][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.683516][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.689514][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.689561][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.711139][ T1910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.711172][ T1910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.719025][ T1847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.719059][ T1847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.815688][ T4924] [ 40.816137][ T4924] ====================================================== [ 40.817393][ T4924] WARNING: possible circular locking dependency detected [ 40.818530][ T4924] syzkaller #0 Not tainted [ 40.819298][ T4924] ------------------------------------------------------ [ 40.820440][ T4924] syz.0.17/4924 is trying to acquire lock: [ 40.821396][ T4924] ffff0000c1919210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x98/0xe0 [ 40.823097][ T4924] [ 40.823097][ T4924] but task is already holding lock: [ 40.824263][ T4924] ffff0000c70da580 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 40.826184][ T4924] [ 40.826184][ T4924] which lock already depends on the new lock. [ 40.826184][ T4924] [ 40.828020][ T4924] [ 40.828020][ T4924] the existing dependency chain (in reverse order) is: [ 40.829639][ T4924] [ 40.829639][ T4924] -> #2 (&q->q_usage_counter(io)#26){++++}-{0:0}: [ 40.831166][ T4924] blk_alloc_queue+0x488/0x590 [ 40.832138][ T4924] blk_mq_alloc_queue+0x148/0x284 [ 40.833033][ T4924] __blk_mq_alloc_disk+0x38/0x10c [ 40.833933][ T4924] loop_add+0x358/0x8e4 [ 40.834694][ T4924] loop_init+0xe8/0x10c [ 40.835499][ T4924] do_one_initcall+0x274/0xc38 [ 40.836396][ T4924] do_initcall_level+0x12c/0x1c4 [ 40.837317][ T4924] do_initcalls+0x70/0xd0 [ 40.838113][ T4924] do_basic_setup+0x7c/0x90 [ 40.839004][ T4924] kernel_init_freeable+0x268/0x3a8 [ 40.839974][ T4924] kernel_init+0x24/0x1dc [ 40.840848][ T4924] ret_from_fork+0x10/0x20 [ 40.841747][ T4924] [ 40.841747][ T4924] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 40.843086][ T4924] fs_reclaim_acquire+0x90/0x110 [ 40.844100][ T4924] kmem_cache_alloc_noprof+0x60/0x5d8 [ 40.845095][ T4924] __kernfs_iattrs+0xd8/0x310 [ 40.845995][ T4924] __kernfs_setattr+0x48/0x2ac [ 40.846927][ T4924] kernfs_iop_setattr+0xc4/0x11c [ 40.847914][ T4924] notify_change+0x928/0xb7c [ 40.848778][ T4924] do_truncate+0x1a8/0x22c [ 40.849605][ T4924] path_openat+0x2368/0x2a60 [ 40.850462][ T4924] do_file_open+0x1c8/0x2e8 [ 40.851240][ T4924] do_sys_openat2+0x114/0x1e8 [ 40.852091][ T4924] do_sys_open+0xb0/0xe0 [ 40.852976][ T4924] __arm64_sys_openat+0xa0/0xbc [ 40.853896][ T4924] invoke_syscall+0x98/0x244 [ 40.854668][ T4924] el0_svc_common+0xec/0x23c [ 40.855525][ T4924] do_el0_svc+0x4c/0x5c [ 40.856361][ T4924] el0_svc+0x64/0x260 [ 40.857146][ T4924] el0t_64_sync_handler+0x48/0x148 [ 40.858132][ T4924] el0t_64_sync+0x198/0x19c [ 40.858991][ T4924] [ 40.858991][ T4924] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 40.860463][ T4924] __lock_acquire+0x17c0/0x2ebc [ 40.861494][ T4924] lock_acquire+0x140/0x364 [ 40.862348][ T4924] down_read+0x58/0x2bc [ 40.863117][ T4924] kernfs_iop_getattr+0x98/0xe0 [ 40.863992][ T4924] vfs_getattr_nosec+0x250/0x388 [ 40.864930][ T4924] vfs_getattr+0x60/0x88 [ 40.865757][ T4924] loop_assign_backing_file+0x200/0x3c0 [ 40.866812][ T4924] lo_ioctl+0x1160/0x167c [ 40.867612][ T4924] blkdev_ioctl+0x574/0x904 [ 40.868464][ T4924] __arm64_sys_ioctl+0x14c/0x1c4 [ 40.869416][ T4924] invoke_syscall+0x98/0x244 [ 40.870320][ T4924] el0_svc_common+0xec/0x23c [ 40.871220][ T4924] do_el0_svc+0x4c/0x5c [ 40.872037][ T4924] el0_svc+0x64/0x260 [ 40.872785][ T4924] el0t_64_sync_handler+0x48/0x148 [ 40.873728][ T4924] el0t_64_sync+0x198/0x19c [ 40.874575][ T4924] [ 40.874575][ T4924] other info that might help us debug this: [ 40.874575][ T4924] [ 40.876304][ T4924] Chain exists of: [ 40.876304][ T4924] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#26 [ 40.876304][ T4924] [ 40.878731][ T4924] Possible unsafe locking scenario: [ 40.878731][ T4924] [ 40.879928][ T4924] CPU0 CPU1 [ 40.880806][ T4924] ---- ---- [ 40.881715][ T4924] lock(&q->q_usage_counter(io)#26); [ 40.882672][ T4924] lock(fs_reclaim); [ 40.883773][ T4924] lock(&q->q_usage_counter(io)#26); [ 40.885225][ T4924] rlock(&root->kernfs_iattr_rwsem); [ 40.886163][ T4924] [ 40.886163][ T4924] *** DEADLOCK *** [ 40.886163][ T4924] [ 40.887587][ T4924] 3 locks held by syz.0.17/4924: [ 40.888456][ T4924] #0: ffff0000c7d2b430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x64/0xbc [ 40.890384][ T4924] #1: ffff0000c70da580 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 40.892502][ T4924] #2: ffff0000c70da5b8 (&q->q_usage_counter(queue)#10){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 40.894605][ T4924] [ 40.894605][ T4924] stack backtrace: [ 40.895637][ T4924] CPU: 0 UID: 0 PID: 4924 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 40.897119][ T4924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 40.898817][ T4924] Call trace: [ 40.899352][ T4924] show_stack+0x2c/0x3c (C) [ 40.900114][ T4924] __dump_stack+0x30/0x40 [ 40.900865][ T4924] dump_stack_lvl+0xd8/0x12c [ 40.901637][ T4924] dump_stack+0x1c/0x28 [ 40.902319][ T4924] print_circular_bug+0x328/0x330 [ 40.903252][ T4924] check_noncircular+0x158/0x174 [ 40.904090][ T4924] __lock_acquire+0x17c0/0x2ebc [ 40.904934][ T4924] lock_acquire+0x140/0x364 [ 40.905726][ T4924] down_read+0x58/0x2bc [ 40.906487][ T4924] kernfs_iop_getattr+0x98/0xe0 [ 40.907349][ T4924] vfs_getattr_nosec+0x250/0x388 [ 40.908195][ T4924] vfs_getattr+0x60/0x88 [ 40.908945][ T4924] loop_assign_backing_file+0x200/0x3c0 [ 40.909902][ T4924] lo_ioctl+0x1160/0x167c [ 40.910600][ T4924] blkdev_ioctl+0x574/0x904 [ 40.911428][ T4924] __arm64_sys_ioctl+0x14c/0x1c4 [ 40.912329][ T4924] invoke_syscall+0x98/0x244 [ 40.913150][ T4924] el0_svc_common+0xec/0x23c [ 40.913964][ T4924] do_el0_svc+0x4c/0x5c [ 40.914645][ T4924] el0_svc+0x64/0x260 [ 40.915345][ T4924] el0t_64_sync_handler+0x48/0x148 [ 40.916230][ T4924] el0t_64_sync+0x198/0x19c