Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. 1970/01/01 00:00:29 parsed 1 programs [ 30.930599][ T4719] cgroup: Unknown subsys name 'net' [ 31.010244][ T4719] cgroup: Unknown subsys name 'cpuset' [ 31.012537][ T4719] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.168570][ T4719] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.171768][ T4727] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.466491][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.466749][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.466814][ T4736] bridge_slave_0: entered allmulticast mode [ 33.467263][ T4736] bridge_slave_0: entered promiscuous mode [ 33.468401][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.468421][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.468472][ T4736] bridge_slave_1: entered allmulticast mode [ 33.470396][ T4736] bridge_slave_1: entered promiscuous mode [ 33.477755][ T4736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.478595][ T4736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.485959][ T4736] team0: Port device team_slave_0 added [ 33.486674][ T4736] team0: Port device team_slave_1 added [ 33.494406][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.495761][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.498831][ T4736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.499651][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.499659][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.499673][ T4736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.509893][ T4736] hsr_slave_0: entered promiscuous mode [ 33.510346][ T4736] hsr_slave_1: entered promiscuous mode [ 33.554335][ T4736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.557290][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.559510][ T4736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.561819][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.563437][ T4736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.565706][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.567463][ T4736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.569656][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.577880][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.577932][ T4736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.578073][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.578102][ T4736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.594883][ T4736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.599508][ T1393] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.600885][ T1393] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.605122][ T4736] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.607427][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.607481][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.611471][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.611508][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.626352][ T4736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.626380][ T4736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.709069][ T4736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.721457][ T4736] veth0_vlan: entered promiscuous mode [ 33.724845][ T4736] veth1_vlan: entered promiscuous mode [ 33.734045][ T4736] veth0_macvtap: entered promiscuous mode [ 33.735347][ T4736] veth1_macvtap: entered promiscuous mode [ 33.739893][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.741068][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.743379][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.747745][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.748253][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.748274][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.815424][ T1393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.864137][ T1393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.934340][ T1393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.974950][ T1393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.992392][ T1353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.992416][ T1353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.002618][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.002642][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.251064][ T4732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.252914][ T4732] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.254438][ T4732] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.256105][ T4732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.257636][ T4732] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:34 executed programs: 0 [ 34.777199][ T4732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.778400][ T4732] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.778672][ T4732] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.779523][ T4732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.779863][ T4732] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.916584][ T4821] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.916672][ T4821] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.916739][ T4821] bridge_slave_0: entered allmulticast mode [ 34.917180][ T4821] bridge_slave_0: entered promiscuous mode [ 34.918023][ T4821] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.918041][ T4821] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.918098][ T4821] bridge_slave_1: entered allmulticast mode [ 34.918552][ T4821] bridge_slave_1: entered promiscuous mode [ 34.927456][ T4821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.928624][ T4821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.937156][ T4821] team0: Port device team_slave_0 added [ 34.937967][ T4821] team0: Port device team_slave_1 added [ 34.944166][ T4821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.944186][ T4821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.944202][ T4821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.944723][ T4821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.944730][ T4821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.944744][ T4821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.956280][ T4821] hsr_slave_0: entered promiscuous mode [ 34.956638][ T4821] hsr_slave_1: entered promiscuous mode [ 34.956847][ T4821] debugfs: 'hsr0' already exists in 'hsr' [ 34.956892][ T4821] Cannot create hsr debugfs directory [ 36.819404][ T4732] Bluetooth: hci0: command tx timeout [ 36.948937][ T1393] bridge_slave_1: left allmulticast mode [ 36.948980][ T1393] bridge_slave_1: left promiscuous mode [ 36.949294][ T1393] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.952598][ T1393] bridge_slave_0: left allmulticast mode [ 36.952621][ T1393] bridge_slave_0: left promiscuous mode [ 36.952695][ T1393] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.085225][ T1393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.100124][ T1393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.111097][ T1393] bond0 (unregistering): Released all slaves [ 37.174213][ T1393] hsr_slave_0: left promiscuous mode [ 37.175215][ T1393] hsr_slave_1: left promiscuous mode [ 37.175833][ T1393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.175849][ T1393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.177028][ T1393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.177040][ T1393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.184961][ T1393] veth1_macvtap: left promiscuous mode [ 37.185972][ T1393] veth0_macvtap: left promiscuous mode [ 37.187141][ T1393] veth1_vlan: left promiscuous mode [ 37.187192][ T1393] veth0_vlan: left promiscuous mode [ 37.285480][ T1393] team0 (unregistering): Port device team_slave_1 removed [ 37.300951][ T1393] team0 (unregistering): Port device team_slave_0 removed [ 37.351407][ T4396] 8021q: adding VLAN 0 to HW filter on device eth0 [ 37.557304][ T4821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.559741][ T4821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.560024][ T4821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.562580][ T4821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.563357][ T4821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.565426][ T4821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.565828][ T4821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.568423][ T4821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.602347][ T4821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.607318][ T4821] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.611875][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.611918][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.615446][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.615491][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.948825][ T4821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.958633][ T4821] veth0_vlan: entered promiscuous mode [ 37.961118][ T4821] veth1_vlan: entered promiscuous mode [ 37.966923][ T4821] veth0_macvtap: entered promiscuous mode [ 37.968087][ T4821] veth1_macvtap: entered promiscuous mode [ 37.971538][ T4821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.974923][ T4821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.976691][ T1216] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.976732][ T1216] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.976750][ T1216] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.976764][ T1216] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.010962][ T877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.010986][ T877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.018831][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.018855][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.090020][ T4913] [ 38.090420][ T4913] ====================================================== [ 38.091595][ T4913] WARNING: possible circular locking dependency detected [ 38.092699][ T4913] syzkaller #0 Not tainted [ 38.093389][ T4913] ------------------------------------------------------ [ 38.094570][ T4913] syz.0.17/4913 is trying to acquire lock: [ 38.095527][ T4913] ffff0000c1919210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x94/0xdc [ 38.097324][ T4913] [ 38.097324][ T4913] but task is already holding lock: [ 38.098468][ T4913] ffff0000c7a69c38 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 38.100322][ T4913] [ 38.100322][ T4913] which lock already depends on the new lock. [ 38.100322][ T4913] [ 38.102245][ T4913] [ 38.102245][ T4913] the existing dependency chain (in reverse order) is: [ 38.103741][ T4913] [ 38.103741][ T4913] -> #2 (&q->q_usage_counter(io)#20){++++}-{0:0}: [ 38.105292][ T4913] blk_alloc_queue+0x47c/0x57c [ 38.106212][ T4913] blk_mq_alloc_queue+0x148/0x294 [ 38.107235][ T4913] __blk_mq_alloc_disk+0x38/0x10c [ 38.108174][ T4913] loop_add+0x34c/0x8b8 [ 38.109036][ T4913] loop_init+0xe8/0x10c [ 38.109704][ T4913] do_one_initcall+0x274/0xc20 [ 38.110467][ T4913] do_initcall_level+0x128/0x1c4 [ 38.111320][ T4913] do_initcalls+0x70/0xd0 [ 38.112126][ T4913] do_basic_setup+0x7c/0x90 [ 38.113033][ T4913] kernel_init_freeable+0x268/0x3a8 [ 38.114035][ T4913] kernel_init+0x24/0x1dc [ 38.114833][ T4913] ret_from_fork+0x10/0x20 [ 38.115657][ T4913] [ 38.115657][ T4913] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 38.116908][ T4913] fs_reclaim_acquire+0x90/0x110 [ 38.117833][ T4913] kmem_cache_alloc_noprof+0x58/0x610 [ 38.118874][ T4913] __kernfs_iattrs+0xd8/0x2d8 [ 38.119814][ T4913] __kernfs_setattr+0x4c/0x2c4 [ 38.120713][ T4913] kernfs_iop_setattr+0xc4/0x11c [ 38.121646][ T4913] notify_change+0x984/0xbd8 [ 38.122597][ T4913] do_truncate+0x1a8/0x22c [ 38.123481][ T4913] path_openat+0x23a4/0x2a6c [ 38.124528][ T4913] do_file_open+0x1c4/0x2e4 [ 38.125410][ T4913] do_sys_openat2+0x114/0x1e8 [ 38.126265][ T4913] do_sys_open+0xac/0xdc [ 38.127083][ T4913] __arm64_sys_openat+0x9c/0xb8 [ 38.127997][ T4913] invoke_syscall+0x98/0x244 [ 38.128837][ T4913] el0_svc_common+0xe8/0x23c [ 38.129640][ T4913] do_el0_svc+0x48/0x58 [ 38.130404][ T4913] el0_svc+0x64/0x260 [ 38.131176][ T4913] el0t_64_sync_handler+0x48/0x148 [ 38.132149][ T4913] el0t_64_sync+0x198/0x19c [ 38.132998][ T4913] [ 38.132998][ T4913] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 38.134371][ T4913] __lock_acquire+0x1780/0x2f44 [ 38.135267][ T4913] lock_acquire+0x140/0x368 [ 38.136166][ T4913] down_read+0x58/0x2bc [ 38.136997][ T4913] kernfs_iop_getattr+0x94/0xdc [ 38.137925][ T4913] vfs_getattr_nosec+0x254/0x38c [ 38.138831][ T4913] vfs_getattr+0x60/0x88 [ 38.139624][ T4913] loop_assign_backing_file+0x200/0x3cc [ 38.140597][ T4913] lo_ioctl+0x1158/0x1684 [ 38.141438][ T4913] blkdev_ioctl+0x574/0x904 [ 38.142281][ T4913] __arm64_sys_ioctl+0x14c/0x1c4 [ 38.143169][ T4913] invoke_syscall+0x98/0x244 [ 38.144003][ T4913] el0_svc_common+0xe8/0x23c [ 38.144963][ T4913] do_el0_svc+0x48/0x58 [ 38.145794][ T4913] el0_svc+0x64/0x260 [ 38.146545][ T4913] el0t_64_sync_handler+0x48/0x148 [ 38.147569][ T4913] el0t_64_sync+0x198/0x19c [ 38.148487][ T4913] [ 38.148487][ T4913] other info that might help us debug this: [ 38.148487][ T4913] [ 38.150261][ T4913] Chain exists of: [ 38.150261][ T4913] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#20 [ 38.150261][ T4913] [ 38.152803][ T4913] Possible unsafe locking scenario: [ 38.152803][ T4913] [ 38.153992][ T4913] CPU0 CPU1 [ 38.154876][ T4913] ---- ---- [ 38.155805][ T4913] lock(&q->q_usage_counter(io)#20); [ 38.156769][ T4913] lock(fs_reclaim); [ 38.157917][ T4913] lock(&q->q_usage_counter(io)#20); [ 38.159258][ T4913] rlock(&root->kernfs_iattr_rwsem); [ 38.160290][ T4913] [ 38.160290][ T4913] *** DEADLOCK *** [ 38.160290][ T4913] [ 38.161780][ T4913] 3 locks held by syz.0.17/4913: [ 38.162640][ T4913] #0: ffff0000c7afd430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x64/0xbc [ 38.164507][ T4913] #1: ffff0000c7a69c38 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 38.166599][ T4913] #2: ffff0000c7a69c70 (&q->q_usage_counter(queue)#4){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 38.168608][ T4913] [ 38.168608][ T4913] stack backtrace: [ 38.169549][ T4913] CPU: 1 UID: 0 PID: 4913 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 38.170946][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 38.172693][ T4913] Call trace: [ 38.173253][ T4913] show_stack+0x2c/0x3c (C) [ 38.173960][ T4913] __dump_stack+0x30/0x40 [ 38.174648][ T4913] dump_stack_lvl+0xd8/0x12c [ 38.175487][ T4913] dump_stack+0x1c/0x28 [ 38.176191][ T4913] print_circular_bug+0x328/0x330 [ 38.177111][ T4913] check_noncircular+0x158/0x174 [ 38.177981][ T4913] __lock_acquire+0x1780/0x2f44 [ 38.178757][ T4913] lock_acquire+0x140/0x368 [ 38.179532][ T4913] down_read+0x58/0x2bc [ 38.180239][ T4913] kernfs_iop_getattr+0x94/0xdc [ 38.181105][ T4913] vfs_getattr_nosec+0x254/0x38c [ 38.181932][ T4913] vfs_getattr+0x60/0x88 [ 38.182646][ T4913] loop_assign_backing_file+0x200/0x3cc [ 38.183637][ T4913] lo_ioctl+0x1158/0x1684 [ 38.184451][ T4913] blkdev_ioctl+0x574/0x904 [ 38.185267][ T4913] __arm64_sys_ioctl+0x14c/0x1c4 [ 38.186124][ T4913] invoke_syscall+0x98/0x244 [ 38.186888][ T4913] el0_svc_common+0xe8/0x23c [ 38.187730][ T4913] do_el0_svc+0x48/0x58 [ 38.188459][ T4913] el0_svc+0x64/0x260 [ 38.189162][ T4913] el0t_64_sync_handler+0x48/0x148 [ 38.190056][ T4913] el0t_64_sync+0x198/0x19c