Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs [ 31.700509][ T4680] cgroup: Unknown subsys name 'net' [ 31.831012][ T4680] cgroup: Unknown subsys name 'cpuset' [ 31.833107][ T4680] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.052413][ T4680] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 37.581814][ T4691] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.220281][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.220603][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.220673][ T4719] bridge_slave_0: entered allmulticast mode [ 38.221128][ T4719] bridge_slave_0: entered promiscuous mode [ 38.222383][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.222429][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.222472][ T4719] bridge_slave_1: entered allmulticast mode [ 38.222877][ T4719] bridge_slave_1: entered promiscuous mode [ 38.230731][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.231881][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.237717][ T4719] team0: Port device team_slave_0 added [ 38.238400][ T4719] team0: Port device team_slave_1 added [ 38.243956][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.243976][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.243993][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.244806][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.244813][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.244827][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.255085][ T4719] hsr_slave_0: entered promiscuous mode [ 38.255404][ T4719] hsr_slave_1: entered promiscuous mode [ 38.296770][ T4719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.299674][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.300005][ T4719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.301699][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.301970][ T4719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.303178][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.303551][ T4719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.305327][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.313198][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.313243][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.313382][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.313410][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.328025][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.333684][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.335078][ T1245] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.336466][ T1245] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.341780][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.341845][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.346153][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.346184][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.446445][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.458471][ T4719] veth0_vlan: entered promiscuous mode [ 38.466846][ T4719] veth1_vlan: entered promiscuous mode [ 38.473897][ T4719] veth0_macvtap: entered promiscuous mode [ 38.475036][ T4719] veth1_macvtap: entered promiscuous mode [ 38.479709][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.480962][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.484048][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.485941][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.487627][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.490756][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.586557][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.625219][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.702167][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.775319][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.775344][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.788173][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.788199][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.794506][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.836422][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.836970][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.837160][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.837466][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.837669][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:39 executed programs: 0 [ 39.259964][ T4697] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.261535][ T4697] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.262830][ T4697] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.263935][ T4697] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.264172][ T4697] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.395416][ T4789] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.395495][ T4789] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.395606][ T4789] bridge_slave_0: entered allmulticast mode [ 39.396044][ T4789] bridge_slave_0: entered promiscuous mode [ 39.396864][ T4789] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.396910][ T4789] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.396961][ T4789] bridge_slave_1: entered allmulticast mode [ 39.397359][ T4789] bridge_slave_1: entered promiscuous mode [ 39.405796][ T4789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.406704][ T4789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.413768][ T4789] team0: Port device team_slave_0 added [ 39.414619][ T4789] team0: Port device team_slave_1 added [ 39.420886][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.420907][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.420922][ T4789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.421485][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.421492][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.421505][ T4789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.432753][ T4789] hsr_slave_0: entered promiscuous mode [ 39.433123][ T4789] hsr_slave_1: entered promiscuous mode [ 39.433347][ T4789] debugfs: 'hsr0' already exists in 'hsr' [ 39.433385][ T4789] Cannot create hsr debugfs directory [ 41.289497][ T4697] Bluetooth: hci0: command tx timeout [ 41.969084][ T39] bridge_slave_1: left allmulticast mode [ 41.969137][ T39] bridge_slave_1: left promiscuous mode [ 41.969592][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.972666][ T39] bridge_slave_0: left allmulticast mode [ 41.972691][ T39] bridge_slave_0: left promiscuous mode [ 41.972774][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.143401][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.180387][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.190061][ T39] bond0 (unregistering): Released all slaves [ 42.250718][ T39] hsr_slave_0: left promiscuous mode [ 42.252065][ T39] hsr_slave_1: left promiscuous mode [ 42.253520][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.254751][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.256485][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.257866][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.263706][ T39] veth1_macvtap: left promiscuous mode [ 42.264743][ T39] veth0_macvtap: left promiscuous mode [ 42.265856][ T39] veth1_vlan: left promiscuous mode [ 42.266855][ T39] veth0_vlan: left promiscuous mode [ 42.364818][ T39] team0 (unregistering): Port device team_slave_1 removed [ 42.368683][ T39] team0 (unregistering): Port device team_slave_0 removed [ 42.415729][ T4357] 8021q: adding VLAN 0 to HW filter on device eth0 [ 42.677561][ T4789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.680661][ T4789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.681255][ T4789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.682811][ T4789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.683094][ T4789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.685257][ T4789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.687052][ T4789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.689273][ T4789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.715470][ T4789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.726729][ T4789] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.733059][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.733125][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.736922][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.736976][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.967659][ T4789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.987167][ T4789] veth0_vlan: entered promiscuous mode [ 42.993860][ T4789] veth1_vlan: entered promiscuous mode [ 43.005870][ T4789] veth0_macvtap: entered promiscuous mode [ 43.007726][ T4789] veth1_macvtap: entered promiscuous mode [ 43.011390][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.012324][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.017519][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.017576][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.017609][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.017630][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.051732][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.051753][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.057776][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.059502][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.121946][ T4881] [ 43.122374][ T4881] ====================================================== [ 43.123657][ T4881] WARNING: possible circular locking dependency detected [ 43.124892][ T4881] syzkaller #0 Not tainted [ 43.125626][ T4881] ------------------------------------------------------ [ 43.126788][ T4881] syz.0.17/4881 is trying to acquire lock: [ 43.127802][ T4881] ffff0000c1919210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x94/0xdc [ 43.129587][ T4881] [ 43.129587][ T4881] but task is already holding lock: [ 43.130734][ T4881] ffff0000c7c49c38 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 43.132673][ T4881] [ 43.132673][ T4881] which lock already depends on the new lock. [ 43.132673][ T4881] [ 43.134493][ T4881] [ 43.134493][ T4881] the existing dependency chain (in reverse order) is: [ 43.136069][ T4881] [ 43.136069][ T4881] -> #2 (&q->q_usage_counter(io)#20){++++}-{0:0}: [ 43.137604][ T4881] blk_alloc_queue+0x47c/0x57c [ 43.138555][ T4881] blk_mq_alloc_queue+0x148/0x294 [ 43.139424][ T4881] __blk_mq_alloc_disk+0x38/0x10c [ 43.140355][ T4881] loop_add+0x34c/0x8b8 [ 43.141058][ T4881] loop_init+0xe8/0x10c [ 43.141841][ T4881] do_one_initcall+0x274/0xc20 [ 43.142781][ T4881] do_initcall_level+0x128/0x1c4 [ 43.143699][ T4881] do_initcalls+0x70/0xd0 [ 43.144512][ T4881] do_basic_setup+0x7c/0x90 [ 43.145342][ T4881] kernel_init_freeable+0x268/0x3a8 [ 43.146315][ T4881] kernel_init+0x24/0x1dc [ 43.147118][ T4881] ret_from_fork+0x10/0x20 [ 43.147946][ T4881] [ 43.147946][ T4881] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 43.149179][ T4881] fs_reclaim_acquire+0x90/0x110 [ 43.150173][ T4881] kmem_cache_alloc_noprof+0x58/0x610 [ 43.151136][ T4881] __kernfs_iattrs+0xd8/0x2d8 [ 43.151975][ T4881] __kernfs_setattr+0x4c/0x2c4 [ 43.152817][ T4881] kernfs_iop_setattr+0xc4/0x11c [ 43.153693][ T4881] notify_change+0x984/0xbd8 [ 43.154525][ T4881] do_truncate+0x1a8/0x22c [ 43.155320][ T4881] path_openat+0x23a4/0x2a6c [ 43.156176][ T4881] do_file_open+0x1c4/0x2e4 [ 43.157021][ T4881] do_sys_openat2+0x114/0x1e8 [ 43.157875][ T4881] do_sys_open+0xac/0xdc [ 43.158638][ T4881] __arm64_sys_openat+0x9c/0xb8 [ 43.159552][ T4881] invoke_syscall+0x98/0x244 [ 43.160438][ T4881] el0_svc_common+0xe8/0x23c [ 43.161281][ T4881] do_el0_svc+0x48/0x58 [ 43.162068][ T4881] el0_svc+0x64/0x260 [ 43.162785][ T4881] el0t_64_sync_handler+0x48/0x148 [ 43.163714][ T4881] el0t_64_sync+0x198/0x19c [ 43.164532][ T4881] [ 43.164532][ T4881] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 43.165847][ T4881] __lock_acquire+0x1780/0x2f44 [ 43.166746][ T4881] lock_acquire+0x140/0x368 [ 43.167561][ T4881] down_read+0x58/0x2bc [ 43.168294][ T4881] kernfs_iop_getattr+0x94/0xdc [ 43.169194][ T4881] vfs_getattr_nosec+0x254/0x38c [ 43.170109][ T4881] vfs_getattr+0x60/0x88 [ 43.170920][ T4881] loop_assign_backing_file+0x200/0x3cc [ 43.171949][ T4881] lo_ioctl+0x1158/0x1684 [ 43.172736][ T4881] blkdev_ioctl+0x574/0x904 [ 43.173564][ T4881] __arm64_sys_ioctl+0x14c/0x1c4 [ 43.174477][ T4881] invoke_syscall+0x98/0x244 [ 43.175352][ T4881] el0_svc_common+0xe8/0x23c [ 43.176255][ T4881] do_el0_svc+0x48/0x58 [ 43.177036][ T4881] el0_svc+0x64/0x260 [ 43.177820][ T4881] el0t_64_sync_handler+0x48/0x148 [ 43.178788][ T4881] el0t_64_sync+0x198/0x19c [ 43.179595][ T4881] [ 43.179595][ T4881] other info that might help us debug this: [ 43.179595][ T4881] [ 43.181282][ T4881] Chain exists of: [ 43.181282][ T4881] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#20 [ 43.181282][ T4881] [ 43.183681][ T4881] Possible unsafe locking scenario: [ 43.183681][ T4881] [ 43.184842][ T4881] CPU0 CPU1 [ 43.185667][ T4881] ---- ---- [ 43.186483][ T4881] lock(&q->q_usage_counter(io)#20); [ 43.187308][ T4881] lock(fs_reclaim); [ 43.188302][ T4881] lock(&q->q_usage_counter(io)#20); [ 43.189571][ T4881] rlock(&root->kernfs_iattr_rwsem); [ 43.190493][ T4881] [ 43.190493][ T4881] *** DEADLOCK *** [ 43.190493][ T4881] [ 43.191847][ T4881] 3 locks held by syz.0.17/4881: [ 43.192644][ T4881] #0: ffff0000c7cdf430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x64/0xbc [ 43.194116][ T4881] #1: ffff0000c7c49c38 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 43.196046][ T4881] #2: ffff0000c7c49c70 (&q->q_usage_counter(queue)#4){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 43.197977][ T4881] [ 43.197977][ T4881] stack backtrace: [ 43.198923][ T4881] CPU: 1 UID: 0 PID: 4881 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 43.200323][ T4881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 43.202101][ T4881] Call trace: [ 43.202596][ T4881] show_stack+0x2c/0x3c (C) [ 43.203365][ T4881] __dump_stack+0x30/0x40 [ 43.204117][ T4881] dump_stack_lvl+0xd8/0x12c [ 43.204916][ T4881] dump_stack+0x1c/0x28 [ 43.205658][ T4881] print_circular_bug+0x328/0x330 [ 43.206539][ T4881] check_noncircular+0x158/0x174 [ 43.207402][ T4881] __lock_acquire+0x1780/0x2f44 [ 43.208271][ T4881] lock_acquire+0x140/0x368 [ 43.209036][ T4881] down_read+0x58/0x2bc [ 43.209713][ T4881] kernfs_iop_getattr+0x94/0xdc [ 43.210495][ T4881] vfs_getattr_nosec+0x254/0x38c [ 43.211321][ T4881] vfs_getattr+0x60/0x88 [ 43.212071][ T4881] loop_assign_backing_file+0x200/0x3cc [ 43.213057][ T4881] lo_ioctl+0x1158/0x1684 [ 43.213791][ T4881] blkdev_ioctl+0x574/0x904 [ 43.214592][ T4881] __arm64_sys_ioctl+0x14c/0x1c4 [ 43.215483][ T4881] invoke_syscall+0x98/0x244 [ 43.216256][ T4881] el0_svc_common+0xe8/0x23c [ 43.216999][ T4881] do_el0_svc+0x48/0x58 [ 43.217700][ T4881] el0_svc+0x64/0x260 [ 43.218388][ T4881] el0t_64_sync_handler+0x48/0x148 [ 43.219306][ T4881] el0t_64_sync+0x198/0x19c