Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://45207 [ 31.251229][ T4720] cgroup: Unknown subsys name 'net' [ 31.352712][ T4720] cgroup: Unknown subsys name 'cpuset' [ 31.354726][ T4720] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.549196][ T4720] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.693526][ T4728] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.853146][ T4733] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.853361][ T4733] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.853422][ T4733] bridge_slave_0: entered allmulticast mode [ 34.853873][ T4733] bridge_slave_0: entered promiscuous mode [ 34.855274][ T4733] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.855320][ T4733] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.855364][ T4733] bridge_slave_1: entered allmulticast mode [ 34.855775][ T4733] bridge_slave_1: entered promiscuous mode [ 34.863115][ T4733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.863946][ T4733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.869592][ T4733] team0: Port device team_slave_0 added [ 34.870767][ T4733] team0: Port device team_slave_1 added [ 34.876383][ T4733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.876750][ T4733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.876769][ T4733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.877421][ T4733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.877428][ T4733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.877443][ T4733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.887153][ T4733] hsr_slave_0: entered promiscuous mode [ 34.887451][ T4733] hsr_slave_1: entered promiscuous mode [ 34.930782][ T4733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.933958][ T4733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.934574][ T4733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.936016][ T4733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.936713][ T4733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.938251][ T4733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.938867][ T4733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.940443][ T4733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.949264][ T4733] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.949314][ T4733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.949456][ T4733] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.949484][ T4733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.965205][ T4733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.969226][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.971200][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.975272][ T4733] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.977393][ T1358] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.977486][ T1358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.982103][ T1358] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.982144][ T1358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.993718][ T4733] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.995541][ T4733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.075655][ T4733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.092548][ T4733] veth0_vlan: entered promiscuous mode [ 35.094707][ T4733] veth1_vlan: entered promiscuous mode [ 35.102635][ T4733] veth0_macvtap: entered promiscuous mode [ 35.103749][ T4733] veth1_macvtap: entered promiscuous mode [ 35.107868][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.108982][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.111182][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.111382][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.111400][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.111416][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.216294][ T1358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.283430][ T1358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.342938][ T1358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.402909][ T1358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.428161][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.428189][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.439484][ T1243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.441189][ T1243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.013059][ T4814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.014716][ T4814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.016195][ T4814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.017872][ T4814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.019370][ T4814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:36 executed programs: 0 [ 36.293705][ T4814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.293999][ T4814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.294153][ T4814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.294442][ T4814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.294660][ T4814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.424460][ T4826] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.424538][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.424652][ T4826] bridge_slave_0: entered allmulticast mode [ 36.425095][ T4826] bridge_slave_0: entered promiscuous mode [ 36.425970][ T4826] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.426019][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.426073][ T4826] bridge_slave_1: entered allmulticast mode [ 36.426473][ T4826] bridge_slave_1: entered promiscuous mode [ 36.435153][ T4826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.436268][ T4826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.443674][ T4826] team0: Port device team_slave_0 added [ 36.444491][ T4826] team0: Port device team_slave_1 added [ 36.451621][ T4826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.451646][ T4826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.451661][ T4826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.452443][ T4826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.452450][ T4826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.452463][ T4826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.462194][ T4826] hsr_slave_0: entered promiscuous mode [ 36.462524][ T4826] hsr_slave_1: entered promiscuous mode [ 36.462736][ T4826] debugfs: 'hsr0' already exists in 'hsr' [ 36.462774][ T4826] Cannot create hsr debugfs directory [ 38.350227][ T4741] Bluetooth: hci0: command tx timeout [ 38.355595][ T1358] bridge_slave_1: left allmulticast mode [ 38.355892][ T1358] bridge_slave_1: left promiscuous mode [ 38.356154][ T1358] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.359231][ T1358] bridge_slave_0: left allmulticast mode [ 38.359255][ T1358] bridge_slave_0: left promiscuous mode [ 38.359337][ T1358] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.415605][ T1358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.431954][ T1358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.470746][ T1358] bond0 (unregistering): Released all slaves [ 38.521072][ T1358] hsr_slave_0: left promiscuous mode [ 38.522399][ T1358] hsr_slave_1: left promiscuous mode [ 38.523823][ T1358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.525213][ T1358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.527335][ T1358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.527372][ T1358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.533932][ T1358] veth1_macvtap: left promiscuous mode [ 38.533977][ T1358] veth0_macvtap: left promiscuous mode [ 38.534034][ T1358] veth1_vlan: left promiscuous mode [ 38.534071][ T1358] veth0_vlan: left promiscuous mode [ 38.628679][ T1358] team0 (unregistering): Port device team_slave_1 removed [ 38.632692][ T1358] team0 (unregistering): Port device team_slave_0 removed [ 38.681432][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 38.934795][ T4826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.937204][ T4826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.937623][ T4826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.938500][ T4826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.938859][ T4826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.939767][ T4826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.941708][ T4826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.945138][ T4826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.976152][ T4826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.981986][ T4826] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.984813][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.984860][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.991665][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.991708][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.312730][ T4826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.330152][ T4826] veth0_vlan: entered promiscuous mode [ 39.333443][ T4826] veth1_vlan: entered promiscuous mode [ 39.356669][ T4826] veth0_macvtap: entered promiscuous mode [ 39.361146][ T4826] veth1_macvtap: entered promiscuous mode [ 39.365259][ T4826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.366436][ T4826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.370606][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.370640][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.370666][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.370685][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.407349][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.408818][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.415767][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.417094][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.500799][ T4921] [ 39.501236][ T4921] ====================================================== [ 39.502261][ T4921] WARNING: possible circular locking dependency detected [ 39.503327][ T4921] syzkaller #0 Not tainted [ 39.503996][ T4921] ------------------------------------------------------ [ 39.504975][ T4921] syz.0.17/4921 is trying to acquire lock: [ 39.505824][ T4921] ffff0000c1919210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x98/0xe0 [ 39.507333][ T4921] [ 39.507333][ T4921] but task is already holding lock: [ 39.508472][ T4921] ffff0000c722caa0 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 39.510142][ T4921] [ 39.510142][ T4921] which lock already depends on the new lock. [ 39.510142][ T4921] [ 39.511800][ T4921] [ 39.511800][ T4921] the existing dependency chain (in reverse order) is: [ 39.513217][ T4921] [ 39.513217][ T4921] -> #2 (&q->q_usage_counter(io)#26){++++}-{0:0}: [ 39.514597][ T4921] blk_alloc_queue+0x488/0x590 [ 39.515478][ T4921] blk_mq_alloc_queue+0x148/0x284 [ 39.516368][ T4921] __blk_mq_alloc_disk+0x38/0x10c [ 39.517224][ T4921] loop_add+0x358/0x8e4 [ 39.517987][ T4921] loop_init+0xe8/0x10c [ 39.518753][ T4921] do_one_initcall+0x274/0xc38 [ 39.519609][ T4921] do_initcall_level+0x12c/0x1c4 [ 39.520517][ T4921] do_initcalls+0x70/0xd0 [ 39.521342][ T4921] do_basic_setup+0x7c/0x90 [ 39.522186][ T4921] kernel_init_freeable+0x268/0x3a8 [ 39.523127][ T4921] kernel_init+0x24/0x1dc [ 39.523919][ T4921] ret_from_fork+0x10/0x20 [ 39.524759][ T4921] [ 39.524759][ T4921] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 39.525898][ T4921] fs_reclaim_acquire+0x90/0x110 [ 39.526794][ T4921] kmem_cache_alloc_noprof+0x60/0x5d8 [ 39.527795][ T4921] __kernfs_iattrs+0xd8/0x310 [ 39.528652][ T4921] __kernfs_setattr+0x48/0x2ac [ 39.529467][ T4921] kernfs_iop_setattr+0xc4/0x11c [ 39.530442][ T4921] notify_change+0x928/0xb7c [ 39.531259][ T4921] do_truncate+0x1a8/0x22c [ 39.532076][ T4921] path_openat+0x2368/0x2a60 [ 39.532901][ T4921] do_file_open+0x1c8/0x2e8 [ 39.533633][ T4921] do_sys_openat2+0x114/0x1e8 [ 39.534513][ T4921] do_sys_open+0xb0/0xe0 [ 39.535269][ T4921] __arm64_sys_openat+0xa0/0xbc [ 39.536155][ T4921] invoke_syscall+0x98/0x244 [ 39.537034][ T4921] el0_svc_common+0xec/0x23c [ 39.537866][ T4921] do_el0_svc+0x4c/0x5c [ 39.538612][ T4921] el0_svc+0x64/0x260 [ 39.539351][ T4921] el0t_64_sync_handler+0x48/0x148 [ 39.540316][ T4921] el0t_64_sync+0x198/0x19c [ 39.541101][ T4921] [ 39.541101][ T4921] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 39.542473][ T4921] __lock_acquire+0x17c0/0x2ebc [ 39.543331][ T4921] lock_acquire+0x140/0x364 [ 39.544165][ T4921] down_read+0x58/0x2bc [ 39.544898][ T4921] kernfs_iop_getattr+0x98/0xe0 [ 39.545856][ T4921] vfs_getattr_nosec+0x250/0x388 [ 39.546803][ T4921] vfs_getattr+0x60/0x88 [ 39.547592][ T4921] loop_assign_backing_file+0x200/0x3c0 [ 39.548643][ T4921] lo_ioctl+0x1160/0x167c [ 39.549412][ T4921] blkdev_ioctl+0x574/0x904 [ 39.550224][ T4921] __arm64_sys_ioctl+0x14c/0x1c4 [ 39.551122][ T4921] invoke_syscall+0x98/0x244 [ 39.551889][ T4921] el0_svc_common+0xec/0x23c [ 39.552724][ T4921] do_el0_svc+0x4c/0x5c [ 39.553442][ T4921] el0_svc+0x64/0x260 [ 39.554188][ T4921] el0t_64_sync_handler+0x48/0x148 [ 39.555025][ T4921] el0t_64_sync+0x198/0x19c [ 39.555895][ T4921] [ 39.555895][ T4921] other info that might help us debug this: [ 39.555895][ T4921] [ 39.557584][ T4921] Chain exists of: [ 39.557584][ T4921] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#26 [ 39.557584][ T4921] [ 39.559934][ T4921] Possible unsafe locking scenario: [ 39.559934][ T4921] [ 39.561161][ T4921] CPU0 CPU1 [ 39.562066][ T4921] ---- ---- [ 39.562977][ T4921] lock(&q->q_usage_counter(io)#26); [ 39.563828][ T4921] lock(fs_reclaim); [ 39.564823][ T4921] lock(&q->q_usage_counter(io)#26); [ 39.566111][ T4921] rlock(&root->kernfs_iattr_rwsem); [ 39.566978][ T4921] [ 39.566978][ T4921] *** DEADLOCK *** [ 39.566978][ T4921] [ 39.568307][ T4921] 3 locks held by syz.0.17/4921: [ 39.569136][ T4921] #0: ffff0000c723a430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x64/0xbc [ 39.570733][ T4921] #1: ffff0000c722caa0 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 39.572619][ T4921] #2: ffff0000c722cad8 (&q->q_usage_counter(queue)#10){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 39.574526][ T4921] [ 39.574526][ T4921] stack backtrace: [ 39.575405][ T4921] CPU: 0 UID: 0 PID: 4921 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 39.576829][ T4921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 39.578371][ T4921] Call trace: [ 39.578844][ T4921] show_stack+0x2c/0x3c (C) [ 39.579604][ T4921] __dump_stack+0x30/0x40 [ 39.580305][ T4921] dump_stack_lvl+0xd8/0x12c [ 39.581025][ T4921] dump_stack+0x1c/0x28 [ 39.581685][ T4921] print_circular_bug+0x328/0x330 [ 39.582455][ T4921] check_noncircular+0x158/0x174 [ 39.583251][ T4921] __lock_acquire+0x17c0/0x2ebc [ 39.584038][ T4921] lock_acquire+0x140/0x364 [ 39.584802][ T4921] down_read+0x58/0x2bc [ 39.585487][ T4921] kernfs_iop_getattr+0x98/0xe0 [ 39.586373][ T4921] vfs_getattr_nosec+0x250/0x388 [ 39.587226][ T4921] vfs_getattr+0x60/0x88 [ 39.587954][ T4921] loop_assign_backing_file+0x200/0x3c0 [ 39.588828][ T4921] lo_ioctl+0x1160/0x167c [ 39.589569][ T4921] blkdev_ioctl+0x574/0x904 [ 39.590299][ T4921] __arm64_sys_ioctl+0x14c/0x1c4 [ 39.591128][ T4921] invoke_syscall+0x98/0x244 [ 39.591865][ T4921] el0_svc_common+0xec/0x23c [ 39.592588][ T4921] do_el0_svc+0x4c/0x5c [ 39.593256][ T4921] el0_svc+0x64/0x260 [ 39.593914][ T4921] el0t_64_sync_handler+0x48/0x148 [ 39.594710][ T4921] el0t_64_sync+0x198/0x19c