Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. 1970/01/01 00:00:31 parsed 1 programs [ 32.552449][ T4680] cgroup: Unknown subsys name 'net' [ 32.672506][ T4680] cgroup: Unknown subsys name 'cpuset' [ 32.674687][ T4680] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.824453][ T4680] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 35.694362][ T4688] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.397487][ T4721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.397832][ T4721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.397986][ T4721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.398322][ T4721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.398523][ T4721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.626832][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.627177][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.627249][ T4727] bridge_slave_0: entered allmulticast mode [ 36.627725][ T4727] bridge_slave_0: entered promiscuous mode [ 36.629015][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.629068][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.629116][ T4727] bridge_slave_1: entered allmulticast mode [ 36.629497][ T4727] bridge_slave_1: entered promiscuous mode [ 36.639444][ T4727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.640292][ T4727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.649020][ T4727] team0: Port device team_slave_0 added [ 36.649800][ T4727] team0: Port device team_slave_1 added [ 36.657488][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.657516][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.657647][ T4727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.658493][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.658500][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.658512][ T4727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.669534][ T4727] hsr_slave_0: entered promiscuous mode [ 36.669886][ T4727] hsr_slave_1: entered promiscuous mode [ 36.714102][ T4727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.717537][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.719385][ T4727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.721880][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.723493][ T4727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.726074][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.726465][ T4727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.728621][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.737705][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.737760][ T4727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.737927][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.737956][ T4727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.756922][ T4727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.760968][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.762939][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.767873][ T4727] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.769845][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.770053][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.774672][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.774715][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.875562][ T4727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.888177][ T4727] veth0_vlan: entered promiscuous mode [ 36.890238][ T4727] veth1_vlan: entered promiscuous mode [ 36.896594][ T4727] veth0_macvtap: entered promiscuous mode [ 36.897628][ T4727] veth1_macvtap: entered promiscuous mode [ 36.906910][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.908090][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.910510][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.911958][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.911979][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.911994][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.989663][ T678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.018206][ T678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.080745][ T678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.110802][ T678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.204454][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.204488][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.214541][ T4097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.214576][ T4097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:00:37 executed programs: 0 [ 37.478889][ T4721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.479325][ T4721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.479492][ T4721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.479796][ T4721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.480010][ T4721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.616339][ T4786] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.616424][ T4786] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.616489][ T4786] bridge_slave_0: entered allmulticast mode [ 37.616971][ T4786] bridge_slave_0: entered promiscuous mode [ 37.617842][ T4786] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.617892][ T4786] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.617984][ T4786] bridge_slave_1: entered allmulticast mode [ 37.618408][ T4786] bridge_slave_1: entered promiscuous mode [ 37.626608][ T4786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.627568][ T4786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.634227][ T4786] team0: Port device team_slave_0 added [ 37.634971][ T4786] team0: Port device team_slave_1 added [ 37.644490][ T4786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.644519][ T4786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.644545][ T4786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.645076][ T4786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.645083][ T4786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.645096][ T4786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.654929][ T4786] hsr_slave_0: entered promiscuous mode [ 37.655238][ T4786] hsr_slave_1: entered promiscuous mode [ 37.655459][ T4786] debugfs: 'hsr0' already exists in 'hsr' [ 37.655512][ T4786] Cannot create hsr debugfs directory [ 39.521287][ T50] Bluetooth: hci0: command tx timeout [ 40.510972][ T678] bridge_slave_1: left allmulticast mode [ 40.511021][ T678] bridge_slave_1: left promiscuous mode [ 40.511444][ T678] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.514902][ T678] bridge_slave_0: left allmulticast mode [ 40.514928][ T678] bridge_slave_0: left promiscuous mode [ 40.515010][ T678] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.653635][ T678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.692125][ T678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.711854][ T678] bond0 (unregistering): Released all slaves [ 40.771819][ T678] hsr_slave_0: left promiscuous mode [ 40.772970][ T678] hsr_slave_1: left promiscuous mode [ 40.773253][ T678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.773267][ T678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.773697][ T678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.773708][ T678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.779591][ T678] veth1_macvtap: left promiscuous mode [ 40.779621][ T678] veth0_macvtap: left promiscuous mode [ 40.779656][ T678] veth1_vlan: left promiscuous mode [ 40.779685][ T678] veth0_vlan: left promiscuous mode [ 40.882538][ T678] team0 (unregistering): Port device team_slave_1 removed [ 40.886391][ T678] team0 (unregistering): Port device team_slave_0 removed [ 40.937550][ T4356] 8021q: adding VLAN 0 to HW filter on device eth0 [ 41.177011][ T4786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.179881][ T4786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.184574][ T4786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.189185][ T4786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.189548][ T4786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.191985][ T4786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.193609][ T4786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.202650][ T4786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.228555][ T4786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.235580][ T4786] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.239043][ T4097] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.239097][ T4097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.254844][ T4097] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.254897][ T4097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.260004][ T4786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.262162][ T4786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.473276][ T4786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.488490][ T4786] veth0_vlan: entered promiscuous mode [ 41.491619][ T4786] veth1_vlan: entered promiscuous mode [ 41.527598][ T4786] veth0_macvtap: entered promiscuous mode [ 41.528683][ T4786] veth1_macvtap: entered promiscuous mode [ 41.534276][ T4786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.535303][ T4786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.539071][ T1342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.540766][ T1342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.547375][ T1342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.549101][ T1342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.600865][ T50] Bluetooth: hci0: command tx timeout [ 41.628602][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.628632][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.637068][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.637097][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.732440][ T4876] [ 41.732935][ T4876] ====================================================== [ 41.734134][ T4876] WARNING: possible circular locking dependency detected [ 41.735409][ T4876] syzkaller #0 Not tainted [ 41.736175][ T4876] ------------------------------------------------------ [ 41.737457][ T4876] syz.0.17/4876 is trying to acquire lock: [ 41.738531][ T4876] ffff0000c1919210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x94/0xdc [ 41.740353][ T4876] [ 41.740353][ T4876] but task is already holding lock: [ 41.741747][ T4876] ffff0000c797b810 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 41.743990][ T4876] [ 41.743990][ T4876] which lock already depends on the new lock. [ 41.743990][ T4876] [ 41.746054][ T4876] [ 41.746054][ T4876] the existing dependency chain (in reverse order) is: [ 41.747802][ T4876] [ 41.747802][ T4876] -> #2 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 41.749447][ T4876] blk_alloc_queue+0x47c/0x57c [ 41.750382][ T4876] blk_mq_alloc_queue+0x148/0x294 [ 41.751294][ T4876] __blk_mq_alloc_disk+0x38/0x10c [ 41.752300][ T4876] loop_add+0x34c/0x8b8 [ 41.753226][ T4876] loop_init+0xe8/0x10c [ 41.754087][ T4876] do_one_initcall+0x274/0xc20 [ 41.755077][ T4876] do_initcall_level+0x128/0x1c4 [ 41.756046][ T4876] do_initcalls+0x70/0xd0 [ 41.756911][ T4876] do_basic_setup+0x7c/0x90 [ 41.757790][ T4876] kernel_init_freeable+0x268/0x3a8 [ 41.758805][ T4876] kernel_init+0x24/0x1dc [ 41.759680][ T4876] ret_from_fork+0x10/0x20 [ 41.760552][ T4876] [ 41.760552][ T4876] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 41.761904][ T4876] fs_reclaim_acquire+0x8c/0x118 [ 41.763105][ T4876] kmem_cache_alloc_noprof+0x58/0x558 [ 41.764250][ T4876] __kernfs_iattrs+0xd8/0x2d8 [ 41.765243][ T4876] __kernfs_setattr+0x4c/0x2c4 [ 41.766275][ T4876] kernfs_iop_setattr+0xc4/0x11c [ 41.767345][ T4876] notify_change+0x984/0xbd8 [ 41.768333][ T4876] do_truncate+0x1a8/0x22c [ 41.769321][ T4876] path_openat+0x23a4/0x2a6c [ 41.770319][ T4876] do_file_open+0x1c4/0x2e4 [ 41.771254][ T4876] do_sys_openat2+0x114/0x1e8 [ 41.772203][ T4876] do_sys_open+0xac/0xdc [ 41.773068][ T4876] __arm64_sys_openat+0x9c/0xb8 [ 41.774055][ T4876] invoke_syscall+0x98/0x244 [ 41.775016][ T4876] el0_svc_common+0xe8/0x23c [ 41.776008][ T4876] do_el0_svc+0x48/0x58 [ 41.776879][ T4876] el0_svc+0x60/0x25c [ 41.777750][ T4876] el0t_64_sync_handler+0x48/0x148 [ 41.778851][ T4876] el0t_64_sync+0x198/0x19c [ 41.779803][ T4876] [ 41.779803][ T4876] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 41.781491][ T4876] __lock_acquire+0x1780/0x2f44 [ 41.782565][ T4876] lock_acquire+0x140/0x368 [ 41.783508][ T4876] down_read+0x58/0x2bc [ 41.784405][ T4876] kernfs_iop_getattr+0x94/0xdc [ 41.785366][ T4876] vfs_getattr_nosec+0x254/0x38c [ 41.786485][ T4876] vfs_getattr+0x60/0x88 [ 41.787451][ T4876] loop_assign_backing_file+0x200/0x3cc [ 41.788656][ T4876] lo_ioctl+0x1158/0x1684 [ 41.789604][ T4876] blkdev_ioctl+0x574/0x904 [ 41.790539][ T4876] __arm64_sys_ioctl+0x14c/0x1c4 [ 41.791591][ T4876] invoke_syscall+0x98/0x244 [ 41.792524][ T4876] el0_svc_common+0xe8/0x23c [ 41.793464][ T4876] do_el0_svc+0x48/0x58 [ 41.794360][ T4876] el0_svc+0x60/0x25c [ 41.795184][ T4876] el0t_64_sync_handler+0x48/0x148 [ 41.796242][ T4876] el0t_64_sync+0x198/0x19c [ 41.797215][ T4876] [ 41.797215][ T4876] other info that might help us debug this: [ 41.797215][ T4876] [ 41.799117][ T4876] Chain exists of: [ 41.799117][ T4876] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#22 [ 41.799117][ T4876] [ 41.801845][ T4876] Possible unsafe locking scenario: [ 41.801845][ T4876] [ 41.803212][ T4876] CPU0 CPU1 [ 41.804223][ T4876] ---- ---- [ 41.805198][ T4876] lock(&q->q_usage_counter(io)#22); [ 41.806192][ T4876] lock(fs_reclaim); [ 41.807381][ T4876] lock(&q->q_usage_counter(io)#22); [ 41.808903][ T4876] rlock(&root->kernfs_iattr_rwsem); [ 41.809933][ T4876] [ 41.809933][ T4876] *** DEADLOCK *** [ 41.809933][ T4876] [ 41.811426][ T4876] 3 locks held by syz.0.17/4876: [ 41.812350][ T4876] #0: ffff0000c79d1430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x64/0xbc [ 41.814385][ T4876] #1: ffff0000c797b810 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 41.816706][ T4876] #2: ffff0000c797b848 (&q->q_usage_counter(queue)#6){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 41.818848][ T4876] [ 41.818848][ T4876] stack backtrace: [ 41.819903][ T4876] CPU: 1 UID: 0 PID: 4876 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 41.821451][ T4876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 41.823209][ T4876] Call trace: [ 41.823780][ T4876] show_stack+0x2c/0x3c (C) [ 41.824608][ T4876] __dump_stack+0x30/0x40 [ 41.825431][ T4876] dump_stack_lvl+0xd8/0x12c [ 41.826238][ T4876] dump_stack+0x1c/0x28 [ 41.827007][ T4876] print_circular_bug+0x328/0x330 [ 41.827926][ T4876] check_noncircular+0x158/0x174 [ 41.828893][ T4876] __lock_acquire+0x1780/0x2f44 [ 41.829850][ T4876] lock_acquire+0x140/0x368 [ 41.830728][ T4876] down_read+0x58/0x2bc [ 41.831499][ T4876] kernfs_iop_getattr+0x94/0xdc [ 41.832384][ T4876] vfs_getattr_nosec+0x254/0x38c [ 41.833255][ T4876] vfs_getattr+0x60/0x88 [ 41.834051][ T4876] loop_assign_backing_file+0x200/0x3cc [ 41.835099][ T4876] lo_ioctl+0x1158/0x1684 [ 41.835942][ T4876] blkdev_ioctl+0x574/0x904 [ 41.836766][ T4876] __arm64_sys_ioctl+0x14c/0x1c4 [ 41.837685][ T4876] invoke_syscall+0x98/0x244 [ 41.838546][ T4876] el0_svc_common+0xe8/0x23c [ 41.839412][ T4876] do_el0_svc+0x48/0x58 [ 41.840183][ T4876] el0_svc+0x60/0x25c [ 41.840915][ T4876] el0t_64_sync_handler+0x48/0x148 [ 41.841911][ T4876] el0t_64_sync+0x198/0x19c