Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://35355 [ 31.620324][ T4715] cgroup: Unknown subsys name 'net' [ 31.740376][ T4715] cgroup: Unknown subsys name 'cpuset' [ 31.742418][ T4715] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.910472][ T4715] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.181756][ T4723] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.355529][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.355754][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.355815][ T4727] bridge_slave_0: entered allmulticast mode [ 34.356270][ T4727] bridge_slave_0: entered promiscuous mode [ 34.357362][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.357416][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.357461][ T4727] bridge_slave_1: entered allmulticast mode [ 34.357844][ T4727] bridge_slave_1: entered promiscuous mode [ 34.365480][ T4727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.366343][ T4727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.373357][ T4727] team0: Port device team_slave_0 added [ 34.374036][ T4727] team0: Port device team_slave_1 added [ 34.380009][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.380034][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.380049][ T4727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.380713][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.380721][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.380736][ T4727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.390486][ T4727] hsr_slave_0: entered promiscuous mode [ 34.390774][ T4727] hsr_slave_1: entered promiscuous mode [ 34.435943][ T4727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.439113][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.439645][ T4727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.441336][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.441686][ T4727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.443582][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.444087][ T4727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.445791][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.454517][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.454565][ T4727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.454715][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.454752][ T4727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.472009][ T4727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.476109][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.477407][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.483890][ T4727] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.485982][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.486047][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.487919][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.487942][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.498321][ T4727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.586145][ T4727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.597396][ T4727] veth0_vlan: entered promiscuous mode [ 34.599448][ T4727] veth1_vlan: entered promiscuous mode [ 34.606421][ T4727] veth0_macvtap: entered promiscuous mode [ 34.607579][ T4727] veth1_macvtap: entered promiscuous mode [ 34.612082][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.613601][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.616051][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.616237][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.616280][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.616306][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.676665][ T4766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.677148][ T4766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.677307][ T4766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.677621][ T4766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.677817][ T4766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.705859][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.789529][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.857478][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.922841][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.172474][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.172502][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.181753][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.181777][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:00:35 executed programs: 0 [ 35.719228][ T4766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.719560][ T4766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.719720][ T4766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.720012][ T4766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.720222][ T4766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.847931][ T4818] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.848009][ T4818] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.848072][ T4818] bridge_slave_0: entered allmulticast mode [ 35.848503][ T4818] bridge_slave_0: entered promiscuous mode [ 35.850184][ T4818] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.850241][ T4818] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.850301][ T4818] bridge_slave_1: entered allmulticast mode [ 35.850709][ T4818] bridge_slave_1: entered promiscuous mode [ 35.860189][ T4818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.861295][ T4818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.867585][ T4818] team0: Port device team_slave_0 added [ 35.868908][ T4818] team0: Port device team_slave_1 added [ 35.875597][ T4818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.875623][ T4818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.875637][ T4818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.876159][ T4818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.876166][ T4818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.876179][ T4818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.886783][ T4818] hsr_slave_0: entered promiscuous mode [ 35.887155][ T4818] hsr_slave_1: entered promiscuous mode [ 35.887390][ T4818] debugfs: 'hsr0' already exists in 'hsr' [ 35.887428][ T4818] Cannot create hsr debugfs directory [ 37.769055][ T50] Bluetooth: hci0: command tx timeout [ 37.868858][ T39] bridge_slave_1: left allmulticast mode [ 37.868906][ T39] bridge_slave_1: left promiscuous mode [ 37.869292][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.872374][ T39] bridge_slave_0: left allmulticast mode [ 37.872399][ T39] bridge_slave_0: left promiscuous mode [ 37.872475][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.995123][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.030030][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.040388][ T39] bond0 (unregistering): Released all slaves [ 38.103221][ T39] hsr_slave_0: left promiscuous mode [ 38.103560][ T39] hsr_slave_1: left promiscuous mode [ 38.104059][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.104086][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.104792][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.104819][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.109049][ T39] veth1_macvtap: left promiscuous mode [ 38.109074][ T39] veth0_macvtap: left promiscuous mode [ 38.109108][ T39] veth1_vlan: left promiscuous mode [ 38.109148][ T39] veth0_vlan: left promiscuous mode [ 38.211904][ T39] team0 (unregistering): Port device team_slave_1 removed [ 38.216371][ T39] team0 (unregistering): Port device team_slave_0 removed [ 38.268480][ T4394] 8021q: adding VLAN 0 to HW filter on device eth0 [ 38.525371][ T4818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.529782][ T4818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.533902][ T4818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.536059][ T4818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.537609][ T4818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.540896][ T4818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.542465][ T4818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.544396][ T4818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.779566][ T4818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.784722][ T4818] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.793968][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.794013][ T1233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.794874][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.794894][ T1233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.924115][ T4818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.936499][ T4818] veth0_vlan: entered promiscuous mode [ 38.938226][ T4818] veth1_vlan: entered promiscuous mode [ 38.946062][ T4818] veth0_macvtap: entered promiscuous mode [ 38.947374][ T4818] veth1_macvtap: entered promiscuous mode [ 39.015193][ T4818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.018648][ T4818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.020552][ T1234] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.020733][ T1234] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.020827][ T1234] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.020849][ T1234] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.042487][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.044413][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.050668][ T1233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.050693][ T1233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.087476][ T4911] loop0: detected capacity change from 0 to 512 [ 39.115338][ T4911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.130757][ T4911] [ 39.131112][ T4911] ====================================================== [ 39.132229][ T4911] WARNING: possible circular locking dependency detected [ 39.133347][ T4911] syzkaller #0 Not tainted [ 39.134089][ T4911] ------------------------------------------------------ [ 39.135195][ T4911] syz.0.17/4911 is trying to acquire lock: [ 39.136083][ T4911] ffff0000d8394410 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 39.137473][ T4911] [ 39.137473][ T4911] but task is already holding lock: [ 39.138632][ T4911] ffff0000f059a028 (&ovl_i_lock_key[depth]){+.+.}-{4:4}, at: ovl_nlink_start+0xc8/0x350 [ 39.140194][ T4911] [ 39.140194][ T4911] which lock already depends on the new lock. [ 39.140194][ T4911] [ 39.141867][ T4911] [ 39.141867][ T4911] the existing dependency chain (in reverse order) is: [ 39.143279][ T4911] [ 39.143279][ T4911] -> #3 (&ovl_i_lock_key[depth]){+.+.}-{4:4}: [ 39.144674][ T4911] __mutex_lock+0x164/0xed0 [ 39.145514][ T4911] mutex_lock_interruptible_nested+0x24/0x30 [ 39.146592][ T4911] ovl_nlink_start+0xc8/0x350 [ 39.147402][ T4911] ovl_rename+0x3b0/0xf80 [ 39.148188][ T4911] vfs_rename+0xa78/0xd48 [ 39.148967][ T4911] filename_renameat2+0x660/0x72c [ 39.149871][ T4911] __arm64_sys_renameat2+0xec/0x11c [ 39.150802][ T4911] invoke_syscall+0x98/0x244 [ 39.151623][ T4911] el0_svc_common+0xec/0x23c [ 39.152482][ T4911] do_el0_svc+0x4c/0x5c [ 39.153272][ T4911] el0_svc+0x64/0x260 [ 39.154049][ T4911] el0t_64_sync_handler+0x48/0x148 [ 39.154989][ T4911] el0t_64_sync+0x198/0x19c [ 39.155763][ T4911] [ 39.155763][ T4911] -> #2 (&ovl_i_mutex_key[depth]/4){+.+.}-{4:4}: [ 39.157123][ T4911] down_write_nested+0x58/0xcc [ 39.157994][ T4911] lock_two_nondirectories+0xe8/0x148 [ 39.159022][ T4911] vfs_rename+0x600/0xd48 [ 39.159749][ T4911] filename_renameat2+0x660/0x72c [ 39.160684][ T4911] __arm64_sys_renameat2+0xec/0x11c [ 39.161562][ T4911] invoke_syscall+0x98/0x244 [ 39.162417][ T4911] el0_svc_common+0xec/0x23c [ 39.163235][ T4911] do_el0_svc+0x4c/0x5c [ 39.163986][ T4911] el0_svc+0x64/0x260 [ 39.164739][ T4911] el0t_64_sync_handler+0x48/0x148 [ 39.165695][ T4911] el0t_64_sync+0x198/0x19c [ 39.166532][ T4911] [ 39.166532][ T4911] -> #1 (&ovl_i_mutex_key[depth]){+.+.}-{4:4}: [ 39.167915][ T4911] down_write+0x50/0xc0 [ 39.168712][ T4911] lock_two_nondirectories+0xc4/0x148 [ 39.169680][ T4911] ext4_move_extents+0x194/0x3324 [ 39.170604][ T4911] ext4_ioctl+0x2a10/0x4280 [ 39.171419][ T4911] __arm64_sys_ioctl+0x14c/0x1c4 [ 39.172312][ T4911] invoke_syscall+0x98/0x244 [ 39.173155][ T4911] el0_svc_common+0xec/0x23c [ 39.173967][ T4911] do_el0_svc+0x4c/0x5c [ 39.174697][ T4911] el0_svc+0x64/0x260 [ 39.175471][ T4911] el0t_64_sync_handler+0x48/0x148 [ 39.176316][ T4911] el0t_64_sync+0x198/0x19c [ 39.177127][ T4911] [ 39.177127][ T4911] -> #0 (sb_writers#3){.+.+}-{0:0}: [ 39.178401][ T4911] __lock_acquire+0x17c0/0x2ebc [ 39.179348][ T4911] lock_acquire+0x140/0x364 [ 39.180174][ T4911] sb_start_write+0x5c/0x294 [ 39.181062][ T4911] mnt_want_write+0x44/0x9c [ 39.181883][ T4911] ovl_nlink_start+0x154/0x350 [ 39.182710][ T4911] ovl_rename+0x3b0/0xf80 [ 39.183503][ T4911] vfs_rename+0xa78/0xd48 [ 39.184326][ T4911] filename_renameat2+0x660/0x72c [ 39.185187][ T4911] __arm64_sys_renameat2+0xec/0x11c [ 39.186103][ T4911] invoke_syscall+0x98/0x244 [ 39.186966][ T4911] el0_svc_common+0xec/0x23c [ 39.187800][ T4911] do_el0_svc+0x4c/0x5c [ 39.188577][ T4911] el0_svc+0x64/0x260 [ 39.189305][ T4911] el0t_64_sync_handler+0x48/0x148 [ 39.190168][ T4911] el0t_64_sync+0x198/0x19c [ 39.190990][ T4911] [ 39.190990][ T4911] other info that might help us debug this: [ 39.190990][ T4911] [ 39.192674][ T4911] Chain exists of: [ 39.192674][ T4911] sb_writers#3 --> &ovl_i_mutex_key[depth]/4 --> &ovl_i_lock_key[depth] [ 39.192674][ T4911] [ 39.194968][ T4911] Possible unsafe locking scenario: [ 39.194968][ T4911] [ 39.196160][ T4911] CPU0 CPU1 [ 39.197036][ T4911] ---- ---- [ 39.197979][ T4911] lock(&ovl_i_lock_key[depth]); [ 39.198843][ T4911] lock(&ovl_i_mutex_key[depth]/4); [ 39.200127][ T4911] lock(&ovl_i_lock_key[depth]); [ 39.201392][ T4911] rlock(sb_writers#3); [ 39.202120][ T4911] [ 39.202120][ T4911] *** DEADLOCK *** [ 39.202120][ T4911] [ 39.203412][ T4911] 5 locks held by syz.0.17/4911: [ 39.204249][ T4911] #0: ffff0000ce09c410 (sb_writers#11){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 39.205751][ T4911] #1: ffff0000f059a7a8 (&ovl_i_mutex_dir_key[depth]/1){+.+.}-{4:4}, at: __start_renaming+0x144/0x344 [ 39.207606][ T4911] #2: ffff0000f0599cb8 (&ovl_i_mutex_key[depth]){+.+.}-{4:4}, at: lock_two_nondirectories+0xc4/0x148 [ 39.209450][ T4911] #3: ffff0000f059a230 (&ovl_i_mutex_key[depth]/4){+.+.}-{4:4}, at: lock_two_nondirectories+0xe8/0x148 [ 39.211342][ T4911] #4: ffff0000f059a028 (&ovl_i_lock_key[depth]){+.+.}-{4:4}, at: ovl_nlink_start+0xc8/0x350 [ 39.212914][ T4911] [ 39.212914][ T4911] stack backtrace: [ 39.213852][ T4911] CPU: 0 UID: 0 PID: 4911 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 39.215206][ T4911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 39.216718][ T4911] Call trace: [ 39.217193][ T4911] show_stack+0x2c/0x3c (C) [ 39.217913][ T4911] __dump_stack+0x30/0x40 [ 39.218584][ T4911] dump_stack_lvl+0xd8/0x12c [ 39.219334][ T4911] dump_stack+0x1c/0x28 [ 39.220018][ T4911] print_circular_bug+0x328/0x330 [ 39.220862][ T4911] check_noncircular+0x158/0x174 [ 39.221631][ T4911] __lock_acquire+0x17c0/0x2ebc [ 39.222371][ T4911] lock_acquire+0x140/0x364 [ 39.223090][ T4911] sb_start_write+0x5c/0x294 [ 39.223856][ T4911] mnt_want_write+0x44/0x9c [ 39.224570][ T4911] ovl_nlink_start+0x154/0x350 [ 39.225351][ T4911] ovl_rename+0x3b0/0xf80 [ 39.226039][ T4911] vfs_rename+0xa78/0xd48 [ 39.226804][ T4911] filename_renameat2+0x660/0x72c [ 39.227677][ T4911] __arm64_sys_renameat2+0xec/0x11c [ 39.228534][ T4911] invoke_syscall+0x98/0x244 [ 39.229281][ T4911] el0_svc_common+0xec/0x23c [ 39.230030][ T4911] do_el0_svc+0x4c/0x5c [ 39.230709][ T4911] el0_svc+0x64/0x260 [ 39.231317][ T4911] el0t_64_sync_handler+0x48/0x148 [ 39.232158][ T4911] el0t_64_sync+0x198/0x19c [ 39.237313][ T4818] EXT4-fs error (device loop0): ext4_lookup:1782: inode #11: comm syz-executor: ' ' linked to parent dir [ 39.237546][ T4818] EXT4-fs error (device loop0): ext4_lookup:1782: inode #11: comm syz-executor: ' ' linked to parent dir