Warning: Permanently added '10.128.0.110' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://35623 [ 31.744883][ T4721] cgroup: Unknown subsys name 'net' [ 31.884772][ T4721] cgroup: Unknown subsys name 'cpuset' [ 31.886757][ T4721] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.072583][ T4721] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 36.576303][ T4732] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.699073][ T4744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.700511][ T4744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.702125][ T4744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.704167][ T4744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.705696][ T4744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.808826][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.810616][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.818687][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.818713][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.845283][ T4787] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.845569][ T4787] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.845631][ T4787] bridge_slave_0: entered allmulticast mode [ 37.846073][ T4787] bridge_slave_0: entered promiscuous mode [ 37.848137][ T4787] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.848185][ T4787] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.848235][ T4787] bridge_slave_1: entered allmulticast mode [ 37.848641][ T4787] bridge_slave_1: entered promiscuous mode [ 37.855507][ T4787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.856358][ T4787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.862696][ T4787] team0: Port device team_slave_0 added [ 37.864883][ T4787] team0: Port device team_slave_1 added [ 37.870825][ T4787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.870851][ T4787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.870862][ T4787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.871570][ T4787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.871577][ T4787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.871591][ T4787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.881107][ T4787] hsr_slave_0: entered promiscuous mode [ 37.881436][ T4787] hsr_slave_1: entered promiscuous mode [ 37.932563][ T4787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.935557][ T4787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.935889][ T4787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.937916][ T4787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.938598][ T4787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.940233][ T4787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.940617][ T4787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.942493][ T4787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.951598][ T4787] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.951647][ T4787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.951794][ T4787] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.951829][ T4787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.969423][ T4787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.972789][ T4787] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.976287][ T3020] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.982361][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.982420][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.073230][ T4787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.084759][ T4787] veth0_vlan: entered promiscuous mode [ 38.088301][ T4787] veth1_vlan: entered promiscuous mode [ 38.096198][ T4787] veth0_macvtap: entered promiscuous mode [ 38.097294][ T4787] veth1_macvtap: entered promiscuous mode [ 38.103182][ T4787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.105015][ T4787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.106663][ T1192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.106784][ T1192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.106809][ T1192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.106889][ T1192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.188265][ T3020] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.228074][ T3020] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.344564][ T3020] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:38 executed programs: 0 [ 38.403921][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.405590][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.407163][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.408936][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.410533][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.420036][ T3020] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.543958][ T4830] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.544041][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.544093][ T4830] bridge_slave_0: entered allmulticast mode [ 38.544530][ T4830] bridge_slave_0: entered promiscuous mode [ 38.545752][ T4830] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.545803][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.545849][ T4830] bridge_slave_1: entered allmulticast mode [ 38.546315][ T4830] bridge_slave_1: entered promiscuous mode [ 38.553880][ T4830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.554882][ T4830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.561614][ T4830] team0: Port device team_slave_0 added [ 38.562706][ T4830] team0: Port device team_slave_1 added [ 38.568550][ T4830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.568569][ T4830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.568584][ T4830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.569126][ T4830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.569133][ T4830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.569147][ T4830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.583012][ T4830] hsr_slave_0: entered promiscuous mode [ 38.584243][ T4830] hsr_slave_1: entered promiscuous mode [ 38.584538][ T4830] debugfs: 'hsr0' already exists in 'hsr' [ 38.584582][ T4830] Cannot create hsr debugfs directory [ 40.473517][ T50] Bluetooth: hci0: command tx timeout [ 41.574666][ T3020] bridge_slave_1: left allmulticast mode [ 41.574703][ T3020] bridge_slave_1: left promiscuous mode [ 41.574975][ T3020] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.580128][ T3020] bridge_slave_0: left allmulticast mode [ 41.580156][ T3020] bridge_slave_0: left promiscuous mode [ 41.580227][ T3020] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.638994][ T3020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.674745][ T3020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.685573][ T3020] bond0 (unregistering): Released all slaves [ 41.703632][ T3020] hsr_slave_0: left promiscuous mode [ 41.703920][ T3020] hsr_slave_1: left promiscuous mode [ 41.704159][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.704182][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.704547][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.704563][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.707604][ T3020] veth1_macvtap: left promiscuous mode [ 41.707641][ T3020] veth0_macvtap: left promiscuous mode [ 41.707719][ T3020] veth1_vlan: left promiscuous mode [ 41.707760][ T3020] veth0_vlan: left promiscuous mode [ 41.809595][ T3020] team0 (unregistering): Port device team_slave_1 removed [ 41.815002][ T3020] team0 (unregistering): Port device team_slave_0 removed [ 41.871181][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 42.164969][ T4830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.169058][ T4830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.171037][ T4830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.174116][ T4830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.177361][ T4830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.180515][ T4830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.189630][ T4830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.196582][ T4830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.220371][ T4830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.228935][ T4830] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.264667][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.264713][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.268147][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.268185][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.367716][ T4830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.381538][ T4830] veth0_vlan: entered promiscuous mode [ 42.383218][ T4830] veth1_vlan: entered promiscuous mode [ 42.390763][ T4830] veth0_macvtap: entered promiscuous mode [ 42.391987][ T4830] veth1_macvtap: entered promiscuous mode [ 42.396468][ T4830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.397569][ T4830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.401517][ T1192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.403215][ T1192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.406136][ T1192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.406170][ T1192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.425456][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.425482][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.434843][ T1192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.434871][ T1192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.553745][ T50] Bluetooth: hci0: command ** replaying previous printk message ** [ 42.553745][ T50] Bluetooth: hci0: command tx timeout [ 42.554625][ T4923] [ 42.556487][ T4923] ====================================================== [ 42.557567][ T4923] WARNING: possible circular locking dependency detected [ 42.558590][ T4923] syzkaller #0 Not tainted [ 42.559260][ T4923] ------------------------------------------------------ [ 42.560381][ T4923] syz.0.17/4923 is trying to acquire lock: [ 42.561321][ T4923] ffff0000c1919210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x98/0xe0 [ 42.562991][ T4923] [ 42.562991][ T4923] but task is already holding lock: [ 42.564212][ T4923] ffff0000c6fb89a8 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 42.566119][ T4923] [ 42.566119][ T4923] which lock already depends on the new lock. [ 42.566119][ T4923] [ 42.567921][ T4923] [ 42.567921][ T4923] the existing dependency chain (in reverse order) is: [ 42.569420][ T4923] [ 42.569420][ T4923] -> #2 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 42.570872][ T4923] blk_alloc_queue+0x488/0x590 [ 42.571739][ T4923] blk_mq_alloc_queue+0x148/0x284 [ 42.572633][ T4923] __blk_mq_alloc_disk+0x38/0x10c [ 42.573565][ T4923] loop_add+0x358/0x8e4 [ 42.574335][ T4923] loop_init+0xe8/0x10c [ 42.575132][ T4923] do_one_initcall+0x274/0xc38 [ 42.576011][ T4923] do_initcall_level+0x12c/0x1c4 [ 42.576889][ T4923] do_initcalls+0x70/0xd0 [ 42.577676][ T4923] do_basic_setup+0x7c/0x90 [ 42.578563][ T4923] kernel_init_freeable+0x268/0x3a8 [ 42.579495][ T4923] kernel_init+0x24/0x1dc [ 42.580377][ T4923] ret_from_fork+0x10/0x20 [ 42.581176][ T4923] [ 42.581176][ T4923] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 42.582375][ T4923] fs_reclaim_acquire+0x90/0x110 [ 42.583247][ T4923] kmem_cache_alloc_noprof+0x60/0x5d8 [ 42.584141][ T4923] __kernfs_iattrs+0xd8/0x310 [ 42.585062][ T4923] __kernfs_setattr+0x48/0x2ac [ 42.585881][ T4923] kernfs_iop_setattr+0xc4/0x11c [ 42.586756][ T4923] notify_change+0x928/0xb7c [ 42.587576][ T4923] do_truncate+0x1a8/0x22c [ 42.588374][ T4923] path_openat+0x2368/0x2a60 [ 42.589147][ T4923] do_file_open+0x1c8/0x2e8 [ 42.590005][ T4923] do_sys_openat2+0x114/0x1e8 [ 42.590791][ T4923] do_sys_open+0xb0/0xe0 [ 42.591620][ T4923] __arm64_sys_openat+0xa0/0xbc [ 42.592448][ T4923] invoke_syscall+0x98/0x244 [ 42.593290][ T4923] el0_svc_common+0xec/0x23c [ 42.594104][ T4923] do_el0_svc+0x4c/0x5c [ 42.594857][ T4923] el0_svc+0x64/0x260 [ 42.595594][ T4923] el0t_64_sync_handler+0x48/0x148 [ 42.596511][ T4923] el0t_64_sync+0x198/0x19c [ 42.597361][ T4923] [ 42.597361][ T4923] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 42.598828][ T4923] __lock_acquire+0x17c0/0x2ebc [ 42.599726][ T4923] lock_acquire+0x140/0x364 [ 42.600535][ T4923] down_read+0x58/0x2bc [ 42.601349][ T4923] kernfs_iop_getattr+0x98/0xe0 [ 42.602240][ T4923] vfs_getattr_nosec+0x250/0x388 [ 42.603128][ T4923] vfs_getattr+0x60/0x88 [ 42.603920][ T4923] loop_assign_backing_file+0x200/0x3c0 [ 42.604924][ T4923] lo_ioctl+0x1160/0x167c [ 42.605647][ T4923] blkdev_ioctl+0x574/0x904 [ 42.606669][ T4923] __arm64_sys_ioctl+0x14c/0x1c4 [ 42.607595][ T4923] invoke_syscall+0x98/0x244 [ 42.608429][ T4923] el0_svc_common+0xec/0x23c [ 42.609346][ T4923] do_el0_svc+0x4c/0x5c [ 42.610106][ T4923] el0_svc+0x64/0x260 [ 42.610860][ T4923] el0t_64_sync_handler+0x48/0x148 [ 42.611875][ T4923] el0t_64_sync+0x198/0x19c [ 42.612709][ T4923] [ 42.612709][ T4923] other info that might help us debug this: [ 42.612709][ T4923] [ 42.614503][ T4923] Chain exists of: [ 42.614503][ T4923] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#22 [ 42.614503][ T4923] [ 42.617068][ T4923] Possible unsafe locking scenario: [ 42.617068][ T4923] [ 42.618269][ T4923] CPU0 CPU1 [ 42.619170][ T4923] ---- ---- [ 42.620001][ T4923] lock(&q->q_usage_counter(io)#22); [ 42.620898][ T4923] lock(fs_reclaim); [ 42.621965][ T4923] lock(&q->q_usage_counter(io)#22); [ 42.623251][ T4923] rlock(&root->kernfs_iattr_rwsem); [ 42.624192][ T4923] [ 42.624192][ T4923] *** DEADLOCK *** [ 42.624192][ T4923] [ 42.625576][ T4923] 3 locks held by syz.0.17/4923: [ 42.626393][ T4923] #0: ffff0000c712e430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x64/0xbc [ 42.628094][ T4923] #1: ffff0000c6fb89a8 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 42.630043][ T4923] #2: ffff0000c6fb89e0 (&q->q_usage_counter(queue)#6){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 42.632107][ T4923] [ 42.632107][ T4923] stack backtrace: [ 42.633117][ T4923] CPU: 1 UID: 0 PID: 4923 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 42.634516][ T4923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 42.636189][ T4923] Call trace: [ 42.636681][ T4923] show_stack+0x2c/0x3c (C) [ 42.637407][ T4923] __dump_stack+0x30/0x40 [ 42.638120][ T4923] dump_stack_lvl+0xd8/0x12c [ 42.638973][ T4923] dump_stack+0x1c/0x28 [ 42.639675][ T4923] print_circular_bug+0x328/0x330 [ 42.640485][ T4923] check_noncircular+0x158/0x174 [ 42.641377][ T4923] __lock_acquire+0x17c0/0x2ebc [ 42.642185][ T4923] lock_acquire+0x140/0x364 [ 42.642923][ T4923] down_read+0x58/0x2bc [ 42.643660][ T4923] kernfs_iop_getattr+0x98/0xe0 [ 42.644475][ T4923] vfs_getattr_nosec+0x250/0x388 [ 42.645303][ T4923] vfs_getattr+0x60/0x88 [ 42.646028][ T4923] loop_assign_backing_file+0x200/0x3c0 [ 42.646896][ T4923] lo_ioctl+0x1160/0x167c [ 42.647646][ T4923] blkdev_ioctl+0x574/0x904 [ 42.648381][ T4923] __arm64_sys_ioctl+0x14c/0x1c4 [ 42.649168][ T4923] invoke_syscall+0x98/0x244 [ 42.650004][ T4923] el0_svc_common+0xec/0x23c [ 42.650769][ T4923] do_el0_svc+0x4c/0x5c [ 42.651476][ T4923] el0_svc+0x64/0x260 [ 42.652163][ T4923] el0t_64_sync_handler+0x48/0x148 [ 42.653026][ T4923] el0t_64_sync+0x198/0x19c