no interfaces have a carrier [ 55.583567][ T5515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.611771][ T5515] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. 2025/07/07 01:55:09 ignoring optional flag "sandboxArg"="0" 2025/07/07 01:55:10 parsed 1 programs syzkaller login: [ 87.174289][ T5854] cgroup: Unknown subsys name 'net' [ 87.321088][ T5854] cgroup: Unknown subsys name 'cpuset' [ 87.329725][ T5854] cgroup: Unknown subsys name 'rlimit' [ 88.848117][ T5854] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.288090][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.296169][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.304142][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.316796][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.324924][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.562951][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.883516][ T1229] cfg80211: failed to load regulatory.db [ 94.255456][ T5909] chnl_net:caif_netlink_parms(): no params data found [ 94.439516][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.458422][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.541875][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.549869][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.558110][ T5909] bridge_slave_0: entered allmulticast mode [ 94.565971][ T5909] bridge_slave_0: entered promiscuous mode [ 94.706309][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.727007][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.734491][ T5909] bridge_slave_1: entered allmulticast mode [ 94.742930][ T5909] bridge_slave_1: entered promiscuous mode [ 94.824005][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.829364][ T5909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.842209][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.884092][ T5909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.081993][ T5909] team0: Port device team_slave_0 added [ 95.094643][ T5909] team0: Port device team_slave_1 added [ 95.172192][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.194938][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.222358][ T5909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.240501][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.257486][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.290574][ T5909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.362998][ T5909] hsr_slave_0: entered promiscuous mode [ 95.369539][ T5909] hsr_slave_1: entered promiscuous mode [ 95.511668][ T5909] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.523228][ T5909] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.533595][ T5909] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.542987][ T5909] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.617578][ T5909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.637078][ T5909] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.651532][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.658931][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.674749][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.682381][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.864113][ T5909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.907315][ T5909] veth0_vlan: entered promiscuous mode [ 95.920303][ T5909] veth1_vlan: entered promiscuous mode [ 95.949733][ T5909] veth0_macvtap: entered promiscuous mode [ 95.959953][ T5909] veth1_macvtap: entered promiscuous mode [ 95.976961][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.994478][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.006952][ T5909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.016213][ T5909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.025582][ T5909] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.034638][ T5909] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/07/07 01:55:22 executed programs: 0 [ 96.243835][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.260706][ T5967] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.268719][ T5967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.281526][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.289471][ T5874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.301586][ T5968] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.309775][ T5968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.318442][ T5968] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.324659][ T5971] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.326569][ T5968] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.341483][ T5971] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.347864][ T5968] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.349407][ T5971] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.357296][ T5968] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.371672][ T5968] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.379307][ T5974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.379430][ T5968] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.399354][ T5974] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.418214][ T5974] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.428734][ T5974] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.012697][ T5963] chnl_net:caif_netlink_parms(): no params data found [ 97.095338][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 97.126579][ T1092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.193395][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 97.300792][ T5962] chnl_net:caif_netlink_parms(): no params data found [ 97.382833][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.390943][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.398586][ T5961] bridge_slave_0: entered allmulticast mode [ 97.405494][ T5961] bridge_slave_0: entered promiscuous mode [ 97.414748][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.422066][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.430354][ T5961] bridge_slave_1: entered allmulticast mode [ 97.437586][ T5961] bridge_slave_1: entered promiscuous mode [ 97.444299][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.451644][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.458967][ T5963] bridge_slave_0: entered allmulticast mode [ 97.465887][ T5963] bridge_slave_0: entered promiscuous mode [ 97.474532][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.481905][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.489995][ T5963] bridge_slave_1: entered allmulticast mode [ 97.496961][ T5963] bridge_slave_1: entered promiscuous mode [ 97.584101][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.591659][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.599468][ T5970] bridge_slave_0: entered allmulticast mode [ 97.606471][ T5970] bridge_slave_0: entered promiscuous mode [ 97.635333][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.647535][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.656939][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.664468][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.673958][ T5970] bridge_slave_1: entered allmulticast mode [ 97.681186][ T5970] bridge_slave_1: entered promiscuous mode [ 97.728575][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.741700][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.769035][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.779135][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.786314][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.793685][ T5962] bridge_slave_0: entered allmulticast mode [ 97.801460][ T5962] bridge_slave_0: entered promiscuous mode [ 97.848755][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.860621][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.868516][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.875729][ T5962] bridge_slave_1: entered allmulticast mode [ 97.887611][ T5962] bridge_slave_1: entered promiscuous mode [ 97.911577][ T5961] team0: Port device team_slave_0 added [ 97.920723][ T5963] team0: Port device team_slave_0 added [ 97.969745][ T5961] team0: Port device team_slave_1 added [ 97.978583][ T5963] team0: Port device team_slave_1 added [ 98.008532][ T1092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.026323][ T5970] team0: Port device team_slave_0 added [ 98.049302][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.086864][ T5970] team0: Port device team_slave_1 added [ 98.108609][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.157080][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.164206][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.190848][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.204562][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.211573][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.238406][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.274604][ T1092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.294241][ T5962] team0: Port device team_slave_0 added [ 98.302638][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.309677][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.337069][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.367358][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.374578][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.400952][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.414178][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.421462][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.447640][ T5974] Bluetooth: hci1: command tx timeout [ 98.447969][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.453609][ T5974] Bluetooth: hci2: command tx timeout [ 98.464276][ T5874] Bluetooth: hci0: command tx timeout [ 98.477700][ T5962] team0: Port device team_slave_1 added [ 98.484184][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.491728][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.518517][ T5874] Bluetooth: hci3: command tx timeout [ 98.519282][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.551328][ T1092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.637958][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.644941][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.671251][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.701626][ T5961] hsr_slave_0: entered promiscuous mode [ 98.709005][ T5961] hsr_slave_1: entered promiscuous mode [ 98.715249][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.723088][ T5961] Cannot create hsr debugfs directory [ 98.736198][ T5963] hsr_slave_0: entered promiscuous mode [ 98.742595][ T5963] hsr_slave_1: entered promiscuous mode [ 98.750542][ T5963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.758227][ T5963] Cannot create hsr debugfs directory [ 98.777963][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.784940][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.811091][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.884230][ T5970] hsr_slave_0: entered promiscuous mode [ 98.891216][ T5970] hsr_slave_1: entered promiscuous mode [ 98.897572][ T5970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.905140][ T5970] Cannot create hsr debugfs directory [ 99.139823][ T5962] hsr_slave_0: entered promiscuous mode [ 99.146052][ T5962] hsr_slave_1: entered promiscuous mode [ 99.153260][ T5962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.161299][ T5962] Cannot create hsr debugfs directory [ 99.315917][ T1092] bridge_slave_1: left allmulticast mode [ 99.321910][ T1092] bridge_slave_1: left promiscuous mode [ 99.329623][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.340508][ T1092] bridge_slave_0: left allmulticast mode [ 99.346149][ T1092] bridge_slave_0: left promiscuous mode [ 99.352837][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.631265][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.646546][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.657316][ T1092] bond0 (unregistering): Released all slaves [ 99.964655][ T5961] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.023711][ T5961] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.060840][ T1092] hsr_slave_0: left promiscuous mode [ 100.066981][ T1092] hsr_slave_1: left promiscuous mode [ 100.075392][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.083385][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.092797][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.100635][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.126102][ T1092] veth1_macvtap: left promiscuous mode [ 100.136703][ T1092] veth0_macvtap: left promiscuous mode [ 100.142738][ T1092] veth1_vlan: left promiscuous mode [ 100.148787][ T1092] veth0_vlan: left promiscuous mode [ 100.517999][ T5874] Bluetooth: hci2: command tx timeout [ 100.518065][ T5974] Bluetooth: hci0: command tx timeout [ 100.523430][ T5874] Bluetooth: hci1: command tx timeout [ 100.599556][ T5874] Bluetooth: hci3: command tx timeout [ 100.688740][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 100.718516][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 100.997096][ T5961] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.057050][ T5961] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.196541][ T5963] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.232140][ T5963] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.268153][ T5963] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.347849][ T5963] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.691245][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.809303][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.816248][ T5962] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.834168][ T5962] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.845884][ T5962] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.856765][ T5962] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.880241][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.920577][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.927770][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.969748][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.976909][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.056770][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.072208][ T5970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.096542][ T5970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.125648][ T5961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.136621][ T5961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.151917][ T5970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.166811][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.174190][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.194475][ T5970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.223635][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.230855][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.545786][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.563208][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.598348][ T5874] Bluetooth: hci0: command tx timeout [ 102.598356][ T5170] Bluetooth: hci2: command tx timeout [ 102.608619][ T5170] Bluetooth: hci1: command tx timeout [ 102.621510][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.640593][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.653659][ T5962] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.679063][ T5170] Bluetooth: hci3: command tx timeout [ 102.693397][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.700600][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.797054][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.804322][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.830753][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.837996][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.854461][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.861685][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.033112][ T5961] veth0_vlan: entered promiscuous mode [ 103.096134][ T5961] veth1_vlan: entered promiscuous mode [ 103.114256][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.289786][ T5961] veth0_macvtap: entered promiscuous mode [ 103.319361][ T5961] veth1_macvtap: entered promiscuous mode [ 103.328270][ T5963] veth0_vlan: entered promiscuous mode [ 103.385679][ T5963] veth1_vlan: entered promiscuous mode [ 103.428271][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.481621][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.495041][ T5961] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.528601][ T5961] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.537360][ T5961] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.575785][ T5961] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.623290][ T5963] veth0_macvtap: entered promiscuous mode [ 103.708660][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.722684][ T5963] veth1_macvtap: entered promiscuous mode [ 103.773579][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.812783][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.823470][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.851955][ T5963] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.862859][ T5963] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.878477][ T5963] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.887226][ T5963] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.917154][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.941498][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.083392][ T5962] veth0_vlan: entered promiscuous mode [ 104.104680][ T5970] veth0_vlan: entered promiscuous mode [ 104.114561][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.140051][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.172345][ T5962] veth1_vlan: entered promiscuous mode 2025/07/07 01:55:30 executed programs: 8 [ 104.254690][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.276781][ T5970] veth1_vlan: entered promiscuous mode [ 104.292265][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.325650][ T5962] veth0_macvtap: entered promiscuous mode [ 104.383742][ T6098] [ 104.386137][ T6098] ====================================================== [ 104.393190][ T6098] WARNING: possible circular locking dependency detected [ 104.400252][ T6098] 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 Not tainted [ 104.407562][ T6098] ------------------------------------------------------ [ 104.414591][ T6098] syz.0.16/6098 is trying to acquire lock: [ 104.420409][ T6098] ffff888026405de8 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 104.430299][ T6098] [ 104.430299][ T6098] but task is already holding lock: [ 104.437682][ T6098] ffff8880264058b0 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 104.448953][ T6098] [ 104.448953][ T6098] which lock already depends on the new lock. [ 104.448953][ T6098] [ 104.459376][ T6098] [ 104.459376][ T6098] the existing dependency chain (in reverse order) is: [ 104.468411][ T6098] [ 104.468411][ T6098] -> #3 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 104.477057][ T6098] blk_alloc_queue+0x619/0x760 [ 104.482374][ T6098] blk_mq_alloc_queue+0x175/0x290 [ 104.487954][ T6098] __blk_mq_alloc_disk+0x29/0x120 [ 104.493532][ T6098] loop_add+0x49e/0xb70 [ 104.498230][ T6098] loop_init+0x164/0x270 [ 104.503035][ T6098] do_one_initcall+0x120/0x6e0 [ 104.508346][ T6098] kernel_init_freeable+0x5c2/0x900 [ 104.514091][ T6098] kernel_init+0x1c/0x2b0 [ 104.519043][ T6098] ret_from_fork+0x5d4/0x6f0 [ 104.519077][ T5962] veth1_macvtap: entered promiscuous mode [ 104.524166][ T6098] ret_from_fork_asm+0x1a/0x30 [ 104.524190][ T6098] [ 104.524190][ T6098] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 104.542415][ T6098] fs_reclaim_acquire+0x102/0x150 [ 104.547986][ T6098] prepare_alloc_pages+0x162/0x610 [ 104.553647][ T6098] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 104.560094][ T6098] __alloc_pages_noprof+0xb/0x1b0 [ 104.565669][ T6098] pcpu_populate_chunk+0x110/0xb00 [ 104.571327][ T6098] pcpu_alloc_noprof+0x86a/0x1470 [ 104.571369][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.576878][ T6098] xt_percpu_counter_alloc+0x13e/0x1b0 [ 104.590670][ T6098] find_check_entry.constprop.0+0xbc/0x9b0 [ 104.591047][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.597039][ T6098] translate_table+0xc98/0x1720 [ 104.597066][ T6098] ipt_register_table+0x102/0x430 [ 104.597090][ T6098] iptable_nat_table_init+0x4b/0x250 [ 104.597117][ T6098] xt_find_table_lock+0x2e4/0x520 [ 104.597143][ T6098] xt_request_find_table_lock+0x28/0xf0 [ 104.597169][ T6098] get_info+0x190/0x610 [ 104.597192][ T6098] do_ipt_get_ctl+0x169/0xa10 [ 104.642688][ T6098] nf_getsockopt+0x79/0xe0 [ 104.647648][ T6098] ip_getsockopt+0x18c/0x1e0 [ 104.652781][ T6098] tcp_getsockopt+0xa1/0x100 [ 104.657924][ T6098] do_sock_getsockopt+0x3ff/0x800 [ 104.663492][ T6098] __sys_getsockopt+0x123/0x1b0 [ 104.668887][ T6098] __x64_sys_getsockopt+0xbd/0x160 [ 104.674546][ T6098] do_syscall_64+0xcd/0x490 [ 104.679600][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.686039][ T6098] [ 104.686039][ T6098] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 104.687771][ T5170] Bluetooth: hci1: command tx timeout [ 104.693810][ T6098] __mutex_lock+0x199/0xb90 [ 104.699805][ T5170] Bluetooth: hci2: command tx timeout [ 104.704334][ T6098] pcpu_alloc_noprof+0xb4c/0x1470 [ 104.715303][ T6098] sbitmap_init_node+0x2fd/0x770 [ 104.720788][ T6098] sbitmap_queue_init_node+0x41/0x560 [ 104.726703][ T6098] blk_mq_init_tags+0x12d/0x2b0 [ 104.732104][ T6098] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 104.738205][ T6098] blk_mq_init_sched+0x30c/0x610 [ 104.743684][ T6098] elevator_switch+0x1e1/0x7f0 [ 104.748995][ T6098] elevator_change+0x2ac/0x400 [ 104.754301][ T6098] elevator_set_default+0x292/0x320 [ 104.760045][ T6098] blk_register_queue+0x393/0x4f0 [ 104.765619][ T6098] __add_disk+0x74a/0xf00 [ 104.770496][ T6098] add_disk_fwnode+0x13f/0x5d0 [ 104.775805][ T6098] nbd_dev_add+0x791/0xbc0 [ 104.780768][ T6098] nbd_init+0x181/0x320 [ 104.785480][ T6098] do_one_initcall+0x120/0x6e0 [ 104.788156][ T5874] Bluetooth: hci3: command tx timeout [ 104.790770][ T6098] kernel_init_freeable+0x5c2/0x900 [ 104.802031][ T6098] kernel_init+0x1c/0x2b0 [ 104.806986][ T6098] ret_from_fork+0x5d4/0x6f0 [ 104.812126][ T6098] ret_from_fork_asm+0x1a/0x30 [ 104.817446][ T6098] [ 104.817446][ T6098] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 104.825294][ T6098] __lock_acquire+0x126f/0x1c90 [ 104.830680][ T6098] lock_acquire+0x179/0x350 [ 104.835716][ T6098] __mutex_lock+0x199/0xb90 [ 104.840757][ T6098] queue_requests_store+0x1c7/0x310 [ 104.846494][ T6098] queue_attr_store+0x279/0x320 [ 104.851879][ T6098] sysfs_kf_write+0xef/0x150 [ 104.856992][ T6098] kernfs_fop_write_iter+0x351/0x510 [ 104.862801][ T6098] iter_file_splice_write+0x91f/0x1150 [ 104.868787][ T6098] direct_splice_actor+0x192/0x6c0 [ 104.874435][ T6098] splice_direct_to_actor+0x342/0xa30 [ 104.880337][ T6098] do_splice_direct+0x174/0x240 [ 104.885973][ T6098] do_sendfile+0xb06/0xe50 [ 104.891004][ T6098] __x64_sys_sendfile64+0x1d8/0x220 [ 104.896726][ T6098] do_syscall_64+0xcd/0x490 [ 104.901777][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.908234][ T6098] [ 104.908234][ T6098] other info that might help us debug this: [ 104.908234][ T6098] [ 104.918471][ T6098] Chain exists of: [ 104.918471][ T6098] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 104.918471][ T6098] [ 104.932236][ T6098] Possible unsafe locking scenario: [ 104.932236][ T6098] [ 104.939697][ T6098] CPU0 CPU1 [ 104.945246][ T6098] ---- ---- [ 104.950606][ T6098] lock(&q->q_usage_counter(io)#23); [ 104.955996][ T6098] lock(fs_reclaim); [ 104.962499][ T6098] lock(&q->q_usage_counter(io)#23); [ 104.970409][ T6098] lock(&q->elevator_lock); [ 104.975001][ T6098] [ 104.975001][ T6098] *** DEADLOCK *** [ 104.975001][ T6098] [ 104.983223][ T6098] 5 locks held by syz.0.16/6098: [ 104.988153][ T6098] #0: ffff88803658e428 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 104.998228][ T6098] #1: ffff88805e93d888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 105.008089][ T6098] #2: ffff888142b56a58 (kn->active#60){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 105.018145][ T6098] #3: ffff8880264058b0 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 105.029855][ T6098] #4: ffff8880264058e8 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 105.041813][ T6098] [ 105.041813][ T6098] stack backtrace: [ 105.047712][ T6098] CPU: 0 UID: 0 PID: 6098 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 105.047739][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.047754][ T6098] Call Trace: [ 105.047761][ T6098] [ 105.047772][ T6098] dump_stack_lvl+0x116/0x1f0 [ 105.047809][ T6098] print_circular_bug+0x275/0x350 [ 105.047837][ T6098] check_noncircular+0x14c/0x170 [ 105.047867][ T6098] __lock_acquire+0x126f/0x1c90 [ 105.047896][ T6098] ? __lock_acquire+0xb8a/0x1c90 [ 105.047923][ T6098] lock_acquire+0x179/0x350 [ 105.047949][ T6098] ? queue_requests_store+0x1c7/0x310 [ 105.047981][ T6098] ? __pfx___might_resched+0x10/0x10 [ 105.048004][ T6098] ? do_raw_spin_lock+0x12c/0x2b0 [ 105.048035][ T6098] __mutex_lock+0x199/0xb90 [ 105.048063][ T6098] ? queue_requests_store+0x1c7/0x310 [ 105.048095][ T6098] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 105.048121][ T6098] ? queue_requests_store+0x1c7/0x310 [ 105.048150][ T6098] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.048178][ T6098] ? __pfx___mutex_lock+0x10/0x10 [ 105.048215][ T6098] ? __pfx_autoremove_wake_function+0x10/0x10 [ 105.048244][ T6098] ? queue_requests_store+0x1c7/0x310 [ 105.048274][ T6098] queue_requests_store+0x1c7/0x310 [ 105.048305][ T6098] ? __pfx_queue_requests_store+0x10/0x10 [ 105.048338][ T6098] ? __mutex_trylock_common+0xe9/0x250 [ 105.048366][ T6098] ? __pfx_queue_requests_store+0x10/0x10 [ 105.048397][ T6098] queue_attr_store+0x279/0x320 [ 105.048427][ T6098] ? __pfx_queue_attr_store+0x10/0x10 [ 105.048455][ T6098] ? __lock_acquire+0x622/0x1c90 [ 105.048487][ T6098] ? find_held_lock+0x2b/0x80 [ 105.048508][ T6098] ? sysfs_file_kobj+0xe4/0x290 [ 105.048532][ T6098] ? __pfx_queue_attr_store+0x10/0x10 [ 105.048561][ T6098] sysfs_kf_write+0xef/0x150 [ 105.048585][ T6098] kernfs_fop_write_iter+0x351/0x510 [ 105.048606][ T6098] ? __pfx_sysfs_kf_write+0x10/0x10 [ 105.048630][ T6098] iter_file_splice_write+0x91f/0x1150 [ 105.048665][ T6098] ? __pfx_iter_file_splice_write+0x10/0x10 [ 105.048694][ T6098] ? __pfx_copy_splice_read+0x10/0x10 [ 105.048725][ T6098] ? __pfx_iter_file_splice_write+0x10/0x10 [ 105.048752][ T6098] direct_splice_actor+0x192/0x6c0 [ 105.048779][ T6098] splice_direct_to_actor+0x342/0xa30 [ 105.048805][ T6098] ? __pfx_direct_splice_actor+0x10/0x10 [ 105.048833][ T6098] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 105.048858][ T6098] ? fput+0x70/0xf0 [ 105.048877][ T6098] ? __futex_hash.constprop.0+0x1e9/0x440 [ 105.048902][ T6098] do_splice_direct+0x174/0x240 [ 105.048927][ T6098] ? __pfx_do_splice_direct+0x10/0x10 [ 105.048952][ T6098] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 105.048978][ T6098] ? rw_verify_area+0xcf/0x680 [ 105.049004][ T6098] do_sendfile+0xb06/0xe50 [ 105.049032][ T6098] ? __pfx_do_sendfile+0x10/0x10 [ 105.049057][ T6098] ? handle_mm_fault+0x2ab/0xd10 [ 105.049084][ T6098] ? __x64_sys_futex+0x1e0/0x4c0 [ 105.049107][ T6098] ? __x64_sys_futex+0x1e9/0x4c0 [ 105.049132][ T6098] __x64_sys_sendfile64+0x1d8/0x220 [ 105.049152][ T6098] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 105.049175][ T6098] do_syscall_64+0xcd/0x490 [ 105.049209][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.049230][ T6098] RIP: 0033:0x7fe98278e929 [ 105.049248][ T6098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.049268][ T6098] RSP: 002b:00007fff34bb8c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 105.049287][ T6098] RAX: ffffffffffffffda RBX: 00007fe9829b5fa0 RCX: 00007fe98278e929 [ 105.049301][ T6098] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 105.049313][ T6098] RBP: 00007fe982810b39 R08: 0000000000000000 R09: 0000000000000000 [ 105.049326][ T6098] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 105.049338][ T6098] R13: 00007fe9829b5fa0 R14: 00007fe9829b5fa0 R15: 0000000000000004 [ 105.049358][ T6098] [ 105.430191][ T5874] Bluetooth: hci0: command tx timeout [ 105.446098][ T5970] veth0_macvtap: entered promiscuous mode [ 105.456053][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.531466][ T5970] veth1_macvtap: entered promiscuous mode [ 105.543807][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.566033][ T5962] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.579187][ T5962] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.599049][ T5962] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.609235][ T5962] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.626357][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.647317][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.677023][ T5970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.700627][ T5970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.709936][ T5970] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.719239][ T5970] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.730419][ T5962] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 105.793538][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.795035][ T5962] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 105.809264][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.832755][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.864059][ T5970] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 105.871849][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.944782][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.961991][ T5970] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 105.974610][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.035675][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.056775][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/07 01:55:35 executed programs: 240 2025/07/07 01:55:40 executed programs: 583