[ 37.041082][ T136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.289920][ T136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.339875][ T136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.390776][ T136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.609412][ T136] device hsr_slave_0 left promiscuous mode [ 40.636073][ T136] device hsr_slave_1 left promiscuous mode [ 40.726173][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.727564][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.729540][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.730777][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.732263][ T136] device bridge_slave_1 left promiscuous mode [ 40.733527][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.767261][ T136] device bridge_slave_0 left promiscuous mode [ 40.768440][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.906384][ T136] device veth1_macvtap left promiscuous mode [ 40.907500][ T136] device veth0_macvtap left promiscuous mode [ 40.908542][ T136] device veth1_vlan left promiscuous mode [ 40.909475][ T136] device veth0_vlan left promiscuous mode [ 41.014255][ T136] team0 (unregistering): Port device team_slave_1 removed [ 41.019495][ T136] team0 (unregistering): Port device team_slave_0 removed [ 41.024052][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.050010][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.170611][ T136] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. 1970/01/01 00:00:41 ignoring optional flag "type"="gce" 1970/01/01 00:00:41 parsed 1 programs [ 41.719122][ T4247] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS 1970/01/01 00:00:41 executed programs: 0 [ 41.792424][ T4257] chnl_net:caif_netlink_parms(): no params data found [ 41.812402][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.813656][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.815143][ T4257] device bridge_slave_0 entered promiscuous mode [ 41.817424][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.818611][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.820017][ T4257] device bridge_slave_1 entered promiscuous mode [ 41.828480][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.830891][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.839214][ T4257] team0: Port device team_slave_0 added [ 41.841072][ T4257] team0: Port device team_slave_1 added [ 41.848256][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.849347][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.853404][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.856371][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.857551][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.862437][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.926935][ T4257] device hsr_slave_0 entered promiscuous mode [ 41.976717][ T4257] device hsr_slave_1 entered promiscuous mode [ 42.641877][ T4257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.678034][ T4257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.717326][ T4257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.747110][ T4257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.821458][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.828719][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.830293][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.834205][ T4257] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.837972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.839369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.841490][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.842651][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.844181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.846909][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.848561][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.850113][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.851265][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.855077][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.858245][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.870474][ T4257] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.872270][ T4257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.886542][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.889096][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.890778][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.892536][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.894202][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.906017][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.907788][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.909390][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.911493][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.913262][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.960362][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.961864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.963174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.970994][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.972760][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.979849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.981427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.983255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.984649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.987816][ T4257] device veth0_vlan entered promiscuous mode [ 42.991484][ T4257] device veth1_vlan entered promiscuous mode [ 43.001795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.003348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.004900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.007024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.009646][ T4257] device veth0_macvtap entered promiscuous mode [ 43.011976][ T4257] device veth1_macvtap entered promiscuous mode [ 43.018588][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.021340][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.022944][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.024505][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.027201][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.029791][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.031609][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.033321][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.035696][ T4257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.038398][ T4257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.039826][ T4257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.041323][ T4257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.109451][ T4376] loop0: detected capacity change from 0 to 4096 [ 43.219813][ T4376] [ 43.220257][ T4376] ====================================================== [ 43.221416][ T4376] WARNING: possible circular locking dependency detected [ 43.222597][ T4376] syzkaller #0 Not tainted [ 43.223320][ T4376] ------------------------------------------------------ [ 43.224464][ T4376] syz-executor.0/4376 is trying to acquire lock: [ 43.225664][ T4376] ffff0000e29477b0 (&ni->file.run_lock#3){++++}-{3:3}, at: attr_data_get_block+0x11c/0x1324 [ 43.227772][ T4376] [ 43.227772][ T4376] but task is already holding lock: [ 43.229137][ T4376] ffff0000d9d662d8 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x148/0x298 [ 43.230846][ T4376] [ 43.230846][ T4376] which lock already depends on the new lock. [ 43.230846][ T4376] [ 43.232514][ T4376] [ 43.232514][ T4376] the existing dependency chain (in reverse order) is: [ 43.234070][ T4376] [ 43.234070][ T4376] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 43.235354][ T4376] __might_fault+0xc8/0x128 [ 43.236210][ T4376] fiemap_fill_next_extent+0x170/0x408 [ 43.237406][ T4376] ni_fiemap+0x780/0x9fc [ 43.238346][ T4376] ntfs_fiemap+0xe4/0x140 [ 43.239267][ T4376] do_vfs_ioctl+0x1948/0x2404 [ 43.240229][ T4376] __arm64_sys_ioctl+0xe4/0x1c8 [ 43.241178][ T4376] invoke_syscall+0x98/0x28c [ 43.242045][ T4376] el0_svc_common+0x13c/0x258 [ 43.242929][ T4376] do_el0_svc+0x5c/0x140 [ 43.243712][ T4376] el0_svc+0x78/0x1d0 [ 43.244426][ T4376] el0t_64_sync_handler+0xcc/0xe4 [ 43.245386][ T4376] el0t_64_sync+0x1a0/0x1a4 [ 43.246197][ T4376] [ 43.246197][ T4376] -> #0 (&ni->file.run_lock#3){++++}-{3:3}: [ 43.247509][ T4376] __lock_acquire+0x28b0/0x65d4 [ 43.248444][ T4376] lock_acquire+0x1f4/0x618 [ 43.249322][ T4376] down_read+0xc0/0x38c [ 43.250172][ T4376] attr_data_get_block+0x11c/0x1324 [ 43.251192][ T4376] ntfs_file_mmap+0x378/0x5d4 [ 43.252096][ T4376] mmap_file+0x6c/0xc8 [ 43.252904][ T4376] mmap_region+0xb00/0x13d4 [ 43.253764][ T4376] do_mmap+0x6d0/0xe24 [ 43.254515][ T4376] vm_mmap_pgoff+0x194/0x298 [ 43.255348][ T4376] ksys_mmap_pgoff+0x3c4/0x638 [ 43.256215][ T4376] __arm64_sys_mmap+0x108/0x120 [ 43.257171][ T4376] invoke_syscall+0x98/0x28c [ 43.258083][ T4376] el0_svc_common+0x13c/0x258 [ 43.259025][ T4376] do_el0_svc+0x5c/0x140 [ 43.259878][ T4376] el0_svc+0x78/0x1d0 [ 43.260677][ T4376] el0t_64_sync_handler+0xcc/0xe4 [ 43.261681][ T4376] el0t_64_sync+0x1a0/0x1a4 [ 43.262556][ T4376] [ 43.262556][ T4376] other info that might help us debug this: [ 43.262556][ T4376] [ 43.264187][ T4376] Possible unsafe locking scenario: [ 43.264187][ T4376] [ 43.265409][ T4376] CPU0 CPU1 [ 43.266315][ T4376] ---- ---- [ 43.267179][ T4376] lock(&mm->mmap_lock); [ 43.267915][ T4376] lock(&ni->file.run_lock#3); [ 43.269166][ T4376] lock(&mm->mmap_lock); [ 43.270326][ T4376] lock(&ni->file.run_lock#3); [ 43.271207][ T4376] [ 43.271207][ T4376] *** DEADLOCK *** [ 43.271207][ T4376] [ 43.272552][ T4376] 1 lock held by syz-executor.0/4376: [ 43.273500][ T4376] #0: ffff0000d9d662d8 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x148/0x298 [ 43.275160][ T4376] [ 43.275160][ T4376] stack backtrace: [ 43.276140][ T4376] CPU: 0 PID: 4376 Comm: syz-executor.0 Not tainted syzkaller #0 [ 43.277366][ T4376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 43.279065][ T4376] Call trace: [ 43.279595][ T4376] dump_backtrace+0x0/0x458 [ 43.280362][ T4376] show_stack+0x2c/0x3c [ 43.281026][ T4376] __dump_stack+0x30/0x40 [ 43.281769][ T4376] dump_stack_lvl+0xf4/0x15c [ 43.282594][ T4376] dump_stack+0x1c/0x5c [ 43.283314][ T4376] print_circular_bug+0x148/0x1b0 [ 43.284173][ T4376] check_noncircular+0x264/0x2f8 [ 43.285024][ T4376] __lock_acquire+0x28b0/0x65d4 [ 43.286009][ T4376] lock_acquire+0x1f4/0x618 [ 43.286804][ T4376] down_read+0xc0/0x38c [ 43.287533][ T4376] attr_data_get_block+0x11c/0x1324 [ 43.288445][ T4376] ntfs_file_mmap+0x378/0x5d4 [ 43.289262][ T4376] mmap_file+0x6c/0xc8 [ 43.289951][ T4376] mmap_region+0xb00/0x13d4 [ 43.290891][ T4376] do_mmap+0x6d0/0xe24 [ 43.291595][ T4376] vm_mmap_pgoff+0x194/0x298 [ 43.292394][ T4376] ksys_mmap_pgoff+0x3c4/0x638 [ 43.293224][ T4376] __arm64_sys_mmap+0x108/0x120 [ 43.294101][ T4376] invoke_syscall+0x98/0x28c [ 43.294891][ T4376] el0_svc_common+0x13c/0x258 [ 43.295746][ T4376] do_el0_svc+0x5c/0x140 [ 43.296583][ T4376] el0_svc+0x78/0x1d0 [ 43.297336][ T4376] el0t_64_sync_handler+0xcc/0xe4 [ 43.298307][ T4376] el0t_64_sync+0x1a0/0x1a4 [ 43.362175][ T4410] loop0: detected capacity change from 0 to 4096 [ 43.522860][ T4431] loop0: detected capacity change from 0 to 4096 [ 43.658761][ T4452] loop0: detected capacity change from 0 to 4096 [ 43.766022][ T4077] Bluetooth: hci0: command 0x0409 tx timeout [ 43.799572][ T4473] loop0: detected capacity change from 0 to 4096 [ 43.898682][ T4486] loop0: detected capacity change from 0 to 4096 [ 44.047462][ T4493] loop0: detected capacity change from 0 to 4096 [ 44.225540][ T4495] loop0: detected capacity change from 0 to 4096 [ 44.327416][ T4497] loop0: detected capacity change from 0 to 4096 [ 44.466351][ T4499] loop0: detected capacity change from 0 to 4096 [ 45.855774][ T4077] Bluetooth: hci0: command 0x041b tx timeout 1970/01/01 00:00:46 executed programs: 25 [ 47.925970][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 48.117191][ T4551] set_capacity_and_notify: 25 callbacks suppressed [ 48.117200][ T4551] loop0: detected capacity change from 0 to 4096 [ 48.215430][ T4553] loop0: detected capacity change from 0 to 4096 [ 48.325513][ T4555] loop0: detected capacity change from 0 to 4096 [ 48.489145][ T4557] loop0: detected capacity change from 0 to 4096 [ 48.607923][ T4559] loop0: detected capacity change from 0 to 4096 [ 48.736709][ T4561] loop0: detected capacity change from 0 to 4096 [ 48.945407][ T4563] loop0: detected capacity change from 0 to 4096 [ 49.085510][ T4565] loop0: detected capacity change from 0 to 4096 [ 49.226834][ T4567] loop0: detected capacity change from 0 to 4096 [ 49.367047][ T4569] loop0: detected capacity change from 0 to 4096 [ 50.005812][ T25] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:00:51 executed programs: 63 [ 53.187008][ T4623] set_capacity_and_notify: 26 callbacks suppressed [ 53.187016][ T4623] loop0: detected capacity change from 0 to 4096