Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://46657 [ 31.080856][ T4719] cgroup: Unknown subsys name 'net' [ 31.231118][ T4719] cgroup: Unknown subsys name 'cpuset' [ 31.232734][ T4719] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.387078][ T4719] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.231146][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.231345][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.231437][ T4725] bridge_slave_0: entered allmulticast mode [ 34.231902][ T4725] bridge_slave_0: entered promiscuous mode [ 34.237778][ T4725] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.237832][ T4725] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.237877][ T4725] bridge_slave_1: entered allmulticast mode [ 34.238283][ T4725] bridge_slave_1: entered promiscuous mode [ 34.251779][ T4725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.252624][ T4725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.258713][ T4725] team0: Port device team_slave_0 added [ 34.264778][ T4725] team0: Port device team_slave_1 added [ 34.271542][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.271551][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.271562][ T4725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.272287][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.272296][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.272312][ T4725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.292622][ T4725] hsr_slave_0: entered promiscuous mode [ 34.293246][ T4725] hsr_slave_1: entered promiscuous mode [ 34.336696][ T4725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.339088][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.339493][ T4725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.342163][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.342567][ T4725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.344255][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.344835][ T4725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.346679][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.355223][ T4725] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.355259][ T4725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.355386][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.355412][ T4725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.372160][ T4725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.375435][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.376177][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.379195][ T4725] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.386159][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.386188][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.386548][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.386565][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.397322][ T4725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.480547][ T4725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.490943][ T4725] veth0_vlan: entered promiscuous mode [ 34.494919][ T4725] veth1_vlan: entered promiscuous mode [ 34.502110][ T4725] veth0_macvtap: entered promiscuous mode [ 34.503485][ T4725] veth1_macvtap: entered promiscuous mode [ 34.507968][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.510726][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.529823][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.529863][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.529878][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.529891][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.562599][ T4725] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.614774][ T1150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.672009][ T1150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.703095][ T1150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.762609][ T1150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.377028][ T4800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.377331][ T4800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.377510][ T4800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.377864][ T4800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.378096][ T4800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.467019][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.467032][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.480032][ T1064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.480045][ T1064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:00:35 executed programs: 0 [ 35.837161][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.837612][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.837807][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.838177][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.838431][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.972261][ T4822] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.972317][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.972376][ T4822] bridge_slave_0: entered allmulticast mode [ 35.972806][ T4822] bridge_slave_0: entered promiscuous mode [ 35.974034][ T4822] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.974093][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.974189][ T4822] bridge_slave_1: entered allmulticast mode [ 35.974593][ T4822] bridge_slave_1: entered promiscuous mode [ 35.982003][ T4822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.983009][ T4822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.992745][ T4822] team0: Port device team_slave_0 added [ 35.993564][ T4822] team0: Port device team_slave_1 added [ 35.999200][ T4822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.999209][ T4822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.999224][ T4822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.001003][ T4822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.001012][ T4822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.001027][ T4822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.013525][ T4822] hsr_slave_0: entered promiscuous mode [ 36.013880][ T4822] hsr_slave_1: entered promiscuous mode [ 36.014109][ T4822] debugfs: 'hsr0' already exists in 'hsr' [ 36.014144][ T4822] Cannot create hsr debugfs directory [ 37.849868][ T50] Bluetooth: hci0: command tx timeout [ 38.091421][ T1150] bridge_slave_1: left allmulticast mode [ 38.091446][ T1150] bridge_slave_1: left promiscuous mode [ 38.091680][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.095830][ T1150] bridge_slave_0: left allmulticast mode [ 38.095844][ T1150] bridge_slave_0: left promiscuous mode [ 38.095912][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.155863][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.181025][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.192495][ T1150] bond0 (unregistering): Released all slaves [ 38.226377][ T1150] hsr_slave_0: left promiscuous mode [ 38.226678][ T1150] hsr_slave_1: left promiscuous mode [ 38.227015][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.227031][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.227485][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.227495][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.241474][ T1150] veth1_macvtap: left promiscuous mode [ 38.241508][ T1150] veth0_macvtap: left promiscuous mode [ 38.241575][ T1150] veth1_vlan: left promiscuous mode [ 38.241617][ T1150] veth0_vlan: left promiscuous mode [ 38.342779][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 38.346603][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 38.407451][ T4397] 8021q: adding VLAN 0 to HW filter on device eth0 [ 38.577514][ T4822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.582058][ T4822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.582484][ T4822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.583432][ T4822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.583814][ T4822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.584860][ T4822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.585247][ T4822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.586529][ T4822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.892041][ T4822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.901866][ T4822] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.903345][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.903369][ T1064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.905106][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.905139][ T1064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.918331][ T4822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.026638][ T4822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.038217][ T4822] veth0_vlan: entered promiscuous mode [ 39.094489][ T4822] veth1_vlan: entered promiscuous mode [ 39.102488][ T4822] veth0_macvtap: entered promiscuous mode [ 39.103616][ T4822] veth1_macvtap: entered promiscuous mode [ 39.107593][ T4822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.109353][ T4822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.152947][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.153125][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.153192][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.200889][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.200901][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.208087][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.208099][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.219922][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.258263][ T4914] [ 39.258702][ T4914] ====================================================== [ 39.259986][ T4914] WARNING: possible circular locking dependency detected [ 39.261377][ T4914] syzkaller #0 Not tainted [ 39.262246][ T4914] ------------------------------------------------------ [ 39.263651][ T4914] syz.0.17/4914 is trying to acquire lock: [ 39.264887][ T4914] ffff8000897fe800 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x30/0x2e8 [ 39.266798][ T4914] [ 39.266798][ T4914] but task is already holding lock: [ 39.268338][ T4914] ffff0000d1fb4390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x5c/0x224 [ 39.270212][ T4914] [ 39.270212][ T4914] which lock already depends on the new lock. [ 39.270212][ T4914] [ 39.272190][ T4914] [ 39.272190][ T4914] the existing dependency chain (in reverse order) is: [ 39.273882][ T4914] [ 39.273882][ T4914] -> #2 (&gi->lock){+.+.}-{4:4}: [ 39.275233][ T4914] __mutex_lock+0x164/0xf14 [ 39.276201][ T4914] mutex_lock_nested+0x24/0x30 [ 39.277239][ T4914] config_usb_cfg_link+0x5c/0x224 [ 39.278314][ T4914] configfs_symlink+0x5ec/0xfb4 [ 39.279336][ T4914] vfs_symlink+0x16c/0x290 [ 39.280277][ T4914] filename_symlinkat+0x18c/0x328 [ 39.281345][ T4914] __arm64_sys_symlinkat+0xb0/0xdc [ 39.282461][ T4914] invoke_syscall+0x98/0x244 [ 39.283426][ T4914] el0_svc_common+0xec/0x23c [ 39.284375][ T4914] do_el0_svc+0x4c/0x5c [ 39.285313][ T4914] el0_svc+0x64/0x260 [ 39.286193][ T4914] el0t_64_sync_handler+0x44/0x104 [ 39.287278][ T4914] el0t_64_sync+0x198/0x19c [ 39.288183][ T4914] [ 39.288183][ T4914] -> #1 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}: [ 39.289796][ T4914] down_write+0x50/0xc0 [ 39.290688][ T4914] configfs_depend_item_unlocked+0x154/0x344 [ 39.291913][ T4914] usbg_make_tpg+0x218/0x4a0 [ 39.292899][ T4914] target_fabric_make_tpg+0x98/0x518 [ 39.293967][ T4914] configfs_mkdir+0x374/0x7d4 [ 39.294923][ T4914] vfs_mkdir+0x2e4/0x46c [ 39.295813][ T4914] filename_mkdirat+0x228/0x3f4 [ 39.296805][ T4914] __arm64_sys_mkdirat+0x9c/0xc0 [ 39.297816][ T4914] invoke_syscall+0x98/0x244 [ 39.298780][ T4914] el0_svc_common+0xec/0x23c [ 39.299748][ T4914] do_el0_svc+0x4c/0x5c [ 39.300662][ T4914] el0_svc+0x64/0x260 [ 39.301566][ T4914] el0t_64_sync_handler+0x44/0x104 [ 39.302605][ T4914] el0t_64_sync+0x198/0x19c [ 39.303508][ T4914] [ 39.303508][ T4914] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 39.304982][ T4914] __lock_acquire+0x1660/0x2b48 [ 39.306004][ T4914] lock_acquire+0x150/0x370 [ 39.306960][ T4914] __mutex_lock+0x164/0xf14 [ 39.307910][ T4914] mutex_lock_nested+0x24/0x30 [ 39.308894][ T4914] tcm_alloc+0x30/0x2e8 [ 39.309759][ T4914] usb_get_function+0x64/0xb0 [ 39.310711][ T4914] config_usb_cfg_link+0x158/0x224 [ 39.311685][ T4914] configfs_symlink+0x5ec/0xfb4 [ 39.312633][ T4914] vfs_symlink+0x16c/0x290 [ 39.313534][ T4914] filename_symlinkat+0x18c/0x328 [ 39.314560][ T4914] __arm64_sys_symlinkat+0xb0/0xdc [ 39.315595][ T4914] invoke_syscall+0x98/0x244 [ 39.316558][ T4914] el0_svc_common+0xec/0x23c [ 39.317476][ T4914] do_el0_svc+0x4c/0x5c [ 39.318351][ T4914] el0_svc+0x64/0x260 [ 39.319189][ T4914] el0t_64_sync_handler+0x44/0x104 [ 39.320266][ T4914] el0t_64_sync+0x198/0x19c [ 39.321230][ T4914] [ 39.321230][ T4914] other info that might help us debug this: [ 39.321230][ T4914] [ 39.323153][ T4914] Chain exists of: [ 39.323153][ T4914] tpg_instances_lock --> &sb->s_type->i_mutex_key#23 --> &gi->lock [ 39.323153][ T4914] [ 39.325691][ T4914] Possible unsafe locking scenario: [ 39.325691][ T4914] [ 39.327062][ T4914] CPU0 CPU1 [ 39.328034][ T4914] ---- ---- [ 39.328985][ T4914] lock(&gi->lock); [ 39.329713][ T4914] lock(&sb->s_type->i_mutex_key#23); [ 39.331183][ T4914] lock(&gi->lock); [ 39.332340][ T4914] lock(tpg_instances_lock); [ 39.333214][ T4914] [ 39.333214][ T4914] *** DEADLOCK *** [ 39.333214][ T4914] [ 39.334682][ T4914] locks held by syz.0.17/4914: 3, last CPU#1: [ 39.335772][ T4914] #0: ffff0000c39b2460 (sb_writers#11){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 39.337439][ T4914] #1: ffff0000da9e5440 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: configfs_symlink+0x400/0xfb4 [ 39.339460][ T4914] #2: ffff0000d1fb4390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x5c/0x224 [ 39.341237][ T4914] [ 39.341237][ T4914] stack backtrace: [ 39.342327][ T4914] CPU: 1 UID: 0 PID: 4914 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 39.343916][ T4914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.345795][ T4914] Call trace: [ 39.346405][ T4914] show_stack+0x2c/0x3c (C) [ 39.347263][ T4914] __dump_stack+0x30/0x40 [ 39.348082][ T4914] dump_stack_lvl+0xd8/0x12c [ 39.348964][ T4914] dump_stack+0x1c/0x28 [ 39.349745][ T4914] print_circular_bug+0x328/0x330 [ 39.350675][ T4914] check_noncircular+0x158/0x174 [ 39.351613][ T4914] __lock_acquire+0x1660/0x2b48 [ 39.352520][ T4914] lock_acquire+0x150/0x370 [ 39.353386][ T4914] __mutex_lock+0x164/0xf14 [ 39.354250][ T4914] mutex_lock_nested+0x24/0x30 [ 39.355160][ T4914] tcm_alloc+0x30/0x2e8 [ 39.355942][ T4914] usb_get_function+0x64/0xb0 [ 39.356771][ T4914] config_usb_cfg_link+0x158/0x224 [ 39.357687][ T4914] configfs_symlink+0x5ec/0xfb4 [ 39.358572][ T4914] vfs_symlink+0x16c/0x290 [ 39.359383][ T4914] filename_symlinkat+0x18c/0x328 [ 39.360295][ T4914] __arm64_sys_symlinkat+0xb0/0xdc [ 39.361219][ T4914] invoke_syscall+0x98/0x244 [ 39.362053][ T4914] el0_svc_common+0xec/0x23c [ 39.362907][ T4914] do_el0_svc+0x4c/0x5c [ 39.363699][ T4914] el0_svc+0x64/0x260 [ 39.364378][ T4914] el0t_64_sync_handler+0x44/0x104 [ 39.365275][ T4914] el0t_64_sync+0x198/0x19c