Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://39723 [ 31.180145][ T4729] cgroup: Unknown subsys name 'net' [ 31.310204][ T4729] cgroup: Unknown subsys name 'cpuset' [ 31.312245][ T4729] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.468047][ T4729] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.881602][ T4738] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.966217][ T1983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.967805][ T1983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.978519][ T1896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.980166][ T1896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.111148][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.113031][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.114588][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.116240][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.117781][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.834409][ T4777] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.834902][ T4777] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.834965][ T4777] bridge_slave_0: entered allmulticast mode [ 35.835432][ T4777] bridge_slave_0: entered promiscuous mode [ 35.837191][ T4777] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.837247][ T4777] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.837297][ T4777] bridge_slave_1: entered allmulticast mode [ 35.837727][ T4777] bridge_slave_1: entered promiscuous mode [ 35.845337][ T4777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.846246][ T4777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.853247][ T4777] team0: Port device team_slave_0 added [ 35.853941][ T4777] team0: Port device team_slave_1 added [ 35.862251][ T4777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.863704][ T4777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.868158][ T4777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.871170][ T4777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.871199][ T4777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.871224][ T4777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.882037][ T4777] hsr_slave_0: entered promiscuous mode [ 35.882369][ T4777] hsr_slave_1: entered promiscuous mode [ 35.928104][ T4777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.931679][ T4777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.932081][ T4777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.934042][ T4777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.934337][ T4777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.936172][ T4777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.937231][ T4777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.938453][ T4777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.947631][ T4777] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.947683][ T4777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.947837][ T4777] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.947874][ T4777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.966109][ T4777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.971764][ T1956] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.973591][ T1956] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.977119][ T4777] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.979965][ T1956] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.980012][ T1956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.981620][ T1956] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.981646][ T1956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.992049][ T4777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.077174][ T4777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.092185][ T4777] veth0_vlan: entered promiscuous mode [ 36.093984][ T4777] veth1_vlan: entered promiscuous mode [ 36.102508][ T4777] veth0_macvtap: entered promiscuous mode [ 36.103787][ T4777] veth1_macvtap: entered promiscuous mode [ 36.107443][ T4777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.108517][ T4777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.113188][ T1883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.113230][ T1883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.113250][ T1883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.113264][ T1883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.215100][ T1956] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.263050][ T1956] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.301468][ T1956] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.403180][ T1956] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:36 executed programs: 0 [ 36.783701][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.784058][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.784220][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.784527][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.784721][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.914321][ T4837] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.915393][ T4837] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.915537][ T4837] bridge_slave_0: entered allmulticast mode [ 36.916012][ T4837] bridge_slave_0: entered promiscuous mode [ 36.916922][ T4837] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.916944][ T4837] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.916997][ T4837] bridge_slave_1: entered allmulticast mode [ 36.917438][ T4837] bridge_slave_1: entered promiscuous mode [ 36.926290][ T4837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.927283][ T4837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.935575][ T4837] team0: Port device team_slave_0 added [ 36.936372][ T4837] team0: Port device team_slave_1 added [ 36.943878][ T4837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.943898][ T4837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.943913][ T4837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.944422][ T4837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.944429][ T4837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.944443][ T4837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.955829][ T4837] hsr_slave_0: entered promiscuous mode [ 36.956138][ T4837] hsr_slave_1: entered promiscuous mode [ 36.956341][ T4837] debugfs: 'hsr0' already exists in 'hsr' [ 36.956396][ T4837] Cannot create hsr debugfs directory [ 38.799126][ T4744] Bluetooth: hci0: command tx timeout [ 39.337563][ T1956] bridge_slave_1: left allmulticast mode [ 39.337618][ T1956] bridge_slave_1: left promiscuous mode [ 39.337946][ T1956] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.345235][ T1956] bridge_slave_0: left allmulticast mode [ 39.345264][ T1956] bridge_slave_0: left promiscuous mode [ 39.345357][ T1956] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.403856][ T1956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.440622][ T1956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.479614][ T1956] bond0 (unregistering): Released all slaves [ 39.542557][ T1956] hsr_slave_0: left promiscuous mode [ 39.545619][ T1956] hsr_slave_1: left promiscuous mode [ 39.545926][ T1956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.545945][ T1956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.547777][ T1956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.547789][ T1956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.552457][ T1956] veth1_macvtap: left promiscuous mode [ 39.552504][ T1956] veth0_macvtap: left promiscuous mode [ 39.552555][ T1956] veth1_vlan: left promiscuous mode [ 39.552596][ T1956] veth0_vlan: left promiscuous mode [ 39.646176][ T1956] team0 (unregistering): Port device team_slave_1 removed [ 39.650085][ T1956] team0 (unregistering): Port device team_slave_0 removed [ 39.692427][ T4406] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.943903][ T4837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.944926][ T4837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.945789][ T4837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.948545][ T4837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.949089][ T4837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.952352][ T4837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.954225][ T4837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.957099][ T4837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.990352][ T4837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.995945][ T4837] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.007834][ T4837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.013940][ T4837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.017261][ T1983] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.017305][ T1983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.024625][ T1983] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.024667][ T1983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.251172][ T4837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.262305][ T4837] veth0_vlan: entered promiscuous mode [ 40.265628][ T4837] veth1_vlan: entered promiscuous mode [ 40.278400][ T4837] veth0_macvtap: entered promiscuous mode [ 40.280274][ T4837] veth1_macvtap: entered promiscuous mode [ 40.285833][ T4837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.288536][ T4837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.291696][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.293624][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.295216][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.297049][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.319613][ T668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.319629][ T668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.329785][ T1883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.329810][ T1883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.380899][ T4932] [ 40.381383][ T4932] ====================================================== [ 40.382606][ T4932] WARNING: possible circular locking dependency detected [ 40.383825][ T4932] syzkaller #0 Not tainted [ 40.384512][ T4932] ------------------------------------------------------ [ 40.385702][ T4932] syz.0.18/4932 is trying to acquire lock: [ 40.386652][ T4932] ffff80008970de48 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_extension_allow_link+0x70/0x1f8 [ 40.388480][ T4932] [ 40.388480][ T4932] but task is already holding lock: [ 40.389741][ T4932] ffff0000ec6de740 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: configfs_symlink+0x394/0xde0 [ 40.391592][ T4932] [ 40.391592][ T4932] which lock already depends on the new lock. [ 40.391592][ T4932] [ 40.393385][ T4932] [ 40.393385][ T4932] the existing dependency chain (in reverse order) is: [ 40.394924][ T4932] [ 40.394924][ T4932] -> #2 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}: [ 40.396490][ T4932] down_write+0x50/0xc0 [ 40.397331][ T4932] configfs_depend_item_unlocked+0x154/0x344 [ 40.398497][ T4932] usbg_make_tpg+0x230/0x4b4 [ 40.399407][ T4932] target_fabric_make_tpg+0x98/0x518 [ 40.400451][ T4932] configfs_mkdir+0x374/0x7d4 [ 40.401402][ T4932] vfs_mkdir+0x2dc/0x464 [ 40.402206][ T4932] filename_mkdirat+0x228/0x3f4 [ 40.403080][ T4932] __arm64_sys_mkdirat+0x94/0xb8 [ 40.403978][ T4932] invoke_syscall+0x98/0x244 [ 40.404832][ T4932] el0_svc_common+0xec/0x23c [ 40.405709][ T4932] do_el0_svc+0x4c/0x5c [ 40.406518][ T4932] el0_svc+0x64/0x260 [ 40.407279][ T4932] el0t_64_sync_handler+0x48/0x148 [ 40.408186][ T4932] el0t_64_sync+0x198/0x19c [ 40.409023][ T4932] [ 40.409023][ T4932] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 40.410340][ T4932] __mutex_lock+0x164/0xf14 [ 40.411227][ T4932] mutex_lock_nested+0x24/0x30 [ 40.412148][ T4932] tcm_set_name+0x34/0xd0 [ 40.412987][ T4932] function_make+0x18c/0x300 [ 40.413881][ T4932] configfs_mkdir+0x374/0x7d4 [ 40.414757][ T4932] vfs_mkdir+0x2dc/0x464 [ 40.415573][ T4932] filename_mkdirat+0x228/0x3f4 [ 40.416499][ T4932] __arm64_sys_mkdirat+0x94/0xb8 [ 40.417452][ T4932] invoke_syscall+0x98/0x244 [ 40.418369][ T4932] el0_svc_common+0xec/0x23c [ 40.419284][ T4932] do_el0_svc+0x4c/0x5c [ 40.420109][ T4932] el0_svc+0x64/0x260 [ 40.420910][ T4932] el0t_64_sync_handler+0x48/0x148 [ 40.421914][ T4932] el0t_64_sync+0x198/0x19c [ 40.422798][ T4932] [ 40.422798][ T4932] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 40.424309][ T4932] __lock_acquire+0x17c0/0x2ebc [ 40.425281][ T4932] lock_acquire+0x140/0x364 [ 40.426196][ T4932] __mutex_lock+0x164/0xf14 [ 40.427108][ T4932] mutex_lock_nested+0x24/0x30 [ 40.428065][ T4932] uvcg_extension_allow_link+0x70/0x1f8 [ 40.429160][ T4932] configfs_symlink+0x478/0xde0 [ 40.430119][ T4932] vfs_symlink+0x16c/0x290 [ 40.431005][ T4932] filename_symlinkat+0x18c/0x328 [ 40.431968][ T4932] __arm64_sys_symlinkat+0xa8/0xd4 [ 40.432978][ T4932] invoke_syscall+0x98/0x244 [ 40.433861][ T4932] el0_svc_common+0xec/0x23c [ 40.434709][ T4932] do_el0_svc+0x4c/0x5c [ 40.435490][ T4932] el0_svc+0x64/0x260 [ 40.436262][ T4932] el0t_64_sync_handler+0x48/0x148 [ 40.437191][ T4932] el0t_64_sync+0x198/0x19c [ 40.437989][ T4932] [ 40.437989][ T4932] other info that might help us debug this: [ 40.437989][ T4932] [ 40.439629][ T4932] Chain exists of: [ 40.439629][ T4932] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#23 [ 40.439629][ T4932] [ 40.442251][ T4932] Possible unsafe locking scenario: [ 40.442251][ T4932] [ 40.443584][ T4932] CPU0 CPU1 [ 40.444476][ T4932] ---- ---- [ 40.445358][ T4932] lock(&sb->s_type->i_mutex_key#23); [ 40.446247][ T4932] lock(&opts->dep_lock); [ 40.447376][ T4932] lock(&sb->s_type->i_mutex_key#23); [ 40.448725][ T4932] lock(gadget_subsys.su_mutex); [ 40.449546][ T4932] [ 40.449546][ T4932] *** DEADLOCK *** [ 40.449546][ T4932] [ 40.450819][ T4932] 2 locks held by syz.0.18/4932: [ 40.451642][ T4932] #0: ffff0000c4484450 (sb_writers#11){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 40.453230][ T4932] #1: ffff0000ec6de740 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: configfs_symlink+0x394/0xde0 [ 40.454963][ T4932] [ 40.454963][ T4932] stack backtrace: [ 40.455927][ T4932] CPU: 1 UID: 0 PID: 4932 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT [ 40.457325][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 40.459045][ T4932] Call trace: [ 40.459606][ T4932] show_stack+0x2c/0x3c (C) [ 40.460419][ T4932] __dump_stack+0x30/0x40 [ 40.461131][ T4932] dump_stack_lvl+0xd8/0x12c [ 40.461840][ T4932] dump_stack+0x1c/0x28 [ 40.462503][ T4932] print_circular_bug+0x328/0x330 [ 40.463298][ T4932] check_noncircular+0x158/0x174 [ 40.464133][ T4932] __lock_acquire+0x17c0/0x2ebc [ 40.464977][ T4932] lock_acquire+0x140/0x364 [ 40.465713][ T4932] __mutex_lock+0x164/0xf14 [ 40.466465][ T4932] mutex_lock_nested+0x24/0x30 [ 40.467235][ T4932] uvcg_extension_allow_link+0x70/0x1f8 [ 40.468142][ T4932] configfs_symlink+0x478/0xde0 [ 40.468941][ T4932] vfs_symlink+0x16c/0x290 [ 40.469705][ T4932] filename_symlinkat+0x18c/0x328 [ 40.470552][ T4932] __arm64_sys_symlinkat+0xa8/0xd4 [ 40.471426][ T4932] invoke_syscall+0x98/0x244 [ 40.472227][ T4932] el0_svc_common+0xec/0x23c [ 40.472978][ T4932] do_el0_svc+0x4c/0x5c [ 40.473682][ T4932] el0_svc+0x64/0x260 [ 40.474376][ T4932] el0t_64_sync_handler+0x48/0x148 [ 40.475270][ T4932] el0t_64_sync+0x198/0x19c [ 40.888692][ T4744] Bluetooth: hci0: command tx timeout 1970/01/01 00:00:41 executed programs: 79 [ 42.958641][ T4744] Bluetooth: hci0: command tx timeout [ 45.038877][ T4744] Bluetooth: hci0: command tx timeout 1970/01/01 00:00:46 executed programs: 381